last executing test programs: 1m30.811172154s ago: executing program 2 (id=577): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x44e200, 0x90) mknodat(r0, &(0x7f0000000000)='./file1\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x46) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x4002, &(0x7f0000000500)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@afid={'afid', 0x3d, 0x2}}, {@rq}, {@timeout={'timeout', 0x3d, 0x6}}, {@common=@afid={'afid', 0x3d, 0x3}}, {@common=@uname={'uname', 0x3d, '/dev/cpu/#/msr\x00'}}, {@common=@ignoreqv}], [{@subj_role={'subj_role', 0x3d, 'nodecompose'}}, {@hash}, {@dont_hash}, {@fowner_eq}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_lt}, {@smackfsdef={'smackfsdef', 0x3d, 'nodecompose'}}]}}) 1m28.903886088s ago: executing program 2 (id=582): socket$inet6(0xa, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x2, 0x0, 0x80000001, 0x6, 0x0, "7f1227f7adf97affe4ffff7d1800"}) r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f0000000200)=[{{0x80000000, 0x0}}, {{0x80000000}, {0x80000000}}]}) r4 = open(&(0x7f0000000a40)='.\x00', 0x0, 0x0) unshare(0x28020480) close(0x3) utimensat(r4, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{r2, 0x0, 0x1, [0x0, 0x1444]}, {r3, r1, 0x4, [0x8, 0x8001]}, 0x2, [0x7ff, 0x27]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000880)={0x4004, 0x5, "651f82", 0x1, 0x8}) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x3018c1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x4, 0x1ff, 0x10, 0x81, 0x81}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r8, 0x80045017, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r10 = socket$isdn_base(0x22, 0x3, 0x0) bind(r10, &(0x7f00000002c0)=@qipcrtr={0x2a, 0x1, 0x8000}, 0x80) write$snddsp(r9, &(0x7f0000000200)="a38d", 0x2) 1m25.616878998s ago: executing program 2 (id=591): r0 = fsopen(&(0x7f0000000080)='afs\x00', 0x1) fallocate(r0, 0x6, 0x9, 0x9) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)) r2 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$xfs(&(0x7f0000009800), &(0x7f00000004c0)='./bus\x00', 0x1000000, &(0x7f0000000280)={[{@pqnoenforce}, {@noquota}, {@nouuid}, {@usrquota}, {@pquota}, {@pqnoenforce}, {@nodiscard}]}, 0x1, 0x9895, &(0x7f0000009840)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0x4008586f, &(0x7f00000007c0)=ANY=[]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xf9, 0x187, &(0x7f0000000200)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000340)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m21.435201674s ago: executing program 2 (id=605): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x809411, 0x0, 0x1, 0x0, &(0x7f0000000000)) open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x37f, &(0x7f0000000440)="$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") r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0xfffffffffffffffe, 0x29) 1m18.129664304s ago: executing program 2 (id=620): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000180)='./file2\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRESDEC, @ANYRES32], 0x1, 0xa1b, &(0x7f0000001540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x0, &(0x7f0000000340)={[{@dioread_lock}, {@nolazytime}, {@minixdf}]}, 0x1, 0x53c, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x275a, 0x0) 1m17.557446972s ago: executing program 4 (id=626): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4bd}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003140)="01", 0x1}], 0x1}}], 0x4, 0xc080) 1m17.402975552s ago: executing program 2 (id=627): bind(0xffffffffffffffff, &(0x7f00000002c0)=@qipcrtr={0x2a, 0x1, 0x8000}, 0x80) 1m16.888649351s ago: executing program 32 (id=627): bind(0xffffffffffffffff, &(0x7f00000002c0)=@qipcrtr={0x2a, 0x1, 0x8000}, 0x80) 1m16.64451066s ago: executing program 4 (id=631): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x44e200, 0x90) mknodat(r0, &(0x7f0000000000)='./file1\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x46) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x4002, &(0x7f0000000500)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@afid={'afid', 0x3d, 0x2}}, {@rq}, {@timeout={'timeout', 0x3d, 0x6}}, {@common=@afid={'afid', 0x3d, 0x3}}, {@common=@uname={'uname', 0x3d, '/dev/cpu/#/msr\x00'}}, {@common=@ignoreqv}], [{@flag='mand'}, {@hash}, {@dont_hash}, {@fowner_eq}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_lt}, {@smackfsdef={'smackfsdef', 0x3d, 'nodecompose'}}]}}) 1m15.979485098s ago: executing program 4 (id=632): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='mm_page_alloc_extfrag\x00', r2, 0x0, 0x80011}, 0x18) r4 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x11, &(0x7f00000001c0)=[0xffffffff, 0x8], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r5 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$damon_contexts(r5, &(0x7f0000000000)=[{' ', './file0'}, {' ', './file0'}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x9, 0x0, &(0x7f00000000c0)) sendfile(r2, r1, 0x0, 0x7ffff000) 1m15.207366016s ago: executing program 4 (id=634): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x809411, 0x0, 0x1, 0x0, &(0x7f0000000000)) open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x37f, &(0x7f0000000440)="$eJzs3c9rI2UYwPFn0jQ/umyTgygK0ge96GVoq2e1SBeEgkt3I+4Kwux2oiFjUmZCJCK2nryKN/8BwWUPHhY8LKj/QC/e1osXT9vLgqCLiCPzK8l0p0mTZmm6+/3Abt7kfZ/M+04m5XkCeXP4/tefNOueWbc6kivdF0NE5KFIVXKSMKKbgmTYl1cv/HnvxSvXrhdFZHNb9dLG1dfWVXV55adPPy/Hw+4W5aD64eGD9T8Onj14/vC/qx83PG142mp31NIb7d871g3H1p2G1zRVLzu25dnaaHm2G/W3o/66097d7anV2rm4tOvanqdWq6dNu6edtnbcnlofWY2WmqapF5eyphsrjug7r0pTxNRubW9bG1Me8OaUcZi1f3zfH9HtuhvWgohZDt+vw2q3HvvcAADA3Enn//ptkrBXJddPKI24FiiE7XQZEOT/SXtra3Nbg2JhkP/ffumXzoX37izH+f/dQlb+//pvUXwq/w+OPvP8//sj98uzO5HzYm+SwafK/zEfVtLvyPuDij0W5P/Bu6Ff0X/5we3VsEH+DwAAAAAAAAAAAAAAAAAAAADAefDQ9yu+71eS2+Tf4CsE8f2QsT/yi8Y4d3KS/foX4x0F+tcDnkhXrl2XUvjFvfyyiPNVt9atRbdxfzJwVSryb3g9xKINJ6L9BDRQlZ+dvW5tMQ5YCP/fKIiKI7asSUWqqfiwfemdrc01jUTx4fH3ujUjvxTE16URxq9LRZ7Jjl/PjC/IKy8PxZtSkV9vSlsc2Qmv60H8F2uqb7+7dSS+HI7L8ubjfUkAAAAAAJg5U7UUl8/VdP0b1e+mqZrVH9TyMlyfP/r5QL++Xs2sz/OVF/Jnu3YAAAAAAJ4WXuGzpuU4tuv1jm2UZdyY5Pc0Rj9PdiM/yeCgcS9sLI4aszC0wpM+cyH+BY0JJi+TrdRynL+Kknkyky1cU12lU5xVy0nWf4LBpUlfAtfLTb522/VWgvnoVMsZaiQfG0WPLDxy6uTyceE/GEnUZAdNds4dN/i5b777e7p1GfGuvcNdb9wppVZ6TLhx5JH9MRftA98fO5/F7L8WP07zIzMAAAAA5kSS9Je95JG3znZCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8hU63E9vJGme9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBe/B8AAP//Tuzx8g==") r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0xfffffffffffffffe, 0x29) 1m14.004227382s ago: executing program 4 (id=641): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c2}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003140)="01", 0x1}], 0x1}}], 0x4, 0xc080) 1m12.832253648s ago: executing program 4 (id=646): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, 0x0, 0x2) 1m12.314120236s ago: executing program 33 (id=646): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, 0x0, 0x2) 14.791062877s ago: executing program 6 (id=866): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="a9"], 0x8, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "00207d2000000000001200000000000000271a00000000000800"}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x1, 0x3, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x4, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x203, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xffffffff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESOCT=r3]) fcntl$setpipe(r0, 0x407, 0x100004) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000040)=0xe8) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x8080, 0x0) mknodat$null(r6, &(0x7f0000000380)='./file2\x00', 0x80, 0x103) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0x3, r5, 0x0, 0x0, 0x0, 0x141}, 0x0, 0x0, 0x8000, 0x0, 0x10000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r7}) msgsnd(0x0, &(0x7f0000000900)=ANY=[@ANYRESHEX], 0x1, 0x0) msgrcv(0x0, &(0x7f0000000080)={0x0, ""/178}, 0xba, 0x2, 0x2000) 14.271021105s ago: executing program 6 (id=869): r0 = mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, &(0x7f0000000000)={0x20000000, 0x6}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @value=r1}, 0x28) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r3, &(0x7f0000000080)=""/102, 0x18) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 14.053712094s ago: executing program 6 (id=871): syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0xa3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000004a00)={@broadcast, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x2e, 0x58, 0x67, 0xff00, 0x29, 0x2f, 0x0, @multicast1, @private=0xa010101}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0xb, 0x2, 0x6, 0x0, 0x0, 0x2, 0x2, 0x80}, 0x2, {0xffff, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) 13.721683363s ago: executing program 6 (id=874): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='ntfs\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000180)=@gettaction={0x12c, 0x32, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x869}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4e4}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9cbe}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x10}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe0c1}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}]}]}, 0x12c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) remap_file_pages(&(0x7f0000366000/0x1000)=nil, 0x1000, 0x2000000, 0xdd6b, 0x4000) 12.58183972s ago: executing program 6 (id=876): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x29, 0x8, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3250078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0xfffffffffffffca6}}, 0x1006) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r0, r3}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x24}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) r10 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0x0, 0x0) shutdown(r9, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}]}, 0x1, 0x24f, &(0x7f0000000880)="$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") 8.262122876s ago: executing program 6 (id=891): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x201, &(0x7f00000006c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) bind$802154_dgram(r1, &(0x7f00000000c0), 0x14) sendmsg$802154_dgram(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000003c0)={&(0x7f0000000140)="d1faca77304b22e7951c7d95eec0c0b0f937133951ae051f504d77fc750910d0fc5ccd", 0x23}}, 0x20040005) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0x6}]}, 0x10) r4 = fcntl$dupfd(r2, 0x0, r3) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newchain={0x3ec0, 0x64, 0x8, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xffff, 0xb}, {0xfff2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) r5 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r5, &(0x7f0000000180)={0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f00000005c0)="79ea330544621b2e677a67b52404d2939e18030d919029cf8861d2642421000ad781492110619666ebffa23cb52ddfe2f5776af747a4d696b1f8365a7f344e67fced4c6e69eac7b72ce468748df238e5b139fc3201ead20fb218601f7044385906694d031d4d6e7f4eb467106fcb16e3197fac4e1cc967e97a6b75001d49317e59db9f0f86baf05641d791750c61910b0ba3b6984d33877109e8181906a287765e2a13dcfc09399c5887c7268d01", 0xae) r6 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r6, &(0x7f0000000180)={0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x14f, &(0x7f0000000240)="$eJzs289KAlEUx/HfqKnZP8tqES2CINrkqIHVzh5FdBJpLMk2ShA9Su9Xi3atMhz0hqMQGHrJ+X42np+Hi2cWV89GAYisio7kyFFyEA7T2eecY3skAAvSH75+9QFET/zT9gQA7Hi/ltqS3j6eaoonJ/aDQb8y6sdSk/0X6SAx7DtprYb3i1fpZHTeyUw9nzH9tan90+PR569rQ5vaUlbb2lFu2K+b8/t/2IQAAIgOR/lwHnsjppum7xVMXgly0eRkkEuhfG5yKsj52r1fn9cjAJhR7Jf7Hw/d/0To/gP4vzrd3m3V970HCgoKClPY/mYCMG/uY6vtdrq9s2ar2vAa3l25VC5fFS4vim6w+Lvj6z+AJfLzo297EgAAAAAAAAAAAAAAMKtd7dkeAQAAAMCCLOLvRLafEQAAAAAAAAAAAAAAAACAZfMdAAD///JsITY=") 6.558516921s ago: executing program 1 (id=896): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x2, 0x0, 0x0, {@ip4=@multicast1, 0x8edd}}}]}, 0x38}}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) getpeername(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0010000100013070000000000000000ac1414aa000000001b25996be17d6c000000000000000000000000000000000000000000000001000000000004000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000002000000960000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c0014006469676573745f6e756c6c"], 0x1a0}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 6.27401818s ago: executing program 0 (id=897): r0 = eventfd2(0x9, 0x0) (async, rerun: 64) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup3(r1, r0, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) io_destroy(0x0) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000039000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="8fe848ee06380f01d10f21f83500000d000f23f8b8f83aa9970f23d80f21f835800000f00f23f80f01c866bad104b0d1eec4e3b96802ff0f97fe0f0010660f63c4360f78b9fc000000", 0x49}], 0x1, 0x2, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000100)={0xfffffffffffffff8, 0x9, 0x9764514, 0x3e, 0x5, 0x7fffffff}) (rerun: 64) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="650f8a020066b9030100c00f32f20f320fc7a9406366b8005000000f23d00f21f866353000000d0f23f8f3260f32b805008ed8b800088ec80f01c40fdf840b00", 0x40}], 0x1, 0x41, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) (async, rerun: 64) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000140)={&(0x7f00000022c0)={{@hyper, 0x3}, {@host, 0x3}, 0x400, "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"}, 0x418, 0x100}) (async, rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r7, 0x0, {0x2, 0xf0, 0x4}, 0xfd}, 0x18) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f000009de80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) (async) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) (async) socket$inet6(0xa, 0x3, 0x6) (async) syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e1452fd30b64000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 6.19103277s ago: executing program 1 (id=898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000380)="f3f20f080f0866ba400066ed66baf80cb8202a1580ef66bafc0c66edb98d0900000f320238c744240000100000c7442402f38fffffc7442406000000000f011c2426f3adb8010000000f01d966baf80cb8edcb2786ef66bafc0cb014ee", 0x5d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x40000000, 0xfa, 0x0, 0x2, 0x0, 0xbe}) ioctl$KVM_RUN(r2, 0xae80, 0xff00) 6.061399759s ago: executing program 0 (id=899): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa000ca3}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x274, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7bde, 0xd}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xf}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e6df8b72ff5aef3f022ea68d46a3576793b875b5910fff02"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7e264a75901933ba9d8ce519aaf21e7d05fc467310da77ec"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43cf498064ebcda9283d4b83cd6e5018c9165cb674e53683"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7d242a6a038d1cc953929c1a35fb02224ec64bf4e86c0567"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dd73e58195cb32c814837c3fc8a179d2573e65e600f861d0"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1bbee6eb62691b1d74693b601b575cbe6e06b4b6593d94b9"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "778f86e2d96bf7058a93accb6efde085770f24d1b79037cd"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43d6f46c3aba1875478d4e6add1d11965bae3e91bf4c5380"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "876c3baee7d06c70cf5c937b348dfc93b52b998859fc12b1"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "79939552e3fee119cb91973779df7d9f1c3436e578d3d141"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6938393afce32edd55a156d3f7b6de0990fee7e3fe2a1214"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x274}, 0x1, 0x0, 0x0, 0x4015}, 0x8000) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}, {&(0x7f0000000680)="411b1d15d7a7e0ace9b46b0aa5ee140b4b993c80061d", 0x16}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 5.895077389s ago: executing program 0 (id=900): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x0, &(0x7f0000000340)={[{@dioread_lock}, {@nolazytime}, {@minixdf}]}, 0x1, 0x53c, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x35, &(0x7f0000fbe000)={0x1, &(0x7f00000000c0)=[{}]}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r4, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x275a, 0x0) 5.795041228s ago: executing program 1 (id=901): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000200)=0x8cfd712) sendto$inet6(r0, &(0x7f0000000000)='\t', 0x8980, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 4.640307155s ago: executing program 1 (id=902): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x13, 0x80801) keyctl$read(0xb, 0x0, &(0x7f0000000100)=""/28, 0x1c) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x4, 0x2bcc8a99, 0x0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) mount$9p_fd(0x0, &(0x7f00000000c0)='./cgroup/../file0\x00', &(0x7f00000001c0), 0x200400, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug}, {@access_any}, {@loose}, {@msize={'msize', 0x3d, 0xd}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'syz'}}, {@subj_role={'subj_role', 0x3d, '}^-'}}, {@smackfshat={'smackfshat', 0x3d, '#!