last executing test programs: 28m35.310246796s ago: executing program 4 (id=74): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r1, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000002c0)={0x0, 0x1, 0x5, 0x1006, 0x183, &(0x7f0000000880)="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"}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0xf, 0x0, 0x0) socket(0x2, 0x5, 0x10001) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x40000000015, 0x5, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ptrace$getregset(0x4204, 0x0, 0x202, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x4c}}, 0x400c804) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 28m33.35235727s ago: executing program 4 (id=78): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r3, 0x8001, 0x4, 0x6, 0xfffffff7}, 0x14) (fail_nth: 2) 28m30.976898633s ago: executing program 4 (id=83): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchmod(r2, 0x140) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) io_submit(r4, 0x2, &(0x7f0000000700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0, 0x0, 0x2}]) 28m29.298933401s ago: executing program 4 (id=89): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xb, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8009, 0xa, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x0, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x5, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x40, 0x12, 0x2c, {0x2c, 0x21, "e7e6da6e41eaddfb0a8a34cbdd23ee248c364bf0cc12a1ac33136b7103bd00"/42}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 28m26.071157251s ago: executing program 4 (id=94): listns(&(0x7f0000000040)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xf4240, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x14) set_mempolicy(0x3, &(0x7f0000000280)=0x2, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xe}, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x1, 0x7f) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000015ac0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@swalloc}, {@ikeep}]}, 0x1, 0x15ae0, &(0x7f0000041080)="$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") syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001003dbd70000000000000000300000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000004000000000000000000000000000000000a000000000000feffffffff7f00000200000000000008000000000000000001000000000000004400050000000000000000000000000000000001000000003c00000002000000ffffffff00000000000000000000000006000000040100"/180], 0xfc}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='\x00', 0x1, 0x2400c850, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 28m22.309722574s ago: executing program 4 (id=103): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x0) r0 = creat(&(0x7f0000000e40)='./bus\x00', 0x19) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x1a5c42, 0x120) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x22, 0x0, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) chown(0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000c40)={@local, @random="b84fbdff8a20", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 28m6.398383604s ago: executing program 32 (id=103): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x0) r0 = creat(&(0x7f0000000e40)='./bus\x00', 0x19) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x1a5c42, 0x120) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x22, 0x0, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) chown(0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000c40)={@local, @random="b84fbdff8a20", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 16m30.246517365s ago: executing program 1 (id=1329): r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file1\x00', 0x0, &(0x7f0000000040), 0x0, 0x96f1, &(0x7f0000012d80)="$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") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x7, 0x20, 0x7, 0x6, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @local, @remote}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x288040, 0x0) ioctl$FITRIM(r0, 0x4010586e, &(0x7f0000000100)={0x7, 0x83, 0xfffffffffffffffd}) 16m26.713050794s ago: executing program 1 (id=1332): unshare(0x22020400) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000000c0)={0x16, 0x4, {0x9, @usage=0x2, 0x0, 0x6, 0xf15, 0x6, 0x8, 0x400, 0xd0, @struct={0xfffffffe}, 0x3ff, 0x7, [0x3, 0x8001, 0x5, 0x8, 0x1, 0x100000000]}, {0x3, @struct={0x10, 0x8}, 0x0, 0x7f7, 0x8, 0x2, 0x10, 0xf, 0x4e2, @usage=0xffffffffffffffff, 0x10001, 0x40, [0x9, 0x0, 0x100000000, 0x6, 0x8, 0x2]}, {0x4, @struct={0x1}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x80, 0x4, @usage=0xffffffffffffffff, 0x9, 0x9, [0x1, 0x5, 0x4, 0x7, 0x2, 0x3018]}, {0x9, 0x8, 0x5}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000b40)={0x1, 0x67, @start={r2, 0xcbd867f6874e8319, "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", "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"}, [0x6, 0x0, 0x2, 0x8, 0x7fffffff, 0xffffffff, 0xc, 0x0, 0x10001, 0xf9d, 0x0, 0x8000, 0xd6, 0x8, 0x3, 0x7, 0x4, 0x7ff, 0x2, 0x6, 0x69c9b4db, 0x7, 0x3, 0x3, 0x3, 0x9, 0xffffffffffffff9d, 0x1, 0x932, 0x26, 0x7, 0x8001, 0x9, 0xee7, 0x7fffffff, 0x7f, 0x20000000000, 0x6, 0x80000001, 0x25, 0x400, 0x2, 0xe000000000000000, 0x8c4, 0x7, 0x8, 0xfffffffffffff824, 0x4, 0x9, 0x0, 0x3, 0x9d, 0x2, 0x1, 0xfffffffffffff646, 0x101, 0x1b, 0x51b6, 0x5, 0x800, 0x8, 0x2, 0x7775, 0x9]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000040)={0x80002017}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0xfffffffffffffffd, &(0x7f0000000b00)) 16m22.463834097s ago: executing program 1 (id=1337): syz_read_part_table(0x5e3, &(0x7f0000000000)="$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") syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000081002108ab1204000000000000010902240001b30000040904410c13ff5d810009050f1f0504400000090583"], 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$eJzs3U9rHGUcB/DfM9mkf9KaVAStPRgo2IKaNGlFEcEW682DfwqeBGOSltJtG5oItlZsob4DfQGCNy/isYgU9eLVm+ALkGKRNhdvkdnMpNt2N82fTadmPh/YZJ55MjzPZPnuM/vszGwAtTWS/8gi9kbEbIoYaqtrRFE5svR3d25fnlq4fXkqxeLi+/+kSMW68u9T8Xuw2Hh7RPz+c4on+x5sd+7ipTOTzebMhaI8Nn92dmzu4qWXTp+dPDVzaubcxPgr4y8fOTxx5FBP9nN3RPw6erxx7eSb+76f+nbPFz9+dz3F0dhV1LfvR6+MxMjy/6Rd/n99tdeNVaSv2J/2pzg1KuwQa1I+f/0R8XQMRV/cffKG4st3K+0csKkWU8QiUFNJ/qGmyuOA/P1v+aj2iAR4VG4dW5oAuJOW5vYWlvPfWJobjO2tuYGdCynap3VSRPRiZi5vY/b5NJQ/YpPm4YDOrlyNiGc6jf+plc3h1ix+nv/snvxnEfFO8Ttf/9462x+5ryz/8OhsJP8fteX/43W2L/8AAAAAAADQOzeORcSLnT7/y5bP/4kO5/8MRsTRHrT/8M//sps9aAbo4NaxiNcjojz3b6Et/4XhvqK0u3U+QH86ebo5cyginoiIg9G/LS+Pr9DGyL7f+rvWtZ3/lz/y9stzAYt+3Gxsu3eb6cn5yY3sM7Dk1tWIZxud8p+Wx//UYfzPXw9mV9nG4vE3fulW9/D8A5tl8ZuIAx3H/7t3rkgr359jrHU8MFYeFTzosw+v/9CtffmH6uTj/86V8z+c2u/XM7f2Nj7/+88N5L/z8f9AOtG65cxAse7Tyfn5C+MRA+ntB9dPrL3PsBWVeSjzkuf/4P7O7/9XOv7fERFXVtnmiZ/eutatzvgP1cnzP72m8X/tC/s/+Prfbu2vbvw/0hrTDxZrzP/BylYb0Kr7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/R1lE7IqUjS4vZ9noaMRgRDwVO7Pm+bn5F06e/+TcdF7X+v7/rPym36Glciq//3+4rTxxX/lwROyJiK/6drTKo1Pnm9NV7zwAAAAAAAAAAAAAAAAAAAA8Jga7XP+f+6uv6t4Bm65RdQeAysg/1Jf8Q33JP9SX/EN9yT/Ul/xDfck/1Jf8Q33JPwAAAAAAbCl7nrvxR4qIK6/taD1yA0Vdf6U9AzZbVnUHgMq4xQ/Ul1N/oL5S1R0AKvew14Ht694SAAAAAAAAAAAAAOiVA3td/w915fp/qK/u1/+7MwBsda7/h/ryHh9w/T8AAAAAAAAAAAAAPP7mLl46M9lszlxY78K2jW1uwUJ9FiL1IHGPaKHqVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKD0XwAAAP//dt72Ng==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000780)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 16m17.522056481s ago: executing program 1 (id=1345): socketpair(0x2b, 0x800, 0xf889, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120110010000000819040006000000000001090224000100005035090400ff010300010009218100030122060009058103400003be08"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getpid() prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="7b01000001c90400240012800b00010062726964676500001400028005001700000000000800040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x40, 0x9, 0x28, {0x28, 0x11, "c263138526792c3cbdeace6f842505df71d6d8e1ae0fb74237cc6e446c4e881bee81ce06aba4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0x2800, 0x3, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0xc, 0x43, 0x558}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) dup3(r5, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0xd, &(0x7f00000004c0)=ANY=[@ANYRES8=r7, @ANYBLOB="497b0655eb01eb97166cced882f28f967a3ac737a1486c3f2730b5b35d64aa2c3b9f315135e612615948f36b7fc554893e14deec8831411b3ee07d754c912d", @ANYRES32=r6], &(0x7f0000000240)='syzkaller\x00', 0x1000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000780)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfffffffc, {0x3}, {0x7}, @raw32={[0x2, 0x0, 0x800]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfc}, {0xfb}, @control={0x7, 0x8, 0x3}}, {0x6, 0x3, 0x9, 0x3, @time={0x5, 0x9}, {0x10, 0x81}, {0xc}, @control={0x9, 0x7, 0x7fff}}, {0x8, 0xd0, 0x5, 0xb, @tick=0x80000001, {0x3, 0x9}, {0x2, 0x2}, @note={0xf9, 0x7, 0xb, 0x3, 0x10}}], 0x70) 16m13.634419423s ago: executing program 1 (id=1356): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x0) r0 = creat(&(0x7f0000000e40)='./bus\x00', 0x19) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x22, 0x0, 0x6}) chown(0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000c40)={@local, @random="b84fbdff8a20", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) 16m11.286293501s ago: executing program 1 (id=1360): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3bf, &(0x7f0000000a00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tipc_packet={0x3, 0x6, "f8712f", 0x389, 0x6, 0x1, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[@hopopts={0x2c, 0x41, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @generic={0x4, 0xf8, "9a2bca0bf2af2f27b5592b60943cfd386bbd6dd691a287304f837f009d249b7e7c2553384ca72b170a713d9476e1af92beb8b0ea96c129aca3ddf147c826491aa55922b21c3d3bee76b31a408c1955884b0e2faa36f021a4c84c5f06a184b1b55fb28cd22c62eeea47a203f56a6e7aa7563ded4081f417b165078588f5d027cac8c7e2778767825607be8f8807c8476076054c409a1accf39bcceb23b16cdb3ee24de6a17c513652e79571a264e16759f73790c9456e4e7b0f656d302ca1bc6f3f53563b08361302b9ae6401a03efae43a3546317aca700190c7937594966346fabb4b83fb62560395f44c1df9a39e6bdfb49105094b58c2"}, @pad1, @generic={0x9, 0xd3, "c020d72ce94544d819fcf879fc28f33a3ae383f6c38425b692334dcfea80da9af743ef4c992cbde25c19bd9bcefff67fbfb178cb4047f4e08f75621e2d29701404ef5b1ccdb524d9c040053e2c245f4077e01277f4505edf849fe20142d81ecd9cef6dc0ff621a2d176be9d4fb4ced782e8f6989ac2b2f4fd31f4874f445e61f2c87e2c3dad73f66f6cc2afe4f4a417e6c7f0bf2eecd2a4eedcfc43e59bdf3d0ccacdd097ab915a98d349835cbbb19899461a62b5fe79358730ca3ece1e7d9edb39881582332d4ef74076a745f679e342e38da"}, @generic={0x2, 0x33, "d6dc41557de7d506ab852b364d54adbdb7a4231edc4c0a47b060143f589a2f59fbea6b66b8ad940a7496c16f2542325e16c242"}]}, @fragment={0x3a, 0x0, 0x3e, 0x1, 0x0, 0x11, 0x66}, @hopopts={0x2b, 0x1f, '\x00', [@jumbo={0xc2, 0x4, 0xcb000000}, @calipso={0x7, 0x20, {0x3, 0x6, 0x2, 0xfff9, [0x7fff, 0x3, 0x3]}}, @ra={0x5, 0x2, 0x5}, @generic={0x0, 0xc5, "ff62869269b0966c86f996cb6a9e82c8b630d7423ac010b3be56a4d7a4d8dd7178850383e244e814f2249965e6d78e31273029bca001070f5158af453fdefb5714f99c5ddef6ec3a39b97c71793b2134d38d4dd1dafb76020e5a5c8e2f2aa1d9034d3ae439f6f98f6044873267fb10af61d8ed40ef020e5a85fb1d3db85bc92870217779c60239785f2992e3056cc3ee8799e7b2fbd5ca3c943b6344629d4976da78c312d1d592725fffd23182e9318406749d7c96b4678de29c2ddf4fa19ce1ed39d763de"}, @generic={0x7}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x3b, 0x8, 0x2, 0x6, 0x0, [@local, @loopback, @mcast1, @empty]}], @payload_conn={{{0x21, 0x0, 0x0, 0x0, 0x1, 0x6, 0x2, 0x2, 0x3, 0x0, 0x413e2857cdbdd83b, 0x0, 0x5, 0x0, 0x7, 0x7, 0x0, 0x4e24, 0x4e22}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x45, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2, 0xe5, 0x0, 0x1ec7, 0x10000, 0x0}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000400)={r7, 0x2, 0x20, 0x9}, &(0x7f0000000500)=0x18) sendmsg$inet_sctp(r5, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000540)='N', 0x1}], 0x1, 0x0, 0x0, 0xc005}, 0x4000890) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x7ffffffe, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r9, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000000c0)=0xf9) 15m55.904273671s ago: executing program 33 (id=1360): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3bf, &(0x7f0000000a00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tipc_packet={0x3, 0x6, "f8712f", 0x389, 0x6, 0x1, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[@hopopts={0x2c, 0x41, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @generic={0x4, 0xf8, "9a2bca0bf2af2f27b5592b60943cfd386bbd6dd691a287304f837f009d249b7e7c2553384ca72b170a713d9476e1af92beb8b0ea96c129aca3ddf147c826491aa55922b21c3d3bee76b31a408c1955884b0e2faa36f021a4c84c5f06a184b1b55fb28cd22c62eeea47a203f56a6e7aa7563ded4081f417b165078588f5d027cac8c7e2778767825607be8f8807c8476076054c409a1accf39bcceb23b16cdb3ee24de6a17c513652e79571a264e16759f73790c9456e4e7b0f656d302ca1bc6f3f53563b08361302b9ae6401a03efae43a3546317aca700190c7937594966346fabb4b83fb62560395f44c1df9a39e6bdfb49105094b58c2"}, @pad1, @generic={0x9, 0xd3, "c020d72ce94544d819fcf879fc28f33a3ae383f6c38425b692334dcfea80da9af743ef4c992cbde25c19bd9bcefff67fbfb178cb4047f4e08f75621e2d29701404ef5b1ccdb524d9c040053e2c245f4077e01277f4505edf849fe20142d81ecd9cef6dc0ff621a2d176be9d4fb4ced782e8f6989ac2b2f4fd31f4874f445e61f2c87e2c3dad73f66f6cc2afe4f4a417e6c7f0bf2eecd2a4eedcfc43e59bdf3d0ccacdd097ab915a98d349835cbbb19899461a62b5fe79358730ca3ece1e7d9edb39881582332d4ef74076a745f679e342e38da"}, @generic={0x2, 0x33, "d6dc41557de7d506ab852b364d54adbdb7a4231edc4c0a47b060143f589a2f59fbea6b66b8ad940a7496c16f2542325e16c242"}]}, @fragment={0x3a, 0x0, 0x3e, 0x1, 0x0, 0x11, 0x66}, @hopopts={0x2b, 0x1f, '\x00', [@jumbo={0xc2, 0x4, 0xcb000000}, @calipso={0x7, 0x20, {0x3, 0x6, 0x2, 0xfff9, [0x7fff, 0x3, 0x3]}}, @ra={0x5, 0x2, 0x5}, @generic={0x0, 0xc5, "ff62869269b0966c86f996cb6a9e82c8b630d7423ac010b3be56a4d7a4d8dd7178850383e244e814f2249965e6d78e31273029bca001070f5158af453fdefb5714f99c5ddef6ec3a39b97c71793b2134d38d4dd1dafb76020e5a5c8e2f2aa1d9034d3ae439f6f98f6044873267fb10af61d8ed40ef020e5a85fb1d3db85bc92870217779c60239785f2992e3056cc3ee8799e7b2fbd5ca3c943b6344629d4976da78c312d1d592725fffd23182e9318406749d7c96b4678de29c2ddf4fa19ce1ed39d763de"}, @generic={0x7}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x3b, 0x8, 0x2, 0x6, 0x0, [@local, @loopback, @mcast1, @empty]}], @payload_conn={{{0x21, 0x0, 0x0, 0x0, 0x1, 0x6, 0x2, 0x2, 0x3, 0x0, 0x413e2857cdbdd83b, 0x0, 0x5, 0x0, 0x7, 0x7, 0x0, 0x4e24, 0x4e22}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x45, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2, 0xe5, 0x0, 0x1ec7, 0x10000, 0x0}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000400)={r7, 0x2, 0x20, 0x9}, &(0x7f0000000500)=0x18) sendmsg$inet_sctp(r5, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000540)='N', 0x1}], 0x1, 0x0, 0x0, 0xc005}, 0x4000890) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x7ffffffe, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r9, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000000c0)=0xf9) 9m2.543807897s ago: executing program 0 (id=2176): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007150af000000000006000000000000009500001800000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) unshare(0x1e060c80) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r5, 0x80106408, &(0x7f0000000280)={0xb, &(0x7f00000001c0)}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e23, 0xe76, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x90) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r6, 0x0, 0x3a, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401f0e4a0fb45b71d77741621473ac658833ca3a65d0cce88271044d28f364b55ad3b", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0xc, 0xee, &(0x7f0000003600)="c56a8c847238ff52ad060000", &(0x7f0000000500)="229659ccd6f855f1bd40fd739fa8de0cf1ea3f2f73819162675a1ad240b49256c8b5ad664c93136c96f3edc592119ca3df9a80f378d8a74b6a002cad87c687c57201c01f48a4b96bc64e86aafbe22b123676a913b97292c8b81cb7f354a8bbe56b6801d91ea0f5a62faf0660d63f0f204da7c2eb0ff4276ef0f673fc3e0daa8a6375ae443d958b949236f304d7b7ec3c74a34e82949b401a080000000000000019668bedd2eec7ed2766b9f69557646f981aeb9342e4fbd9ee239c7e20caa8beb6b9a56f39c059b4723325cfee096fe5c09269845ea686525461429559d4b3dcbb5134a83966f6c5c8a85a343480", 0x2, 0x0, 0x3}, 0x50) r7 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) acct(&(0x7f0000000240)='./file1\x00') r8 = socket(0x3, 0xa, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527"], 0x34}}, 0x0) 8m59.911633438s ago: executing program 0 (id=2184): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x479, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000027c0)=ANY=[@ANYRES32=r4, @ANYBLOB="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"]) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e000000000000000a1000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000021000000000000000000000000000000000000004f0a0000e0fe1d87d1a89ea4652865d1ee9abdeadcc927a230596515b10ed5ffff492ad32250a38d28c6d5ea41af17f1ec21c48dac75e30a883cf22e22f945a929460ed92d9b05d92afc833562f06de79203f2097513e2224b4714dd943fd5aaf2e259d9d58ede5b2bfa"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/51}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00'}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x987452, 0x0, 0x0, 0x0, &(0x7f0000000040)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x552) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) 8m58.593281549s ago: executing program 0 (id=2185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x800, 0xffffffff, 0x2c}, 0x50) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00e789da34e04a1ffb124b2c2fb684c70b90bbb45efd97899a16f2df4fa2e8f06ac2c5352509e3c51d882eb3ec0dd3b1c96e980163890d2d0d1b8d3d62f6d77b0209e166e2ca4c35483d49316daf522556a16cab12d75a852bc680da7ea837480feb2060a1e20a59b7745235030000004ed0351cb5b416ba1c57217be5a338392f831617ee8c35bb61f0a9eeed3b1226b18c4b455ab222d7ae1b5258d5643d70000000000000000000ae468a387d9e63008000000000000063a454d1ab8760076a893752105f030c49caf2fdfe6bc9743a68593b576e2f2f6ab69e1b974ac90855ac250f8f73e16bc593730b88d7a3346b945e276875915040ce4901262cd8ce8191ee84e3ce5526a0a43b707cc711a3311f840cad641a013c6dd783aa895227b3d50a86e15a57e26666aaa296b7ddc4c8f421cf9d76d344bf6522f5d1138659d3de84ce13b085a2ed9d66c93767378423521cc4ea440e0ac3b953e1ca1675a716a97a5c3106aba648f119eeab4747b9b53000475e0a34514ccf397ea6f170e018122a98f135beac48d2ed195e20fdd226c7f5a20000ad1fcfbee59924e161280a8b78fe34b2fa3efa7c1d4268bf090000ecb4ece3234c232659fee3ff9e6d21e008a570bb490a65b84ea8b6d6507355cb1112fae6e3456bf8da53e1df20458e59456822dbb8dbd7ce0f928d5fbd6414fe8ab5277f3fd5ce6be044993f93e697a69484cc0e65ec742443c84e21a440998c8d69c12c2db7aee2872c6e0671d639e8f6bece219dcd0f69b9867dfc3187c882c035809c81832d7416f90c734be30c2faf0c22bfc8d95dfc7b9bac96b838c98ae5a75b9dc9e967ef5edf311bbebd7ca803cea8f5b9ec5b3edd6c44d633b71bde97a3c10a468432ff3d4e63ce3ecfa640d44b70b68744d26e72389e6c61767725d2c692443bc949c28b1a374e541bd352ca2f3bf64d883862dc24d8e27d86b6e38bc269f110c3d563f8e4ec9a98016b6b58157deeefa8fa022514bdc75f794094700cb8fa2b61310cbf9058bce5f2399055929e0fc732e0d5db926fe1b09a2993ff038d8099c229bda0801f8b81719d73b4abac97f704a0942051bae38b00b69d7fa69d738f99f73b19082ec0c99442d97ddbf68a4822aa2a2673478f81f14f67beee619b9d9882f7eabfb5000000000000000000003ff8795b5ec2de11479e781396117c84449647684239c9b9475b389a6a76d36c31f39539d928d2c58f188b4bf713d0915df4cc7de48a930935dbb01c9422d604467d209fd1421c7fc503cabde4bb193ff3654377c6e4fb72dcfc835f760bae7447068c2e43433e3d77c6805b559a04f3ebb741a9bbf57274b1da7800000000000000000000000000000000000000001c4f225672f3465b2638e921d80d58dca4ee4592d8cc0c06b2e390b7b1c713a46bc8ece9be25f055a59032576bc00a844c32b46040a607eaeb886ec0cb8e90c5a4075caa8a358ab81e78ad794a20f772b73466a43cd696401521793e54b1c4aa58d506b661f393e7233337473f36c2dbb15ae673afe82ebe45cc6f776162e43b74d9b9ca6f68d6bc8261600b27431e0f6f4f1e0947f69d2d812ebc9d2a8869b14a84dbdcdc5055b97a241e2f707740bb966b6c58408aceb9f6a943f61405a5093c60c0dfb511b02f191ef6fa6e5a1a86687a44ec6098439a2ef55a4ba07e2b0f62ae86e1458f63f6b8b2d2b9990495f17b6d1052b19472a97d41204a8be48e380be2e6885c7de0807f2c154ad4f25b16027bc4aeb85dc798e7eef25631bfd79c8e0aff725dcd4b91c61bf8d72f74e4dbae59bddcea722c5135791af1f0ab1d70de8b01"], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) quotactl_fd$Q_SETINFO(r0, 0x0, 0xee00, &(0x7f0000000200)={0x7, 0x4, 0x1}) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @remote}, "280086ddffff0000"}}}}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./bus/file0\x00', 0x2) 8m57.207974707s ago: executing program 0 (id=2191): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10452, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x3, 0x27b, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (fail_nth: 6) 8m56.818392096s ago: executing program 0 (id=2193): capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x8000000}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000180)={0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000580)={[{@jqfmt_vfsold}, {@noblock_validity}, {@nobh}, {@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}, 0x0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@nombcache}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@mb_optimize_scan}, {@data_writeback}, {@grpid}], [{@dont_hash}], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$eJzs3E1vFOcdAPD/rtc2LlC79I23lm1pVatVMTavhx4AtRKXSpVaVfS4tQ2iGKiwK4FlFVNVIPXQik/QNrdI+QQ5JZcoiXJIlGtQrlEkFPkCySGaaHZnNrveXXtt1l4Z/37SLs/MPjPz/Gfmwc/Lzgawa5XTt0LEvoj4KCJGa4vNGcq1f56vLE1/vrI0XYgk+f1nhWq+ZytL03nWfLu92cJ4MaL4z0IcaT3s8Py9xRuVubnZO9mKiYVilrpZuTZ7bfbW1Pnzp0+NnDs7daYncaZlenb477ePHrr8p8e/nb7y+M/vvJaWN8k+b4yjZqz6PtT1EQZa1pSj3HwuG/y0+6LvCPsb0oVS+l7sX2HoWnrXppdrsFr/R2OgulQzGr/5R18LB2ypJEmS4Za19b9ly0mjQqG2QZI8SICXQCH6XQKgP/I/9M9W0p7q0nRrP/jl9vRiVHtAadzPs1ftk1K1B1seq/WNBrfo+N+JiCvLX/w3fUXbcQgAgN5642LEo0u1dkf+qn1SjO815PtmNjc0FhHfiogDEfHtrP3y3Yhq3u9HxMGGbfZ3MQtQXrXc2v75YCRLNDZXeyZt//0qm9tqbv/VSz42kC3tr8Y/WLh6fW72ZHZOxmNwOF2ebN11fVjtzV9/+J9Oxy83tP/SV3r8vC2YlePT0qoBupnKQuVF4849fVA9sfdb4y9EqZCnIg5FxOFN7D89Z9d//urRTp83xZ/G2RL/vzvvvLSJAq2S/D/iZ7XrvxzV+POxz1rwQ1lqYuHmXyfm7y3+8nrj/OTkubNTZyb2xNzsyYn8rmj17vsPf5clW7oRzdc/SRquf141tnQiLb3+32h7/9dnLsfSVH2+dn7jx3j45FHHPs1m7/+hwh+q6Xx+9m5lYeHOZMRQYbl1/dTX296tjDTlT+MfP96+/h+I+PJ/2XZHIiK9iX8QET+MiGNZ2X8UET+OiONrxP/2pZ/8pVMXcv34t1Ya/8yGrv+9xZHIEvU1aeLCexHNa/LEwI23Xm858L/KLfEPRqfrf7qaGs/WzFQW9qwXV5sCtk288AkEAACAHeBYROyLQvFENtC0L4rFEyci9tZHUOYXfnH19t9uzdSeERiLwWI+0jXaMB46mY0Np8vpVlMNy+nnp6rjxkmSJCPpctp/nzvY39Bh19vbof6nPml9pAV42WxoHq3TE23AjrS6/j/pesvefyED2F49+B4NsEOp/7B7dV3/t+opOKBv2tX/+xHP+1AUYJu1q/9/bFlzYVvKAmyvdvXf3D/sDpsf//NlANjpjP/DrtTVQ/KbSBy4vEaeQqm7/ZS6fox/vUQx1v4VgLGo/6ZB3qZZe4cfFyN6c8YGenrmR5quabFtnj3Ri2NFcd08pQ38EMP2JoqVubn8AZe+l2c4Ita5e+s32/08sbjVBauem1f69z8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAb3wVAAD//8B9zog=") setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000)=0x6, 0x4) 8m56.488364871s ago: executing program 0 (id=2196): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r2, 0x2000000, 0x14, 0x0, &(0x7f0000000b00)="0e000000320ce50400006de71ec77bed00000000", 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) execveat$binfmt(0xffffffffffffffff, r1, &(0x7f0000000200)={[&(0x7f00000000c0)='\x00', &(0x7f0000000180)=':$+-*-]\x00']}, &(0x7f0000000280)={[&(0x7f0000000240)='#\x00']}, 0x1000) r3 = fanotify_init(0x62, 0x40000) fanotify_mark(r3, 0x2, 0x48001001, r0, &(0x7f00000002c0)='./file1\x00') r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r11}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x129, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') syz_ublk_setup_queues(r14, r12, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe980, 0x80000, 0x2, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4, 0x0, 0x146, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0x0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x2) ioctl$MTDFILEMODE(r14, 0x4d13, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="16000000000000000900000007"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r15, 0x0, 0x0, 0x4}, 0x20) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x4002, &(0x7f0000000b40)=ANY=[@ANYBLOB="747970653d74b0750f2c636f6465706167653d6d61636761656c69632c696f636861727365743d63703836322c00824b65c8de3300f45e4eaf7e67c08b457a93ac60e84f6500d3e060409204472efd7687b3f753950f4a1aeb77ddcacc5be2eff625a534ed686a4af3ce347bd6f861dc5e3dea6db6e1b65d843b8f0f2ed1629ee5bb5b26fd0a9d2c618e9a5062ab7d4f3368c1be5e7fc16b7f8a2b4c1fb91305ceffe166fd8edee59bfd1f0028c2de469f74e5b7d778589a1cb36b87a75d0f501b38bbd8de42caf33928ac1fdad5f5a7bf06fa3ded4d1f9ce8c063e760cff11851344f8d0134d2614cace10e0dae97a352c7cbd62d4f5d093facbe48af11f7b8f00a06d7ed5b8ea3da7089b07903584c", @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRESOCT], 0x4, 0x33e, &(0x7f0000000540)="$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") accept$inet6(r10, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000400)=0x1c) r16 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r16, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) 8m1.928940286s ago: executing program 2 (id=2293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x6, @loopback, 0x2, 0x1}, 0x20) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8, 0x400000}, 0x20) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$int_in(r1, 0x5452, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x70bd2d, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3a0aa495}]}, 0x2c}}, 0x22040040) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6e0a}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x840) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='decompose,nobarrier,nls=cp865,\x00'], 0x1, 0x5c8, &(0x7f00000006c0)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000680)=""/4096, 0x1000) 8m1.238436746s ago: executing program 2 (id=2294): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2004010, &(0x7f00000000c0)=ANY=[], 0x3, 0x204, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000019500)={{0x1, 0xffffffffffffffff}, &(0x7f0000019480), &(0x7f00000194c0)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000019540)={&(0x7f00000001c0)="d6a6e61e6d24c2ed25d1fa520d2b2cc12050615c52b2a303bbef613692a37e02e075daad7fa34dc494f0ab717f0157d8b415bdb46072fb3d164f3090fbf71be623915e6b47b0e11299721ceccc51cca1148dd9a1cae0dc0bc98b446b19a428e28bc439fe56ed97e06bd6f108fd882029", &(0x7f0000000240)=""/88, &(0x7f0000019300)="2812b32ecbe8b01c945840e4d173fc4a6c61d1661c275b10bc0e89f47781d4f7a54f03df167a2def24522438eea593dbcd9fa0da5b53a6b6328d7a21afffed317186e9fc0ceeaffc3e0810a26553e34a0d56a605ebaee7541016dd74c5b7c96e96b461ccb57acba66477adeff611cfbc36b600d28f44a1485b673ef115a2058f4118c819c429e271dcd963dd1f8cd516c347b620d5b75b57ec2cd35b4feedc8cef8d9442d48552fab6756b28da1c50c505b8b5895122ea3331e2a26c795c5b2c432400c20df8bca1986b6c724de324ce1857a0646e07c9821d95590c38d825ab56adf6f9ed647d9ce87cb55699d43eeb56f85f12bd75", &(0x7f0000019400)="b8053920c48dd3bb436a3beabcec26609c69fd36779b755adda95e1380688df00006049270e99a4463123ae8a78e9d5fe30a89fc819ad370a865a5702ad4d1933ca8ab41785776b0fb0e8679ddc2acfe33c8809d86aaba25f05fb8841dc1fcfba5e58850fcb09c74118f3d7e5f05b172d9285f8467efc016a666", 0x937, r0}, 0x38) getrlimit(0xc, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf63"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) close(0x3) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) setregid(0xffffffffffffffff, 0x0) close(0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0xfffffffffffffffb, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) 7m59.486519107s ago: executing program 2 (id=2296): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x218004, &(0x7f0000000240)={[{@oldalloc}, {@nojournal_checksum}, {@jqfmt_vfsv0}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x36}}, {@orlov}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000440)="$eJzs3d9rW1UcAPDvTZv91nUwhvoghT04mUu31h8ThM1H0eFA32doszKaLqNJx1oH2x7ciy8yBBEH4h/gu4/Df8C/YqCDIaPogy+Vm96sWdO0aRfX1Pv5wN3Oyb3puSfnfk++N/eGBJBbo+k/hYhXI+KbJOJw27rhyFaOrmy39OTmZLoksbz82Z9JJNljre2T7P+DWeWViPj1q4iThc526wuLM+VqtTKX1ccas9fG6guLp67Mlqcr05Wr4xMTZ9+ZGH//vXf71tc3L/79/acPPjr79fGl735+dOReEufjULauvR/P4XZ7ZTRGs9ekGOfXbHimD40NkqSHbfa8gP1ga4ayOC9GOgccjqEs6oH/v1sRsQzkVCL+IadaeUDr3L5P58G7xuMPV06AOvs/vPLZSOxrnhsdWEqeOTNKz3dH+tB+2sYvf9y/ly6xyecQt/rQHkDL7TsRcXp4uHP+S7L5b/tONz883tjaNvL2/gM76UGa/7y1Xv5TeJr/xDr5z8F1Ync7No//wqM+NNNVmv99sG7++3TqGhnKai81c75icvlKtXI6Il6OiBNR3JvWN7qec3bp4XK3de35X7qk7bdywWw/Hg3vffY5U+VG+Xn63O7xnYjXVvPfJDrm/33NXHft+Kevx8Ue2zhWuf96t3Wb979d/zPg5Z8i3lh3/FevaCUbX58cax4PY62jotNfd4/91q39rfW//9LxP7Bx/0eS9uu19a238eO+fyrd1m33+N+TfN4st64p3ig3GnNnIvYkn3Q+Pr763Fa9tX3a/xPHN57/1jv+90fEFz32/+7Ru103HYTxn9rS+G+98PDjL3/o1n5v4/92s3Qie6SX+a/XHXye1w4AAAAAAAAGTSEiDkVSKD0tFwql0sr9HUfjQKFaqzdOXq7NX52K5ndlR6JYaF3pPrx6P8SFQ9n9sK37I8bX1Cci4khEfDu0v1kvTdaqUzvdeQAAAAAAAAAAAAAAAAAAABgQB7t8/z/1+9BO7x3wn/OT35Bfm8Z/P37pCRhI3v8hv8Q/5Jf4h/wS/5Bf4h/yS/xDfol/yC/xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAH118cKFdFleenJzMq1PXV+Yn6ldPzVVqc+UZucnS5O1uWul6VptulopTdZmN/t71Vrt2pnxmL8x1qjUG2P1hcVLs7X5q41LV2bL05VLleIL6RUAAAAAAAAAAAAAAAAAAADsLvWFxZlytVqZU+haOBcDsRvbLiSbjfK5Z4+JrTUxvPMd3B2F4mDsRq+FnZqRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDTvwEAAP//9TowLQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) fcntl$setstatus(r2, 0x4, 0x2400) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="001300000000"], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20011a000000f4723f0ede308a802142cbef03a3aba7e5adfe0c34679921963a80590d9a2089ebba0a89e50ca93c2cde2b51e82c21a557ef72"], 0x0}) 7m56.782663673s ago: executing program 2 (id=2303): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) socket(0x80000000000000a, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r6 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m56.244547842s ago: executing program 2 (id=2305): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) r3 = syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x80000d, &(0x7f0000000540)=ANY=[], 0xfa, 0x155, &(0x7f00000001c0)="$eJzskT9LQlEYxp/jvV41Mg0MKiiChsQwb1dsa9BIcrADhUtToCcSNEUh3LLmhj6AS0uTOERjQ9FkeSHsMzS6BUGLce4faW1/f8u953mf87zvOWd324wiDCiw2alV6w3RbIrSygHPZw/vHx5npO5THQOq9YY0l+zVUxo4lV8VGF3a8kvQA6AiNoq1SkkDkAaiADIyo+yFDts7JbWIHyflith0tOgqPp1WwnA1DdDmYPmSjraoApmQrek/wPgWWJN5s5jkfQFodbzO3PHY3ZKSdk/R6qz3uq/7g34uHlsW10Z2wbqBgpDzMln/SPTj74led2gOxhc8z82kYWwldUXXU0P+Nsil2jdQ96bPgSMGBP7kaTKjAFwxoMOArpU3enZ7c3/IFwkAnrMwwGSFBWXP9jevuu+gWJXi8byXudsmPwRBEARBEARBEATxX34DAAD//4EIV14=") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000002c0)="c58218cb6f29793979122e113504", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x1, 0x5000003a, r5, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x8804}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x3c}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}}, 0xf0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x5, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x1, 0x7, 0x8}}) ioctl$XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000000940)={r4, 0x0, 0x2, 0x401, 0x8eb, 0x8, [0xe, 0xfffffffffffffff8, 0x200, 0xe9, 0xffffffffffffffcc, 0x9]}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@newtclass={0x44, 0x28, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {0x4, 0xfff1}, {0xe, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x44, 0x9}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_ingress={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000080) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r8], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000401894928d732ffc800000000000000044000000c", @ANYRES32=0x0, @ANYBLOB="0400018034000180140002000000000000000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="1400020070696d72656731000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x8010) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r12, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x71) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) fsopen(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r13, 0xc0305710, &(0x7f0000000040)={0x1, 0xffff, 0x5, 0x0, 0x7}) 7m53.193593801s ago: executing program 2 (id=2311): socket(0x1d, 0x803, 0xfcc) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) 7m37.617621366s ago: executing program 34 (id=2311): socket(0x1d, 0x803, 0xfcc) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) 7m1.323917563s ago: executing program 3 (id=2395): syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8010, &(0x7f0000000040)={[{@session={'session', 0x3d, 0x28}}, {@gid}, {@map_acorn}]}, 0x1, 0x566, &(0x7f0000001040)="$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") chdir(&(0x7f0000000140)='./file0\x00') socket$kcm(0xa, 0x2, 0x3a) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001180)=""/201, 0xc9) 7m0.796859653s ago: executing program 3 (id=2397): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat(0xffffffffffffff9c, 0x0, 0x101081, 0x30) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xe00000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}], 0x1c) 6m59.729991832s ago: executing program 3 (id=2399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x2, 0x5d9, &(0x7f0000000cc0)="$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") r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x20008}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x3f, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140005800f0001"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xfffe82) truncate(&(0x7f0000000280)='./file1\x00', 0x10001) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000040)={0x7, 0x0, 0x98, &(0x7f0000000140)={0x8000000, 0x1000, 0x1}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x28, 0x0, 0x203, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x804) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) 6m57.603965504s ago: executing program 3 (id=2406): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/rcu_expedited', 0x2501, 0x10) r1 = geteuid() lstat(&(0x7f0000000580)='./file1/file4\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000004c0)='./file1/file4\x00', &(0x7f0000000500), 0x10801, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRES16=0x0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030382c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c616c6c6f775f6f746865722c616c6c6f775f6f746a65722c736d61636b6673666c6f6f723def2c00"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r3 = syz_io_uring_setup(0x3723, &(0x7f0000000400)={0x0, 0x38b9, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x8, 0x0, 0x0, 0x0, &(0x7f0000003080)=[{0x2, 0x0, 0x2}], 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x7211, 0x3a1a, 0x1, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a117436c3790000000000220e0058000b4824ca945f6400940f6a0325010ebc000200000000008000f0fffeffe809005300fff5dd00000010000100090c100000ecc15d556533e4", 0x58}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040850) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r8) r11 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100) flock(r11, 0x2) r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r13 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x60500, 0x0) flock(r13, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(r12, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) flock(r12, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 6m54.929652014s ago: executing program 3 (id=2413): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000000)={[{@uid}, {@gid}, {@codepage={'codepage', 0x3d, 'cp950'}}, {@type={'type', 0x3d, "1808e264"}}]}, 0x1, 0x359, &(0x7f0000000500)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x987452, 0x0, 0x0, 0x0, &(0x7f0000000040)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x552) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) 6m50.092074061s ago: executing program 3 (id=2419): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000d32d7f18d7198000327bd7000ffdbdf250800030002000100080003000100000008003e"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000540)='./file0\x00', 0x800440, &(0x7f00000001c0)=ANY=[], 0x85, 0x5a4, &(0x7f0000000580)="$eJzs3V1v01gawPHHfaHZrIRWuyuEugUOZVcqUjc4KQRFXHmdk9RLYke2g9qbRRVNUUUACXalpTdsL/Z9RvMNRprb+RCj+TJzieZ6biYjv6SkrfMykDYV+v8isONz4vMcJ/LDCfGxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMeyqaRYNaThue0sNZ1d9rzmivL+/28cWI9oVMaI/ksvJ1WTT1d++L74S/bUqK8mzFclFi5wc/PLKrx78ZmGu//oRAZ2L128Onu10u51XSn0382BmoK4fSuA5TauulRN4qlIum3c2a4GqOQ0dbAehbirb11bo+WrNvq2KlcqG0oVtr+3Wq1ZD9zfe/2PJNMvqn/nk/Xbv/LkQ2JtOo+G49bhOVBzVuR99EB86oQq11VRqb7/b2RgW3GH6jkSViuN6ElUqjatUMkulYrFUKpbvVe7dN82FUxvME+RUjdl/aDFb0zx9Ax9lLs3/0hBHXGnLlqjMhy1V8cWT5pDyVD///+GOHtnuYP7vZ/mr74uXJc7/15Nn14fl/yGx/OzHUrT7dP3HXq83wWsu/y6J7Y0cyDPZka50pSOvphVRxuMXH/i6voFthfyUYqqLFlccCcQTR5pixVtUukVJRcpSFlMey6bUJBAlNXGkIVoC2ZZAQtHxJ8oWX7RY8n/xxBcla2LLbVFSlIpUZEOUaCnItnjSFlfqUhUr3sue7MfHfWNU//uVipNUKo2oNGH+/6FH/sdQ0zp1Ax+t18//S5PVnzvrgAAAAAAAwNQZ8bfvhogsyrV4LScNbc46LAAAAAAAMEXRyF9WosVitHZNjJrD+B8AAAAAgE+LEV9jZ4hIXm4ka/0rofgSAAAAAACAT0T8///Xo0U899oNMSYa/y+eW4AAAAAAAOCj/WfYHPvfxlsNQ4LWkvHN9+L7i8Zha+v3xnMrKrCezyevmz+5x7C2bFxOdxIvygvpM1uvGOnsl0eTYL5LF3sDcRhZc/0aJwL4S38PGQF8IdkByGdyM6lzczdZ7vZLklbyNaehC7bXeFAUy7o8F+qt8G8v9v8ucff/6zYX0jaevOzuxrEcRs8OnxvJZmPygyF/jedbiK+5yJzdeDG+ECNtN2/I3n63Yw6+AelUjKdmZBzR5r9kNamzms60nz/e/1zUZrEwrPf1OIolEYl7bozv+aKIZERxK6lza+1WssiIojQ0iuhYRJ3u9Xq95PjPyQcdiwmi2BgZxX63szH4KfiAKABgVvaGZ6H/9ZKSk4l/krNcsuUfRvpsb9ydfE5m9/SfFxnnx5Fn9LWkztpy/MKF5YwzujnujG5m5vXe/KRRfH3qHkjDcmzU7udH7Rbjdr+Kez00qwaNkiG55CD27TztPO28KJU2yuZd07xXksW4G+mC3AMAyDD+Hjtjaxh341F1VJg1qr5k/ProJwUFeSIvpSu7sh5fbRD/4iBzr/mBnyGsjxm15gfu8LI+OKrr39Mgs27peN2MEWB+4PYyAAB8SlbH5OFJ8v/6mHH38Vw+enQ8mMsBAMDZ0P47Ix/+2/B9p/W4WKkUrXBTK9+zH6ovo2LluKH27U3LrWvV8r3Qs71GtPLIqepABe1Wy/NDVfN81fICZyu+87tKb/0e6Kblho4dtBraCrSyPTe07FBVncBWrfafGk6wqXPpl9nadmqObYWO56rAa/u2LigVaH1U0VdOVbuhU3OiVVe1fKdp+dvqkddoN7Wq6sD2nVbo+XE0/bYct+b5zXi3hVkfbAAALojXbw6e7XS7nVdnuDLrPgIAgOPI0gAAAAAAAAAAAAAAAAAAAAAAXHwjrtuzatO9EHBJzuFawymFegHCuCQX5Wic+8pbEUm39N7K4MemP+n0mbU+P+u+X5iVGZ+YAJy5nwIAAP//2kBIQw==") faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x3, 0x300) 6m49.005832334s ago: executing program 35 (id=2419): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000d32d7f18d7198000327bd7000ffdbdf250800030002000100080003000100000008003e"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000540)='./file0\x00', 0x800440, &(0x7f00000001c0)=ANY=[], 0x85, 0x5a4, &(0x7f0000000580)="$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") faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x3, 0x300) 8.54485577s ago: executing program 6 (id=2897): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000095000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000265000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x366f, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x115}) syz_clone(0x5041000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 7.844104458s ago: executing program 6 (id=2899): unshare(0x5a040c80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffeffffffffffffb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "f3f0b32aa4526bc424cc83055c5a8d21e6cb87d69b11022ef02d2b83dda571f8"}) mount$fuseblk(0x0, 0x0, 0x0, 0x890, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x6, 0x1, 0xfffffffffffffffd, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x8001, 0x4, 0x6, 0xfffffff7}, 0x14) 5.800494056s ago: executing program 5 (id=2902): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa01) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="3f3601040000", 0x0, 0xfffffe00, 0x1, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@local, 0x3, 0x8, 0x4e24, 0x10, 0x2}, {0x0, 0x0, 0x2000000, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0x400}, {0x1ff, 0x7ffffffffffd, 0x4, 0xbfffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@remote, 0xffffffff, 0x32}, 0x2, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x9}}, 0xe8) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f0000000100)={0x4e, "fdf0ae250d591a8b0483a4a07a2deb59d61a7453bc1257987516d9c3f10449da03a471f5b683b6148dcc3fc7b99e1cfd236c6389cef15af873e58346f57b890651b887ac625138f65c6bc6c83a03ba30e45c73db0cc05db7f7da7309268df28b4ddd4761d626299740a262e68e9647f408481496ff5710c2c7a26f8b8bc029b0"}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 4.791098839s ago: executing program 6 (id=2903): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000000)='./file4\x00', 0x8, &(0x7f0000006140)=ANY=[], 0x0, 0x1f5, &(0x7f0000000480)="$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") (fail_nth: 3) 4.404004398s ago: executing program 6 (id=2904): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980), 0x0, 0x20008000) shutdown(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001800010300000000000000000a800000ff0300060200000014000200fc0000000000000100000000000000011400050000000000000000000000ffffffffffff140001"], 0x58}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c0000000) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r5) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, 0x0, 0x8004) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0x4) ptrace$cont(0x18, r3, 0x5, 0x1) r6 = dup(r2) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000380)={0x1, [[0xffffffff, 0x2, 0x1, 0x6, 0x101, 0x40, 0x2, 0x3], [0x80, 0xffffffff, 0x3, 0x3ff, 0x9, 0x2, 0xfc, 0x9], [0x8, 0xe, 0x45e, 0x2, 0x0, 0x6, 0x31, 0xfffffffd]], '\x00', [{0x8, 0xfffffffa, 0x1, 0x0, 0x1, 0x1}, {0xe59, 0xfffffff6, 0x0, 0x0, 0x1, 0x1}, {0x1000, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x9, 0x0, 0x0, 0x1}, {0x8, 0x9, 0x1}, {0x3d1c, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x10, 0x2}, {0xc92, 0x80000000, 0x1, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x4, 0x3ff, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x401, 0x1, 0x0, 0x1}, {0x7, 0xc430, 0x1, 0x1, 0x1}], '\x00', 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r7) close(r7) timer_create(0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.244708295s ago: executing program 5 (id=2905): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x400, &(0x7f0000000340)={[{@uni_xlate}, {@shortname_win95}, {@utf8no}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@numtail}, {@shortname_winnt}, {@utf8no}]}, 0x1, 0x22f, &(0x7f0000001180)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000100)={0x2, [0x0, 0x0]}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x16b8}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000611100000000000006000000feffffff9500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x28) 3.385201612s ago: executing program 5 (id=2906): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1100c41, 0x0, 0x1, 0x0, &(0x7f0000000080)) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c00000001900674c00000000000078bb66aa7c4f36215d5bb44dcc100000000000224be0fa1c6ef6be00000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffff7f00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0xc0}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x1d6, &(0x7f0000001880)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x1a0, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[@hopopts={0x2c, 0xa, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @padn, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0xb}, @ra={0x5, 0x2, 0x101}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x7170}, @enc_lim={0x4, 0x1, 0xb6}]}, @dstopts={0x32, 0xd, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x4, 0x8, [0x5, 0x8, 0x8000000000000000, 0x9, 0x7, 0xb, 0x7fff, 0xffffffff, 0x2]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x1, [0x0]}]}, @srh={0x84, 0xe, 0x4, 0x7, 0x6, 0x20, 0x74, [@private0, @remote, @private1, @private1, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @local]}, @srh={0x32, 0x4, 0x4, 0x2, 0x2, 0x48, 0xfffd, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback]}, @dstopts={0x2c, 0x0, '\x00', [@pad1]}, @fragment={0x1, 0x0, 0x4, 0x1, 0x0, 0x1d, 0x66}], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) socket$inet(0x2, 0x2, 