\\(\'{'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, '/#@'}}, {@euid_gt}]}}) 4.529428524s ago: executing program 0 (id=903): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, @value}, 0x28) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r1, &(0x7f0000000080)=""/102, 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 3) 4.362956564s ago: executing program 1 (id=905): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003140)="01", 0x1}], 0x1}}], 0x4, 0xc080) 4.102334373s ago: executing program 3 (id=906): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x432e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$isdn(0x22, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000050000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5}, 0x57) 3.888983823s ago: executing program 3 (id=907): r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2000201e}) (fail_nth: 18) 3.534889262s ago: executing program 0 (id=908): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)={0xa, 0x0, 0x7fff, @private2, 0xfffffffc}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000840)='`\v', 0x2}], 0x1}}], 0x1, 0x804) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x11, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x4) r4 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x10001, &(0x7f0000000100)={[{@datasum}]}, 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_INO_PATHS(r4, 0xd000943e, &(0x7f0000000400)={0x100, 0x0, [0x400000000002, 0x0, 0xfe, 0xfffffffffffffffd], 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x20000) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) shutdown(r0, 0x1) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0xfffff001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1000}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000440)={0x0, 0x4}, 0x8) 3.534616961s ago: executing program 5 (id=909): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x1e0, 0x288, 0x7, 0x8000000, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x3, 0x100000, 0x1, 0x4, 0x8, 0x3, 0x6, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 3.522895951s ago: executing program 1 (id=910): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x58) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r2, &(0x7f0000004d80)={0x2020}, 0x2020) readv(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) write$vhost_msg_v2(r2, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x20000, 0x0, 0x0, 0x2}}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) read(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.484720321s ago: executing program 3 (id=911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x9) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, 0x0, 0x4000040) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0100001000080000000000000000000000000000000000007b25000000e8010000fe80000000c3568632d806e89b9cff2fbad62333f2046540a7dff1b100000000000000000000bb0000fff7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6401010200000000000000000000000000000000ff000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000400000000000000000000000000000000006010000000000000100000000000000020000010000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00030000000c000800e7fe080000090000"], 0x14c}, 0x1, 0x0, 0x0, 0x841}, 0x4810) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r4, 0xc0285629, &(0x7f0000000680)={0x3, 0x2000, 0x2, '\x00', &(0x7f0000000640)}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@private0, 0x0, 0x0, 0xfffe, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x20000000, 0x32}, 0xa, @in6=@loopback, 0x3507, 0x4, 0x0, 0xb7}}, 0xe8) 3.1947577s ago: executing program 5 (id=912): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x8c4) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10057, 0x0, 0x0}) syz_open_dev$ndb(0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc016b3f087f03e3520000000000e2ffca1b1f000000000cc00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030003010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={@mcast2, 0x6b, r8}) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00J', @ANYRES16=r6, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r9, @ANYBLOB="06000600000000000600040000000000"], 0x50}, 0x4, 0x700000000000000}, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x26) r10 = open(&(0x7f0000000300)='./file2\x00', 0x0, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f00000002c0)={r12, 0x800, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x16, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaacf645afc36714569a9683dda1af1ea09de2b7fb0a010000000000000000030000000200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c5512406c7f00", [0xffffffff, 0x2040000000000000]}}) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000000100)={r11, 0x3, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1c, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6000000000000ffffaf1e000000000000de0000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c551265406c7f491d03d8b0f4bd00e9000000000000000200", [0x40800, 0x7fffc]}}) fcntl$setstatus(r10, 0x4, 0x4400) 2.322232198s ago: executing program 3 (id=913): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x0, &(0x7f0000000340)={[{@dioread_lock}, {@nolazytime}, {@minixdf}]}, 0x1, 0x53c, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x35, &(0x7f0000fbe000)={0x1, &(0x7f00000000c0)=[{}]}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r4, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x275a, 0x0) 1.172349344s ago: executing program 5 (id=914): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000200)=0x8cfd712) sendto$inet6(r0, &(0x7f0000000000)='\t', 0x8980, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 1.043460814s ago: executing program 3 (id=915): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x62, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000300)=""/104, 0x68) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) keyctl$read(0xb, 0x0, &(0x7f0000000080)=""/39, 0x27) r2 = epoll_create1(0x0) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x2000201e}) 830.934323ms ago: executing program 3 (id=916): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4ea3, @multicast2}, 0x10, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xe0000000}, 0x40) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) (async) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000001d80), &(0x7f0000000000)=0x4) (async) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000001d80), &(0x7f0000000000)=0x4) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140001dff88e98c44af42b0d09b0102030109029f0003010070000904000000010100000a24010000000201020d240600000308000000000000cf24020201010608000010000c240200ff0103000000000009240600060100000009240300000000050038240605000105000009040100000102000040000007250100008000090402000001020000090402010101020000090582094000000000072501000200003eae20fbadac21a4577861ed"], 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000940)={0x1, 0x1, 0x2, 0x80, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_mr_vif\x00') preadv(r7, &(0x7f0000000e80)=[{&(0x7f00000002c0)=""/208, 0xd0}], 0x1, 0xffffff7f, 0x2) sendmmsg$unix(r4, &(0x7f0000000180), 0x0, 0x80) (async) sendmmsg$unix(r4, &(0x7f0000000180), 0x0, 0x80) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f0000000040), 0x88, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f0000000040), 0x88, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000002940), 0x802, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 681.109513ms ago: executing program 5 (id=917): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x432e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$isdn(0x22, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000050000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5}, 0x57) 481.228342ms ago: executing program 5 (id=918): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00040211000000160016000a0002000048035c3b61c1d67f6f94007133cf6efb8000a007a2", 0x52}], 0x1}, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x409065ef86f65676, 0x0) unshare(0x400) read$FUSE(r0, 0x0, 0x0) fadvise64(r0, 0xc2, 0xd6, 0x1) connect$pppoe(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x50241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth0_to_batadv\x00', 0xc201}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e40)=ANY=[@ANYRES64], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) socket$kcm(0x2, 0x2, 0x2) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1, 0xc2d, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000e80)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f00)='cgroup.events\x00', 0x26e1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat(r0, &(0x7f0000000ec0)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000f50200"], 0xfdef) 1.16429ms ago: executing program 5 (id=919): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000050}, 0x44080) r2 = socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4014) (fail_nth: 8) 0s ago: executing program 0 (id=920): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003140)="01", 0x1}], 0x1}}], 0x4, 0xc080) kernel console output (not intermixed with test programs): USB device found, idVendor=05ef, idProduct=8888, bcdDevice=9d.92 [ 200.531008][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.566152][ T4211] usb 3-1: Product: syz [ 200.585721][ T4211] usb 3-1: Manufacturer: syz [ 200.597340][ T4211] usb 3-1: SerialNumber: syz [ 201.187185][ T4211] usb 3-1: config 0 descriptor?? [ 201.341297][ T5927] overlayfs: failed to clone upperpath [ 201.599455][ T4211] usb 3-1: USB disconnect, device number 8 [ 202.483233][ T5938] loop2: detected capacity change from 0 to 512 [ 202.743134][ T5938] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768 [ 203.119256][ T5951] loop0: detected capacity change from 0 to 1024 [ 203.321555][ T5951] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.366523][ T5959] netlink: ct family unspecified [ 203.381167][ T5959] openvswitch: netlink: Actions may not be safe on all matching packets [ 203.800523][ T26] audit: type=1800 audit(1735278099.862:112): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.542" name="file7" dev="loop0" ino=864 res=0 errno=0 [ 204.666523][ T5975] FAULT_INJECTION: forcing a failure. [ 204.666523][ T5975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.679782][ T5975] CPU: 0 PID: 5975 Comm: syz.1.549 Not tainted 5.15.175-syzkaller #0 [ 204.687857][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 204.697911][ T5975] Call Trace: [ 204.701193][ T5975] [ 204.704127][ T5975] dump_stack_lvl+0x1e3/0x2d0 [ 204.708815][ T5975] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 204.714455][ T5975] ? panic+0x860/0x860 [ 204.718585][ T5975] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 204.724589][ T5975] should_fail+0x38a/0x4c0 [ 204.729022][ T5975] _copy_from_user+0x2d/0x170 [ 204.733707][ T5975] snd_seq_oss_write+0x169/0xba0 [ 204.738653][ T5975] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 204.744638][ T5975] ? print_irqtrace_events+0x210/0x210 [ 204.750105][ T5975] ? rcu_is_watching+0x11/0xa0 [ 204.754877][ T5975] ? snd_seq_oss_read+0x490/0x490 [ 204.759913][ T5975] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 204.765571][ T5975] ? file_start_write+0x5e/0x250 [ 204.770517][ T5975] ? odev_write+0x49/0x80 [ 204.774855][ T5975] odev_write+0x5a/0x80 [ 204.779016][ T5975] ? odev_read+0x70/0x70 [ 204.783270][ T5975] vfs_write+0x30c/0xe50 [ 204.787542][ T5975] ? file_end_write+0x250/0x250 [ 204.792407][ T5975] ? __fget_files+0x413/0x480 [ 204.797103][ T5975] ? __fdget_pos+0x1e9/0x380 [ 204.801696][ T5975] ? ksys_write+0x77/0x2c0 [ 204.806118][ T5975] ksys_write+0x1a2/0x2c0 [ 204.810447][ T5975] ? print_irqtrace_events+0x210/0x210 [ 204.815908][ T5975] ? __ia32_sys_read+0x80/0x80 [ 204.820685][ T5975] ? syscall_enter_from_user_mode+0x2e/0x240 [ 204.826673][ T5975] ? lockdep_hardirqs_on+0x94/0x130 [ 204.831873][ T5975] ? syscall_enter_from_user_mode+0x2e/0x240 [ 204.837857][ T5975] do_syscall_64+0x3b/0xb0 [ 204.842278][ T5975] ? clear_bhb_loop+0x15/0x70 [ 204.846957][ T5975] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 204.852855][ T5975] RIP: 0033:0x7f254e924d29 [ 204.857277][ T5975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.876882][ T5975] RSP: 002b:00007f254c753038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 204.885316][ T5975] RAX: ffffffffffffffda RBX: 00007f254eb15160 RCX: 00007f254e924d29 [ 204.893296][ T5975] RDX: 0000000000000239 RSI: 0000000020000580 RDI: 0000000000000003 [ 204.901282][ T5975] RBP: 00007f254c753090 R08: 0000000000000000 R09: 0000000000000000 [ 204.909256][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.917228][ T5975] R13: 0000000000000000 R14: 00007f254eb15160 R15: 00007ffea83bc088 [ 204.925222][ T5975] [ 205.493074][ T5980] loop1: detected capacity change from 0 to 32768 [ 206.551048][ T4215] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 206.838730][ T6002] loop0: detected capacity change from 0 to 512 [ 207.040342][ T4215] usb 3-1: config 2 has an invalid interface number: 43 but max is 0 [ 207.057924][ T4215] usb 3-1: config 2 has no interface number 0 [ 207.089031][ T4215] usb 3-1: config 2 interface 43 altsetting 7 endpoint 0x8D has invalid wMaxPacketSize 0 [ 207.139046][ T4215] usb 3-1: config 2 interface 43 has no altsetting 0 [ 207.193130][ T5980] XFS (loop1): Mounting V5 Filesystem [ 207.294561][ T6002] EXT4-fs (loop0): Unrecognized mount option "dont_measure" or missing value [ 207.346676][ T4215] usb 3-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice=24.17 [ 207.368318][ T4215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.389161][ T4215] usb 3-1: Product: syz [ 207.393370][ T4215] usb 3-1: Manufacturer: syz [ 207.408918][ T4215] usb 3-1: SerialNumber: syz [ 207.462958][ T4215] hub 3-1:2.43: bad descriptor, ignoring hub [ 207.469383][ T4215] hub: probe of 3-1:2.43 failed with error -5 [ 207.728225][ T5980] XFS (loop1): Ending clean mount [ 207.735993][ T4215] usb 3-1: USB disconnect, device number 9 [ 207.926365][ T5980] XFS (loop1): Quotacheck needed: Please wait. [ 208.203975][ T5980] XFS (loop1): Quotacheck: Done. [ 208.224580][ T6020] loop0: detected capacity change from 0 to 512 [ 208.241888][ T4172] XFS (loop1): Unmounting Filesystem [ 208.334124][ T6020] EXT4-fs (loop0): bad s_min_extra_isize: 65535 [ 209.409827][ T6035] FAULT_INJECTION: forcing a failure. [ 209.409827][ T6035] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 209.523770][ T6035] CPU: 1 PID: 6035 Comm: syz.2.569 Not tainted 5.15.175-syzkaller #0 [ 209.531887][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 209.541961][ T6035] Call Trace: [ 209.545255][ T6035] [ 209.548199][ T6035] dump_stack_lvl+0x1e3/0x2d0 [ 209.552899][ T6035] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 209.558558][ T6035] ? panic+0x860/0x860 [ 209.562665][ T6035] should_fail+0x38a/0x4c0 [ 209.567104][ T6035] prepare_alloc_pages+0x1db/0x5b0 [ 209.572619][ T6035] __alloc_pages+0x14f/0x700 [ 209.577235][ T6035] ? __rmqueue_pcplist+0x23a0/0x23a0 [ 209.582545][ T6035] ? stack_trace_save+0x113/0x1c0 [ 209.587692][ T6035] ? alloc_pages+0x458/0x570 [ 209.592301][ T6035] stack_depot_save+0x319/0x440 [ 209.597178][ T6035] ____kasan_kmalloc+0xd1/0xf0 [ 209.601957][ T6035] ? ____kasan_kmalloc+0xba/0xf0 [ 209.606908][ T6035] ? kmem_cache_alloc_trace+0x143/0x290 [ 209.612479][ T6035] ? nbd_alloc_config+0x59/0x1a0 [ 209.617432][ T6035] ? nbd_open+0x6ed/0xb00 [ 209.621783][ T6035] ? blkdev_get_whole+0x94/0x390 [ 209.626738][ T6035] ? blkdev_get_by_dev+0x2bc/0xa50 [ 209.631895][ T6035] ? blkdev_get_by_path+0x1e0/0x2d0 [ 209.637126][ T6035] ? get_tree_bdev+0xda/0x620 [ 209.641815][ T6035] ? vfs_get_tree+0x88/0x270 [ 209.646501][ T6035] ? do_new_mount+0x2ba/0xb40 [ 209.651188][ T6035] ? __se_sys_mount+0x2d5/0x3c0 [ 209.656046][ T6035] ? do_syscall_64+0x3b/0xb0 [ 209.660656][ T6035] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.666952][ T6035] kmem_cache_alloc_trace+0x143/0x290 [ 209.672338][ T6035] ? nbd_alloc_config+0x59/0x1a0 [ 209.677297][ T6035] nbd_alloc_config+0x59/0x1a0 [ 209.682078][ T6035] nbd_open+0x6ed/0xb00 [ 209.686253][ T6035] ? nbd_dead_link_work+0x350/0x350 [ 209.691467][ T6035] ? _atomic_dec_and_lock+0x96/0x130 [ 209.696795][ T6035] ? iput+0x371/0x8b0 [ 209.700792][ T6035] blkdev_get_whole+0x94/0x390 [ 209.705619][ T6035] blkdev_get_by_dev+0x2bc/0xa50 [ 209.710610][ T6035] blkdev_get_by_path+0x1e0/0x2d0 [ 209.715660][ T6035] ? bd_finish_claiming+0x2b0/0x2b0 [ 209.720883][ T6035] ? vfs_parse_fs_string+0x18c/0x220 [ 209.726185][ T6035] ? vfs_parse_fs_string+0x220/0x220 [ 209.731490][ T6035] get_tree_bdev+0xda/0x620 [ 209.736049][ T6035] ? xfs_fs_warn_deprecated+0x180/0x180 [ 209.741614][ T6035] vfs_get_tree+0x88/0x270 [ 209.746044][ T6035] do_new_mount+0x2ba/0xb40 [ 209.750573][ T6035] ? do_move_mount_old+0x160/0x160 [ 209.755757][ T6035] ? user_path_at_empty+0x12b/0x180 [ 209.760990][ T6035] __se_sys_mount+0x2d5/0x3c0 [ 209.765698][ T6035] ? __x64_sys_mount+0xc0/0xc0 [ 209.770499][ T6035] ? syscall_enter_from_user_mode+0x2e/0x240 [ 209.776519][ T6035] ? lockdep_hardirqs_on+0x94/0x130 [ 209.781735][ T6035] ? __x64_sys_mount+0x1c/0xc0 [ 209.786600][ T6035] do_syscall_64+0x3b/0xb0 [ 209.791042][ T6035] ? clear_bhb_loop+0x15/0x70 [ 209.795751][ T6035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.801656][ T6035] RIP: 0033:0x7eff70bf9d29 [ 209.806093][ T6035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.825723][ T6035] RSP: 002b:00007eff6ea6a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 209.834217][ T6035] RAX: ffffffffffffffda RBX: 00007eff70de9fa0 RCX: 00007eff70bf9d29 [ 209.842297][ T6035] RDX: 0000000020000100 RSI: 0000000020000140 RDI: 0000000020000040 [ 209.850281][ T6035] RBP: 00007eff6ea6a090 R08: 0000000000000000 R09: 0000000000000000 [ 209.858267][ T6035] R10: 0000000000004084 R11: 0000000000000246 R12: 0000000000000002 [ 209.866248][ T6035] R13: 0000000000000000 R14: 00007eff70de9fa0 R15: 00007fff900fad58 [ 209.874252][ T6035] [ 210.201809][ T150] block nbd2: Attempted send on invalid socket [ 210.209256][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 210.221252][ T6035] XFS (nbd2): SB validate failed with error -5. [ 210.585005][ T6058] loop1: detected capacity change from 0 to 512 [ 210.723675][ T6056] loop4: detected capacity change from 0 to 32768 [ 210.788079][ T6058] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 768 [ 210.864281][ T6056] XFS (loop4): Mounting V5 Filesystem [ 211.112435][ T6056] XFS (loop4): Ending clean mount [ 211.123531][ T6056] XFS (loop4): Quotacheck needed: Please wait. [ 211.213488][ T6056] XFS (loop4): Quotacheck: Done. [ 213.095294][ T6081] loop1: detected capacity change from 0 to 1024 [ 214.912746][ T4166] XFS (loop4): Unmounting Filesystem [ 215.049784][ T6081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.536254][ T26] audit: type=1800 audit(1735278111.562:113): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.578" name="file7" dev="loop1" ino=864 res=0 errno=0 [ 216.652783][ T4265] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 216.685103][ T6117] loop2: detected capacity change from 0 to 32768 [ 216.792256][ T6132] loop4: detected capacity change from 0 to 8 [ 216.838597][ T6117] XFS (loop2): Mounting V5 Filesystem [ 217.041375][ T6132] SQUASHFS error: zlib decompression failed, data probably corrupt [ 217.049444][ T6132] SQUASHFS error: Failed to read block 0x9b: -5 [ 217.055728][ T6132] SQUASHFS error: Unable to read metadata cache entry [99] [ 217.062960][ T6132] SQUASHFS error: Unable to read inode 0x127 [ 217.183662][ T4265] usb 1-1: config 2 has an invalid interface number: 43 but max is 0 [ 217.192177][ T4265] usb 1-1: config 2 has no interface number 0 [ 217.200369][ T6149] loop1: detected capacity change from 0 to 1024 [ 217.214910][ T4265] usb 1-1: config 2 interface 43 altsetting 7 endpoint 0x8D has invalid wMaxPacketSize 0 [ 217.237024][ T4265] usb 1-1: config 2 interface 43 has no altsetting 0 [ 217.286179][ T6117] XFS (loop2): Ending clean mount [ 217.293502][ T6117] XFS (loop2): Quotacheck needed: Please wait. [ 217.821269][ T6149] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.893990][ T4265] usb 1-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice=24.17 [ 217.907222][ T6117] XFS (loop2): Quotacheck: Done. [ 217.919827][ T4265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.977949][ T4265] usb 1-1: Product: syz [ 218.009306][ T4265] usb 1-1: Manufacturer: syz [ 218.064629][ T4265] usb 1-1: SerialNumber: syz [ 219.441535][ T26] audit: type=1800 audit(1735278115.512:114): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.596" name="file7" dev="loop1" ino=864 res=0 errno=0 [ 220.319190][ T4265] usb 1-1: can't set config #2, error -71 [ 220.399455][ T4265] usb 1-1: USB disconnect, device number 9 [ 220.658104][ T4168] XFS (loop2): Unmounting Filesystem [ 221.900082][ T6169] loop0: detected capacity change from 0 to 8192 [ 221.900294][ T6178] loop1: detected capacity change from 0 to 512 [ 222.026169][ T6178] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 222.076804][ T6169] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 222.155661][ T6169] REISERFS (device loop0): using ordered data mode [ 222.177236][ T6178] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 222.215155][ T6169] reiserfs: using flush barriers [ 222.275999][ T6169] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 222.339674][ T6169] REISERFS (device loop0): checking transaction log (loop0) [ 222.380287][ T6169] REISERFS (device loop0): Using r5 hash to sort names [ 222.467614][ T6178] netlink: 72 bytes leftover after parsing attributes in process `syz.1.608'. [ 222.477263][ T4245] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 222.618621][ T6169] reiserfs: enabling write barrier flush mode [ 222.684791][ T6192] loop2: detected capacity change from 0 to 512 [ 222.737284][ T6169] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 222.775407][ T6169] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 222.795017][ T6169] REISERFS (device loop0): Remounting filesystem read-only [ 222.802932][ T6169] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 222.868743][ T6169] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 222.905149][ T6169] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 222.918046][ T4245] usb 5-1: unable to get BOS descriptor or descriptor too short [ 222.944815][ T6169] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 222.963396][ T263] block nbd1: Attempted send on invalid socket [ 222.969670][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 222.980949][ T6196] XFS (nbd1): SB validate failed with error -5. [ 223.062092][ T6192] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.083548][ T6169] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 223.099523][ T4245] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.102359][ T6169] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 223.115859][ T4245] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 223.123139][ T6192] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.163755][ T6169] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 223.230324][ T6192] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.605: corrupted inode contents [ 223.241589][ T6169] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 223.297819][ T6192] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #2: comm syz.2.605: mark_inode_dirty error [ 223.308030][ T4245] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 223.344209][ T6192] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.605: corrupted inode contents [ 223.368984][ T6169] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 223.383885][ T6192] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.605: mark_inode_dirty error [ 223.389096][ T4245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.447864][ T4245] usb 5-1: Product: syz [ 223.453483][ T6169] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 223.464381][ T4245] usb 5-1: Manufacturer: syz [ 223.497898][ T4245] usb 5-1: SerialNumber: syz [ 223.516907][ T6169] REISERFS (device loop0): Remounting filesystem read-only [ 223.547308][ T26] audit: type=1800 audit(1735278119.612:115): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.605" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 223.660603][ T6192] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.605: No space for directory leaf checksum. Please run e2fsck -D. [ 223.689783][ T6192] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.605: Directory block failed checksum [ 223.856289][ T4168] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 223.896704][ T4168] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz-executor: Directory block failed checksum [ 224.069447][ T4265] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 224.211235][ T6225] overlayfs: failed to clone upperpath [ 224.384334][ T5407] usb 5-1: USB disconnect, device number 5 [ 224.532969][ T4265] usb 2-1: Using ep0 maxpacket: 8 [ 224.722948][ T4265] usb 2-1: unable to get BOS descriptor or descriptor too short [ 224.902924][ T4265] usb 2-1: config 4 has an invalid interface number: 96 but max is 0 [ 224.937941][ T4265] usb 2-1: config 4 has no interface number 0 [ 224.956295][ T4265] usb 2-1: config 4 interface 96 has no altsetting 0 [ 225.324458][ T4265] usb 2-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=59.87 [ 225.351090][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.399361][ T4265] usb 2-1: Product: syz [ 225.459706][ T4265] usb 2-1: Manufacturer: syz [ 225.610605][ T4265] usb 2-1: SerialNumber: syz [ 226.233757][ T6211] loop1: detected capacity change from 0 to 128 [ 226.380943][ T4215] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 226.560425][ T6252] loop4: detected capacity change from 0 to 512 [ 226.573243][ T6211] omfs: Invalid superblock (7b3184f9) [ 226.685546][ T6254] overlayfs: failed to clone upperpath [ 226.841207][ T4215] usb 1-1: config 2 has an invalid interface number: 43 but max is 0 [ 226.864954][ T4215] usb 1-1: config 2 has no interface number 0 [ 226.887631][ T4215] usb 1-1: config 2 interface 43 altsetting 7 endpoint 0x8D has invalid wMaxPacketSize 0 [ 226.906888][ T4215] usb 1-1: config 2 interface 43 has no altsetting 0 [ 227.107015][ T6252] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 227.131079][ T4215] usb 1-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice=24.17 [ 227.149325][ T4215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.157353][ T4215] usb 1-1: Product: syz [ 227.160667][ T6252] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.187420][ T4215] usb 1-1: Manufacturer: syz [ 227.192768][ T4215] usb 1-1: SerialNumber: syz [ 227.285188][ T4215] hub 1-1:2.43: bad descriptor, ignoring hub [ 227.289428][ T6252] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #2: comm syz.4.634: corrupted inode contents [ 227.295119][ T4215] hub: probe of 1-1:2.43 failed with error -5 [ 227.371660][ T6252] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #2: comm syz.4.634: mark_inode_dirty error [ 227.406319][ T6252] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #2: comm syz.4.634: corrupted inode contents [ 227.436561][ T6252] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.634: mark_inode_dirty error [ 227.459486][ T6255] chnl_net:caif_netlink_parms(): no params data found [ 227.543523][ T26] audit: type=1800 audit(1735278123.612:116): pid=6252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.634" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 227.582378][ T6252] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.634: No space for directory leaf checksum. Please run e2fsck -D. [ 227.647145][ T4215] usb 1-1: USB disconnect, device number 10 [ 227.649450][ T6252] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.634: Directory block failed checksum [ 227.669440][ T6255] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.681617][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.700344][ T6255] device bridge_slave_0 entered promiscuous mode [ 227.710599][ T6255] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.717872][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.726585][ T6255] device bridge_slave_1 entered promiscuous mode [ 227.779179][ T6276] loop1: detected capacity change from 0 to 512 [ 227.805610][ T6255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.825604][ T4265] usbtest 2-1:4.96: EZ-USB device [ 227.826945][ T6255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.830810][ T4265] usbtest 2-1:4.96: high-speed {control bulk-in bulk-out} tests (+alt) [ 227.849920][ T4265] usb 2-1: USB disconnect, device number 12 [ 227.905755][ T6276] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 768 [ 227.965490][ T4166] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 227.997293][ T6255] team0: Port device team_slave_0 added [ 228.037208][ T4166] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz-executor: Directory block failed checksum [ 228.062730][ T6255] team0: Port device team_slave_1 added [ 228.312572][ T6255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.334732][ T6255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.684307][ T6255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.913344][ T5409] Bluetooth: hci3: command 0x0409 tx timeout [ 228.994418][ T6255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.027875][ T6255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.106046][ T6255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.421934][ T6294] loop1: detected capacity change from 0 to 512 [ 229.465533][ T6255] device hsr_slave_0 entered promiscuous mode [ 229.475626][ T6255] device hsr_slave_1 entered promiscuous mode [ 229.492101][ T6255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.508006][ T6255] Cannot create hsr debugfs directory [ 229.763889][ T6280] loop0: detected capacity change from 0 to 32768 [ 229.883966][ T6280] Currently only 4K block size supported! [ 229.927315][ T6280] Mount JFS Failure: -22 [ 229.940926][ T6280] jfs_mount failed w/return code = -22 [ 230.316386][ T6311] device team_slave_0 entered promiscuous mode [ 230.323062][ T6311] device team_slave_1 entered promiscuous mode [ 230.330422][ T6311] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 230.375261][ T6311] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 230.383164][ T6311] Zero length message leads to an empty skb [ 230.412693][ T4265] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 230.455013][ T6255] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.469023][ T6313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.516315][ T6255] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.566505][ T6313] netlink: 32 bytes leftover after parsing attributes in process `syz.0.654'. [ 230.578535][ T6255] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.590046][ T6313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.610772][ T6255] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.915462][ T6255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.933122][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.941756][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.956086][ T6255] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.970756][ T6306] chnl_net:caif_netlink_parms(): no params data found [ 231.007992][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.017560][ T4246] Bluetooth: hci3: command 0x041b tx timeout [ 231.024135][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.033825][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.040943][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.057289][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.084357][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.100524][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.107657][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.124204][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.126849][ T4265] usb 2-1: config 2 has an invalid interface number: 43 but max is 0 [ 231.148856][ T4265] usb 2-1: config 2 has no interface number 0 [ 231.152459][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.154960][ T4265] usb 2-1: config 2 interface 43 altsetting 7 endpoint 0x8D has invalid wMaxPacketSize 0 [ 231.154997][ T4265] usb 2-1: config 2 interface 43 has no altsetting 0 [ 231.201062][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.245527][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.352499][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.365159][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.386797][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.407223][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.492475][ T4265] usb 2-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice=24.17 [ 231.505708][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.506250][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.549542][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.557414][ T4265] usb 2-1: Product: syz [ 231.558039][ T4265] usb 2-1: Manufacturer: syz [ 231.605813][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.608545][ T4265] usb 2-1: SerialNumber: syz [ 231.633768][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.715176][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.736764][ T4265] hub 2-1:2.43: bad descriptor, ignoring hub [ 231.749009][ T4265] hub: probe of 2-1:2.43 failed with error -5 [ 231.955956][ T4265] usb 2-1: USB disconnect, device number 13 [ 232.127593][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.156565][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.184783][ T6306] device bridge_slave_0 entered promiscuous mode [ 232.192965][ T6333] loop0: detected capacity change from 0 to 512 [ 232.220705][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.248046][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.270045][ T6306] device bridge_slave_1 entered promiscuous mode [ 232.287975][ T4215] Bluetooth: hci0: command 0x0409 tx timeout [ 232.387179][ T6306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.407207][ T6333] EXT4-fs (loop0): orphan cleanup on readonly fs [ 232.425832][ T6306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.433739][ T6333] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.659: invalid indirect mapped block 4294967295 (level 1) [ 232.493181][ T6333] EXT4-fs (loop0): Remounting filesystem read-only [ 232.536226][ T6333] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.659: invalid indirect mapped block 4294967295 (level 1) [ 232.590716][ T6333] EXT4-fs (loop0): Remounting filesystem read-only [ 232.600956][ T6333] EXT4-fs (loop0): 2 truncates cleaned up [ 232.616228][ T6333] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,bsddf,. Quota mode: writeback. [ 232.649420][ T4348] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.784435][ T6306] team0: Port device team_slave_0 added [ 232.828650][ T6306] team0: Port device team_slave_1 added [ 232.843109][ T6356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.864429][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.879142][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.922715][ T6255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.074386][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.087406][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.122494][ T6306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.124112][ T6360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.148916][ T6356] netlink: 32 bytes leftover after parsing attributes in process `syz.1.664'. [ 233.178639][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 233.183982][ T4348] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.240742][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.257834][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.339295][ T6306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.396353][ T4348] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.529684][ T4348] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.646593][ T6306] device hsr_slave_0 entered promiscuous mode [ 233.669555][ T6306] device hsr_slave_1 entered promiscuous mode [ 233.693556][ T6306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.710249][ T6306] Cannot create hsr debugfs directory [ 234.357123][ T4215] Bluetooth: hci0: command 0x041b tx timeout [ 234.478862][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.488717][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 234.679279][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.693406][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.721158][ T4215] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 234.738839][ T6255] device veth0_vlan entered promiscuous mode [ 234.752615][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.773327][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 234.799321][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'. [ 234.861779][ T6255] device veth1_vlan entered promiscuous mode [ 234.913463][ T6306] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 234.994452][ T6306] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 235.021491][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.049040][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.072662][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.094940][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.131840][ T6306] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 235.168130][ T6255] device veth0_macvtap entered promiscuous mode [ 235.192675][ T4215] usb 1-1: config 2 has an invalid interface number: 43 but max is 0 [ 235.200881][ T6306] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 235.210145][ T4215] usb 1-1: config 2 has no interface number 0 [ 235.232806][ T4215] usb 1-1: config 2 interface 43 altsetting 7 endpoint 0x8D has invalid wMaxPacketSize 0 [ 235.255517][ T4215] usb 1-1: config 2 interface 43 has no altsetting 0 [ 235.273071][ T6374] loop1: detected capacity change from 0 to 32768 [ 235.297422][ T4265] Bluetooth: hci3: command 0x0419 tx timeout [ 235.315009][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 235.338125][ T6255] device veth1_macvtap entered promiscuous mode [ 235.412048][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.460850][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.476016][ T6374] XFS (loop1): Mounting V5 Filesystem [ 235.491770][ T4215] usb 1-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice=24.17 [ 235.521076][ T4215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.538820][ T4215] usb 1-1: Product: syz [ 235.548170][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.558952][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.569646][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.580440][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.591491][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.601092][ T4215] usb 1-1: Manufacturer: syz [ 235.602172][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.606502][ T4215] usb 1-1: SerialNumber: syz [ 235.616497][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.631970][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.644081][ T6255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.652021][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 235.668666][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.724534][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.746432][ T6374] XFS (loop1): Ending clean mount [ 235.753737][ T4215] hub 1-1:2.43: bad descriptor, ignoring hub [ 235.767828][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.792372][ T4215] hub: probe of 1-1:2.43 failed with error -5 [ 235.796458][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.870991][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.882861][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.893716][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.905378][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.918131][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.929305][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.949098][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.980010][ T6255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.996043][ T4172] XFS (loop1): Unmounting Filesystem [ 236.026751][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.051795][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.106585][ T6255] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.107157][ T4215] usb 1-1: USB disconnect, device number 11 [ 236.117638][ T6255] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.149621][ T6255] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.167929][ T6255] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.267251][ T6411] netlink: 32 bytes leftover after parsing attributes in process `syz.3.676'. [ 236.289077][ T6411] tc_dump_action: action bad kind [ 236.342915][ T6411] ipt_REJECT: TCP_RESET invalid for non-tcp [ 236.432304][ T4215] Bluetooth: hci0: command 0x040f tx timeout [ 236.520243][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.548199][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.574542][ T6306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.654588][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 236.667161][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.688999][ T6417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.707182][ T6306] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.718071][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.756023][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.775717][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.836592][ T6422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.900587][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 236.900744][ T6417] netlink: 32 bytes leftover after parsing attributes in process `syz.0.677'. [ 236.909205][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.926521][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.938665][ T6425] loop1: detected capacity change from 0 to 256 [ 236.958374][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.965498][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.988300][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.999064][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.012528][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.019710][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.033627][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.086377][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.112841][ T6425] FAT-fs (loop1): Directory bread(block 64) failed [ 237.135710][ T6425] FAT-fs (loop1): Directory bread(block 65) failed [ 237.152414][ T6425] FAT-fs (loop1): Directory bread(block 66) failed [ 237.166278][ T6425] FAT-fs (loop1): Directory bread(block 67) failed [ 237.192556][ T6425] FAT-fs (loop1): Directory bread(block 68) failed [ 237.230140][ T6425] FAT-fs (loop1): Directory bread(block 69) failed [ 237.237895][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.247373][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.256420][ T6425] FAT-fs (loop1): Directory bread(block 70) failed [ 237.285850][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.286515][ T6425] FAT-fs (loop1): Directory bread(block 71) failed [ 237.308774][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.329805][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.335738][ T6425] FAT-fs (loop1): Directory bread(block 72) failed [ 237.353851][ T6425] FAT-fs (loop1): Directory bread(block 73) failed [ 237.355440][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.473407][ T6306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.547805][ T6306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.697011][ T6437] loop5: detected capacity change from 0 to 4096 [ 237.724178][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.758094][ T4245] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 237.766907][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.854367][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.834883][ T6437] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 238.848543][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.887639][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.938747][ T4245] usb 2-1: Using ep0 maxpacket: 16 [ 238.972463][ T4215] Bluetooth: hci0: command 0x0419 tx timeout [ 239.058881][ T4245] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 239.090841][ T4245] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.182127][ T4245] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.262655][ T4348] device hsr_slave_0 left promiscuous mode [ 239.284716][ T4348] device hsr_slave_1 left promiscuous mode [ 239.337582][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.356234][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.373821][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.388564][ T4245] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.408296][ T4245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.413137][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.439321][ T4245] usb 2-1: Product: syz [ 239.443515][ T4245] usb 2-1: Manufacturer: syz [ 239.465186][ T4348] device bridge_slave_1 left promiscuous mode [ 239.471577][ T4245] usb 2-1: SerialNumber: syz [ 239.509491][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.595355][ T4348] device