0x1) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000001800)={'veth0_to_hsr\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r8, 0x5b) keyctl$revoke(0x3, r2) 3.298166132s ago: executing program 6 (id=2907): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7ff, 0x400) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f00000013c0)={0x0, &(0x7f0000001380)=[&(0x7f0000000100), &(0x7f0000000380)="9d7e299deae22d79d9217ada51dcb01e1ca966ac7c257aecb54701750cd1a5f6f405e0f4d9c4bd17a501efd182c6490ee0fe9e89bcd8cfde30a1580f5eec8510f4fa856112a25a1ebeef1c34c61ac2bca2b55e1adf63262a3af9988ac2660c14a8ae78d2abdc75575c0afc47a3c3ec55ac1f71587492d6767e3fe66353112e678d16edcb66d910ee49e9b8469350d79125bc3561fdc08ecbca1f62bb1880431daa6e9bd74f4c5e025340e227102f7b0322196a2b18b26d0078c93e7a61a57bda7b0e32fea61f4b1d7a04067a90ed0eb4052a7376699cc209cefff9ea1a4482091965f33b1223ebec5f9b79d26532808fff59349e446d07b08c3931ec99c1d79bca1bb2d729a4cecc40026b3c939e22c46120152d37089d14a700b836d87fd11db0bf535d404b61f58205ed0d0fdab686809d265515e79035f176d3b5352724b88521f4e6c17e88e80069396c92e3eb65c3d1f04e0b1299fe2107572fbe0b66625e7965493bc6bce3088567b3245b198be6fff52ba719c7ab054036becab226f01babb2face4e52000140d8cbd34cd9580785d077281527f4fbc3dbf3425c8500eea989e458a2b4fc0522e849e03632056847dd8add7fad6644846d8f9ba4bc145fcc14a534606f790ff5c9f9cbe7a98a2b1591d0b4e5178a65d574677da0e50bbdeb52a273891ce805ef754bdae992b5174d993f895cdd360ab9fe45012bba01a081b2178c8cd8bae2a88ddb4e6530b2d25e255e4f4b92da3f000bad0efe796363491d3d104fe52f91cccdabe843608ece513d07c88b5f2f21d0d49d3966a779851e13009023723a8841d8cfdccf744fff27267298ddbc7627f53629ac20c789e3ed6edb30388c72209ce1a90c6e2a830cc526e26fb6b2722b09fb7385c9510e91c6f3cef065316cacf412b88513c007efb9356ed39e2d83a2595037b8585dce528de7e2198334e6e317f7a10e041827b54cc469477ecceff69eacaaafec4bdab4e11a896752d6097141cb115287fa6833d02488380ad6edb9f6591c0bf94f37a018e1f7a9c4d460731d1c08b855310ac7f34d50620154e70868ab8ecc1d063d23b325e88ce75f3077ece10e747d2fdc1a0baccac9f98c51832122ee81c93fabc1045ccc7d9b690cdf467a9c9a1cb37f8dd7bf86d9d358b42f8bb7e8ef6b4c79f4c18c4f2bb478bfca9aa339cfb9f6a7d3b9bd586e97d3fe73ba2d7190b46b3e6ab2ff4f1666a9fc789231c9c7cfe428a9f91aa5e4ce4d3473d9d3ba29dd8cda426022672dd1ab357718160a4e3c50d2acb71c09b6809a23e380a948e0aacb4629e4a0f7ed5c862decdbc6e21aa3be209f43dbf2f5b38256ed3b47b5ad756777a11b96002f0462d4745d51d006c97731daa90cc1a22efedc4aa7ff95c379771514e5cbf3d68b0ad72e92c12c68e45256bc718f090cd1b9cf234e115e643d551fb451d7a5f217fe5a09f0b28bc5fe226f85003d0268394ea4b5e57c7cb331918ea82eb1e12b38739b474d1aeed62a546ac052d410b29425cee253aef83c8027706ae07a3310f5bb5ea3a4d691d1822064c68d0116ab08eb8278c9dfa46589ba962985d049e44651b6a601957cd7c0673d9d90104e9ba840e9fd833f3fc841324871c6362bf5c9fddf014184bbfd896c5a2b7f67ebf28d00cc064bb65071f6b6d5f1bfb8ac2d28ba2364bb50861754facb6e4f5638d4a9d2ae2222057203e22ca20d0d1f0c2b8126a2f2cfe45324d7f8733dc7fd06b6e2768ddd70d1d69a58d709f8ce77fc26d39babd05d6085a9838067cf49549f91030ead317ec97985c6b3a4e4a353a98c41b89ce61bef1f637d650a6c79ba1f24be06f4f8b69b627810d9d6509f89a5553f43bfe581f6ce04ad99c45fcdb7e9ec01262c92a06925e82661f583a2497ed586f498ecfe5b664e6e8aef63b730dc3564ddc4c64f33a3aed8bf4317eb768dfd0b39636e5ad754219465d5a2d6509a427097d5d8c9ef1646166c2842fa5d8ee904b51f2f7820da5c7cc0c01f314d10fe4e7d2c6ab82973264a02601cb8ce93a06a4ccb67aa858509679d898eae18264401272ddd922de03b8393657d6d9f6d9f7da64a4054eccd41e70ad59b28b303da79b6997bc58a0d31b1b23ad35f2f2bd76117eda6f47a1f12ea2a83c014d72e7cc1f77e2c7aa5403074caaa4b704041fb1830fb89f861e41d43e652e8c096495c0f97a5d72ed09c95caf407260379ea2386937b514987a22bf042b3805c612cd4531b8e66e517b9487cc3aeaa2bc08e75f7d954be54ccd20a3a7d1e6612ab56508e5518e7fe5dbfa4a38e3f413b5d23f334bee6b579dbf8a1d147444455eedec74bafef48ead68a85b3230e0453b77bd2b50cdf22f2b7c6419a812d7b170b0f230fd39873dd705c5a83ec2ba099655d06baac21d04149faf646afc9ee1ece7a9c8bedc494464fea0fc4fec60e5ff7fd6c96b8cd2e730e04a1a2c131f58ebc3b16e066a3ce8094b50e742f7c9cd253a9ccd758b7daff8087979d0bdeba3b4b21b8d82e1d395d44ec15c9bf1b4378c1045736e55b3a7c01bd952a4038faa1a815ebcec6531e8e6b64c64ae6f46007cdc2cb82b18975bc81f5748d3e31cf23092fcc9a1471eb232021fa03f93a81f75988006fffecebc66ac03dc9e392f8feca529284a40ad388ce5298bddf61c1babc3898092b3c33d61ec03d0aaefbb9fc5a81e1fa28b79d50db53097aa897e4cdfb431e0b0b94703eb9da381f7883dbbc3da47cf9e29f7f8c18a0eca39004cfc596e19618a7c097ce43becbe57350e3d1769ac2e37e737004e4f7d2b68ac6b564accc86d5ef5c1f6c9b717f7499a09d5ffa3a6e046b90971e8a551b0dcb032c531da640ccff961bee5af031cf344faeeae252f74a04c36f0473a7d299fe289689cfec8c04a395c7bee24e53b3524eca5b9e05057e64c2ee685c3c40288fbea59a0f4893911807a70b5bad4cd120821d140ba73b811c2d4fffcab3a626c81191fe4fe191e487bb666642330c2587b94f5926d54af7ee2b6691079a3507732e023940c66bc3802d02346ceb967f10c721580318472fae026a0473b38a3211d4fe32e67d0875757a0024f307434b2e28f445facf97399a717988f80256fbcd22af9c4ab29b554da1f34c5f23da69c1f6177b1be770eb308ebef48ee8625925b58b40f46ace81ca33ec4bfd86c919fbce1ca343741835c53746f6f62124a3839ef354dacdf07ae38e824fe5cbef9c3a461b386340b5136473738c4bb5731efad5e91348e80ca36cd504b9fe6aed8163ec4765046b7879c937dc16a9f112527a61aec1580b9bbd4c9336fd6dfedf015a854d62d52528f935e6873bc06a217c4ebc5470bdd87f9339f72dd0866151b204824ddd2007b9c001c018ab5258fccb41cb32105d7e0c2f5329a7674e9cc576406ed0ab4e2b9431169ebb6e9933357c7471cfee1bce9bf9b924bfecf9e740c864e0f80862b2181ce6619d2146ee0a3c86b0204ecefa3f96258638e44936cb3a8ec6217aeedc363f602029c19ef7e1b9cb83b1d4b3b3f09b286465dcb4cbf21054deb1e5c2d664f7386784c79f060171b1df9c18e7618023ca367600d02f409c265f5a30f857c6d21a631a9befd26e7fa10a0cb219f9585cd4fb42b74b169be76edda660ae0bcb8a17ddd9e9b1d02078481851f4328a4167d5e8a377872966acf217c0a8fcc610074de4b2c052880cab0586d86a0816f2289050d5e22bf23955cbfca737c2b4228456a9fba17759fb4fdb9b0b1dc9ac0c5c55c97ffbf9a60b4f1a0b27d11663fc71f2419104a48fc45434e508dff3e1bcad39beaa171be50556fe9185da965650b827082389a0a00d09daf6de48e9f4979fd74dc7e055521392f6d509462318f12ec18c173f7f7e3d3f6890ff6140599fb66c635596ad3477f181ecdbb5edfbe39f9e9368d88f3ffd04e553119763ca4bda72398b77cfe2522f99a62596e77f9b1a9544be6f02272a0ebfd5fba4e394ad13740daf79bfc93c3076b98527998ae589eb92f0d0a0ad70c09cf91e9aca7d8c95be0329d66f7aea1b4664bc94684ac0069e1cde9a98acccea4be56b9b75ec41f495d033978c422547f221bf3baabd29569b03dd20979f10332bb510f01fcf588f595b62fa0b65da5e3c220010884226d69432e028ec0cf885b0c9cd7fddb2214904283ffe0284901fda8148de051bdbf194c0f96a813c615312530142b316ea89af54d8aaeaf152128b28d3fe4fa3b49960f0f81a38511e555d29e666c43048455769f465db44f57dad383c4d8dd58bb65528d1eecae3b1eb6251dbf68488f59cc35d8062c0d00862e4de5b744a7be7323b0f5bd265da1fd8dfb9f4f3902716c0a0ce2907a5ce61b9d4e14fea811ad30e339ecf4d71a08307b3288d39db89250eed516ea59c92bec59f4ddfe1702f74c5fd43cbc8dc70eb9cfae27da3f6e86e8a3d151dafc9d948f249a51664f33bbf5c57b06c2269fac1c751fed3d835031afd52ddbb283632877e11d115befbeb5a6f6c324513cb2cdd22768d16329ac9a9fcbf37a9685253b9ea9c7071c946eeb96f2db6e991870e3096a6b2ec50f4f7436b4269a2255dbb922d50ba8ac4f6d69a4133abf55003e5412dad97459dab5c000a62e0ebf2c044a0386084fbfccac1a13a87e86d98f4a0992963b5172f2f4a82c474ff40edd4cf39af7ce72c724dd4401ca4e6e62002ced9e258c3264568e11bbf7f03f0b024796c15aee8ff180b8256d84cb70ea886e20dca49d443904421d1407188357c82e99104f48fdd7a35bf29c3a1562afee49a96a418b0e543acbc0ae6ff88ba9bab2ea0844220796423910303cffb8420d7f4e808c8454af9f8a14f3369072a2beca52b3881d6266c621a8d069043ae5bd6a7f32478306bdf3b888118739508b58eb547248732227f7d5ad047189ed142141e3e04d0080ce7b588e34f3f604e75d3ac5522b765ee970d1e4edf6f1f8a39c56deebde360aaaa934f65f39d95a501b5dd437e50aea7cedfd133943c4309d8feb9c951012d04d8aeeb0ba663c6e7701d85c073abab941d4b0a3b17856e6ac22a36234c027e2adf88375ef0707d90d01254e0650b2bc276e91d7a7caf781d290242ceca3f944fc44853c8ad41401deaed7c60bb028621d065d0d726684377ff5f33d4f456cf8662032a5bec2121b8eaceecfc7b8274252fbe93ee45f65b5a2075ca077f3d37130a8c3952a3d2f80329ee39adbce9182fcc14ccaf82d239559ccb6fadde600f1002f688287a57ffe84aee956c92715811dc0faf4d7e5b3f5ee5267952420704d61968ebe50d5d364e9b1c5d1187a9e76dff2375e53a00ac83b8709574a7218a3e239a281ca1bc2b48c16c4cec008ff81ea595edbfd126e2a9702d9300ba0c67e1429788cdf2cbe6ab5b2bb7a466c273f74bc7685a385d4c576e7e4e1b662698fb88158f767e802794c87dbc6373068d4321b52379919b66cd94b654828efc50c96ed2e928dd5c9a6add6da37b2f4e3a911986ea8e4f96aed9128a87a5c4701ab5511ae8954c26a9304bcf98e351dc8242d3364447ffd30742bbb9a8cf543fa9b98d11da526e48e70b7f9ae1e0b5683d4f1e8ce2119e5be0a18a0cfc03f7902ca874ede50c210b07b5d8855d74a16d3e8a45c11f4ccad181fdcde585398443579bbd9819964d0716da0a14c6fe95628069faaa6befb509e15626900465dacdf4e166a172a94e422bd86f5e9bcef57e47f7a13e282eace46a861e685f716530fbd85a2d170633672f98372675b788ed2ee65f9d68d0e6909d29c0796abc746fce"], 0x100}) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000140)=0x8) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000040)={0x20, 0x5, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) write(r0, &(0x7f0000000000)="09000000010017", 0x7) 1.461752704s ago: executing program 5 (id=2908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000202020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000008900000095"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (fail_nth: 5) 998.329387ms ago: executing program 5 (id=2909): socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, '\x00', [{0xd, 0xd, 0x7f, 0xffff, 0x6, 0x5}, {0x9, 0xe2, 0x1, 0xff3, 0x81, 0x78}]}) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 951.710954ms ago: executing program 6 (id=2910): unshare(0x5a040c80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffeffffffffffffb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "f3f0b32aa4526bc424cc83055c5a8d21e6cb87d69b11022ef02d2b83dda571f8"}) mount$fuseblk(0x0, 0x0, 0x0, 0x890, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x6, 0x1, 0xfffffffffffffffd, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x8001, 0x4, 0x6, 0xfffffff7}, 0x14) 0s ago: executing program 5 (id=2911): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0) socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x3, 0x4, 0x0, 0x10000, 0x406, 0x0, "427f4d0561864078b7f952fc7ebbfea1deee063e520cc38c6a002000"}}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x100000000, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000840)={0x1, @win={{0x0, 0x4, 0x5, 0x70d3}, 0x5, 0x4645, 0x0, 0x6, 0x0, 0x7}}) r5 = syz_open_dev$sndctrl(0x0, 0xc0, 0x40001) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000e6ffffff04000000000000003b3500007499000002000000"]) r6 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = dup(r0) write$UHID_INPUT(r7, &(0x7f0000001a00)={0xf, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): 288864][ T4943] input input45: unable to receive magic message: -110 [ 1697.772284][T20437] Teardown: task=syz.5.2715[20437] dev=loop5 state=2 [ 1697.981767][ T4943] input input45: unable to receive magic message: -32 [ 1698.219954][T20022] veth1_macvtap: entered promiscuous mode [ 1698.650511][T20454] IPv6: sit1: Disabled Multicast RS [ 1698.827206][ T5931] usb 6-1: USB disconnect, device number 18 [ 1698.827466][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1698.827532][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1699.450115][T20461] loop2: detected capacity change from 0 to 7 [ 1699.461634][T20461] Dev loop2: unable to read RDB block 7 [ 1699.461664][T20461] loop2: AHDI p1 p2 p3 [ 1699.461681][T20461] loop2: partition table partially beyond EOD, truncated [ 1699.461890][T20461] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1699.461909][T20461] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1699.632411][T20097] veth0_vlan: entered promiscuous mode [ 1699.705020][T17810] Flush: task=udevd[17810] dev=loop2 state=2 [ 1700.063795][T20097] veth1_vlan: entered promiscuous mode [ 1700.114198][T17810] Teardown: task=udevd[17810] dev=loop2 state=2 [ 1700.677137][T19546] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1700.781486][T19546] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1700.783727][T19546] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1700.815598][T19546] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1700.974910][T16432] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1701.026860][T19546] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1701.086701][T19546] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1701.088064][T19546] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1701.115176][T16432] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1701.171208][ T5597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1701.188982][T20470] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1701.265484][T20097] veth0_macvtap: entered promiscuous mode [ 1701.808281][T20097] veth1_macvtap: entered promiscuous mode [ 1702.158702][T20097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1702.174918][T20097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1702.326787][T17187] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.333488][T17187] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.334122][T17187] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.334696][T17187] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.457457][T20491] netlink: 'syz.5.2723': attribute type 12 has an invalid length. [ 1703.915385][T13294] Bluetooth: hci1: command tx timeout [ 1704.493778][T13294] Bluetooth: hci4: command tx timeout [ 1705.977456][T13294] Bluetooth: hci1: command tx timeout [ 1705.997010][T20510] loop6: detected capacity change from 0 to 2048 [ 1706.417510][ T9802] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 1706.570291][ T9802] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1706.570322][ T9802] usb 7-1: config 179 has no interface number 0 [ 1706.570368][ T9802] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 8 [ 1706.570399][ T9802] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 is Bulk; changing to Interrupt [ 1706.570422][ T9802] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 1706.570451][ T9802] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1706.570484][ T9802] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1706.570508][ T9802] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.627299][T13294] Bluetooth: hci4: command tx timeout [ 1706.674007][T20512] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1706.674854][T20512] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1706.762873][ T9802] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input46 [ 1706.858195][ T4943] input input46: unable to receive magic message: -110 [ 1708.060569][T13294] Bluetooth: hci1: command tx timeout [ 1708.135107][T20510] loop6: p1 < > p4 [ 1708.135107][T20510] p4: [ 1708.140292][T20510] loop6: p4 size 722688 extends beyond EOD, truncated [ 1708.146657][T20510] loop6: p6 start 262464109 is beyond EOD, truncated [ 1708.146691][T20510] loop6: p7 size 2304 extends beyond EOD, truncated [ 1708.207095][T17810] Flush: task=udevd[17810] dev=loop6 state=2 [ 1708.222454][T20510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.224244][T20510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1708.414854][ T5713] usb 7-1: USB disconnect, device number 21 [ 1708.414872][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1708.414930][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1708.518737][T17810] Teardown: task=udevd[17810] dev=loop6 state=2 [ 1708.620442][T17110] udevd[17110]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 1708.622217][T17810] udevd[17810]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1708.647273][T17801] udevd[17801]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 1708.666210][T17096] udevd[17096]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1708.707601][T13294] Bluetooth: hci4: command tx timeout [ 1709.012054][T20519] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2728'. [ 1709.122520][T17183] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.182679][T20519] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2728'. [ 1709.231053][ T7316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1709.231075][ T7316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1709.643625][T17196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1709.643643][T17196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1709.935212][T20520] loop6: detected capacity change from 0 to 32768 [ 1709.954554][T20520] btrfs: Deprecated parameter 'usebackuproot' [ 1709.954578][T20520] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1709.961492][T20520] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2728 (20520) [ 1710.022445][T20520] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1710.022486][T20520] BTRFS info (device loop6): using crc32c checksum algorithm [ 1710.220019][T13294] Bluetooth: hci1: command tx timeout [ 1710.308970][ T7316] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1710.309109][T20520] BTRFS error (device loop6): failed to load root extent [ 1710.309150][T20520] BTRFS warning (device loop6): try to load backup roots slot 1 [ 1710.310406][ T7316] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1710.310507][T20520] BTRFS warning (device loop6): couldn't read tree root [ 1710.310528][T20520] BTRFS warning (device loop6): try to load backup roots slot 2 [ 1710.311243][ T7316] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1710.311336][T20520] BTRFS warning (device loop6): couldn't read tree root [ 1710.311354][T20520] BTRFS warning (device loop6): try to load backup roots slot 3 [ 1710.554189][T20520] BTRFS info (device loop6): rebuilding free space tree [ 1710.679679][T17183] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.787229][T13294] Bluetooth: hci4: command tx timeout [ 1711.040497][T16432] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1711.187370][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1711.190273][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1711.191953][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1711.192778][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1711.598746][T20520] BTRFS info (device loop6): checking UUID tree [ 1711.599280][T20520] BTRFS info (device loop6): enabling ssd optimizations [ 1711.599302][T20520] BTRFS info (device loop6): turning on async discard [ 1711.599318][T20520] BTRFS info (device loop6): enabling free space tree [ 1711.599334][T20520] BTRFS info (device loop6): force clearing of disk cache [ 1711.599350][T20520] BTRFS info (device loop6): enabling auto defrag [ 1711.599366][T20520] BTRFS info (device loop6): trying to use backup root at mount time [ 1711.599384][T20520] BTRFS info (device loop6): use zstd compression, level 3 [ 1712.200910][T20548] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1712.200936][T20548] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1712.201043][T20548] vhci_hcd vhci_hcd.0: Device attached [ 1712.384037][ T5581] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1712.390356][T16869] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1712.409096][T20549] vhci_hcd: connection closed [ 1712.418717][T17188] vhci_hcd vhci_hcd.5: stop threads [ 1712.418743][T17188] vhci_hcd vhci_hcd.5: release socket [ 1712.436414][T17188] vhci_hcd vhci_hcd.5: disconnect device [ 1712.437463][ T5581] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1712.438200][ T5581] usb 43-1: enqueue for inactive port 0 [ 1712.607341][ T5581] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1712.666413][T17183] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.938080][T16869] Flush: task=syz-executor[16869] dev=loop6 state=2 [ 1713.191640][T16869] Teardown: task=syz-executor[16869] dev=loop6 state=2 [ 1713.764113][ T5597] Bluetooth: hci0: command tx timeout [ 1714.006013][T20561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1715.747270][ T5581] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1715.798762][T20565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2733'. [ 1715.870372][ T5597] Bluetooth: hci0: command tx timeout [ 1715.967231][ T5581] usb 7-1: Using ep0 maxpacket: 16 [ 1716.061987][ T5581] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1716.088108][ T5581] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1716.088135][ T5581] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1716.119454][T17183] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.131435][ T5581] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1716.131464][ T5581] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.131485][ T5581] usb 7-1: Product: syz [ 1716.131499][ T5581] usb 7-1: Manufacturer: syz [ 1716.131520][ T5581] usb 7-1: SerialNumber: syz [ 1716.616386][ T5581] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1716.931110][T20574] loop5: detected capacity change from 0 to 4096 [ 1717.012836][T20574] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1717.222115][T20574] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1717.288304][T20574] ntfs3(loop5): Inode r=b is not in use! [ 1717.288417][T20574] ntfs3(loop5): Failed to load $Extend (-116). [ 1717.288435][T20574] ntfs3(loop5): Failed to initialize $Extend. [ 1717.319121][ T38] kauditd_printk_skb: 37 callbacks suppressed [ 1717.319138][ T38] audit: type=1800 audit(1717.115:5064): pid=20571 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.5.2734" name="file2" dev="loop5" ino=31 res=0 errno=0 [ 1717.491552][ T5581] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1717.507277][ T5581] usb 7-1: USB disconnect, device number 22 [ 1717.544346][T17810] udevd[17810]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1717.741496][T20578] loop6: detected capacity change from 0 to 2048 [ 1717.899797][ T5597] Bluetooth: hci0: command tx timeout [ 1717.979437][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1718.000197][T20578] loop6: p1 < > p4 [ 1718.000197][T20578] p4: [ 1718.021682][T20578] loop6: p4 size 722688 extends beyond EOD, truncated [ 1718.060211][T20578] loop6: p6 start 262464109 is beyond EOD, truncated [ 1718.060238][T20578] loop6: p7 size 2304 extends beyond EOD, truncated [ 1718.117447][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1718.227384][ T9802] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 1718.481621][T20585] loop5: detected capacity change from 0 to 512 [ 1719.046853][T20585] EXT4-fs: Ignoring removed oldalloc