bridge_slave_0 left promiscuous mode [ 239.632488][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.695240][ T4348] device veth1_macvtap left promiscuous mode [ 239.712530][ T4348] device veth0_macvtap left promiscuous mode [ 239.723591][ T4348] device veth1_vlan left promiscuous mode [ 239.740525][ T4348] device veth0_vlan left promiscuous mode [ 239.818307][ T4245] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 239.826107][ T4245] usb 2-1: 2:1 : sample bitwidth 209 in over sample bytes 4 [ 239.849488][ T4245] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 239.920396][ T6471] loop0: detected capacity change from 0 to 2048 [ 239.929253][ T4245] usb 2-1: USB disconnect, device number 14 [ 240.014995][ T6471] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 240.068582][ T6471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.468825][ T4348] team0 (unregistering): Port device team_slave_1 removed [ 240.482334][ T6484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.514768][ T4348] team0 (unregistering): Port device team_slave_0 removed [ 240.539728][ T4348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.571247][ T6489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.571574][ T4348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.762181][ T5408] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 240.856583][ T4348] bond0 (unregistering): Released all slaves [ 241.672931][ T6462] device team_slave_0 entered promiscuous mode [ 241.679175][ T6462] device team_slave_1 entered promiscuous mode [ 241.686849][ T6462] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 241.698903][ T6465] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 241.740046][ T6484] netlink: 32 bytes leftover after parsing attributes in process `syz.0.689'. [ 241.752740][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.775273][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.815012][ T6306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.822180][ T5408] usb 2-1: config 2 has an invalid interface number: 43 but max is 0 [ 241.837829][ T5408] usb 2-1: config 2 has no interface number 0 [ 241.854976][ T5408] usb 2-1: config 2 interface 43 altsetting 7 endpoint 0x8D has invalid wMaxPacketSize 0 [ 241.884521][ T5408] usb 2-1: config 2 interface 43 has no altsetting 0 [ 242.015601][ T6506] Invalid ELF header type: 0 != 1 [ 242.058354][ T5408] usb 2-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice=24.17 [ 242.096712][ T5408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.115304][ T5408] usb 2-1: Product: syz [ 242.119978][ T5408] usb 2-1: Manufacturer: syz [ 242.124596][ T5408] usb 2-1: SerialNumber: syz [ 242.130567][ T6510] loop5: detected capacity change from 0 to 1024 [ 242.208638][ T5408] hub 2-1:2.43: bad descriptor, ignoring hub [ 242.214679][ T5408] hub: probe of 2-1:2.43 failed with error -5 [ 242.359428][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 242.481290][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.490645][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.095839][ T4829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.122412][ T4829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.201133][ T6306] device veth0_vlan entered promiscuous mode [ 243.218955][ T4829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.259117][ T5409] usb 2-1: USB disconnect, device number 15 [ 243.298232][ T4829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.396460][ T6306] device veth1_vlan entered promiscuous mode [ 243.412944][ T6536] loop5: detected capacity change from 0 to 512 [ 243.492021][ T6541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.506000][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.515982][ T6536] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 768 [ 243.526123][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.560593][ T6306] device veth0_macvtap entered promiscuous mode [ 243.578242][ T5407] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 243.597083][ T6541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.706'. [ 243.601141][ T6306] device veth1_macvtap entered promiscuous mode [ 243.643762][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.659174][ T6541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.677573][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.704035][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.717534][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.737220][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.758102][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.808268][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.818938][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.830110][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.847783][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.869529][ T6306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.884430][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.895500][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.013851][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.149907][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.430222][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.531733][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.604366][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.637899][ T5407] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.677871][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.678477][ T5407] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.717865][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.735093][ T5407] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.737780][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.767006][ T5407] usb 2-1: config 0 interface 0 has no altsetting 0 [ 244.786104][ T5407] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 244.816563][ T5407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.877651][ T5407] usb 2-1: config 0 descriptor?? [ 244.902076][ T6306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.922246][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.932120][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.941487][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.956031][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.975343][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.993492][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.039359][ T6306] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.058008][ T6306] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.087062][ T6306] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.117437][ T6306] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.272602][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.302270][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.321575][ T6550] loop0: detected capacity change from 0 to 32768 [ 245.337873][ T5409] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 245.357426][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.370496][ T6550] XFS: ikeep mount option is deprecated. [ 245.399610][ T4829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.419668][ T4829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.431268][ T6530] kAFS: unparsable volume name [ 245.454904][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.477132][ T6550] XFS (loop0): Mounting V5 Filesystem [ 245.548226][ T5407] usbhid 2-1:0.0: can't add hid device: -71 [ 245.554243][ T5407] usbhid: probe of 2-1:0.0 failed with error -71 [ 245.622061][ T5407] usb 2-1: USB disconnect, device number 16 [ 245.708429][ T5409] usb 6-1: config 2 has an invalid interface number: 43 but max is 0 [ 245.727828][ T5409] usb 6-1: config 2 has no interface number 0 [ 245.734029][ T5409] usb 6-1: config 2 interface 43 altsetting 7 endpoint 0x8D has invalid wMaxPacketSize 0 [ 245.753297][ T6550] XFS (loop0): Ending clean mount [ 245.767922][ T5409] usb 6-1: config 2 interface 43 has no altsetting 0 [ 245.899446][ T4214] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 245.906029][ T26] audit: type=1804 audit(1735278141.972:117): pid=6583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.707" name="/newroot/136/bus/bus" dev="loop0" ino=9289 res=1 errno=0 [ 245.949491][ T5409] usb 6-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice=24.17 [ 245.977980][ T5409] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.996849][ T5409] usb 6-1: Product: syz [ 246.008631][ T5409] usb 6-1: Manufacturer: syz [ 246.013254][ T5409] usb 6-1: SerialNumber: syz [ 246.034277][ T26] audit: type=1804 audit(1735278142.102:118): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.707" name="/newroot/136/bus/bus" dev="loop0" ino=9289 res=1 errno=0 [ 246.098552][ T5409] hub 6-1:2.43: bad descriptor, ignoring hub [ 246.104665][ T5409] hub: probe of 6-1:2.43 failed with error -5 [ 246.197373][ T4167] XFS (loop0): Unmounting Filesystem [ 246.203087][ T4214] usb 7-1: Using ep0 maxpacket: 8 [ 246.349080][ T4214] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 246.357302][ T4214] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 246.405168][ T4214] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 246.428087][ T1326] usb 6-1: USB disconnect, device number 2 [ 246.434138][ T4214] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.479086][ T4214] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.502781][ T6595] loop1: detected capacity change from 0 to 256 [ 246.509233][ T4214] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.528268][ T4214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.600890][ T6595] FAT-fs (loop1): Directory bread(block 64) failed [ 246.668162][ T6595] FAT-fs (loop1): Directory bread(block 65) failed [ 246.674905][ T6595] FAT-fs (loop1): Directory bread(block 66) failed [ 246.698120][ T6595] FAT-fs (loop1): Directory bread(block 67) failed [ 246.704747][ T6595] FAT-fs (loop1): Directory bread(block 68) failed [ 246.718099][ T6595] FAT-fs (loop1): Directory bread(block 69) failed [ 246.746133][ T6595] FAT-fs (loop1): Directory bread(block 70) failed [ 246.768100][ T6595] FAT-fs (loop1): Directory bread(block 71) failed [ 246.778052][ T6595] FAT-fs (loop1): Directory bread(block 72) failed [ 246.784627][ T6595] FAT-fs (loop1): Directory bread(block 73) failed [ 246.848144][ T4214] usb 7-1: GET_CAPABILITIES returned 0 [ 246.853774][ T4214] usbtmc 7-1:16.0: can't read capabilities [ 247.192685][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.716'. [ 247.260754][ T6575] udc-core: couldn't find an available UDC or it's busy [ 247.287152][ T6615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.298247][ T6575] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 247.368013][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 247.374821][ T6615] netlink: 32 bytes leftover after parsing attributes in process `syz.1.717'. [ 247.378287][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 247.396306][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 247.405608][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 247.414893][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 247.424156][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 247.433446][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 247.442730][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 247.448020][ T6621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.452019][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 247.471230][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 247.474316][ T6619] loop0: detected capacity change from 0 to 1024 [ 247.480577][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 247.496255][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 247.505630][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 247.515006][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 247.524278][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 247.533625][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 247.550147][ T6575] usbtmc 7-1:16.0: Unable to send data, error -71 [ 247.623596][ T23] usb 7-1: USB disconnect, device number 2 [ 247.685971][ T6623] FAULT_INJECTION: forcing a failure. [ 247.685971][ T6623] name failslab, interval 1, probability 0, space 0, times 0 [ 247.797401][ T6623] CPU: 1 PID: 6623 Comm: syz.5.719 Not tainted 5.15.175-syzkaller #0 [ 247.805516][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 247.815591][ T6623] Call Trace: [ 247.818884][ T6623] [ 247.821827][ T6623] dump_stack_lvl+0x1e3/0x2d0 [ 247.826533][ T6623] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 247.832192][ T6623] ? panic+0x860/0x860 [ 247.836300][ T6623] ? __might_sleep+0xc0/0xc0 [ 247.840904][ T6623] ? __lock_acquire+0x1295/0x1ff0 [ 247.845961][ T6623] should_fail+0x38a/0x4c0 [ 247.850401][ T6623] ? shmem_match+0x150/0x150 [ 247.855015][ T6623] should_failslab+0x5/0x20 [ 247.859541][ T6623] slab_pre_alloc_hook+0x53/0xc0 [ 247.864554][ T6623] ? shmem_match+0x150/0x150 [ 247.869168][ T6623] ? shmem_alloc_inode+0x16/0x30 [ 247.874125][ T6623] kmem_cache_alloc+0x3f/0x280 [ 247.878917][ T6623] ? shmem_match+0x150/0x150 [ 247.883528][ T6623] shmem_alloc_inode+0x16/0x30 [ 247.888315][ T6623] new_inode_pseudo+0x60/0x210 [ 247.893108][ T6623] new_inode+0x25/0x1d0 [ 247.897299][ T6623] shmem_get_inode+0x327/0xad0 [ 247.902092][ T6623] __shmem_file_setup+0x154/0x290 [ 247.907146][ T6623] shmem_zero_setup+0xa0/0x1e0 [ 247.911936][ T6623] mmap_region+0x13ae/0x1870 [ 247.916559][ T6623] ? file_mmap_ok+0x150/0x150 [ 247.921250][ T6623] ? cap_mmap_addr+0x15e/0x2d0 [ 247.926053][ T6623] ? bpf_lsm_mmap_addr+0x5/0x10 [ 247.930930][ T6623] ? get_unmapped_area+0x317/0x380 [ 247.936063][ T6623] do_mmap+0x78d/0xe00 [ 247.940159][ T6623] vm_mmap_pgoff+0x1ca/0x2d0 [ 247.944777][ T6623] ? account_locked_vm+0xe0/0xe0 [ 247.949759][ T6623] ? __lock_acquire+0x1ff0/0x1ff0 [ 247.954810][ T6623] ksys_mmap_pgoff+0x13e/0x780 [ 247.959703][ T6623] ? print_irqtrace_events+0x210/0x210 [ 247.965364][ T6623] ? mmap_region+0x1870/0x1870 [ 247.970150][ T6623] ? syscall_enter_from_user_mode+0x2e/0x240 [ 247.976151][ T6623] ? lockdep_hardirqs_on+0x94/0x130 [ 247.981372][ T6623] do_syscall_64+0x3b/0xb0 [ 247.985805][ T6623] ? clear_bhb_loop+0x15/0x70 [ 247.990529][ T6623] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.996451][ T6623] RIP: 0033:0x7fb3f53efd29 [ 248.000883][ T6623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.020598][ T6623] RSP: 002b:00007fb3f3260038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 248.029039][ T6623] RAX: ffffffffffffffda RBX: 00007fb3f55dffa0 RCX: 00007fb3f53efd29 [ 248.037040][ T6623] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 248.045046][ T6623] RBP: 00007fb3f3260090 R08: ffffffffffffffff R09: 0000000000000000 [ 248.053030][ T6623] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 248.061015][ T6623] R13: 0000000000000000 R14: 00007fb3f55dffa0 R15: 00007ffe0ca7be18 [ 248.069019][ T6623] [ 248.264442][ T6636] loop1: detected capacity change from 0 to 4096 [ 248.376341][ T6641] FAULT_INJECTION: forcing a failure. [ 248.376341][ T6641] name failslab, interval 1, probability 0, space 0, times 0 [ 248.408041][ T6636] NILFS (loop1): invalid segment: Checksum error in segment payload [ 248.416583][ T6636] NILFS (loop1): trying rollback from an earlier position [ 248.424058][ T6641] CPU: 1 PID: 6641 Comm: syz.6.723 Not tainted 5.15.175-syzkaller #0 [ 248.432142][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 248.442206][ T6641] Call Trace: [ 248.445495][ T6641] [ 248.448442][ T6641] dump_stack_lvl+0x1e3/0x2d0 [ 248.453148][ T6641] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 248.458811][ T6641] ? panic+0x860/0x860 [ 248.462902][ T6641] ? __might_sleep+0xc0/0xc0 [ 248.467534][ T6641] should_fail+0x38a/0x4c0 [ 248.471973][ T6641] should_failslab+0x5/0x20 [ 248.476488][ T6641] slab_pre_alloc_hook+0x53/0xc0 [ 248.481449][ T6641] __kmalloc+0x6e/0x300 [ 248.485624][ T6641] ? evdev_handle_get_val+0x35/0x860 [ 248.490927][ T6641] ? evdev_ioctl_handler+0x124/0x2090 [ 248.496314][ T6641] ? __x64_compat_sys_ioctl+0x80/0x80 [ 248.501710][ T6641] evdev_handle_get_val+0x35/0x860 [ 248.506936][ T6641] ? tomoyo_path_number_perm+0x648/0x810 [ 248.512597][ T6641] evdev_ioctl_handler+0x1337/0x2090 [ 248.517912][ T6641] ? evdev_fasync+0x60/0x60 [ 248.522463][ T6641] ? __fget_files+0x413/0x480 [ 248.527172][ T6641] ? bpf_lsm_file_ioctl+0x5/0x10 [ 248.532125][ T6641] ? security_file_ioctl+0x7d/0xa0 [ 248.537260][ T6641] ? evdev_poll+0x1e0/0x1e0 [ 248.541778][ T6641] __se_sys_ioctl+0xf1/0x160 [ 248.546393][ T6641] do_syscall_64+0x3b/0xb0 [ 248.550825][ T6641] ? clear_bhb_loop+0x15/0x70 [ 248.555524][ T6641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.561438][ T6641] RIP: 0033:0x7f9af03efd29 [ 248.565870][ T6641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.585511][ T6641] RSP: 002b:00007f9aee260038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.594059][ T6641] RAX: ffffffffffffffda RBX: 00007f9af05dffa0 RCX: 00007f9af03efd29 [ 248.602053][ T6641] RDX: 0000000020000000 RSI: 0000000080404518 RDI: 0000000000000003 [ 248.610134][ T6641] RBP: 00007f9aee260090 R08: 0000000000000000 R09: 0000000000000000 [ 248.618132][ T6641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.626121][ T6641] R13: 0000000000000000 R14: 00007f9af05dffa0 R15: 00007ffc5de111d8 [ 248.634132][ T6641] [ 248.661567][ T6646] loop0: detected capacity change from 0 to 1024 [ 248.735241][ T6636] NILFS (loop1): recovery complete [ 248.761561][ T6646] hfsplus: unable to parse mount options [ 248.774692][ T6653] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.796888][ T6654] loop5: detected capacity change from 0 to 2048 [ 248.806570][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.722'. [ 248.818011][ T6636] netlink: 'syz.1.722': attribute type 2 has an invalid length. [ 248.857865][ T6654] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 249.055234][ T6660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.725'. [ 250.013071][ T6668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.067496][ T6670] FAULT_INJECTION: forcing a failure. [ 250.067496][ T6670] name failslab, interval 1, probability 0, space 0, times 0 [ 250.084264][ T6668] netlink: 32 bytes leftover after parsing attributes in process `syz.0.732'. [ 250.090925][ T6673] x_tables: duplicate underflow at hook 2 [ 250.107173][ T6670] CPU: 1 PID: 6670 Comm: syz.5.729 Not tainted 5.15.175-syzkaller #0 [ 250.115266][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.125334][ T6670] Call Trace: [ 250.128625][ T6670] [ 250.131569][ T6670] dump_stack_lvl+0x1e3/0x2d0 [ 250.136270][ T6670] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 250.136973][ T6676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.141917][ T6670] ? panic+0x860/0x860 [ 250.155785][ T6670] ? __might_sleep+0xc0/0xc0 [ 250.160391][ T6670] ? rcu_is_watching+0x11/0xa0 [ 250.165174][ T6670] should_fail+0x38a/0x4c0 [ 250.169618][ T6670] should_failslab+0x5/0x20 [ 250.174132][ T6670] slab_pre_alloc_hook+0x53/0xc0 [ 250.179101][ T6670] ? ptlock_alloc+0x1c/0x60 [ 250.183616][ T6670] kmem_cache_alloc+0x3f/0x280 [ 250.188403][ T6670] ptlock_alloc+0x1c/0x60 [ 250.192749][ T6670] pte_alloc_one+0xd1/0x360 [ 250.197270][ T6670] ? rcu_lock_release+0x20/0x20 [ 250.202223][ T6670] ? look_up_lock_class+0x77/0x120 [ 250.207371][ T6670] handle_mm_fault+0x3353/0x5960 [ 250.212354][ T6670] ? numa_migrate_prep+0x1a0/0x1a0 [ 250.217495][ T6670] ? pud_huge+0x9/0x20 [ 250.221570][ T6670] ? follow_page_mask+0x673/0x13f0 [ 250.226713][ T6670] ? find_vma+0xd3/0x230 [ 250.230976][ T6670] ? check_vma_flags+0x407/0x490 [ 250.235941][ T6670] __get_user_pages+0x4ed/0x11d0 [ 250.240914][ T6670] ? populate_vma_page_range+0x2a0/0x2a0 [ 250.246562][ T6670] ? vm_mmap_pgoff+0x1e5/0x2d0 [ 250.251353][ T6670] ? __lock_acquire+0x1ff0/0x1ff0 [ 250.256410][ T6670] populate_vma_page_range+0x215/0x2a0 [ 250.261887][ T6670] __mm_populate+0x2a5/0x4a0 [ 250.266493][ T6670] ? check_vma_flags+0x490/0x490 [ 250.271451][ T6670] vm_mmap_pgoff+0x22b/0x2d0 [ 250.276065][ T6670] ? account_locked_vm+0xe0/0xe0 [ 250.281023][ T6670] ? __fget_files+0x413/0x480 [ 250.285729][ T6670] ksys_mmap_pgoff+0x559/0x780 [ 250.290522][ T6670] ? mmap_region+0x1870/0x1870 [ 250.295302][ T6670] ? syscall_enter_from_user_mode+0x2e/0x240 [ 250.301302][ T6670] ? lockdep_hardirqs_on+0x94/0x130 [ 250.306523][ T6670] do_syscall_64+0x3b/0xb0 [ 250.310956][ T6670] ? clear_bhb_loop+0x15/0x70 [ 250.315645][ T6670] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 250.321561][ T6670] RIP: 0033:0x7fb3f53efd29 [ 250.325985][ T6670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.345596][ T6670] RSP: 002b:00007fb3f3260038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 250.354058][ T6670] RAX: ffffffffffffffda RBX: 00007fb3f55dffa0 RCX: 00007fb3f53efd29 [ 250.362059][ T6670] RDX: 00000000027fffff RSI: 0000000000600000 RDI: 0000000020000000 [ 250.370049][ T6670] RBP: 00007fb3f3260090 R08: 0000000000000003 R09: 0000000000000000 [ 250.378128][ T6670] R10: 0000000004002011 R11: 0000000000000246 R12: 0000000000000001 [ 250.386200][ T6670] R13: 0000000000000000 R14: 00007fb3f55dffa0 R15: 00007ffe0ca7be18 [ 250.394240][ T6670] [ 250.536772][ T6657] loop6: detected capacity change from 0 to 1024 [ 250.634550][ T6657] EXT4-fs (loop6): can't mount with commit=1, fs mounted w/o journal [ 250.664361][ T6696] FAULT_INJECTION: forcing a failure. [ 250.664361][ T6696] name failslab, interval 1, probability 0, space 0, times 0 [ 250.697833][ T6696] CPU: 0 PID: 6696 Comm: syz.1.735 Not tainted 5.15.175-syzkaller #0 [ 250.706025][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.716100][ T6696] Call Trace: [ 250.719399][ T6696] [ 250.722342][ T6696] dump_stack_lvl+0x1e3/0x2d0 [ 250.727042][ T6696] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 250.732705][ T6696] ? panic+0x860/0x860 [ 250.736798][ T6696] ? __might_sleep+0xc0/0xc0 [ 250.741416][ T6696] should_fail+0x38a/0x4c0 [ 250.745851][ T6696] should_failslab+0x5/0x20 [ 250.750375][ T6696] slab_pre_alloc_hook+0x53/0xc0 [ 250.755337][ T6696] kmem_cache_alloc_trace+0x49/0x290 [ 250.760675][ T6696] ? cgroup_show_path+0xaa/0x180 [ 250.765633][ T6696] cgroup_show_path+0xaa/0x180 [ 250.770411][ T6696] ? kernfs_sop_show_options+0x120/0x120 [ 250.776058][ T6696] show_mountinfo+0x239/0x850 [ 250.780759][ T6696] ? show_mnt_opts+0x340/0x340 [ 250.785547][ T6696] ? _raw_spin_unlock+0x24/0x40 [ 250.790596][ T6696] seq_read_iter+0x918/0xd10 [ 250.795231][ T6696] vfs_read+0xa93/0xe10 [ 250.799425][ T6696] ? kernel_read+0x1f0/0x1f0 [ 250.804041][ T6696] ? __fget_files+0x413/0x480 [ 250.808739][ T6696] ? mutex_lock_nested+0x17/0x20 [ 250.813689][ T6696] ? __fdget_pos+0x2cb/0x380 [ 250.818306][ T6696] ? ksys_read+0x77/0x2c0 [ 250.822668][ T6696] ksys_read+0x1a2/0x2c0 [ 250.826924][ T6696] ? print_irqtrace_events+0x210/0x210 [ 250.832402][ T6696] ? vfs_write+0xe50/0xe50 [ 250.836840][ T6696] ? syscall_enter_from_user_mode+0x2e/0x240 [ 250.842835][ T6696] ? lockdep_hardirqs_on+0x94/0x130 [ 250.848068][ T6696] ? syscall_enter_from_user_mode+0x2e/0x240 [ 250.854068][ T6696] do_syscall_64+0x3b/0xb0 [ 250.858499][ T6696] ? clear_bhb_loop+0x15/0x70 [ 250.863186][ T6696] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 250.869091][ T6696] RIP: 0033:0x7f254e924d29 [ 250.873522][ T6696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.893135][ T6696] RSP: 002b:00007f254c795038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.901594][ T6696] RAX: ffffffffffffffda RBX: 00007f254eb14fa0 RCX: 00007f254e924d29 [ 250.909581][ T6696] RDX: 0000000000002020 RSI: 00000000200023c0 RDI: 0000000000000003 [ 250.917560][ T6696] RBP: 00007f254c795090 R08: 0000000000000000 R09: 0000000000000000 [ 250.925550][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.934057][ T6696] R13: 0000000000000000 R14: 00007f254eb14fa0 R15: 00007ffea83bc088 [ 250.942059][ T6696] [ 251.284185][ T6710] fuse: Unknown parameter 'ƼmAw梵O`땢n [ 251.284185][ T6710] vZ8'"Y4w&M [ 251.284185][ T6710] #%' [ 251.623023][ T6717] loop1: detected capacity change from 0 to 512 [ 251.718879][ T6719] netlink: 'syz.5.738': attribute type 12 has an invalid length. [ 251.726753][ T6719] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 251.830075][ T6717] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 251.873745][ T6717] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.987868][ T6734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.742'. [ 252.198632][ T6742] netlink: 'syz.5.743': attribute type 10 has an invalid length. [ 252.415432][ T6752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.442975][ T6753] loop6: detected capacity change from 0 to 512 [ 252.474073][ T6752] netlink: 32 bytes leftover after parsing attributes in process `syz.3.747'. [ 252.535673][ T6758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.585012][ T6753] EXT4-fs (loop6): Number of reserved GDT blocks insanely large: 768 [ 253.350574][ T6760] loop5: detected capacity change from 0 to 32768 [ 253.409751][ T6760] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.750 (6760) [ 253.676667][ T6760] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 253.685756][ T6760] BTRFS info (device loop5): setting nodatacow, compression disabled [ 253.693996][ T6760] BTRFS info (device loop5): enabling auto defrag [ 253.695616][ T6765] loop0: detected capacity change from 0 to 512 [ 253.700511][ T6760] BTRFS info (device loop5): max_inline at 0 [ 253.713912][ T6760] BTRFS info (device loop5): turning on flush-on-commit [ 253.720943][ T6760] BTRFS error (device loop5): unrecognized mount option 'fragment=all' [ 253.779064][ T6760] BTRFS error (device loop5): open_ctree failed [ 253.821945][ T4766] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (4766) [ 254.073128][ T6765] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 254.073128][ T6765] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 254.073128][ T6765] [ 254.171139][ T6765] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 254.218828][ T6765] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 254.320245][ T6765] EXT4-fs (loop0): 1 truncate cleaned up [ 254.334703][ T6765] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,nouid32,dioread_nolock,debug_want_extra_isize=0x0000000000000080,noacl,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 254.549009][ T26] audit: type=1326 audit(1735278150.622:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7f6e7d29 code=0x7ffc0000 [ 254.800599][ T26] audit: type=1326 audit(1735278150.622:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7f6e7d29 code=0x7ffc0000 [ 254.884849][ T26] audit: type=1326 audit(1735278150.622:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f7f6e7d29 code=0x7ffc0000 [ 254.963935][ T26] audit: type=1326 audit(1735278150.622:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7f6e7d29 code=0x7ffc0000 [ 255.022033][ T6799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.058349][ T6799] netlink: 32 bytes leftover after parsing attributes in process `syz.6.762'. [ 255.067310][ T26] audit: type=1326 audit(1735278150.622:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7f6e7d29 code=0x7ffc0000 [ 255.093427][ T6799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.108031][ T5409] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 255.129392][ T26] audit: type=1326 audit(1735278150.642:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f7f7f6e7d29 code=0x7ffc0000 [ 255.167837][ T26] audit: type=1326 audit(1735278150.642:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7f6e7d29 code=0x7ffc0000 [ 255.237856][ T26] audit: type=1326 audit(1735278150.642:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7f6e7d29 code=0x7ffc0000 [ 255.297933][ T26] audit: type=1326 audit(1735278150.642:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f7f7f6e7d29 code=0x7ffc0000 [ 255.347951][ T5409] usb 1-1: Using ep0 maxpacket: 32 [ 255.363428][ T26] audit: type=1326 audit(1735278150.642:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7f6e7d29 code=0x7ffc0000 [ 255.478995][ T5409] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.551044][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.557350][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.658027][ T5409] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 255.682546][ T6810] loop5: detected capacity change from 0 to 512 [ 255.694037][ T5409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.712579][ T5409] usb 1-1: Product: syz [ 255.716782][ T5409] usb 1-1: Manufacturer: syz [ 255.724651][ T6812] FAULT_INJECTION: forcing a failure. [ 255.724651][ T6812] name failslab, interval 1, probability 0, space 0, times 0 [ 255.757846][ T5409] usb 1-1: SerialNumber: syz [ 255.771718][ T5409] usb 1-1: config 0 descriptor?? [ 255.785231][ T6812] CPU: 1 PID: 6812 Comm: syz.6.768 Not tainted 5.15.175-syzkaller #0 [ 255.793335][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 255.803402][ T6812] Call Trace: [ 255.806702][ T6812] [ 255.809648][ T6812] dump_stack_lvl+0x1e3/0x2d0 [ 255.814351][ T6812] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 255.820004][ T6812] ? panic+0x860/0x860 [ 255.824098][ T6812] ? __might_sleep+0xc0/0xc0 [ 255.828711][ T6812] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 255.830284][ T5409] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 255.834626][ T6812] should_fail+0x38a/0x4c0 [ 255.845189][ T6812] should_failslab+0x5/0x20 [ 255.849812][ T6812] slab_pre_alloc_hook+0x53/0xc0 [ 255.854779][ T6812] kmem_cache_alloc_bulk+0x39/0x3c0 [ 255.860015][ T6812] io_submit_sqes+0x5ed1/0xa350 [ 255.864932][ T6812] ? io_uring_del_tctx_node+0x2b0/0x2b0 [ 255.870602][ T6812] __se_sys_io_uring_enter+0x26a/0x21a0 [ 255.876182][ T6812] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 255.881742][ T6812] ? __context_tracking_exit+0x4c/0x80 [ 255.887221][ T6812] ? __lock_acquire+0x1ff0/0x1ff0 [ 255.892434][ T6812] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 255.898434][ T6812] ? print_irqtrace_events+0x210/0x210 [ 255.903913][ T6812] ? vtime_user_exit+0x2d1/0x400 [ 255.908876][ T6812] ? syscall_enter_from_user_mode+0x2e/0x240 [ 255.914880][ T6812] ? lockdep_hardirqs_on+0x94/0x130 [ 255.920099][ T6812] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 255.925669][ T6812] do_syscall_64+0x3b/0xb0 [ 255.930113][ T6812] ? clear_bhb_loop+0x15/0x70 [ 255.934979][ T6812] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.940987][ T6812] RIP: 0033:0x7f9af03efd29 [ 255.945421][ T6812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.965043][ T6812] RSP: 002b:00007f9aee260038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 255.973490][ T6812] RAX: ffffffffffffffda RBX: 00007f9af05dffa0 RCX: 00007f9af03efd29 [ 255.981482][ T6812] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000005 [ 255.989473][ T6812] RBP: 00007f9aee260090 R08: 0000000000000000 R09: 0000000000000000 [ 255.997459][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.005447][ T6812] R13: 0000000000000000 R14: 00007f9af05dffa0 R15: 00007ffc5de111d8 [ 256.013454][ T6812] [ 256.121684][ T6810] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 768 [ 256.237864][ T6814] snd_dummy snd_dummy.0: control 0:1:0:syz0:0 is already present [ 256.552805][ T6823] loop6: detected capacity change from 0 to 4096 [ 257.206632][ T6831] FAULT_INJECTION: forcing a failure. [ 257.206632][ T6831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.227644][ T6831] CPU: 0 PID: 6831 Comm: syz.5.774 Not tainted 5.15.175-syzkaller #0 [ 