option [ 1719.100535][ T9802] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1719.100562][ T9802] usb 7-1: config 179 has no interface number 0 [ 1719.100608][ T9802] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 8 [ 1719.100636][ T9802] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 is Bulk; changing to Interrupt [ 1719.100660][ T9802] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 1719.100688][ T9802] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1719.100720][ T9802] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1719.100742][ T9802] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.156675][T20580] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1719.156809][T20580] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1719.167806][T20585] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 1719.168005][T20585] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1719.171387][T20585] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1719.171815][T20585] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1719.172203][T20585] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.2736: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1719.172244][T20585] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1719.177208][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1719.177225][ C1] EXT4-fs (loop5): last error at time 1718: ext4_ext_check_inode:521: inode 13 [ 1719.181186][T20585] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2736: couldn't read orphan inode 13 (err -117) [ 1719.181205][T20585] loop5: lost filesystem error report for type 5 error -117 [ 1719.196750][T20585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1719.198080][T20585] ext4: Unknown parameter '/dev/cpu/#/msr' [ 1719.231284][T20585] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.2736: deleted inode referenced: 12 [ 1719.243569][T20585] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.2736: deleted inode referenced: 12 [ 1719.489429][T20578] Flush: task=syz.6.2735[20578] dev=loop6 state=2 [ 1719.718695][T20578] Teardown: task=syz.6.2735[20578] dev=loop6 state=2 [ 1719.742777][ T9802] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input47 [ 1719.815648][T16988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.935210][T17801] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1719.936728][T17110] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1719.936894][T17110] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1719.936968][T17110] Buffer I/O error on dev loop6p4, logical block 1, async page read [ 1719.974911][T17801] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1719.974998][T17801] Buffer I/O error on dev loop6p5, logical block 2, async page read [ 1719.975082][T17801] I/O error, dev loop6, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1719.975150][T17801] Buffer I/O error on dev loop6p5, logical block 3, async page read [ 1719.977339][ T5597] Bluetooth: hci0: command tx timeout [ 1720.020377][T17801] udevd[17801]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 1720.022683][T17091] udevd[17091]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 1720.023455][T17110] udevd[17110]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1720.072823][ T4943] input input47: unable to receive magic message: -110 [ 1720.089559][T20578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.107836][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 1720.128343][T20578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.149746][T17096] input input47: unable to receive magic message: -32 [ 1720.342645][ T4943] input input47: unable to receive magic message: -71 [ 1720.347797][ T5581] usb 7-1: USB disconnect, device number 23 [ 1720.347920][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1720.347984][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1720.583874][T20467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.584215][T20467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.584464][T20467] bridge_slave_0: entered allmulticast mode [ 1720.615614][T20467] bridge_slave_0: entered promiscuous mode [ 1720.663346][T20467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.663584][T20467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.663788][T20467] bridge_slave_1: entered allmulticast mode [ 1720.689059][T20467] bridge_slave_1: entered promiscuous mode [ 1720.871822][T20469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.873130][T20469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.873142][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1720.873364][T20469] bridge_slave_0: entered allmulticast mode [ 1720.929458][T20469] bridge_slave_0: entered promiscuous mode [ 1721.003088][T20593] program syz.6.2738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1721.010641][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1721.182275][T20467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1721.211089][T20469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.211350][T20469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.211603][T20469] bridge_slave_1: entered allmulticast mode [ 1721.218084][T20469] bridge_slave_1: entered promiscuous mode [ 1721.255128][T20467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1721.487915][T17183] bridge_slave_1: left allmulticast mode [ 1721.487951][T17183] bridge_slave_1: left promiscuous mode [ 1721.488219][T17183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.543059][T20595] loop5: detected capacity change from 0 to 32768 [ 1721.686493][ T38] audit: type=1800 audit(1721.475:5065): pid=20599 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.5.2737" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 1721.742550][T17183] bridge_slave_0: left allmulticast mode [ 1721.742587][T17183] bridge_slave_0: left promiscuous mode [ 1721.742848][T17183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.231180][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1722.317675][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1724.469224][T17183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1724.548362][T17183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1724.589400][T17183] bond0 (unregistering): Released all slaves [ 1724.808014][T20469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1724.850556][T20467] team0: Port device team_slave_0 added [ 1724.954643][T20469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1724.968285][T20467] team0: Port device team_slave_1 added [ 1724.990864][T20611] loop5: detected capacity change from 0 to 32768 [ 1725.258025][T20469] team0: Port device team_slave_0 added [ 1725.335234][T20467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1725.335250][T20467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1725.335275][T20467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1725.368593][T20469] team0: Port device team_slave_1 added [ 1725.375923][T20467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1725.375937][T20467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1725.375963][T20467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1725.745924][T20611] sctp: [Deprecated]: syz.5.2742 (pid 20611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1725.745924][T20611] Use struct sctp_sack_info instead [ 1725.801888][T20618] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1725.950057][T20469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1725.950068][T20469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1725.950083][T20469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1726.178195][T20469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1726.178210][T20469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1726.178233][T20469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1726.363863][T20467] hsr_slave_0: entered promiscuous mode [ 1726.368206][T20467] hsr_slave_1: entered promiscuous mode [ 1726.369729][T20467] debugfs: 'hsr0' already exists in 'hsr' [ 1726.369752][T20467] Cannot create hsr debugfs directory [ 1726.667328][T17183] hsr_slave_0: left promiscuous mode [ 1726.694666][T20630] loop6: detected capacity change from 0 to 2048 [ 1726.707390][T17183] hsr_slave_1: left promiscuous mode [ 1726.708151][T17183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1726.708167][T17183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1726.741298][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1726.754758][T20630] loop6: p1 < > p4 [ 1726.754758][T20630] p4: [ 1726.764079][T17183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1726.764103][T17183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1726.766709][T20630] loop6: p4 size 722688 extends beyond EOD, truncated [ 1726.771309][T20630] loop6: p6 start 262464109 is beyond EOD, truncated [ 1726.771332][T20630] loop6: p7 size 2304 extends beyond EOD, truncated [ 1726.862075][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1727.047498][ T5581] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 1727.078864][T17183] veth1_macvtap: left promiscuous mode [ 1727.078929][T17183] veth0_macvtap: left promiscuous mode [ 1727.079101][T17183] veth1_vlan: left promiscuous mode [ 1727.079234][T17183] veth0_vlan: left promiscuous mode [ 1727.254606][ T5581] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1727.254635][ T5581] usb 7-1: config 179 has no interface number 0 [ 1727.254682][ T5581] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 8 [ 1727.254701][ T5581] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 is Bulk; changing to Interrupt [ 1727.254714][ T5581] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 1727.254729][ T5581] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1727.254748][ T5581] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1727.254760][ T5581] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.270521][T20630] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1727.272173][T20630] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1727.433676][ T5581] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input48 [ 1727.487953][ T4943] input input48: unable to receive magic message: -110 [ 1727.635112][T20630] Flush: task=syz.6.2745[20630] dev=loop6 state=2 [ 1727.650475][T17810] input input48: unable to receive magic message: -32 [ 1727.831329][T20630] Teardown: task=syz.6.2745[20630] dev=loop6 state=2 [ 1727.932716][T20632] loop5: detected capacity change from 0 to 32768 [ 1727.933919][T20632] xfs: Deprecated parameter 'attr2' [ 1727.933942][T20632] XFS: attr2 mount option is deprecated. [ 1727.978477][ T4943] input input48: unable to receive magic message: -32 [ 1728.205068][T20630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1728.221258][T20630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1728.266966][T20632] XFS (loop5): Invalid device [./bus], error=-2 [ 1728.280553][T20632] overlayfs: missing 'workdir' [ 1728.333746][ T9802] usb 7-1: USB disconnect, device number 24 [ 1728.333745][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1728.333823][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1728.450010][T17110] Flush: task=udevd[17110] dev=loop5 state=2 [ 1729.454947][T17110] Teardown: task=udevd[17110] dev=loop5 state=2 [ 1729.817316][ T5581] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1729.967466][ T5581] usb 6-1: Using ep0 maxpacket: 32 [ 1729.969049][ T5581] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1729.969075][ T5581] usb 6-1: config 0 has no interface number 0 [ 1729.969112][ T5581] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1729.971200][ T5581] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1729.971228][ T5581] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.971248][ T5581] usb 6-1: Product: syz [ 1729.971263][ T5581] usb 6-1: Manufacturer: syz [ 1729.971278][ T5581] usb 6-1: SerialNumber: syz [ 1729.974958][ T5581] usb 6-1: config 0 descriptor?? [ 1731.016647][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.016791][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.425123][ T5581] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1731.425314][ T5581] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1731.510467][T20645] IPv6: Can't replace route, no match found [ 1731.521101][ T5581] usb 6-1: USB disconnect, device number 19 [ 1731.781623][T17183] team0 (unregistering): Port device team_slave_1 removed [ 1731.858636][T17183] team0 (unregistering): Port device team_slave_0 removed [ 1733.784475][T20469] hsr_slave_0: entered promiscuous mode [ 1733.789226][T20469] hsr_slave_1: entered promiscuous mode [ 1733.797296][T20540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.797545][T20540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.797780][T20540] bridge_slave_0: entered allmulticast mode [ 1733.802467][T20540] bridge_slave_0: entered promiscuous mode [ 1733.860300][T20540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.860562][T20540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.860793][T20540] bridge_slave_1: entered allmulticast mode [ 1733.872747][T20540] bridge_slave_1: entered promiscuous mode [ 1734.106207][T20661] FAULT_INJECTION: forcing a failure. [ 1734.106207][T20661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1734.106242][T20661] CPU: 1 UID: 0 PID: 20661 Comm: syz.5.2751 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1734.106268][T20661] Tainted: [L]=SOFTLOCKUP [ 1734.106275][T20661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1734.106286][T20661] Call Trace: [ 1734.106294][T20661] [ 1734.106302][T20661] dump_stack_lvl+0xe8/0x150 [ 1734.106333][T20661] should_fail_ex+0x467/0x600 [ 1734.106363][T20661] _copy_to_user+0x31/0xb0 [ 1734.106392][T20661] simple_read_from_buffer+0xe1/0x170 [ 1734.106421][T20661] proc_fail_nth_read+0x1be/0x230 [ 1734.106449][T20661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1734.106475][T20661] ? rw_verify_area+0x250/0x4d0 [ 1734.106501][T20661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1734.106523][T20661] vfs_read+0x219/0xa90 [ 1734.106555][T20661] ? __pfx_vfs_read+0x10/0x10 [ 1734.106582][T20661] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1734.106605][T20661] ? lockdep_hardirqs_on+0x7a/0x110 [ 1734.106627][T20661] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1734.106648][T20661] ? mutex_lock_nested+0x152/0x1d0 [ 1734.106680][T20661] ? fdget_pos+0x252/0x320 [ 1734.106711][T20661] ksys_read+0x156/0x270 [ 1734.106737][T20661] ? __pfx_ksys_read+0x10/0x10 [ 1734.106756][T20661] ? fput+0xa0/0xd0 [ 1734.106781][T20661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.106802][T20661] do_syscall_64+0x174/0x580 [ 1734.106823][T20661] ? trace_irq_disable+0x3b/0x140 [ 1734.106844][T20661] ? clear_bhb_loop+0x40/0x90 [ 1734.106867][T20661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.106885][T20661] RIP: 0033:0x7fece400e68e [ 1734.106904][T20661] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1734.106919][T20661] RSP: 002b:00007fece22a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1734.106941][T20661] RAX: ffffffffffffffda RBX: 00007fece22a66c0 RCX: 00007fece400e68e [ 1734.106955][T20661] RDX: 000000000000000f RSI: 00007fece22a60a0 RDI: 0000000000000004 [ 1734.106968][T20661] RBP: 00007fece22a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1734.106979][T20661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1734.106991][T20661] R13: 00007fece42d6038 R14: 00007fece42d5fa0 R15: 00007ffd8fa50ed8 [ 1734.107022][T20661] [ 1734.400191][T20666] loop5: detected capacity change from 0 to 1024 [ 1734.603026][T20540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1734.991906][T20540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1735.230014][T20672] input: syz1 as /devices/virtual/input/input49 [ 1738.465893][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1738.573902][ T5254] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1738.687841][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1738.830949][T20686] loop6: detected capacity change from 0 to 2048 [ 1738.866961][T20540] team0: Port device team_slave_0 added [ 1738.934472][T20686] loop6: p1 < > p4 [ 1738.934472][T20686] p4: [ 1738.962677][T20686] loop6: p4 size 722688 extends beyond EOD, truncated [ 1738.993286][T20686] loop6: p6 start 262464109 is beyond EOD, truncated [ 1738.993312][T20686] loop6: p7 size 2304 extends beyond EOD, truncated [ 1739.049709][T20540] team0: Port device team_slave_1 added [ 1740.407504][T13621] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 1740.569661][T13621] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1740.569697][T13621] usb 7-1: config 179 has no interface number 0 [ 1740.569752][T13621] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 8 [ 1740.569782][T13621] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 is Bulk; changing to Interrupt [ 1740.569806][T13621] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 1740.569833][T13621] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1740.569866][T13621] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1740.569889][T13621] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.661344][T20686] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1740.661537][T20686] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1740.735826][T13621] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input50 [ 1740.807556][ T4943] input input50: unable to receive magic message: -110 [ 1740.885306][T20686] Flush: task=syz.6.2755[20686] dev=loop6 state=2 [ 1740.947945][ T4943] input input50: unable to receive magic message: -32 [ 1740.997652][T20686] Teardown: task=syz.6.2755[20686] dev=loop6 state=2 [ 1741.038244][ T4943] input input50: unable to receive magic message: -32 [ 1741.179690][T20686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1741.180275][T20686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1741.186842][T17801] udevd[17801]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1741.196606][T17091] udevd[17091]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 1741.218176][T17096] udevd[17096]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1741.243898][T17475] udevd[17475]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 1741.313204][T20540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1741.313220][T20540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1741.313246][T20540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1741.410168][T20540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1741.410184][T20540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1741.410206][T20540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1741.455177][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 1741.456613][T20459] usb 7-1: USB disconnect, device number 25 [ 1741.456752][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1742.337706][T20540] hsr_slave_0: entered promiscuous mode [ 1742.380050][T20540] hsr_slave_1: entered promiscuous mode [ 1742.399506][T20540] debugfs: 'hsr0' already exists in 'hsr' [ 1742.399576][T20540] Cannot create hsr debugfs directory [ 1742.730824][T20697] IPv6: Can't replace route, no match found [ 1743.077381][T13621] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1743.257277][T13621] usb 6-1: Using ep0 maxpacket: 8 [ 1743.280152][T13621] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1743.280192][T13621] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1743.280215][T13621] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.286313][T13621] usb 6-1: config 0 descriptor?? [ 1743.746284][T13621] samsung 0003:0419:0600.001A: item fetching failed at offset 5/6 [ 1743.746977][T13621] samsung 0003:0419:0600.001A: parse failed [ 1743.747049][T13621] samsung 0003:0419:0600.001A: probe with driver samsung failed with error -22 [ 1744.110462][ T5581] usb 6-1: USB disconnect, device number 20 [ 1744.442621][T17187] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.639712][T20716] loop6: detected capacity change from 0 to 32768 [ 1744.712344][T20716] find_entry called with index >= next_index [ 1744.712359][T20716] find_entry called with index >= next_index [ 1744.712367][T20716] find_entry called with index >= next_index [ 1744.712376][T20716] find_entry called with index >= next_index [ 1744.712383][T20716] find_entry called with index >= next_index [ 1744.712393][T20716] add_index: next_index = 0. Resetting! [ 1744.712410][T20716] find_entry called with index >= next_index [ 1744.712418][T20716] find_entry called with index >= next_index [ 1744.712426][T20716] find_entry called with index >= next_index [ 1744.716182][ T5254] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1745.023787][T20718] loop5: detected capacity change from 0 to 8192 [ 1745.043319][T20718] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1745.102564][T16869] Flush: task=syz-executor[16869] dev=loop6 state=2 [ 1745.173029][T17810] Flush: task=udevd[17810] dev=loop5 state=2 [ 1745.188618][T16869] Teardown: task=syz-executor[16869] dev=loop6 state=2 [ 1745.267943][T17810] Teardown: task=udevd[17810] dev=loop5 state=2 [ 1746.775733][T20736] futex_wake_op: syz.6.2762 tries to shift op by 144; fix this program [ 1746.799297][T20736] loop6: detected capacity change from 0 to 2048 [ 1746.866172][T20738] loop5: detected capacity change from 0 to 2048 [ 1747.275856][T20736] loop6: p3 < > p4 < > [ 1747.275880][T20736] loop6: partition table partially beyond EOD, truncated [ 1747.276133][T20736] loop6: p3 start 4284289 is beyond EOD, truncated [ 1747.307963][T17187] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.399548][T20738] loop5: p1 < > p4 [ 1747.399548][T20738] p4: [ 1747.423487][T20738] loop5: p4 size 722688 extends beyond EOD, truncated [ 1747.547617][T20738] loop5: p6 start 262464109 is beyond EOD, truncated [ 1747.547644][T20738] loop5: p7 size 2304 extends beyond EOD, truncated [ 1747.588155][T20459] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 1747.652886][T17096] Flush: task=udevd[17096] dev=loop6 state=2 [ 1747.740010][T20459] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1747.740040][T20459] usb 6-1: config 179 has no interface number 0 [ 1747.740085][T20459] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 8 [ 1747.740114][T20459] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 is Bulk; changing to Interrupt [ 1747.740138][T20459] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 1747.740168][T20459] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1747.740295][T20459] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1747.740319][T20459] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.771704][T20741] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1747.771908][T20741] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1748.155510][T17096] Teardown: task=udevd[17096] dev=loop6 state=2 [ 1748.284071][T17801] Flush: task=udevd[17801] dev=loop5 state=2 [ 1748.325001][T20459] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input51 [ 1748.326675][T20738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1748.328213][T20738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1748.378860][ T4943] input input51: unable to receive magic message: -71 [ 1748.692970][ T4943] input input51: unable to receive magic message: -71 [ 1748.698355][T17801] Teardown: task=udevd[17801] dev=loop5 state=2 [ 1748.726753][T17810] udevd[17810]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1748.806073][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1748.806113][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1748.806140][T20459] usb 6-1: USB disconnect, device number 21 [ 1749.105338][T17801] udevd[17801]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 1749.140481][T17110] udevd[17110]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 1749.148492][T17096] udevd[17096]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1749.158126][T17810] udevd[17810]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1749.930776][T20459] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1750.151233][T20459] usb 6-1: Using ep0 maxpacket: 8 [ 1750.198901][T20459] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1750.198941][T20459] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1750.198965][T20459] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.235557][T20459] usb 6-1: config 0 descriptor?? [ 1750.351409][T17187] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.564838][ T38] audit: type=1800 audit(1750.355:5066): pid=20784 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.6.2770" name=20 dev="tmpfs" ino=1355 res=0 errno=0 [ 1750.693390][T20459] samsung 0003:0419:0600.001B: item fetching failed at offset 5/6 [ 1750.709347][T20459] samsung 0003:0419:0600.001B: parse failed [ 1750.709425][T20459] samsung 0003:0419:0600.001B: probe with driver samsung failed with error -22 [ 1750.902109][T20459] usb 6-1: USB disconnect, device number 22 [ 1751.913430][T17187] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.949674][T20805] loop5: detected capacity change from 0 to 1024 [ 1752.149128][T20809] futex_wake_op: syz.6.2773 tries to shift op by 144; fix this program [ 1752.180699][T20809] loop6: detected capacity change from 0 to 2048 [ 1752.261593][T20809] loop6: p3 < > p4 < > [ 1752.261616][T20809] loop6: partition table partially beyond EOD, truncated [ 1752.261859][T20809] loop6: p3 start 4284289 is beyond EOD, truncated [ 1752.455139][T17810] Flush: task=udevd[17810] dev=loop6 state=2 [ 1752.858223][T20819] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2774'. [ 1753.267720][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1753.427659][T17810] Teardown: task=udevd[17810] dev=loop6 state=2 [ 1753.638899][T17810] udevd[17810]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1753.839113][T20823] loop6: detected capacity change from 0 to 2048 [ 1753.860685][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1753.939229][T20823] loop6: p1 < > p4 [ 1753.939229][T20823] p4: [ 1753.941782][T20823] loop6: p4 size 722688 extends beyond EOD, truncated [ 1753.973210][T20823] loop6: p6 start 262464109 is beyond EOD, truncated [ 1753.973236][T20823] loop6: p7 size 2304 extends beyond EOD, truncated [ 1754.267429][T20459] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 1754.426542][T20459] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1754.426572][T20459] usb 7-1: config 179 has no interface number 0 [ 1754.426614][T20459] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 8 [ 1754.426643][T20459] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 is Bulk; changing to Interrupt [ 1754.426666][T20459] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 1754.426696][T20459] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1754.426730][T20459] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1754.426752][T20459] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.442324][T20828] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1754.442502][T20828] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1754.493615][T20459] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input52 [ 1754.587358][ T4943] input input52: unable to receive magic message: -110 [ 1754.806124][T20823] Flush: task=syz.6.2776[20823] dev=loop6 state=2 [ 1754.815478][ T4943] input input52: unable to receive magic message: -32 [ 1754.921204][ T4943] input input52: unable to receive magic message: -32 [ 1754.961783][T20823] Teardown: task=syz.6.2776[20823] dev=loop6 state=2 [ 1755.015107][ T4943] input input52: unable to receive magic message: -32 [ 1755.482779][T17096] input input52: unable to receive magic message: -32 [ 1755.881702][ T4943] input input52: unable to receive magic message: -32 [ 1755.993111][T17096] udevd[17096]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1756.009035][T17801] udevd[17801]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 1756.011689][T17110] udevd[17110]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1756.045774][T20836] loop5: detected capacity change from 0 to 32768 [ 1756.062649][T20828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.063250][T20828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1756.065791][T17091] udevd[17091]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 1756.312811][T20836] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1756.336888][ T4943] input input52: unable to receive magic message: -71 [ 1756.374543][T20836] (syz.5.2777,20836,0):ocfs2_reflink_ioctl:4422 ERROR: status = -14 [ 1756.443001][T13621] usb 7-1: USB disconnect, device number 26 [ 1756.447704][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1756.829506][T16988] ocfs2: Unmounting device (7,5) on (node local) [ 1756.868257][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1757.116069][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1758.987745][T20859] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1759.836924][T13294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1759.946126][T13294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1759.988758][T13294] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1759.990510][T13294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1760.011359][T13294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1760.232572][ T5254] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1760.596537][T13294] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1760.699417][T13294] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1760.744830][T13294] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1760.804144][T13294] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1760.805413][T13294] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1762.036916][T20915] loop5: detected capacity change from 0 to 2048 [ 1762.041744][T20918] loop6: detected capacity change from 0 to 16 [ 1762.108550][T20915] loop5: p1 < > p4 [ 1762.108550][T20915] p4: [ 1762.212226][T20918] erofs (device loop6): mounted with root inode @ nid 36. [ 1762.284461][T20926] erofs (device loop6): invalid h_shared_count 83 @ nid 46 [ 1762.379023][ T5597] Bluetooth: hci2: command tx timeout [ 1762.428619][ T5254] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1762.429508][T20915] loop5: p4 size 722688 extends beyond EOD, truncated [ 1762.455979][T20915] loop5: p6 start 262464109 is beyond EOD, truncated [ 1762.456004][T20915] loop5: p7 size 2304 extends beyond EOD, truncated [ 1762.651152][ T5581] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 1762.723866][T16869] Flush: task=syz-executor[16869] dev=loop6 state=2 [ 1762.808832][ T5581] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1762.808862][ T5581] usb 6-1: config 179 has no interface number 0 [ 1762.808897][ T5581] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 8 [ 1762.808912][ T5581] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 is Bulk; changing to Interrupt [ 1762.808925][ T5581] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 1762.808939][ T5581] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1762.808958][ T5581] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1762.808971][ T5581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.882296][T20922] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1762.882553][T20922] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1762.971759][T16869] Teardown: task=syz-executor[16869] dev=loop6 state=2 [ 1763.012693][ T5581] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input53 [ 1763.149636][ T4943] input input53: unable to receive magic message: -110 [ 1763.320544][T20915] Flush: task=syz.5.2786[20915] dev=loop5 state=2 [ 1763.350076][ T5597] Bluetooth: hci6: command tx timeout [ 1763.399310][T20934] netlink: 'syz.6.2788': attribute type 2 has an invalid length. [ 1763.399495][T20934] netlink: 67 bytes leftover after parsing attributes in process `syz.6.2788'. [ 1763.466853][T17187] bridge_slave_1: left allmulticast mode [ 1763.466887][T17187] bridge_slave_1: left promiscuous mode [ 1763.468681][T20915] Teardown: task=syz.5.2786[20915] dev=loop5 state=2 [ 1763.482171][ T4943] input input53: unable to receive magic message: -32 [ 1763.497907][T17187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1763.604090][ T4943] input input53: unable to receive magic message: -32 [ 1763.678829][ T4943] input input53: unable to receive magic message: -32 [ 1763.706410][T17187] bridge_slave_0: left allmulticast mode [ 1763.706444][T17187] bridge_slave_0: left promiscuous mode [ 1763.706713][T17187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.758862][ T4943] input input53: unable to receive magic message: -32 [ 1763.766934][T20915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1763.789179][T20915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1763.849215][T20915] input input53: unable to receive magic message: -32 [ 1763.931262][ T9802] usb 6-1: USB disconnect, device number 23 [ 1763.931311][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1764.088868][T17187] bridge_slave_1: left allmulticast mode [ 1764.088903][T17187] bridge_slave_1: left promiscuous mode [ 1764.089161][T17187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.251301][T17187] bridge_slave_0: left allmulticast mode [ 1764.251335][T17187] bridge_slave_0: left promiscuous mode [ 1764.251593][T17187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.458220][ T5597] Bluetooth: hci2: command tx timeout [ 1765.037280][T20459] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1765.043383][T20953] loop6: detected capacity change from 0 to 8192 [ 1765.090121][T20953] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1765.176353][ T38] audit: type=1800 audit(1764.965:5067): pid=20953 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.6.2791" name="file2" dev="loop6" ino=1048682 res=0 errno=0 [ 1765.200971][T20459] usb 6-1: Using ep0 maxpacket: 8 [ 1765.211607][T20459] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1765.211630][T20459] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1765.211643][T20459] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.231067][T20459] usb 6-1: config 0 descriptor?? [ 1765.364866][T20953] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1765.364944][T20953] FAT-fs (loop6): Filesystem has been set read-only [ 1765.417530][ T5597] Bluetooth: hci6: command tx timeout [ 1765.665744][T20459] samsung 0003:0419:0600.001C: item fetching failed at offset 5/6 [ 1765.680623][T20459] samsung 0003:0419:0600.001C: parse failed [ 1765.680698][T20459] samsung 0003:0419:0600.001C: probe with driver samsung failed with error -22 [ 1765.713502][T20953] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1765.713535][T20953] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1765.713560][T20953] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1765.713582][T20953] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1765.713604][T20953] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1765.713626][T20953] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1765.713648][T20953] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1765.713671][T20953] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1766.075526][T20459] usb 6-1: USB disconnect, device number 24 [ 1766.367262][T16869] Flush: task=syz-executor[16869] dev=loop6 state=2 [ 1766.469605][T16869] Teardown: task=syz-executor[16869] dev=loop6 state=2 [ 1766.547516][ T5597] Bluetooth: hci2: command tx timeout [ 1766.552771][T20958] IPv6: Can't replace route, no match found [ 1766.800369][T17187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1766.887962][T17187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1767.001766][T17187] bond0 (unregistering): Released all slaves [ 1767.497537][ T5597] Bluetooth: hci6: command tx timeout [ 1768.378362][T17187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1768.459083][T17187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1768.500506][T17187] bond0 (unregistering): Released all slaves [ 1768.516968][T20972] FAULT_INJECTION: forcing a failure. [ 1768.516968][T20972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1768.516991][T20972] CPU: 1 UID: 0 PID: 20972 Comm: syz.6.2795 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1768.517006][T20972] Tainted: [L]=SOFTLOCKUP [ 1768.517010][T20972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1768.517017][T20972] Call Trace: [ 1768.517021][T20972] [ 1768.517026][T20972] dump_stack_lvl+0xe8/0x150 [ 1768.517048][T20972] should_fail_ex+0x467/0x600 [ 1768.517065][T20972] _copy_from_iter+0x1d3/0x1660 [ 1768.517082][T20972] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1768.517098][T20972] ? __pfx__copy_from_iter+0x10/0x10 [ 1768.517122][T20972] ? __alloc_skb+0x276/0x7a0 [ 1768.517137][T20972] ? __alloc_skb+0x276/0x7a0 [ 1768.517158][T20972] ? netlink_sendmsg+0x650/0xb40 [ 1768.517171][T20972] ? skb_put+0x112/0x210 [ 1768.517182][T20972] netlink_sendmsg+0x6c0/0xb40 [ 1768.517198][T20972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1768.517211][T20972] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1768.517224][T20972] ? __kernel_text_address+0xd/0x30 [ 1768.517235][T20972] ? unwind_get_return_address+0x4d/0x90 [ 1768.517249][T20972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1768.517261][T20972] sock_sendmsg_nosec+0x13a/0x180 [ 1768.517277][T20972] ____sys_sendmsg+0x565/0x870 [ 1768.517292][T20972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1768.517308][T20972] ? import_iovec+0x73/0xa0 [ 1768.517324][T20972] ___sys_sendmsg+0x2a5/0x360 [ 1768.517335][T20972] ? __lock_acquire+0x6df/0x2e40 [ 1768.517350][T20972] ? __pfx____sys_sendmsg+0x10/0x10 [ 1768.517378][T20972] ? __fget_files+0x2a/0x420 [ 1768.517391][T20972] ? __fget_files+0x3a8/0x420 [ 1768.517408][T20972] __x64_sys_sendmsg+0x1b7/0x290 [ 1768.517421][T20972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1768.517441][T20972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.517452][T20972] do_syscall_64+0x174/0x580 [ 1768.517465][T20972] ? trace_irq_disable+0x3b/0x140 [ 1768.517478][T20972] ? clear_bhb_loop+0x40/0x90 [ 1768.517490][T20972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.517500][T20972] RIP: 0033:0x7f9757d5de59 [ 1768.517511][T20972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1768.517520][T20972] RSP: 002b:00007f9755fb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1768.517532][T20972] RAX: ffffffffffffffda RBX: 00007f9757fe5fa0 RCX: 00007f9757d5de59 [ 1768.517540][T20972] RDX: 0000000008000000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 1768.517547][T20972] RBP: 00007f9755fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.517553][T20972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.517559][T20972] R13: 00007f9757fe6038 R14: 00007f9757fe5fa0 R15: 00007fffd8e6c758 [ 1768.517575][T20972] [ 1768.617279][ T5597] Bluetooth: hci2: command tx timeout [ 1769.369243][T20975] loop6: detected capacity change from 0 to 1024 [ 1769.468065][T20975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1769.579514][ T5597] Bluetooth: hci6: command tx timeout [ 1770.023800][T16869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1770.259765][T16869] Flush: task=syz-executor[16869] dev=loop6 state=2 [ 1770.367863][T16869] Teardown: task=syz-executor[16869] dev=loop6 state=2 [ 1770.391798][ T5254] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1770.994939][T20985] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1771.901474][T13294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1771.947726][T13294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1771.969421][T13294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1771.970519][T13294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1771.971179][T13294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1774.306419][ T5597] Bluetooth: hci4: command tx timeout [ 1775.403223][ T5581] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1775.428080][T17187] hsr_slave_0: left promiscuous mode [ 1775.455188][T17187] hsr_slave_1: left promiscuous mode [ 1775.456104][T17187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1775.456127][T17187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1775.577926][ T5581] usb 7-1: Using ep0 maxpacket: 8 [ 1775.703970][ T5581] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1775.704012][ T5581] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1775.704035][ T5581] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.723740][T17187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1775.723766][T17187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1775.776982][ T5581] usb 7-1: config 0 descriptor?? [ 1776.098946][T17187] hsr_slave_0: left promiscuous mode [ 1776.127392][T17187] hsr_slave_1: left promiscuous mode [ 1776.140186][T17187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1776.179757][T17187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1776.299187][ T5581] samsung 0003:0419:0600.001D: item fetching failed at offset 5/6 [ 1776.299839][ T5581] samsung 0003:0419:0600.001D: parse failed [ 1776.299908][ T5581] samsung 0003:0419:0600.001D: probe with driver samsung failed with error -22 [ 1776.384496][ T5597] Bluetooth: hci4: command tx timeout [ 1776.602819][ T9802] usb 7-1: USB disconnect, device number 27 [ 1777.188873][T17187] veth1_macvtap: left promiscuous mode [ 1777.188938][T17187] veth0_macvtap: left promiscuous mode [ 1777.189107][T17187] veth1_vlan: left promiscuous mode [ 1777.189236][T17187] veth0_vlan: left promiscuous mode [ 1777.427762][T17187] veth1_macvtap: left promiscuous mode [ 1777.427822][T17187] veth0_macvtap: left promiscuous mode [ 1777.427987][T17187] veth1_vlan: left promiscuous mode [ 1777.428102][T17187] veth0_vlan: left promiscuous mode [ 1777.637308][ T9802] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1777.787296][ T9802] usb 7-1: Using ep0 maxpacket: 32 [ 1777.790673][ T9802] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1777.790700][ T9802] usb 7-1: config 0 has no interface number 0 [ 1777.790902][ T9802] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1777.790932][ T9802] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1777.794190][ T9802] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1777.794217][ T9802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.794238][ T9802] usb 7-1: Product: syz [ 1777.794252][ T9802] usb 7-1: Manufacturer: syz [ 1777.794266][ T9802] usb 7-1: SerialNumber: syz [ 1777.880038][ T9802] usb 7-1: config 0 descriptor?? [ 1778.465590][ T5597] Bluetooth: hci4: command tx timeout [ 1778.569372][ T9802] appletouch 7-1:0.85: Geyser mode initialized. [ 1778.573210][ T9802] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input54 [ 1779.277865][T17187] team0 (unregistering): Port device team_slave_1 removed [ 1779.320042][T17187] team0 (unregistering): Port device team_slave_0 removed [ 1779.967977][T17187] team0 (unregistering): Port device team_slave_1 removed [ 1780.008564][T17187] team0 (unregistering): Port device team_slave_0 removed [ 1780.477504][T21028] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1780.496595][T21028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.497035][T21028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.574277][ T9802] usb 7-1: USB disconnect, device number 28 [ 1780.617616][ T5597] Bluetooth: hci4: command tx timeout [ 1780.752415][ T9802] appletouch 7-1:0.85: input: appletouch disconnected [ 1780.842435][T20873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1780.842695][T20873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.842954][T20873] bridge_slave_0: entered allmulticast mode [ 1780.872248][T20873] bridge_slave_0: entered promiscuous mode [ 1782.415672][T20873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1782.415880][T20873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.416155][T20873] bridge_slave_1: entered allmulticast mode [ 1782.464416][T20873] bridge_slave_1: entered promiscuous mode [ 1783.048107][T20873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1783.802267][T20873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1783.897641][ T199] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1785.322369][T20873] team0: Port device team_slave_0 added [ 1785.383050][T20873] team0: Port device team_slave_1 