257.235766][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 257.245850][ T6831] Call Trace: [ 257.249146][ T6831] [ 257.252085][ T6831] dump_stack_lvl+0x1e3/0x2d0 [ 257.256777][ T6831] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 257.262423][ T6831] ? panic+0x860/0x860 [ 257.266522][ T6831] should_fail+0x38a/0x4c0 [ 257.270960][ T6831] _copy_from_user+0x2d/0x170 [ 257.275651][ T6831] lo_ioctl+0x53e/0x23d0 [ 257.279914][ T6831] ? __lock_acquire+0x1295/0x1ff0 [ 257.284959][ T6831] ? lo_release+0x1f0/0x1f0 [ 257.289489][ T6831] ? __lock_acquire+0x1295/0x1ff0 [ 257.294565][ T6831] ? rcu_lock_release+0x5/0x20 [ 257.299354][ T6831] ? __lock_acquire+0x1ff0/0x1ff0 [ 257.304395][ T6831] ? unwind_next_frame+0x1437/0x1fa0 [ 257.309718][ T6831] ? deref_stack_reg+0xbe/0x110 [ 257.314598][ T6831] ? is_bpf_text_address+0x24f/0x260 [ 257.319904][ T6831] ? stack_trace_save+0x1c0/0x1c0 [ 257.324958][ T6831] ? __kernel_text_address+0x94/0x100 [ 257.330351][ T6831] ? unwind_get_return_address+0x49/0x80 [ 257.336011][ T6831] ? arch_stack_walk+0xf3/0x140 [ 257.340907][ T6831] ? stack_trace_save+0x113/0x1c0 [ 257.345959][ T6831] ? stack_trace_snprint+0xe0/0xe0 [ 257.351100][ T6831] ? kfree+0xf1/0x270 [ 257.355110][ T6831] ? kasan_set_track+0x62/0x80 [ 257.359891][ T6831] ? kasan_set_track+0x4b/0x80 [ 257.364673][ T6831] ? kasan_set_free_info+0x1f/0x40 [ 257.369809][ T6831] ? ____kasan_slab_free+0xd8/0x120 [ 257.375029][ T6831] ? slab_free_freelist_hook+0xdd/0x160 [ 257.380602][ T6831] ? kfree+0xf1/0x270 [ 257.384607][ T6831] ? tomoyo_path_number_perm+0x648/0x810 [ 257.390260][ T6831] ? security_file_ioctl+0x6d/0xa0 [ 257.392133][ T6823] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 257.395380][ T6831] ? __se_sys_ioctl+0x47/0x160 [ 257.409067][ T6831] ? do_syscall_64+0x3b/0xb0 [ 257.413676][ T6831] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 257.419800][ T6831] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 257.425807][ T6831] ? do_vfs_ioctl+0xc6f/0x2b70 [ 257.430592][ T6831] ? __x64_compat_sys_ioctl+0x80/0x80 [ 257.435985][ T6831] ? __lock_acquire+0x1ff0/0x1ff0 [ 257.441037][ T6831] ? slab_free_freelist_hook+0xdd/0x160 [ 257.446618][ T6831] ? tomoyo_path_number_perm+0x648/0x810 [ 257.452272][ T6831] ? kfree+0xf1/0x270 [ 257.456281][ T6831] ? blkdev_common_ioctl+0x689/0x2080 [ 257.461689][ T6831] ? lo_release+0x1f0/0x1f0 [ 257.466216][ T6831] blkdev_ioctl+0x333/0x6b0 [ 257.470727][ T6831] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 257.476192][ T6831] block_ioctl+0xb1/0xf0 [ 257.480439][ T6831] ? blkdev_iopoll+0x100/0x100 [ 257.485209][ T6831] __se_sys_ioctl+0xf1/0x160 [ 257.489806][ T6831] do_syscall_64+0x3b/0xb0 [ 257.494222][ T6831] ? clear_bhb_loop+0x15/0x70 [ 257.498907][ T6831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 257.504801][ T6831] RIP: 0033:0x7fb3f53efd29 [ 257.509216][ T6831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.528824][ T6831] RSP: 002b:00007fb3f3260038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.537239][ T6831] RAX: ffffffffffffffda RBX: 00007fb3f55dffa0 RCX: 00007fb3f53efd29 [ 257.545318][ T6831] RDX: 0000000020000480 RSI: 0000000000004c0a RDI: 0000000000000004 [ 257.553292][ T6831] RBP: 00007fb3f3260090 R08: 0000000000000000 R09: 0000000000000000 [ 257.562653][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.570636][ T6831] R13: 0000000000000000 R14: 00007fb3f55dffa0 R15: 00007ffe0ca7be18 [ 257.578617][ T6831] [ 257.588603][ T4245] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 257.617903][ T6823] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 257.663605][ T6823] ntfs3: loop6: Failed to load $Extend. [ 257.816920][ T6840] loop5: detected capacity change from 0 to 128 [ 257.948256][ T4245] usb 2-1: config 2 has an invalid interface number: 43 but max is 0 [ 257.986935][ T4245] usb 2-1: config 2 has no interface number 0 [ 258.003445][ T4245] usb 2-1: config 2 interface 43 altsetting 7 endpoint 0x8D has invalid wMaxPacketSize 0 [ 258.034149][ T4245] usb 2-1: config 2 interface 43 has no altsetting 0 [ 258.290083][ T6842] loop6: detected capacity change from 0 to 32768 [ 258.390149][ T5409] gspca_sunplus: reg_r err -110 [ 258.395104][ T5409] sunplus: probe of 1-1:0.0 failed with error -110 [ 258.448089][ T4245] usb 2-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice=24.17 [ 258.457168][ T4245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.477841][ T4245] usb 2-1: Product: syz [ 258.482040][ T4245] usb 2-1: Manufacturer: syz [ 258.486646][ T4245] usb 2-1: SerialNumber: syz [ 258.538751][ T4245] hub 2-1:2.43: bad descriptor, ignoring hub [ 258.544787][ T4245] hub: probe of 2-1:2.43 failed with error -5 [ 258.551097][ T6842] XFS (loop6): Mounting V5 Filesystem [ 258.728884][ T6842] XFS (loop6): Ending clean mount [ 258.765969][ T23] usb 1-1: USB disconnect, device number 12 [ 258.809041][ T6842] XFS (loop6): Quotacheck needed: Please wait. [ 258.822068][ T6856] netlink: 204 bytes leftover after parsing attributes in process `syz.0.778'. [ 258.858259][ T4245] usb 2-1: USB disconnect, device number 17 [ 258.969537][ T6842] XFS (loop6): Quotacheck: Done. [ 259.277817][ T6871] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 259.532321][ T6878] loop0: detected capacity change from 0 to 512 [ 259.554506][ T6306] XFS (loop6): Unmounting Filesystem [ 259.766343][ T6878] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.785059][ T6878] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.956226][ T6892] FAULT_INJECTION: forcing a failure. [ 259.956226][ T6892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.063079][ T6892] CPU: 1 PID: 6892 Comm: syz.5.785 Not tainted 5.15.175-syzkaller #0 [ 260.071196][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 260.081271][ T6892] Call Trace: [ 260.084586][ T6892] [ 260.087528][ T6892] dump_stack_lvl+0x1e3/0x2d0 [ 260.092234][ T6892] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 260.097878][ T6892] ? panic+0x860/0x860 [ 260.101954][ T6892] ? __lock_acquire+0x1ff0/0x1ff0 [ 260.106984][ T6892] should_fail+0x38a/0x4c0 [ 260.111408][ T6892] _copy_from_iter+0x243/0xe90 [ 260.116186][ T6892] ? copy_mc_pipe_to_iter+0x760/0x760 [ 260.121592][ T6892] ? __virt_addr_valid+0x3bb/0x460 [ 260.126704][ T6892] ? 0xffffffff81000000 [ 260.130853][ T6892] ? __check_object_size+0x300/0x410 [ 260.136140][ T6892] netlink_sendmsg+0x800/0xd60 [ 260.140912][ T6892] ? netlink_getsockopt+0x5b0/0x5b0 [ 260.146109][ T6892] ? aa_sock_msg_perm+0x91/0x150 [ 260.151045][ T6892] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 260.156355][ T6892] ? security_socket_sendmsg+0x7d/0xa0 [ 260.161814][ T6892] ? netlink_getsockopt+0x5b0/0x5b0 [ 260.167022][ T6892] ____sys_sendmsg+0x59e/0x8f0 [ 260.171788][ T6892] ? iovec_from_user+0x300/0x390 [ 260.176734][ T6892] ? __sys_sendmsg_sock+0x30/0x30 [ 260.181767][ T6892] ___sys_sendmsg+0x252/0x2e0 [ 260.186446][ T6892] ? __sys_sendmsg+0x260/0x260 [ 260.191240][ T6892] ? __fdget+0x191/0x220 [ 260.195485][ T6892] __se_sys_sendmsg+0x19a/0x260 [ 260.200336][ T6892] ? __x64_sys_sendmsg+0x80/0x80 [ 260.205276][ T6892] ? syscall_enter_from_user_mode+0x2e/0x240 [ 260.211279][ T6892] ? lockdep_hardirqs_on+0x94/0x130 [ 260.216563][ T6892] ? syscall_enter_from_user_mode+0x2e/0x240 [ 260.222538][ T6892] do_syscall_64+0x3b/0xb0 [ 260.226945][ T6892] ? clear_bhb_loop+0x15/0x70 [ 260.231614][ T6892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 260.237506][ T6892] RIP: 0033:0x7fb3f53efd29 [ 260.241914][ T6892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.261518][ T6892] RSP: 002b:00007fb3f3260038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.269924][ T6892] RAX: ffffffffffffffda RBX: 00007fb3f55dffa0 RCX: 00007fb3f53efd29 [ 260.277887][ T6892] RDX: 0000000000008010 RSI: 0000000020000ec0 RDI: 0000000000000003 [ 260.285849][ T6892] RBP: 00007fb3f3260090 R08: 0000000000000000 R09: 0000000000000000 [ 260.293809][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.301773][ T6892] R13: 0000000000000000 R14: 00007fb3f55dffa0 R15: 00007ffe0ca7be18 [ 260.309758][ T6892] [ 260.480316][ T6897] loop5: detected capacity change from 0 to 512 [ 260.870724][ T6897] EXT4-fs error (device loop5): ext4_quota_enable:6388: comm syz.5.786: inode #129: comm syz.5.786: iget: illegal inode # [ 260.948049][ T6897] EXT4-fs error (device loop5): ext4_quota_enable:6391: comm syz.5.786: Bad quota inode: 129, type: 2 [ 260.989170][ T6897] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=2, err=-117, ino=129). Please run e2fsck to fix. [ 261.102158][ T6897] EXT4-fs (loop5): mount failed [ 261.269502][ T6880] loop1: detected capacity change from 0 to 32768 [ 261.396361][ T6907] loop5: detected capacity change from 0 to 1024 [ 261.450492][ T6880] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 261.487864][ T6880] BTRFS info (device loop1): setting nodatacow, compression disabled [ 261.496031][ T6880] BTRFS info (device loop1): max_inline at 0 [ 261.522751][ T6880] BTRFS info (device loop1): enabling disk space caching [ 261.558020][ T6880] BTRFS info (device loop1): setting datasum, datacow enabled [ 261.599337][ T6907] FAULT_INJECTION: forcing a failure. [ 261.599337][ T6907] name failslab, interval 1, probability 0, space 0, times 0 [ 261.613724][ T6880] BTRFS info (device loop1): turning on flush-on-commit [ 261.646660][ T6880] BTRFS info (device loop1): doing ref verification [ 261.663876][ T6880] BTRFS info (device loop1): force clearing of disk cache [ 261.677894][ T6907] CPU: 0 PID: 6907 Comm: syz.5.789 Not tainted 5.15.175-syzkaller #0 [ 261.685983][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 261.696047][ T6907] Call Trace: [ 261.699341][ T6907] [ 261.702279][ T6907] dump_stack_lvl+0x1e3/0x2d0 [ 261.706991][ T6907] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 261.712643][ T6907] ? panic+0x860/0x860 [ 261.716730][ T6907] ? __might_sleep+0xc0/0xc0 [ 261.721335][ T6907] ? memset+0x1f/0x40 [ 261.725343][ T6907] should_fail+0x38a/0x4c0 [ 261.729787][ T6907] should_failslab+0x5/0x20 [ 261.734313][ T6907] slab_pre_alloc_hook+0x53/0xc0 [ 261.739271][ T6907] ? security_inode_alloc+0x24/0x110 [ 261.744585][ T6907] kmem_cache_alloc+0x3f/0x280 [ 261.749372][ T6907] security_inode_alloc+0x24/0x110 [ 261.754516][ T6907] inode_init_always+0x939/0xc70 [ 261.759476][ T6907] ? hfsplus_mark_inode_dirty+0x30/0x30 [ 261.765045][ T6907] iget_locked+0x212/0x7f0 [ 261.769493][ T6907] hfsplus_iget+0x98/0x640 [ 261.773938][ T6907] ? mutex_unlock+0x10/0x10 [ 261.778550][ T6907] ? zisofs_cleanup+0x20/0x20 [ 261.783258][ T6907] ? kfree+0xf1/0x270 [ 261.787278][ T6907] hfsplus_lookup+0xb27/0xc70 [ 261.791994][ T6907] ? hfsplus_rename_cat+0x1090/0x1090 [ 261.797439][ T6907] ? d_alloc+0x194/0x1d0 [ 261.801738][ T6907] ? __lock_acquire+0x1ff0/0x1ff0 [ 261.806787][ T6907] ? do_raw_spin_lock+0x14a/0x370 [ 261.812191][ T6907] ? do_raw_spin_unlock+0x137/0x8b0 [ 261.817436][ T6907] ? _raw_spin_unlock+0x24/0x40 [ 261.822307][ T6907] ? d_alloc+0x194/0x1d0 [ 261.826580][ T6907] lookup_one_qstr_excl+0x117/0x240 [ 261.831806][ T6907] do_unlinkat+0x294/0x950 [ 261.836251][ T6907] ? fsnotify_link_count+0xf0/0xf0 [ 261.841381][ T6907] ? strncpy_from_user+0x209/0x370 [ 261.846544][ T6907] __x64_sys_unlink+0x45/0x50 [ 261.851249][ T6907] do_syscall_64+0x3b/0xb0 [ 261.855713][ T6907] ? clear_bhb_loop+0x15/0x70 [ 261.860406][ T6907] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.866316][ T6907] RIP: 0033:0x7fb3f53efd29 [ 261.870780][ T6907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.890413][ T6907] RSP: 002b:00007fb3f3260038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 261.898843][ T6907] RAX: ffffffffffffffda RBX: 00007fb3f55dffa0 RCX: 00007fb3f53efd29 [ 261.906831][ T6907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 261.914824][ T6907] RBP: 00007fb3f3260090 R08: 0000000000000000 R09: 0000000000000000 [ 261.922810][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.930791][ T6907] R13: 0000000000000000 R14: 00007fb3f55dffa0 R15: 00007ffe0ca7be18 [ 261.938791][ T6907] [ 261.967874][ T6880] BTRFS info (device loop1): enabling ssd optimizations [ 261.985110][ T6880] BTRFS info (device loop1): turning off barriers [ 262.002575][ T6880] BTRFS info (device loop1): max_inline at 4096 [ 262.027853][ T6880] BTRFS info (device loop1): disk space caching is enabled [ 262.035175][ T6880] BTRFS info (device loop1): has skinny extents [ 262.353197][ T6905] loop6: detected capacity change from 0 to 32768 [ 262.387722][ T6880] BTRFS info (device loop1): clearing free space tree [ 262.395803][ T6880] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 262.448050][ T6880] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 262.491609][ T6905] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop6 scanned by syz.6.788 (6905) [ 262.550707][ T6905] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 262.600563][ T6905] BTRFS info (device loop6): using free space tree [ 262.607104][ T6905] BTRFS info (device loop6): has skinny extents [ 263.140271][ T6914] loop5: detected capacity change from 0 to 32768 [ 263.178987][ T6905] BTRFS info (device loop6): enabling ssd optimizations [ 263.198155][ T4214] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 263.335799][ T6914] JBD2: Ignoring recovery information on journal [ 263.371365][ T6914] jbd2_journal_bmap: journal block not found at offset 64 on loop5-27 [ 263.398373][ T6914] JBD2: bad block at offset 64 [ 263.434164][ T6914] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 263.633092][ T4214] usb 1-1: config 2 has an invalid interface number: 43 but max is 0 [ 263.668456][ T4214] usb 1-1: config 2 has no interface number 0 [ 263.674604][ T4214] usb 1-1: config 2 interface 43 altsetting 7 endpoint 0x8D has invalid wMaxPacketSize 0 [ 263.725449][ T4214] usb 1-1: config 2 interface 43 has no altsetting 0 [ 263.912733][ T4214] usb 1-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice=24.17 [ 263.926961][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.936605][ T4214] usb 1-1: Product: syz [ 263.945319][ T4214] usb 1-1: Manufacturer: syz [ 263.950326][ T4214] usb 1-1: SerialNumber: syz [ 264.053954][ T6995] bad cache= option: none [ 264.053954][ T6995] [ 264.061084][ T6995] CIFS: VFS: bad cache= option: none [ 264.801908][ T4214] hub 1-1:2.43: bad descriptor, ignoring hub [ 264.810641][ T4214] hub: probe of 1-1:2.43 failed with error -5 [ 264.850907][ T4214] usb 1-1: USB disconnect, device number 13 [ 264.870815][ T4346] udevd[4346]: setting mode of /dev/bus/usb/001/013 to 020664 failed: No such file or directory [ 264.896001][ T4346] udevd[4346]: setting owner of /dev/bus/usb/001/013 to uid=0, gid=0 failed: No such file or directory [ 264.963963][ T6255] ocfs2: Unmounting device (7,5) on (node local) [ 265.054232][ T7010] loop0: detected capacity change from 0 to 512 [ 265.188144][ T7010] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 768 [ 266.466881][ T7031] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 266.521181][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.799'. [ 267.420007][ T7040] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 267.453122][ T7039] loop1: detected capacity change from 0 to 128 [ 267.706464][ T7036] loop5: detected capacity change from 0 to 65536 [ 267.888889][ T7036] XFS (loop5): Mounting V5 Filesystem [ 267.987947][ T7036] XFS (loop5): Starting recovery (logdev: internal) [ 268.017243][ T7036] XFS (loop5): Ending recovery (logdev: internal) [ 268.249601][ T6255] XFS (loop5): Unmounting Filesystem [ 268.281179][ T7059] loop0: detected capacity change from 0 to 128 [ 268.646892][ T7068] loop1: detected capacity change from 0 to 32768 [ 268.781798][ T7068] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.804 (7068) [ 268.838656][ T7068] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 268.847821][ T7068] BTRFS info (device