added [ 1785.714612][T20873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1785.714628][T20873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1785.714652][T20873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1785.761780][T20873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1785.761796][T20873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1785.761824][T20873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1785.876556][T20880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1785.880157][T20880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.892033][T20880] bridge_slave_0: entered allmulticast mode [ 1785.904237][T20880] bridge_slave_0: entered promiscuous mode [ 1786.045030][T20880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.045181][T20880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.045324][T20880] bridge_slave_1: entered allmulticast mode [ 1786.047048][T20880] bridge_slave_1: entered promiscuous mode [ 1786.193282][ T5713] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1786.407317][ T5713] usb 7-1: Using ep0 maxpacket: 8 [ 1786.409602][ T5713] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1786.409640][ T5713] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1786.409663][ T5713] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.413142][ T5713] usb 7-1: config 0 descriptor?? [ 1786.493041][T20880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1786.525084][T20873] hsr_slave_0: entered promiscuous mode [ 1786.535330][T20873] hsr_slave_1: entered promiscuous mode [ 1786.540214][T20873] debugfs: 'hsr0' already exists in 'hsr' [ 1786.540300][T20873] Cannot create hsr debugfs directory [ 1786.568979][T20880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1786.824156][ T5713] samsung 0003:0419:0600.001E: item fetching failed at offset 5/6 [ 1786.824539][ T5713] samsung 0003:0419:0600.001E: parse failed [ 1786.824575][ T5713] samsung 0003:0419:0600.001E: probe with driver samsung failed with error -22 [ 1786.906768][T20880] team0: Port device team_slave_0 added [ 1787.003723][T20880] team0: Port device team_slave_1 added [ 1787.336436][ T5713] usb 7-1: USB disconnect, device number 30 [ 1787.480781][T20880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1787.480798][T20880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1787.480824][T20880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1787.589495][T20880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1787.589512][T20880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1787.589539][T20880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1789.232672][T20880] hsr_slave_0: entered promiscuous mode [ 1789.235351][T20880] hsr_slave_1: entered promiscuous mode [ 1789.255378][T20880] debugfs: 'hsr0' already exists in 'hsr' [ 1789.255395][T20880] Cannot create hsr debugfs directory [ 1789.276139][T20996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.276330][T20996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.276498][T20996] bridge_slave_0: entered allmulticast mode [ 1789.314684][T20996] bridge_slave_0: entered promiscuous mode [ 1789.352601][T20996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.352771][T20996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.352912][T20996] bridge_slave_1: entered allmulticast mode [ 1789.356193][T20996] bridge_slave_1: entered promiscuous mode [ 1789.524891][T20996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1789.574204][T20996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1789.684279][T20996] team0: Port device team_slave_0 added [ 1789.698557][T20996] team0: Port device team_slave_1 added [ 1789.802918][T20996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1789.802934][T20996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1789.802961][T20996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1789.869820][T20996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1789.869831][T20996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1789.869846][T20996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1790.121827][T21105] loop6: detected capacity change from 0 to 32768 [ 1791.829870][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.829925][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.369620][T21117] loop5: detected capacity change from 0 to 32768 [ 1792.383623][T20996] hsr_slave_0: entered promiscuous mode [ 1792.509507][T20996] hsr_slave_1: entered promiscuous mode [ 1792.511157][T20996] debugfs: 'hsr0' already exists in 'hsr' [ 1792.511181][T20996] Cannot create hsr debugfs directory [ 1792.520210][T16869] Flush: task=syz-executor[16869] dev=loop6 state=2 [ 1792.769534][T16869] Teardown: task=syz-executor[16869] dev=loop6 state=2 [ 1795.109457][T21128] loop6: detected capacity change from 0 to 512 [ 1795.348581][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1795.356240][T21128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1795.427479][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1795.627272][ T199] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1795.779541][ T199] usb 7-1: config 2 has an invalid interface number: 174 but max is 0 [ 1795.779559][ T199] usb 7-1: config 2 has no interface number 0 [ 1795.779594][ T199] usb 7-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1795.779609][ T199] usb 7-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 1795.779623][ T199] usb 7-1: config 2 interface 174 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1795.781798][ T199] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1795.781825][ T199] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.781840][ T199] usb 7-1: Product: syz [ 1795.781848][ T199] usb 7-1: Manufacturer: syz [ 1795.781856][ T199] usb 7-1: SerialNumber: syz [ 1795.788019][T21128] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1796.008143][ T199] usb 7-1: probing VID:PID(0424:012C) [ 1796.013464][ T199] usb 7-1: vub300 testing BULK IN EndPoint(0) 8E [ 1796.013490][ T199] usb 7-1: vub300 testing UNKNOWN EndPoint(1) 82 [ 1796.013510][ T199] usb 7-1: vub300 ignoring EndPoint(1) 82 [ 1796.013527][ T199] usb 7-1: Could not find two sets of bulk-in/out endpoint pairs [ 1796.072183][ T199] vub300 7-1:2.174: probe with driver vub300 failed with error -22 [ 1796.095735][ T199] usb 7-1: USB disconnect, device number 31 [ 1796.337587][T17187] bridge_slave_1: left allmulticast mode [ 1796.337623][T17187] bridge_slave_1: left promiscuous mode [ 1796.339522][T17187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.508992][T17187] bridge_slave_0: left allmulticast mode [ 1796.509018][T17187] bridge_slave_0: left promiscuous mode [ 1796.509202][T17187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.551360][T21137] loop5: detected capacity change from 0 to 64 [ 1796.572121][T21137] hfs: unable to read tree header [ 1796.573014][T21137] hfs: unable to open catalog tree [ 1796.573021][T21137] hfs: can't find a HFS filesystem on dev loop5 [ 1796.605554][T17810] Flush: task=udevd[17810] dev=loop5 state=2 [ 1796.677468][T17810] Teardown: task=udevd[17810] dev=loop5 state=2 [ 1796.740242][T16869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1796.821069][T16869] Flush: task=syz-executor[16869] dev=loop6 state=2 [ 1796.837484][T17187] bridge_slave_1: left allmulticast mode [ 1796.837527][T17187] bridge_slave_1: left promiscuous mode [ 1796.837775][T17187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.888365][T16869] Teardown: task=syz-executor[16869] dev=loop6 state=2 [ 1797.324601][T17187] bridge_slave_0: left allmulticast mode [ 1797.324635][T17187] bridge_slave_0: left promiscuous mode [ 1797.326116][T17187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.657493][T17187] bridge_slave_1: left allmulticast mode [ 1797.657519][T17187] bridge_slave_1: left promiscuous mode [ 1797.658597][T17187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.788290][T17187] bridge_slave_0: left allmulticast mode [ 1797.788317][T17187] bridge_slave_0: left promiscuous mode [ 1797.788490][T17187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.572212][T17187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1798.716489][T17187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1798.799478][T17187] bond0 (unregistering): Released all slaves [ 1798.984515][T21147] loop6: detected capacity change from 0 to 1024 [ 1798.985665][T21147] Flush: task=syz.6.2821[21147] dev=loop6 state=2 [ 1799.057492][T21147] Teardown: task=syz.6.2821[21147] dev=loop6 state=2 [ 1799.121850][T21147] loop6: detected capacity change from 0 to 4096 [ 1799.135203][T21147] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1799.136799][T21147] ntfs3(loop6): It is recommended to use chkdsk. [ 1799.208869][T17187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1799.327772][T17187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1799.410097][T17187] bond0 (unregistering): Released all slaves [ 1799.420255][T16869] do_umount: task=syz-executor[16869] propagate_mount_busy()!=0 [ 1799.420578][T16869] do_umount: task=syz-executor[16869] propagate_mount_busy()!=0 [ 1799.511320][T16869] ntfs3(loop6): ino=5, "/" indx_read_ra [ 1799.541961][T16869] ntfs3(loop6): ino=5, "/" ntfs_readdir [ 1799.586545][T16869] Flush: task=syz-executor[16869] dev=loop6 state=2 [ 1799.667961][T16869] Teardown: task=syz-executor[16869] dev=loop6 state=2 [ 1801.547823][T17187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1801.667838][T17187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.728771][T17187] bond0 (unregistering): Released all slaves [ 1801.756083][T21136] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1801.756200][T21136] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2818'. [ 1801.759166][ T9802] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1801.999864][ T9802] usb 7-1: Using ep0 maxpacket: 16 [ 1802.002222][ T9802] usb 7-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1802.002264][ T9802] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1802.002294][ T9802] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1802.002317][ T9802] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.027902][ T9802] usb 7-1: config 0 descriptor?? [ 1802.520539][T21161] loop5: detected capacity change from 0 to 4096 [ 1802.896863][T17810] Flush: task=udevd[17810] dev=loop5 state=2 [ 1802.906851][T21162] binder: 21153:21162 ioctl c0306201 200000000080 returned -14 [ 1802.919110][T21162] binder: 21153:21162 ioctl c0306201 2000000003c0 returned -14 [ 1802.982858][ T9802] bigben 0003:146B:0902.001F: unexpected rdesc, please submit for review [ 1802.983455][ T9802] bigben 0003:146B:0902.001F: ignoring exceeding usage max [ 1802.984827][ T9802] bigben 0003:146B:0902.001F: unknown main item tag 0x1 [ 1802.989070][T17810] Teardown: task=udevd[17810] dev=loop5 state=2 [ 1803.008401][ T9802] bigben 0003:146B:0902.001F: hidraw0: USB HID vc2.59 Device [HID 146b:0902] on usb-dummy_hcd.6-1/input0 [ 1803.008434][ T9802] bigben 0003:146B:0902.001F: missing HID_OUTPUT_REPORT 0 [ 1803.008451][ T9802] bigben 0003:146B:0902.001F: no output report found [ 1803.605173][T20873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1803.721675][T20873] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1803.726542][T20873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1803.822633][T20873] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1803.834597][T20873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1803.935161][T20873] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1803.999798][T20873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1804.047088][T20873] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1804.297247][T17187] hsr_slave_0: left promiscuous mode [ 1804.317252][T17187] hsr_slave_1: left promiscuous mode [ 1804.318349][T17187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1804.388805][T17187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1804.567703][T17187] hsr_slave_0: left promiscuous mode [ 1804.587408][T17187] hsr_slave_1: left promiscuous mode [ 1804.588094][T17187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1804.627996][T17187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1804.871034][T20459] usb 7-1: USB disconnect, device number 32 [ 1804.927494][T17187] hsr_slave_0: left promiscuous mode [ 1804.967388][T17187] hsr_slave_1: left promiscuous mode [ 1804.968075][T17187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1804.988083][T17187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1805.337995][T17187] team0 (unregistering): Port device team_slave_1 removed [ 1805.377720][T17187] team0 (unregistering): Port device team_slave_0 removed [ 1805.841767][T17187] team0 (unregistering): Port device team_slave_1 removed [ 1805.897975][T17187] team0 (unregistering): Port device team_slave_0 removed [ 1806.461380][T17187] team0 (unregistering): Port device team_slave_1 removed [ 1806.518843][T17187] team0 (unregistering): Port device team_slave_0 removed [ 1809.386012][T20880] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1809.604855][T20880] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1809.636006][T20880] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1809.784950][T20880] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1809.910467][T20880] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1810.181934][T20880] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1810.218096][T20880] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1810.402110][T20880] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1810.506679][T20873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1811.589895][T21213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2835'. [ 1811.965077][ T5581] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1812.169919][ T5581] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1812.169953][ T5581] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1812.171096][ T5581] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1812.171122][ T5581] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1812.171142][ T5581] usb 7-1: SerialNumber: syz [ 1812.244633][T21219] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1812.449215][T21219] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1812.580067][T20873] 8021q: adding VLAN 0 to HW filter on device team0 [ 1812.695122][T17193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1812.750216][T17193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1813.091532][T20996] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1813.133262][T20996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1813.296522][T20996] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1813.458585][T20996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1813.488199][T20996] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1814.706773][ T5581] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1814.716647][ T5581] usb 7-1: USB disconnect, device number 33 [ 1814.729909][T20996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1814.759340][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.759480][ T7316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1814.760061][T20996] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1814.870309][T20996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1815.662911][T20880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1816.149096][T20880] 8021q: adding VLAN 0 to HW filter on device team0 [ 1816.178849][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1816.178993][ T7316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1816.383085][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1816.383291][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1816.730923][T20996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1817.031058][T21247] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2840'. [ 1817.116214][T21252] loop5: detected capacity change from 0 to 128 [ 1817.132340][T21252] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1817.193658][T21252] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1817.252214][ T38] audit: type=1326 audit(1817.005:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=21251 comm="syz.5.2842" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fece404de59 code=0x0 [ 1817.296732][T20996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1817.375941][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.376073][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1817.435157][T17192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.436345][T17192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1817.513878][T20873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1817.937948][T20873] veth0_vlan: entered promiscuous mode [ 1818.076938][T20873] veth1_vlan: entered promiscuous mode [ 1818.208747][T21269] loop6: detected capacity change from 0 to 4096 [ 1818.232369][T21269] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1818.471876][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1818.473449][T21269] ntfs3(loop6): $Secure::$SII is corrupted. [ 1818.473548][T21269] ntfs3(loop6): Failed to initialize $Secure (-22). [ 1818.538259][T20873] veth0_macvtap: entered promiscuous mode [ 1818.549836][T20873] veth1_macvtap: entered promiscuous mode [ 1818.582240][T17810] Flush: task=udevd[17810] dev=loop6 state=2 [ 1818.613568][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1818.682607][T17810] Teardown: task=udevd[17810] dev=loop6 state=2 [ 1818.761843][T20880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1818.935848][T20873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1819.016044][T20873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1819.046819][T20996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1819.092041][T17192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.092119][T17192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.092156][T17192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.092191][T17192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.284242][T21280] loop5: detected capacity change from 0 to 32768 [ 1819.323407][T21280] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2844 (21280) [ 1819.495439][T21280] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1819.495474][T21280] BTRFS info (device loop5): using sha256 checksum algorithm [ 1821.060201][T21280] BTRFS info (device loop5): enabling ssd optimizations [ 1821.060227][T21280] BTRFS info (device loop5): turning on async discard [ 1821.060240][T21280] BTRFS info (device loop5): enabling free space tree [ 1822.064855][T16988] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1822.154965][T13294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1822.281201][T13294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1822.304021][T13294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1822.338210][T13294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1822.344929][T13294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1822.999632][T20996] veth0_vlan: entered promiscuous mode [ 1823.123898][T20996] veth1_vlan: entered promiscuous mode [ 1823.258296][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1823.293049][T21330] netlink: 'syz.6.2849': attribute type 3 has an invalid length. [ 1823.293090][T21330] netlink: 'syz.6.2849': attribute type 1 has an invalid length. [ 1823.293105][T21330] netlink: 'syz.6.2849': attribute type 2 has an invalid length. [ 1823.403011][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1823.564099][T13294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1823.636981][T13294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1823.661990][T13294] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1823.665538][T13294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1823.681509][T13294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1823.885516][T21336] loop6: detected capacity change from 0 to 512 [ 1824.281354][T21336] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1824.839829][T20996] veth0_macvtap: entered promiscuous mode [ 1824.858442][ T5597] Bluetooth: hci0: command tx timeout [ 1825.099920][T16869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1825.692928][T16869] Flush: task=syz-executor[16869] dev=loop6 state=2 [ 1825.848022][T16869] Teardown: task=syz-executor[16869] dev=loop6 state=2 [ 1825.900890][T20996] veth1_macvtap: entered promiscuous mode [ 1826.058734][ T5597] Bluetooth: hci1: command tx timeout [ 1826.100999][T20996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1826.183371][T20996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1826.668381][T17196] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.685203][T17196] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.741661][T17196] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.954765][ T5597] Bluetooth: hci0: command tx timeout [ 1828.227518][ T5597] Bluetooth: hci1: command tx timeout [ 1828.790934][T21369] loop5: detected capacity change from 0 to 512 [ 1828.852210][T17182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.983557][T21369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1829.037491][ T5597] Bluetooth: hci0: command tx timeout [ 1829.254557][T17196] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.623137][ T5597] Bluetooth: hci1: command tx timeout [ 1830.741065][T16988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1831.097302][ T5597] Bluetooth: hci0: command tx timeout [ 1831.174992][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1831.361178][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1832.508359][T17182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.697518][ T5597] Bluetooth: hci1: command tx timeout [ 1833.834884][T17182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.004812][T13294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1834.087453][T13294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1834.106293][T13294] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1834.241003][T13294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1834.277972][T13294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1836.303013][T21399] overlayfs: failed to resolve './file0': -2 [ 1836.377587][ T5597] Bluetooth: hci2: command tx timeout [ 1836.445020][T21408] FAULT_INJECTION: forcing a failure. [ 1836.445020][T21408] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.445065][T21408] CPU: 0 UID: 0 PID: 21408 Comm: syz.6.2862 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1836.445091][T21408] Tainted: [L]=SOFTLOCKUP [ 1836.445098][T21408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1836.445109][T21408] Call Trace: [ 1836.445117][T21408] [ 1836.445125][T21408] dump_stack_lvl+0xe8/0x150 [ 1836.445159][T21408] should_fail_ex+0x467/0x600 [ 1836.445197][T21408] should_failslab+0xa8/0x100 [ 1836.445220][T21408] ? skb_clone+0x212/0x3a0 [ 1836.445241][T21408] kmem_cache_alloc_noprof+0x9e/0x680 [ 1836.445271][T21408] ? skb_clone+0x212/0x3a0 [ 1836.445297][T21408] skb_clone+0x212/0x3a0 [ 1836.445316][T21408] ? netlink_trim+0x166/0x2c0 [ 1836.445338][T21408] netlink_trim+0x17d/0x2c0 [ 1836.445359][T21408] netlink_broadcast_filtered+0x6d/0xea0 [ 1836.445386][T21408] ? __alloc_skb+0x4cc/0x7a0 [ 1836.445410][T21408] nlmsg_notify+0xe3/0x1a0 [ 1836.445435][T21408] qdisc_graft+0x1166/0x1600 [ 1836.445474][T21408] ? __pfx_qdisc_graft+0x10/0x10 [ 1836.445498][T21408] ? trace_qdisc_create+0x83/0x200 [ 1836.445526][T21408] ? qdisc_create+0xa4e/0xf10 [ 1836.445550][T21408] ? lockdep_rtnl_is_held+0x26/0x40 [ 1836.445576][T21408] tc_modify_qdisc+0x1968/0x2390 [ 1836.445614][T21408] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1836.445652][T21408] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1836.445691][T21408] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1836.445714][T21408] rtnetlink_rcv_msg+0x7b9/0xc00 [ 1836.445743][T21408] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1836.445768][T21408] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1836.445793][T21408] ? ref_tracker_free+0x668/0x820 [ 1836.445815][T21408] ? __netlink_deliver_tap+0x600/0x880 [ 1836.445833][T21408] ? netlink_deliver_tap+0x19c/0x1b0 [ 1836.445850][T21408] ? netlink_unicast+0x7b8/0x990 [ 1836.445868][T21408] ? netlink_sendmsg+0x813/0xb40 [ 1836.445886][T21408] ? sock_sendmsg_nosec+0x13a/0x180 [ 1836.445907][T21408] ? ____sys_sendmsg+0x565/0x870 [ 1836.445925][T21408] ? ___sys_sendmsg+0x2a5/0x360 [ 1836.445942][T21408] ? __x64_sys_sendmsg+0x1b7/0x290 [ 1836.445961][T21408] ? do_syscall_64+0x174/0x580 [ 1836.445982][T21408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.446008][T21408] netlink_rcv_skb+0x226/0x4a0 [ 1836.446037][T21408] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1836.446063][T21408] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1836.446096][T21408] ? netlink_deliver_tap+0x2e/0x1b0 [ 1836.446116][T21408] ? netlink_deliver_tap+0x2e/0x1b0 [ 1836.446142][T21408] netlink_unicast+0x7f5/0x990 [ 1836.446172][T21408] netlink_sendmsg+0x813/0xb40 [ 1836.446200][T21408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1836.446223][T21408] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1836.446246][T21408] ? __kernel_text_address+0xd/0x30 [ 1836.446265][T21408] ? unwind_get_return_address+0x4d/0x90 [ 1836.446289][T21408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1836.446309][T21408] sock_sendmsg_nosec+0x13a/0x180 [ 1836.446334][T21408] ____sys_sendmsg+0x565/0x870 [ 1836.446362][T21408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1836.446389][T21408] ? import_iovec+0x73/0xa0 [ 1836.446418][T21408] ___sys_sendmsg+0x2a5/0x360 [ 1836.446437][T21408] ? __lock_acquire+0x6df/0x2e40 [ 1836.446462][T21408] ? __pfx____sys_sendmsg+0x10/0x10 [ 1836.446514][T21408] ? __fget_files+0x2a/0x420 [ 1836.446535][T21408] ? __fget_files+0x3a8/0x420 [ 1836.446567][T21408] __x64_sys_sendmsg+0x1b7/0x290 [ 1836.446590][T21408] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1836.446627][T21408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.446648][T21408] do_syscall_64+0x174/0x580 [ 1836.446669][T21408] ? trace_irq_disable+0x3b/0x140 [ 1836.446691][T21408] ? clear_bhb_loop+0x40/0x90 [ 1836.446713][T21408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.446733][T21408] RIP: 0033:0x7f9757d5de59 [ 1836.446751][T21408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1836.446768][T21408] RSP: 002b:00007f9755fb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1836.446789][T21408] RAX: ffffffffffffffda RBX: 00007f9757fe5fa0 RCX: 00007f9757d5de59 [ 1836.446803][T21408] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000003 [ 1836.446816][T21408] RBP: 00007f9755fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1836.446828][T21408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1836.446838][T21408] R13: 00007f9757fe6038 R14: 00007f9757fe5fa0 R15: 00007fffd8e6c758 [ 1836.446869][T21408] [ 1837.480332][T17182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.618675][ T5597] Bluetooth: hci2: command tx timeout [ 1840.159943][T20458] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1840.999159][ T5597] Bluetooth: hci2: command tx timeout [ 1841.279987][T21446] loop6: detected capacity change from 0 to 164 [ 1841.353446][T20458] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1841.353479][T20458] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1841.353505][T20458] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1841.353530][T20458] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1841.353562][T20458] usb 6-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1841.353585][T20458] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.368684][T20458] usb 6-1: config 0 descriptor?? [ 1841.369414][T21437] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1841.451466][T21446] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 1841.533570][T21319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1841.538693][T21319] bridge0: port 1(bridge_slave_0) entered disabled state [ 1841.539030][T21319] bridge_slave_0: entered allmulticast mode [ 1841.543857][T21319] bridge_slave_0: entered promiscuous mode [ 1841.654495][T21319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1841.654763][T21319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.655002][T21319] bridge_slave_1: entered allmulticast mode [ 1841.679753][T21319] bridge_slave_1: entered promiscuous mode [ 1841.792057][T16869] Flush: task=syz-executor[16869] dev=loop6 state=2 [ 1841.799644][T20458] ntrig 0003:1B96:0009.0020: unknown main item tag 0x0 [ 1841.799679][T20458] ntrig 0003:1B96:0009.0020: unknown main item tag 0x0 [ 1841.799706][T20458] ntrig 0003:1B96:0009.0020: unknown main item tag 0x0 [ 1841.799732][T20458] ntrig 0003:1B96:0009.0020: unknown main item tag 0x0 [ 1841.799758][T20458] ntrig 0003:1B96:0009.0020: unknown main item tag 0x0 [ 1841.799784][T20458] ntrig 0003:1B96:0009.0020: unknown main item tag 0x0 [ 1841.799811][T20458] ntrig 0003:1B96:0009.0020: unknown main item tag 0x0 [ 1841.799837][T20458] ntrig 0003:1B96:0009.0020: unknown main item tag 0x0 [ 1841.799864][T20458] ntrig 0003:1B96:0009.0020: unknown main item tag 0x0 [ 1841.799890][T20458] ntrig 0003:1B96:0009.0020: unknown main item tag 0x0 [ 1841.803410][T20458] ntrig 0003:1B96:0009.0020: hidraw0: USB HID v0.0c Device [HID 1b96:0009] on usb-dummy_hcd.5-1/input0 [ 1841.887427][T16869] Teardown: task=syz-executor[16869] dev=loop6 state=2 [ 1842.328198][T17182] bridge_slave_1: left allmulticast mode [ 1842.328224][T17182] bridge_slave_1: left promiscuous mode [ 1842.328464][T17182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.474734][T17182] bridge_slave_0: left allmulticast mode [ 1842.474768][T17182] bridge_slave_0: left promiscuous mode [ 1842.475018][T17182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.546277][T21460] FAULT_INJECTION: forcing a failure. [ 1842.546277][T21460] name failslab, interval 1, probability 0, space 0, times 0 [ 1842.546312][T21460] CPU: 1 UID: 0 PID: 21460 Comm: syz.6.2872 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1842.546338][T21460] Tainted: [L]=SOFTLOCKUP [ 1842.546346][T21460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1842.546357][T21460] Call Trace: [ 1842.546364][T21460] [ 1842.546372][T21460] dump_stack_lvl+0xe8/0x150 [ 1842.546404][T21460] should_fail_ex+0x467/0x600 [ 1842.546436][T21460] should_failslab+0xa8/0x100 [ 1842.546461][T21460] __kmalloc_cache_noprof+0xa1/0x670 [ 1842.546481][T21460] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 1842.546503][T21460] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 1842.546530][T21460] bpf_prog_alloc_no_stats+0xd8/0x560 [ 1842.546560][T21460] ? bpf_prog_alloc+0x2a/0x1a0 [ 1842.546584][T21460] bpf_prog_alloc+0x3c/0x1a0 [ 1842.546608][T21460] bpf_prog_load+0x7f8/0x1ac0 [ 1842.546640][T21460] ? __pfx_bpf_prog_load+0x10/0x10 [ 1842.546684][T21460] __sys_bpf+0xd0d/0xd90 [ 1842.546712][T21460] ? __pfx___sys_bpf+0x10/0x10 [ 1842.546737][T21460] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1842.546764][T21460] ? rt_mutex_slowunlock+0x219/0x460 [ 1842.546807][T21460] ? ksys_write+0x248/0x270 [ 1842.546834][T21460] ? __pfx_ksys_write+0x10/0x10 [ 1842.546862][T21460] __x64_sys_bpf+0xba/0xd0 [ 1842.546882][T21460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.546903][T21460] do_syscall_64+0x174/0x580 [ 1842.546923][T21460] ? trace_irq_disable+0x3b/0x140 [ 1842.546943][T21460] ? clear_bhb_loop+0x40/0x90 [ 1842.546966][T21460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.546983][T21460] RIP: 0033:0x7f9757d5de59 [ 1842.547001][T21460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1842.547017][T21460] RSP: 002b:00007f9755fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1842.547036][T21460] RAX: ffffffffffffffda RBX: 00007f9757fe5fa0 RCX: 00007f9757d5de59 [ 1842.547050][T21460] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 1842.547063][T21460] RBP: 00007f9755fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1842.547075][T21460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1842.547086][T21460] R13: 00007f9757fe6038 R14: 00007f9757fe5fa0 R15: 00007fffd8e6c758 [ 1842.547115][T21460] [ 1843.332212][ T5597] Bluetooth: hci2: command tx timeout [ 1843.972349][T20458] usb 6-1: USB disconnect, device number 25 [ 1844.203079][T21466] IPv6: Can't replace route, no match found [ 1846.430359][T17182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1846.433472][T21477] FAULT_INJECTION: forcing a failure. [ 1846.433472][T21477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1846.433503][T21477] CPU: 1 UID: 0 PID: 21477 Comm: syz.6.2877 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1846.433530][T21477] Tainted: [L]=SOFTLOCKUP [ 1846.433536][T21477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1846.433546][T21477] Call Trace: [ 1846.433554][T21477] [ 1846.433563][T21477] dump_stack_lvl+0xe8/0x150 [ 1846.433593][T21477] should_fail_ex+0x467/0x600 [ 1846.433621][T21477] _copy_to_user+0x31/0xb0 [ 1846.433650][T21477] simple_read_from_buffer+0xe1/0x170 [ 1846.433679][T21477] proc_fail_nth_read+0x1be/0x230 [ 1846.433706][T21477] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1846.433732][T21477] ? rw_verify_area+0x250/0x4d0 [ 1846.433758][T21477] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1846.433780][T21477] vfs_read+0x219/0xa90 [ 1846.433812][T21477] ? __pfx_vfs_read+0x10/0x10 [ 1846.433840][T21477] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1846.433870][T21477] ? lockdep_hardirqs_on+0x7a/0x110 [ 1846.433891][T21477] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1846.433914][T21477] ? mutex_lock_nested+0x152/0x1d0 [ 1846.433939][T21477] ? fdget_pos+0x252/0x320 [ 1846.433970][T21477] ksys_read+0x156/0x270 [ 1846.433996][T21477] ? __pfx_ksys_read+0x10/0x10 [ 1846.434028][T21477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.434049][T21477] do_syscall_64+0x174/0x580 [ 1846.434070][T21477] ? trace_irq_disable+0x3b/0x140 [ 1846.434092][T21477] ? clear_bhb_loop+0x40/0x90 [ 1846.434115][T21477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.434133][T21477] RIP: 0033:0x7f9757d1e68e [ 1846.434151][T21477] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1846.434167][T21477] RSP: 002b:00007f9755fb5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1846.434187][T21477] RAX: ffffffffffffffda RBX: 00007f9755fb66c0 RCX: 00007f9757d1e68e [ 1846.434200][T21477] RDX: 000000000000000f RSI: 00007f9755fb60a0 RDI: 0000000000000004 [ 1846.434212][T21477] RBP: 00007f9755fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1846.434224][T21477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1846.434236][T21477] R13: 00007f9757fe6038 R14: 00007f9757fe5fa0 R15: 00007fffd8e6c758 [ 1846.434277][T21477] [ 1846.771013][T17182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1846.813561][T17182] bond0 (unregistering): Released all slaves [ 1847.036618][T21319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1848.412481][T21331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.412783][T21331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.413025][T21331] bridge_slave_0: entered allmulticast mode [ 1848.416126][T21331] bridge_slave_0: entered promiscuous mode [ 1848.450718][T21319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1848.579615][T21494] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1848.600694][T21331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1848.600955][T21331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.601201][T21331] bridge_slave_1: entered allmulticast mode [ 1848.604495][T21331] bridge_slave_1: entered promiscuous mode [ 1848.844824][T21499] IPv6: Can't replace route, no match found [ 1848.979834][T21319] team0: Port device team_slave_0 added [ 1849.089013][T21331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1849.104657][T21319] team0: Port device team_slave_1 added [ 1849.153316][T21331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1850.775534][T21510] loop5: detected capacity change from 0 to 2048 [ 1850.812416][T21510] NILFS (loop5): invalid segment: Magic number mismatch [ 1850.812443][T21510] NILFS (loop5): trying rollback from an earlier position [ 1850.939970][T21510] NILFS (loop5): recovery complete [ 1850.952478][T21511] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1851.007681][T21319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1851.007696][T21319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1851.007720][T21319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1851.015931][T21331] team0: Port device team_slave_0 added [ 1851.029755][T21319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1851.029769][T21319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1851.029796][T21319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1851.304533][T21331] team0: Port device team_slave_1 added [ 1851.458589][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1851.547551][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1851.591416][T21331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1851.591433][T21331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1851.591458][T21331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1851.780294][T21525] loop5: detected capacity change from 0 to 128 [ 1851.817241][T17182] hsr_slave_0: left promiscuous mode [ 1851.858835][T17182] hsr_slave_1: left promiscuous mode [ 1851.859747][T17182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1851.859768][T17182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1851.936839][T17182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1851.936874][T17182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1852.102492][T16988] do_umount: task=syz-executor[16988] propagate_mount_busy()!=0 [ 1852.102720][T16988] do_umount: task=syz-executor[16988] propagate_mount_busy()!=0 [ 1852.150357][T17182] veth1_macvtap: left promiscuous mode [ 1852.150429][T17182] veth0_macvtap: left promiscuous mode [ 1852.150593][T17182] veth1_vlan: left promiscuous mode [ 1852.150706][T17182] veth0_vlan: left promiscuous mode [ 1852.647420][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1852.748947][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1853.266818][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.266874][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.028481][T17182] team0 (unregistering): Port device team_slave_1 removed [ 1854.082230][T17182] team0 (unregistering): Port device team_slave_0 removed [ 1854.354720][T21550] IPv6: Can't replace route, no match found [ 1854.582115][T21554] loop5: detected capacity change from 0 to 128 [ 1854.998524][T21319] hsr_slave_0: entered promiscuous mode [ 1855.001313][T21319] hsr_slave_1: entered promiscuous mode [ 1855.004440][T21331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1855.004454][T21331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1855.004480][T21331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1855.098969][ T5254] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1855.239586][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1855.417709][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1855.591708][T21562] loop5: detected capacity change from 0 to 16 [ 1855.607752][T21562] erofs (device loop5): EXPERIMENTAL 48-bit layout support in use. Use at your own risk! [ 1855.669588][T21562] erofs (device loop5): mounted with root inode @ nid 36. [ 1855.732966][T21394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1855.733117][T21394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.733256][T21394] bridge_slave_0: entered allmulticast mode [ 1855.735023][T21394] bridge_slave_0: entered promiscuous mode [ 1856.544338][T21331] hsr_slave_0: entered promiscuous mode [ 1856.579076][T21331] hsr_slave_1: entered promiscuous mode [ 1856.580760][T21331] debugfs: 'hsr0' already exists in 'hsr' [ 1856.580780][T21331] Cannot create hsr debugfs directory [ 1856.700346][T21394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1856.713097][T21394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1856.713339][T21394] bridge_slave_1: entered allmulticast mode [ 1856.715995][T21394] bridge_slave_1: entered promiscuous mode [ 1856.963525][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1857.129767][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1857.196662][T21394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1857.335997][T21394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1857.912466][T21394] team0: Port device team_slave_0 added [ 1858.561580][T21394] team0: Port device team_slave_1 added [ 1858.976620][T21394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1858.976637][T21394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1858.976665][T21394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1859.117054][T21394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1859.117071][T21394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1859.159323][T21394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1860.282447][T21631] FAULT_INJECTION: forcing a failure. [ 1860.282447][T21631] name failslab, interval 1, probability 0, space 0, times 0 [ 1860.282483][T21631] CPU: 0 UID: 0 PID: 21631 Comm: syz.6.2903 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1860.282507][T21631] Tainted: [L]=SOFTLOCKUP [ 1860.282514][T21631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1860.282525][T21631] Call Trace: [ 1860.282533][T21631] [ 1860.282541][T21631] dump_stack_lvl+0xe8/0x150 [ 1860.282573][T21631] should_fail_ex+0x467/0x600 [ 1860.282598][T21631] ? shmem_alloc_inode+0x28/0x40 [ 1860.282704][T21631] should_failslab+0xa8/0x100 [ 1860.282739][T21631] kmem_cache_alloc_lru_noprof+0xa2/0x670 [ 1860.282757][T21631] ? stack_trace_save+0xa9/0x100 [ 1860.282807][T21631] ? shmem_alloc_inode+0x28/0x40 [ 1860.282831][T21631] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1860.282850][T21631] shmem_alloc_inode+0x28/0x40 [ 1860.282870][T21631] alloc_inode+0x6a/0x1b0 [ 1860.282893][T21631] new_inode+0x1f/0x170 [ 1860.282912][T21631] ? shmem_get_inode+0x29d/0xf80 [ 1860.282934][T21631] shmem_get_inode+0x3b1/0xf80 [ 1860.282975][T21631] ? __pfx_shmem_get_inode+0x10/0x10 [ 1860.282995][T21631] ? lockdep_hardirqs_on+0x7a/0x110 [ 1860.283021][T21631] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1860.283043][T21631] __shmem_file_setup+0x20b/0x370 [ 1860.283073][T21631] ? __pfx___shmem_file_setup+0x10/0x10 [ 1860.283103][T21631] ? rt_spin_unlock+0x157/0x200 [ 1860.283124][T21631] memfd_alloc_file+0x99/0x570 [ 1860.283145][T21631] ? rt_spin_unlock+0x163/0x200 [ 1860.283165][T21631] ? __pfx_memfd_alloc_file+0x10/0x10 [ 1860.283184][T21631] ? alloc_fd+0x654/0x6d0 [ 1860.283215][T21631] __se_sys_memfd_create+0x329/0x420 [ 1860.283237][T21631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.283259][T21631] do_syscall_64+0x174/0x580 [ 1860.283279][T21631] ? trace_irq_disable+0x3b/0x140 [ 1860.283302][T21631] ? clear_bhb_loop+0x40/0x90 [ 1860.283324][T21631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.283342][T21631] RIP: 0033:0x7f9757d5de59 [ 1860.283361][T21631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1860.283377][T21631] RSP: 002b:00007f9755fb5e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1860.283398][T21631] RAX: ffffffffffffffda RBX: 00000000000001f5 RCX: 00007f9757d5de59 [ 1860.283412][T21631] RDX: 00007f9755fb5ee0 RSI: 0000000000000000 RDI: 00007f9757df404f [ 1860.283425][T21631] RBP: 0000200000000480 R08: 00000000ffffffff R09: 0000000000000000 [ 1860.283438][T21631] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 1860.283451][T21631] R13: 00007f9755fb5ee0 R14: 00007f9755fb5ea0 R15: 0000200000006140 [ 1860.283482][T21631] [ 1860.650657][T21633] IPv6: Can't replace route, no match found [ 1861.000354][T21637] loop5: detected capacity change from 0 to 256 [ 1861.314107][T21637] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2905'. [ 1861.314126][T21637] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2905'. [ 1861.556970][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1861.683693][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1861.815082][ T5254] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1861.849047][T21645] loop5: detected capacity change from 0 to 256 [ 1861.966659][T21645] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1862.068280][ T5983] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1862.220861][T21646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2906'. [ 1862.242807][ T5983] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1862.242850][ T5983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.242870][ T5983] usb 7-1: Product: syz [ 1862.242884][ T5983] usb 7-1: Manufacturer: syz [ 1862.242898][ T5983] usb 7-1: SerialNumber: syz [ 1862.254806][ T5983] usb 7-1: config 0 descriptor?? [ 1862.259208][ T5983] ch341 7-1:0.0: ch341-uart converter detected [ 1862.645406][T17182] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.292811][T21642] Bluetooth: MGMT ver 1.23 [ 1863.293925][ T5983] ch341-uart ttyUSB0: failed to read break control: -71 [ 1863.293980][ T5983] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1863.301487][ T5983] usb 7-1: USB disconnect, device number 34 [ 1863.304662][ T5983] ch341 7-1:0.0: device disconnected [ 1863.346341][T21394] hsr_slave_0: entered promiscuous mode [ 1863.350794][T21394] hsr_slave_1: entered promiscuous mode [ 1863.352478][T21394] debugfs: 'hsr0' already exists in 'hsr' [ 1863.352502][T21394] Cannot create hsr debugfs directory [ 1863.472303][T16988] Flush: task=syz-executor[16988] dev=loop5 state=2 [ 1863.619160][T16988] Teardown: task=syz-executor[16988] dev=loop5 state=2 [ 1863.674439][T21650] FAULT_INJECTION: forcing a failure. [ 1863.674439][T21650] name failslab, interval 1, probability 0, space 0, times 0 [ 1863.674463][T21650] CPU: 0 UID: 0 PID: 21650 Comm: syz.5.2908 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1863.674478][T21650] Tainted: [L]=SOFTLOCKUP [ 1863.674482][T21650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1863.674488][T21650] Call Trace: [ 1863.674493][T21650] [ 1863.674498][T21650] dump_stack_lvl+0xe8/0x150 [ 1863.674517][T21650] should_fail_ex+0x467/0x600 [ 1863.674533][T21650] should_failslab+0xa8/0x100 [ 1863.674547][T21650] __kmalloc_node_noprof+0xfd/0x7b0 [ 1863.674558][T21650] ? __get_vm_area_node+0x1f2/0x300 [ 1863.674574][T21650] ? __vmalloc_node_range_noprof+0x5d0/0x1560 [ 1863.674583][T21650] ? __vmalloc_node_range_noprof+0x5d0/0x1560 [ 1863.674597][T21650] __vmalloc_node_range_noprof+0x5d0/0x1560 [ 1863.674609][T21650] ? lock_acquire+0x115/0x350 [ 1863.674630][T21650] ? __lock_acquire+0x6df/0x2e40 [ 1863.674646][T21650] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1863.674657][T21650] ? kernel_text_address+0xa5/0xe0 [ 1863.674674][T21650] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1863.674688][T21650] __vmalloc_noprof+0xd2/0x120 [ 1863.674698][T21650] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1863.674712][T21650] bpf_prog_alloc_no_stats+0x47/0x560 [ 1863.674724][T21650] ? bpf_prog_alloc+0x2a/0x1a0 [ 1863.674738][T21650] bpf_prog_alloc+0x3c/0x1a0 [ 1863.674752][T21650] bpf_prog_load+0x7f8/0x1ac0 [ 1863.674770][T21650] ? __pfx_bpf_prog_load+0x10/0x10 [ 1863.674795][T21650] __sys_bpf+0xd0d/0xd90 [ 1863.674811][T21650] ? __pfx___sys_bpf+0x10/0x10 [ 1863.674825][T21650] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1863.674840][T21650] ? rt_mutex_slowunlock+0x219/0x460 [ 1863.674865][T21650] ? ksys_write+0x248/0x270 [ 1863.674880][T21650] ? __pfx_ksys_write+0x10/0x10 [ 1863.674896][T21650] __x64_sys_bpf+0xba/0xd0 [ 1863.674907][T21650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.674918][T21650] do_syscall_64+0x174/0x580 [ 1863.674931][T21650] ? trace_irq_disable+0x3b/0x140 [ 1863.674943][T21650] ? clear_bhb_loop+0x40/0x90 [ 1863.674955][T21650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.674965][T21650] RIP: 0033:0x7fece404de59 [ 1863.674976][T21650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1863.674985][T21650] RSP: 002b:00007fece22a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1863.674997][T21650] RAX: ffffffffffffffda RBX: 00007fece42d5fa0 RCX: 00007fece404de59 [ 1863.675005][T21650] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1863.675012][T21650] RBP: 00007fece22a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1863.675018][T21650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1863.675024][T21650] R13: 00007fece42d6038 R14: 00007fece42d5fa0 R15: 00007ffd8fa50ed8 [ 1863.675040][T21650] [ 1863.678970][T21650] syz.5.2908: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1863.679037][T21650] CPU: 0 UID: 0 PID: 21650 Comm: syz.5.2908 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1863.679062][T21650] Tainted: [L]=SOFTLOCKUP [ 1863.679069][T21650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1863.679079][T21650] Call Trace: [ 1863.679087][T21650] [ 1863.679096][T21650] dump_stack_lvl+0xe8/0x150 [ 1863.679138][T21650] warn_alloc+0x24c/0x270 [ 1863.679164][T21650] ? __pfx_warn_alloc+0x10/0x10 [ 1863.679180][T21650] ? rcu_is_watching+0x15/0xb0 [ 1863.679210][T21650] ? __kmalloc_node_noprof+0x586/0x7b0 [ 1863.679229][T21650] ? __get_vm_area_node+0x1f2/0x300 [ 1863.679254][T21650] ? __vmalloc_node_range_noprof+0x5d0/0x1560 [ 1863.679271][T21650] ? __vmalloc_node_range_noprof+0x5d0/0x1560 [ 1863.679295][T21650] __vmalloc_node_range_noprof+0x984/0x1560 [ 1863.679318][T21650] ? lock_acquire+0x115/0x350 [ 1863.679357][T21650] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1863.679376][T21650] ? kernel_text_address+0xa5/0xe0 [ 1863.679400][T21650] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1863.679422][T21650] __vmalloc_noprof+0xd2/0x120 [ 1863.679439][T21650] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1863.679464][T21650] bpf_prog_alloc_no_stats+0x47/0x560 [ 1863.679484][T21650] ? bpf_prog_alloc+0x2a/0x1a0 [ 1863.679508][T21650] bpf_prog_alloc+0x3c/0x1a0 [ 1863.679532][T21650] bpf_prog_load+0x7f8/0x1ac0 [ 1863.679565][T21650] ? __pfx_bpf_prog_load+0x10/0x10 [ 1863.679608][T21650] __sys_bpf+0xd0d/0xd90 [ 1863.679635][T21650] ? __pfx___sys_bpf+0x10/0x10 [ 1863.679658][T21650] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1863.679686][T21650] ? rt_mutex_slowunlock+0x219/0x460 [ 1863.679727][T21650] ? ksys_write+0x248/0x270 [ 1863.679752][T21650] ? __pfx_ksys_write+0x10/0x10 [ 1863.679780][T21650] __x64_sys_bpf+0xba/0xd0 [ 1863.679800][T21650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.679819][T21650] do_syscall_64+0x174/0x580 [ 1863.679840][T21650] ? trace_irq_disable+0x3b/0x140 [ 1863.679860][T21650] ? clear_bhb_loop+0x40/0x90 [ 1863.679881][T21650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.679899][T21650] RIP: 0033:0x7fece404de59 [ 1863.679915][T21650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1863.679930][T21650] RSP: 002b:00007fece22a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1863.679948][T21650] RAX: ffffffffffffffda RBX: 00007fece42d5fa0 RCX: 00007fece404de59 [ 1863.679962][T21650] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1863.679974][T21650] RBP: 00007fece22a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1863.679986][T21650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1863.679998][T21650] R13: 00007fece42d6038 R14: 00007fece42d5fa0 R15: 00007ffd8fa50ed8 [ 1863.680026][T21650] [ 1863.680140][T21650] Mem-Info: [ 1863.680151][T21650] active_anon:25623 inactive_anon:0 isolated_anon:0 [ 1863.680151][T21650] active_file:0 inactive_file:68751 isolated_file:0 [ 1863.680151][T21650] unevictable:768 dirty:108 writeback:0 [ 1863.680151][T21650] slab_reclaimable:13492 slab_unreclaimable:107299 [ 1863.680151][T21650] mapped:31645 shmem:18927 pagetables:1694 [ 1863.680151][T21650] sec_pagetables:0 bounce:0 [ 1863.680151][T21650] kernel_misc_reclaimable:0 [ 1863.680151][T21650] free:1263278 free_pcp:8257 free_cma:0 [ 1863.680202][T21650] Node 0 active_anon:102492kB inactive_anon:0kB active_file:0kB inactive_file:274796kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126572kB dirty:432kB writeback:0kB shmem:74172kB kernel_stack:14400kB pagetables:6604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1863.680251][T21650] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1863.680296][T21650] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1863.680352][T21650] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1863.680383][T21650] Node 0 DMA32 free:1105268kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102492kB inactive_anon:0kB active_file:0kB inactive_file:274796kB unevictable:1536kB writepending:432kB zspages:0kB present:3129332kB managed:2552376kB mlocked:0kB bounce:0kB free_pcp:33008kB local_pcp:25036kB free_cma:0kB [ 1863.680455][T21650] lowmem_reserve[]: 0 0 0 0 0 [ 1863.680721][T21650] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:832kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 1863.680776][T21650] lowmem_reserve[]: 0 0 0 0 0 [ 1863.680805][T21650] Node 1 Normal free:3932484kB boost:0kB min:6376kB low:10484kB high:14592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1863.680862][T21650] lowmem_reserve[]: 0 0 0 0 0 [ 1863.680891][T21650] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1863.680996][T21650] Node 0 DMA32: 2134*4kB (UM) 1094*8kB (UM) 680*16kB (UME) 627*32kB (UME) 212*64kB (UME) 153*128kB (UME) 100*256kB (UME) 38*512kB (UME) 18*1024kB (UME) 7*2048kB (ME) 231*4096kB (UM) = 1105384kB [ 1863.681143][T21650] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1863.681231][T21650] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 8*16kB (UM) 5*32kB (UM) 4*64kB (UM) 4*128kB (UM) 1*256kB (M) 4*512kB (UM) 1*1024kB (M) 2*2048kB (M) 958*4096kB (UM) = 3932484kB [ 1863.681370][T21650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1863.681386][T21650] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1863.681402][T21650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1863.681417][T21650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1863.681433][T21650] 87457 total pagecache pages [ 1863.681440][T21650] 0 pages in swap cache [ 1863.681447][T21650] Free swap = 124996kB [ 1863.681454][T21650] Total swap = 124996kB [ 1863.681462][T21650] 2097051 pages RAM [ 1863.681469][T21650] 0 pages HighMem/MovableOnly [ 1863.681475][T21650] 427135 pages reserved [ 1863.681482][T21650] 0 pages cma reserved [ 1865.647916][T20458] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1865.948030][T20458] usb 6-1: Using ep0 maxpacket: 16 [ 1865.964247][T20458] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1865.964283][T20458] usb 6-1: config 0 has no interface number 0 [ 1865.964409][T20458] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1865.964444][T20458] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1865.971170][T20458] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1865.971228][T20458] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1865.971308][T20458] usb 6-1: Product: syz [ 1865.971360][T20458] usb 6-1: SerialNumber: syz [ 1866.337858][T20458] usb 6-1: config 0 descriptor?? [ 1866.620887][T20458] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1867.041445][T20458] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input55 [ 1867.247823][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1868.413533][T20458] ------------[ cut here ]------------ [ 1868.413549][T20458] URB ffff88806330a200 submitted while active [ 1868.413573][T20458] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:3/20458 [ 1868.413734][T20458] Modules linked in: [ 1868.413764][T20458] CPU: 0 UID: 0 PID: 20458 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1868.413794][T20458] Tainted: [L]=SOFTLOCKUP [ 1868.413802][T20458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1868.413816][T20458] Workqueue: usb_hub_wq hub_event [ 1868.413847][T20458] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 1868.413874][T20458] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 b9 61 58 fb 49 83 3e 00 74 40 e8 9e 16 ec fa 48 8d 3d 37 58 e2 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 83 16 ec fa eb 05 e8 7c 16 [ 1868.413893][T20458] RSP: 0018:ffffc90004c26c58 EFLAGS: 00010287 [ 1868.413911][T20458] RAX: ffffffff86d99422 RBX: ffff88806330a200 RCX: 0000000000100000 [ 1868.413927][T20458] RDX: ffffc9001b132000 RSI: ffff88806330a200 RDI: ffffffff8fbbec60 [ 1868.413943][T20458] RBP: dffffc0000000000 R08: ffffffff8faf597f R09: 1ffffffff1f5eb2f [ 1868.413959][T20458] R10: dffffc0000000000 R11: fffffbfff1f5eb30 R12: 1ffff1100795f10a [ 1868.413974][T20458] R13: ffff88803caf8848 R14: ffff88806330a208 R15: 0000000000000cc0 [ 1868.413990][T20458] FS: 0000000000000000(0000) GS:ffff888125c43000(0000) knlGS:0000000000000000 [ 1868.414008][T20458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1868.414023][T20458] CR2: 0000200000292030 CR3: 00000000623b8000 CR4: 00000000003526f0 [ 1868.414042][T20458] Call Trace: [ 1868.414051][T20458] [ 1868.414064][T20458] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 1868.414092][T20458] ? mutex_lock_nested+0x152/0x1d0 [ 1868.414124][T20458] ? cm109_input_open+0x97/0x460 [ 1868.414228][T20458] cm109_input_open+0x1fb/0x460 [ 1868.414268][T20458] input_open_device+0x1f9/0x3b0 [ 1868.414336][T20458] kbd_connect+0xf6/0x150 [ 1868.414402][T20458] input_register_device+0xd08/0x1150 [ 1868.414437][T20458] cm109_usb_probe+0x11e4/0x16f0 [ 1868.414488][T20458] usb_probe_interface+0x653/0xc60 [ 1868.414523][T20458] ? __pfx_usb_probe_interface+0x10/0x10 [ 1868.414543][T20458] really_probe+0x254/0xae0 [ 1868.414574][T20458] __driver_probe_device+0x1e8/0x360 [ 1868.414603][T20458] driver_probe_device+0x4f/0x240 [ 1868.414632][T20458] __device_attach_driver+0x270/0x410 [ 1868.414662][T20458] bus_for_each_drv+0x25b/0x2f0 [ 1868.414693][T20458] ? __pfx___device_attach_driver+0x10/0x10 [ 1868.414719][T20458] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1868.414749][T20458] ? rt_spin_unlock+0x163/0x200 [ 1868.414777][T20458] __device_attach+0x2c7/0x450 [ 1868.414799][T20458] ? rt_spin_unlock+0x157/0x200 [ 1868.414821][T20458] ? __pfx___device_attach+0x10/0x10 [ 1868.414856][T20458] device_initial_probe+0xa1/0xd0 [ 1868.414883][T20458] bus_probe_device+0x12d/0x220 [ 1868.414916][T20458] device_add+0x7d7/0xb80 [ 1868.414941][T20458] usb_set_configuration+0x1ad8/0x2180 [ 1868.415004][T20458] usb_generic_driver_probe+0x8d/0x150 [ 1868.415102][T20458] usb_probe_device+0x1c3/0x3b0 [ 1868.419580][T20458] ? __pfx_usb_probe_device+0x10/0x10 [ 1868.419611][T20458] really_probe+0x254/0xae0 [ 1868.419643][T20458] __driver_probe_device+0x1e8/0x360 [ 1868.419672][T20458] driver_probe_device+0x4f/0x240 [ 1868.419703][T20458] __device_attach_driver+0x270/0x410 [ 1868.419732][T20458] bus_for_each_drv+0x25b/0x2f0 [ 1868.419812][T20458] ? __pfx___device_attach_driver+0x10/0x10 [ 1868.419850][T20458] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1868.419879][T20458] ? rt_spin_unlock+0x163/0x200 [ 1868.419907][T20458] __device_attach+0x2c7/0x450 [ 1868.419935][T20458] ? __pfx___device_attach+0x10/0x10 [ 1868.419972][T20458] device_initial_probe+0xa1/0xd0 [ 1868.419999][T20458] bus_probe_device+0x12d/0x220 [ 1868.420034][T20458] device_add+0x7d7/0xb80 [ 1868.420059][T20458] usb_new_device+0x98d/0x1610 [ 1868.420085][T20458] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1868.420117][T20458] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1868.420161][T20458] ? __pfx_usb_new_device+0x10/0x10 [ 1868.420200][T20458] hub_event+0x28cf/0x4cf0 [ 1868.420292][T20458] ? __pfx_hub_event+0x10/0x10 [ 1868.420333][T20458] ? rcu_is_watching+0x15/0xb0 [ 1868.420384][T20458] ? process_one_work+0x7fd/0x1480 [ 1868.420413][T20458] process_one_work+0xaaf/0x1480 [ 1868.420465][T20458] ? __pfx_process_one_work+0x10/0x10 [ 1868.420489][T20458] ? do_raw_spin_lock+0x12b/0x2f0 [ 1868.420519][T20458] ? assign_work+0x3cf/0x5d0 [ 1868.420552][T20458] worker_thread+0xb05/0x10d0 [ 1868.420592][T20458] ? __kthread_parkme+0x71/0x1f0 [ 1868.420631][T20458] kthread+0x388/0x470 [ 1868.420649][T20458] ? __pfx_worker_thread+0x10/0x10 [ 1868.420673][T20458] ? __pfx_kthread+0x10/0x10 [ 1868.420695][T20458] ret_from_fork+0x514/0xb70 [ 1868.420721][T20458] ? __pfx_ret_from_fork+0x10/0x10 [ 1868.420742][T20458] ? __switch_to+0xc89/0x1420 [ 1868.420775][T20458] ? __pfx_kthread+0x10/0x10 [ 1868.420806][T20458] ret_from_fork_asm+0x1a/0x30 [ 1868.420861][T20458] [ 1868.420875][T20458] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1868.420899][T20458] CPU: 0 UID: 0 PID: 20458 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1868.420929][T20458] Tainted: [L]=SOFTLOCKUP [ 1868.420937][T20458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1868.420951][T20458] Workqueue: usb_hub_wq hub_event [ 1868.420982][T20458] Call Trace: [ 1868.420991][T20458] [ 1868.421001][T20458] vpanic+0x5d9/0xad0 [ 1868.421050][T20458] ? __pfx_vpanic+0x10/0x10 [ 1868.421072][T20458] ? __pfx__printk+0x10/0x10 [ 1868.421098][T20458] ? is_bpf_text_address+0x292/0x2b0 [ 1868.421147][T20458] ? is_bpf_text_address+0x26/0x2b0 [ 1868.421186][T20458] panic+0xc5/0xd0 [ 1868.421206][T20458] ? __pfx_panic+0x10/0x10 [ 1868.421237][T20458] ? ret_from_fork_asm+0x1a/0x30 [ 1868.421270][T20458] __warn+0x315/0x4c0 [ 1868.421289][T20458] ? usb_submit_urb+0x79/0x18b0 [ 1868.421318][T20458] ? usb_submit_urb+0x79/0x18b0 [ 1868.421344][T20458] __report_bug+0x276/0x570 [ 1868.421375][T20458] ? usb_submit_urb+0x79/0x18b0 [ 1868.421404][T20458] ? __pfx___report_bug+0x10/0x10 [ 1868.421427][T20458] ? irqentry_exit+0x218/0x8f0 [ 1868.421461][T20458] ? usb_submit_urb+0x81/0x18b0 [ 1868.421485][T20458] ? usb_submit_urb+0x7c/0x18b0 [ 1868.421520][T20458] report_bug_entry+0x19a/0x290 [ 1868.421547][T20458] ? usb_submit_urb+0x7c/0x18b0 [ 1868.421571][T20458] ? usb_submit_urb+0x81/0x18b0 [ 1868.421595][T20458] handle_bug+0xce/0x200 [ 1868.421624][T20458] exc_invalid_op+0x1a/0x50 [ 1868.421651][T20458] asm_exc_invalid_op+0x1a/0x20 [ 1868.421672][T20458] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 1868.421699][T20458] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 b9 61 58 fb 49 83 3e 00 74 40 e8 9e 16 ec fa 48 8d 3d 37 58 e2 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 83 16 ec fa eb 05 e8 7c 16 [ 1868.421717][T20458] RSP: 0018:ffffc90004c26c58 EFLAGS: 00010287 [ 1868.421735][T20458] RAX: ffffffff86d99422 RBX: ffff88806330a200 RCX: 0000000000100000 [ 1868.421751][T20458] RDX: ffffc9001b132000 RSI: ffff88806330a200 RDI: ffffffff8fbbec60 [ 1868.421767][T20458] RBP: dffffc0000000000 R08: ffffffff8faf597f R09: 1ffffffff1f5eb2f [ 1868.421783][T20458] R10: dffffc0000000000 R11: fffffbfff1f5eb30 R12: 1ffff1100795f10a [ 1868.421798][T20458] R13: ffff88803caf8848 R14: ffff88806330a208 R15: 0000000000000cc0 [ 1868.421822][T20458] ? usb_submit_urb+0x72/0x18b0 [ 1868.421856][T20458] ? usb_submit_urb+0x72/0x18b0 [ 1868.421882][T20458] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 1868.421907][T20458] ? mutex_lock_nested+0x152/0x1d0 [ 1868.421937][T20458] ? cm109_input_open+0x97/0x460 [ 1868.421967][T20458] cm109_input_open+0x1fb/0x460 [ 1868.421998][T20458] input_open_device+0x1f9/0x3b0 [ 1868.422026][T20458] kbd_connect+0xf6/0x150 [ 1868.422057][T20458] input_register_device+0xd08/0x1150 [ 1868.422092][T20458] cm109_usb_probe+0x11e4/0x16f0 [ 1868.422149][T20458] usb_probe_interface+0x653/0xc60 [ 1868.422184][T20458] ? __pfx_usb_probe_interface+0x10/0x10 [ 1868.422204][T20458] really_probe+0x254/0xae0 [ 1868.422235][T20458] __driver_probe_device+0x1e8/0x360 [ 1868.422264][T20458] driver_probe_device+0x4f/0x240 [ 1868.422293][T20458] __device_attach_driver+0x270/0x410 [ 1868.422330][T20458] bus_for_each_drv+0x25b/0x2f0 [ 1868.422375][T20458] ? __pfx___device_attach_driver+0x10/0x10 [ 1868.422402][T20458] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1868.422438][T20458] ? rt_spin_unlock+0x163/0x200 [ 1868.422468][T20458] __device_attach+0x2c7/0x450 [ 1868.422490][T20458] ? rt_spin_unlock+0x157/0x200 [ 1868.422512][T20458] ? __pfx___device_attach+0x10/0x10 [ 1868.422546][T20458] device_initial_probe+0xa1/0xd0 [ 1868.422573][T20458] bus_probe_device+0x12d/0x220 [ 1868.422607][T20458] device_add+0x7d7/0xb80 [ 1868.422632][T20458] usb_set_configuration+0x1ad8/0x2180 [ 1868.422694][T20458] usb_generic_driver_probe+0x8d/0x150 [ 1868.422729][T20458] usb_probe_device+0x1c3/0x3b0 [ 1868.422754][T20458] ? __pfx_usb_probe_device+0x10/0x10 [ 1868.422773][T20458] really_probe+0x254/0xae0 [ 1868.422803][T20458] __driver_probe_device+0x1e8/0x360 [ 1868.422831][T20458] driver_probe_device+0x4f/0x240 [ 1868.422859][T20458] __device_attach_driver+0x270/0x410 [ 1868.422889][T20458] bus_for_each_drv+0x25b/0x2f0 [ 1868.422920][T20458] ? __pfx___device_attach_driver+0x10/0x10 [ 1868.422945][T20458] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1868.422976][T20458] ? rt_spin_unlock+0x163/0x200 [ 1868.423004][T20458] __device_attach+0x2c7/0x450 [ 1868.423030][T20458] ? __pfx___device_attach+0x10/0x10 [ 1868.423068][T20458] device_initial_probe+0xa1/0xd0 [ 1868.423095][T20458] bus_probe_device+0x12d/0x220 [ 1868.423137][T20458] device_add+0x7d7/0xb80 [ 1868.423163][T20458] usb_new_device+0x98d/0x1610 [ 1868.423189][T20458] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1868.423221][T20458] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1868.423254][T20458] ? __pfx_usb_new_device+0x10/0x10 [ 1868.423292][T20458] hub_event+0x28cf/0x4cf0 [ 1868.423379][T20458] ? __pfx_hub_event+0x10/0x10 [ 1868.423419][T20458] ? rcu_is_watching+0x15/0xb0 [ 1868.423449][T20458] ? process_one_work+0x7fd/0x1480 [ 1868.423477][T20458] process_one_work+0xaaf/0x1480 [ 1868.423526][T20458] ? __pfx_process_one_work+0x10/0x10 [ 1868.423550][T20458] ? do_raw_spin_lock+0x12b/0x2f0 [ 1868.423579][T20458] ? assign_work+0x3cf/0x5d0 [ 1868.423611][T20458] worker_thread+0xb05/0x10d0 [ 1868.423649][T20458] ? __kthread_parkme+0x71/0x1f0 [ 1868.423689][T20458] kthread+0x388/0x470 [ 1868.423709][T20458] ? __pfx_worker_thread+0x10/0x10 [ 1868.423734][T20458] ? __pfx_kthread+0x10/0x10 [ 1868.423756][T20458] ret_from_fork+0x514/0xb70 [ 1868.423780][T20458] ? __pfx_ret_from_fork+0x10/0x10 [ 1868.423801][T20458] ? __switch_to+0xc89/0x1420 [ 1868.423833][T20458] ? __pfx_kthread+0x10/0x10 [ 1868.423854][T20458] ret_from_fork_asm+0x1a/0x30 [ 1868.423895][T20458] [ 1868.424159][T20458] Kernel Offset: disabled