loop1): setting nodatacow, compression disabled [ 268.856325][ T7068] BTRFS info (device loop1): enabling auto defrag [ 268.862853][ T7068] BTRFS info (device loop1): max_inline at 0 [ 268.868969][ T7068] BTRFS info (device loop1): turning on flush-on-commit [ 268.875920][ T7068] BTRFS error (device loop1): unrecognized mount option 'fragment=all' [ 268.886357][ T7068] BTRFS error (device loop1): open_ctree failed [ 269.232979][ T7087] loop0: detected capacity change from 0 to 512 [ 269.317815][ T21] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 269.424804][ T7087] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 768 [ 269.898129][ T21] usb 7-1: config 2 has an invalid interface number: 43 but max is 0 [ 269.912776][ T21] usb 7-1: config 2 has no interface number 0 [ 269.937871][ T21] usb 7-1: config 2 interface 43 altsetting 7 endpoint 0x8D has invalid wMaxPacketSize 0 [ 269.974708][ T21] usb 7-1: config 2 interface 43 has no altsetting 0 [ 270.208675][ T21] usb 7-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice=24.17 [ 270.278305][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.286353][ T21] usb 7-1: Product: syz [ 270.476485][ T21] usb 7-1: Manufacturer: syz [ 270.482142][ T21] usb 7-1: SerialNumber: syz [ 270.530074][ T21] hub 7-1:2.43: bad descriptor, ignoring hub [ 270.540543][ T21] hub: probe of 7-1:2.43 failed with error -5 [ 270.595215][ T7103] FAULT_INJECTION: forcing a failure. [ 270.595215][ T7103] name failslab, interval 1, probability 0, space 0, times 0 [ 270.608440][ T7103] CPU: 1 PID: 7103 Comm: syz.0.810 Not tainted 5.15.175-syzkaller #0 [ 270.616522][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 270.626578][ T7103] Call Trace: [ 270.629864][ T7103] [ 270.632802][ T7103] dump_stack_lvl+0x1e3/0x2d0 [ 270.637489][ T7103] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 270.643126][ T7103] ? panic+0x860/0x860 [ 270.647220][ T7103] should_fail+0x38a/0x4c0 [ 270.651653][ T7103] should_failslab+0x5/0x20 [ 270.656163][ T7103] slab_pre_alloc_hook+0x53/0xc0 [ 270.661117][ T7103] ? radix_tree_node_alloc+0x196/0x3b0 [ 270.666590][ T7103] kmem_cache_alloc+0x3f/0x280 [ 270.671370][ T7103] radix_tree_node_alloc+0x196/0x3b0 [ 270.676681][ T7103] idr_get_free+0x292/0xab0 [ 270.681206][ T7103] idr_alloc_cyclic+0x1ec/0x5d0 [ 270.686106][ T7103] ? idr_alloc+0x2f0/0x2f0 [ 270.690528][ T7103] ? do_raw_spin_lock+0x14a/0x370 [ 270.695572][ T7103] ? __radix_tree_preload+0x3b2/0x430 [ 270.700963][ T7103] rxrpc_maybe_add_conn+0x517/0x11d0 [ 270.706331][ T7103] rxrpc_wait_for_channel+0x271/0x700 [ 270.711728][ T7103] ? rxrpc_discard_expired_client_conns+0x4c0/0x4c0 [ 270.718331][ T7103] ? sched_dynamic_update+0x240/0x240 [ 270.723716][ T7103] ? preempt_schedule_thunk+0x16/0x18 [ 270.729107][ T7103] rxrpc_connect_call+0x622/0xe80 [ 270.734157][ T7103] rxrpc_new_client_call+0x891/0xd80 [ 270.739458][ T7103] ? rxrpc_do_sendmsg+0xf4d/0x1990 [ 270.744587][ T7103] rxrpc_do_sendmsg+0xf4d/0x1990 [ 270.749559][ T7103] ? rcu_lock_release+0x20/0x20 [ 270.754439][ T7103] ? rxrpc_sendmsg+0x58d/0x890 [ 270.759216][ T7103] ? rxrpc_getsockopt+0x150/0x150 [ 270.764251][ T7103] ____sys_sendmsg+0x59e/0x8f0 [ 270.769038][ T7103] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 270.774683][ T7103] ? iovec_from_user+0x5d/0x390 [ 270.779554][ T7103] ? __sys_sendmsg_sock+0x30/0x30 [ 270.784609][ T7103] ___sys_sendmsg+0x252/0x2e0 [ 270.789302][ T7103] ? __sys_sendmsg+0x260/0x260 [ 270.794127][ T7103] ? __fdget+0x191/0x220 [ 270.798378][ T7103] __sys_sendmmsg+0x2bf/0x560 [ 270.803077][ T7103] ? __ia32_sys_sendmsg+0x80/0x80 [ 270.808116][ T7103] ? __lock_acquire+0x1ff0/0x1ff0 [ 270.813159][ T7103] ? print_irqtrace_events+0x210/0x210 [ 270.818706][ T7103] ? vtime_user_exit+0x2d1/0x400 [ 270.823656][ T7103] ? syscall_enter_from_user_mode+0x2e/0x240 [ 270.829663][ T7103] __x64_sys_sendmmsg+0x9c/0xb0 [ 270.834549][ T7103] do_syscall_64+0x3b/0xb0 [ 270.838973][ T7103] ? clear_bhb_loop+0x15/0x70 [ 270.843658][ T7103] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.849561][ T7103] RIP: 0033:0x7f7f7f6e7d29 [ 270.853984][ T7103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.873775][ T7103] RSP: 002b:00007f7f7d516038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 270.882207][ T7103] RAX: ffffffffffffffda RBX: 00007f7f7f8d8160 RCX: 00007f7f7f6e7d29 [ 270.890186][ T7103] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000007 [ 270.898171][ T7103] RBP: 00007f7f7d516090 R08: 0000000000000000 R09: 0000000000000000 [ 270.906150][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 270.914127][ T7103] R13: 0000000000000000 R14: 00007f7f7f8d8160 R15: 00007ffffd084298 [ 270.922128][ T7103] [ 271.050104][ T4221] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.249309][ T7108] loop5: detected capacity change from 0 to 8 [ 271.386140][ T7103] loop0: detected capacity change from 0 to 65536 [ 271.427684][ T7108] cramfs: Unknown parameter '01777777777777777777777Q [ 271.427684][ T7108] O^q-C5gY1%$_\Yܼ+[%l?kuSmw@/P' [ 271.449974][ T4221] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.543298][ T21] usb 7-1: USB disconnect, device number 3 [ 271.868435][ T4221] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.049092][ T7103] XFS (loop0): Mounting V5 Filesystem [ 272.675893][ T7103] XFS (loop0): Starting recovery (logdev: internal) [ 272.713081][ T7103] XFS (loop0): Ending recovery (logdev: internal) [ 273.077141][ T4167] XFS (loop0): Unmounting Filesystem [ 273.120432][ T4221] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.538067][ T6991] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 274.357882][ T6991] usb 2-1: Using ep0 maxpacket: 8 [ 274.395863][ T7159] loop6: detected capacity change from 0 to 512 [ 274.483226][ T7159] EXT4-fs (loop6): Number of reserved GDT blocks insanely large: 768 [ 274.624319][ T7163] could not allocate digest TFM handle poly1305-neon [ 274.658198][ T6991] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 274.685657][ T6991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.716220][ T6991] usb 2-1: Product: syz [ 274.720473][ T6991] usb 2-1: Manufacturer: syz [ 274.748541][ T6991] usb 2-1: SerialNumber: syz [ 274.817546][ T6991] usb 2-1: config 0 descriptor?? [ 275.636320][ T6991] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 275.908311][ T6991] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 275.931950][ T6991] usb 2-1: USB disconnect, device number 18 [ 275.997816][ T1111] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 276.248601][ T1111] usb 7-1: Using ep0 maxpacket: 16 [ 276.353022][ T7214] netlink: 256 bytes leftover after parsing attributes in process `syz.5.828'. [ 276.371375][ T1111] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.416564][ T1111] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 276.437058][ T7214] netlink: 68 bytes leftover after parsing attributes in process `syz.5.828'. [ 276.446896][ T1111] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 276.574299][ T4221] device hsr_slave_0 left promiscuous mode [ 276.589060][ T4221] device hsr_slave_1 left promiscuous mode [ 276.609597][ T4221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.618198][ T1111] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.627266][ T1111] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.648118][ T4221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.667516][ T4221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.675557][ T1111] usb 7-1: Product: syz [ 276.675580][ T1111] usb 7-1: Manufacturer: syz [ 276.675597][ T1111] usb 7-1: SerialNumber: syz [ 276.758549][ T4221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.776604][ T4221] device bridge_slave_1 left promiscuous mode [ 276.788045][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.831124][ T4221] device bridge_slave_0 left promiscuous mode [ 276.847554][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.882546][ T4221] device veth1_macvtap left promiscuous mode [ 276.896492][ T4221] device veth0_macvtap left promiscuous mode [ 276.910904][ T4221] device veth1_vlan left promiscuous mode [ 276.931975][ T4221] device veth0_vlan left promiscuous mode [ 278.084041][ T7226] loop5: detected capacity change from 0 to 32768 [ 278.167743][ T4221] bond1 (unregistering): Released all slaves [ 278.205808][ T7226] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.831 (7226) [ 278.390508][ T5409] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 278.410295][ T7226] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 278.454425][ T7226] BTRFS info (device loop5): using free space tree [ 278.474623][ T7226] BTRFS info (device loop5): has skinny extents [ 278.691387][ T7188] loop6: detected capacity change from 0 to 40427 [ 278.781975][ T4221] team0 (unregistering): Port device team_slave_1 removed [ 278.811791][ T6993] usb 7-1: USB disconnect, device number 4 [ 278.832911][ T4221] team0 (unregistering): Port device team_slave_0 removed [ 278.858012][ T5409] usb 1-1: config 2 has an invalid interface number: 43 but max is 0 [ 278.868138][ T5409] usb 1-1: config 2 has no interface number 0 [ 278.874596][ T5409] usb 1-1: config 2 interface 43 altsetting 7 endpoint 0x8D has invalid wMaxPacketSize 0 [ 278.885141][ T5409] usb 1-1: config 2 interface 43 has no altsetting 0 [ 278.892630][ T7226] BTRFS info (device loop5): enabling ssd optimizations [ 278.901721][ T4221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.926112][ T4221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.970035][ T4221] bond0 (unregistering): Released all slaves [ 281.632113][ T5409] usb 1-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice=24.17 [ 281.642462][ T5409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.650521][ T5409] usb 1-1: Product: syz [ 281.688067][ T5409] usb 1-1: can't set config #2, error -71 [ 281.708766][ T5409] usb 1-1: USB disconnect, device number 14 [ 282.277791][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 283.099349][ T7307] loop1: detected capacity change from 0 to 128 [ 283.701271][ T7302] Process accounting resumed [ 283.701288][ T7301] Process accounting resumed [ 283.744554][ T7316] netlink: 56 bytes leftover after parsing attributes in process `syz.3.850'. [ 283.822461][ T7315] loop5: detected capacity change from 0 to 2048 [ 284.024750][ T7315] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.339626][ T7335] loop5: detected capacity change from 0 to 256 [ 284.724445][ T7342] loop1: detected capacity change from 0 to 2048 [ 284.756089][ T7350] FAULT_INJECTION: forcing a failure. [ 284.756089][ T7350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.820719][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 284.823857][ T7350] CPU: 0 PID: 7350 Comm: syz.6.844 Not tainted 5.15.175-syzkaller #0 [ 284.837590][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 284.847675][ T7350] Call Trace: [ 284.850961][ T7350] [ 284.853920][ T7350] dump_stack_lvl+0x1e3/0x2d0 [ 284.858619][ T7350] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 284.864293][ T7350] ? panic+0x860/0x860 [ 284.868372][ T7350] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 284.874377][ T7350] should_fail+0x38a/0x4c0 [ 284.878812][ T7350] _copy_from_user+0x2d/0x170 [ 284.878838][ T7350] snd_pcm_sw_params_user+0xad/0x160 [ 284.878863][ T7350] ? snd_pcm_hw_free+0x800/0x800 [ 284.878912][ T7350] snd_pcm_common_ioctl+0x6d2/0x910 [ 284.878940][ T7350] ? snd_pcm_mmap_data_fault+0x2e0/0x2e0 [ 284.878975][ T7350] snd_pcm_ioctl+0x86/0xa0 [ 284.878996][ T7350] ? snd_pcm_poll+0x640/0x640 [ 284.879019][ T7350] __se_sys_ioctl+0xf1/0x160 [ 284.879043][ T7350] do_syscall_64+0x3b/0xb0 [ 284.879062][ T7350] ? clear_bhb_loop+0x15/0x70 [ 284.879082][ T7350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.879105][ T7350] RIP: 0033:0x7f9af03efd29 [ 284.938092][ T7350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.957716][ T7350] RSP: 002b:00007f9aee260038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.966147][ T7350] RAX: ffffffffffffffda RBX: 00007f9af05dffa0 RCX: 00007f9af03efd29 [ 284.974130][ T7350] RDX: 0000000020000000 RSI: 00000000c0884113 RDI: 0000000000000005 [ 284.982128][ T7350] RBP: 00007f9aee260090 R08: 0000000000000000 R09: 0000000000000000 [ 284.990106][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.998079][ T7350] R13: 0000000000000000 R14: 00007f9af05dffa0 R15: 00007ffc5de111d8 [ 285.006075][ T7350] [ 285.068755][ T7357] loop5: detected capacity change from 0 to 512 [ 285.093406][ T7360] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.140735][ T7287] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 285.164442][ T7357] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 768 [ 285.577935][ T7287] usb 1-1: Using ep0 maxpacket: 32 [ 285.771784][ T7287] usb 1-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 286.002748][ T7287] usb 1-1: too many endpoints for config 1 interface 1 altsetting 7: 42, using maximum allowed: 30 [ 286.235319][ T7287] usb 1-1: config 1 interface 1 altsetting 7 has an invalid endpoint descriptor of length 5, skipping [ 286.330001][ T7287] usb 1-1: config 1 interface 1 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 42 [ 286.387844][ T7287] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 286.433717][ T7287] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 286.497886][ T7287] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.549739][ T7379] FAULT_INJECTION: forcing a failure. [ 286.549739][ T7379] name failslab, interval 1, probability 0, space 0, times 0 [ 286.558332][ T7287] usb 1-1: config 1 interface 1 has no altsetting 2 [ 286.607882][ T7379] CPU: 0 PID: 7379 Comm: syz.6.862 Not tainted 5.15.175-syzkaller #0 [ 286.616018][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.626090][ T7379] Call Trace: [ 286.629381][ T7379] [ 286.632329][ T7379] dump_stack_lvl+0x1e3/0x2d0 [ 286.637027][ T7379] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 286.642901][ T7379] ? panic+0x860/0x860 [ 286.647018][ T7379] ? __might_sleep+0xc0/0xc0 [ 286.651624][ T7379] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 286.657536][ T7379] should_fail+0x38a/0x4c0 [ 286.661969][ T7379] should_failslab+0x5/0x20 [ 286.666488][ T7379] slab_pre_alloc_hook+0x53/0xc0 [ 286.671441][ T7379] kmem_cache_alloc_bulk+0x39/0x3c0 [ 286.676662][ T7379] io_submit_sqes+0x5ed1/0xa350 [ 286.681564][ T7379] ? io_uring_del_tctx_node+0x2b0/0x2b0 [ 286.687140][ T7379] __se_sys_io_uring_enter+0x26a/0x21a0 [ 286.692714][ T7379] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 286.698273][ T7379] ? __context_tracking_exit+0x4c/0x80 [ 286.703846][ T7379] ? __lock_acquire+0x1ff0/0x1ff0 [ 286.708897][ T7379] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 286.714898][ T7379] ? print_irqtrace_events+0x210/0x210 [ 286.720379][ T7379] ? vtime_user_exit+0x2d1/0x400 [ 286.725349][ T7379] ? syscall_enter_from_user_mode+0x2e/0x240 [ 286.731342][ T7379] ? lockdep_hardirqs_on+0x94/0x130 [ 286.736581][ T7379] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 286.742270][ T7379] do_syscall_64+0x3b/0xb0 [ 286.746716][ T7379] ? clear_bhb_loop+0x15/0x70 [ 286.751402][ T7379] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.757392][ T7379] RIP: 0033:0x7f9af03efd29 [ 286.761814][ T7379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.781444][ T7379] RSP: 002b:00007f9aee260038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 286.789873][ T7379] RAX: ffffffffffffffda RBX: 00007f9af05dffa0 RCX: 00007f9af03efd29 [ 286.797854][ T7379] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000004 [ 286.805835][ T7379] RBP: 00007f9aee260090 R08: 0000000000000000 R09: 0000000000000000 [ 286.813823][ T7379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.821966][ T7379] R13: 0000000000000000 R14: 00007f9af05dffa0 R15: 00007ffc5de111d8 [ 286.830153][ T7379] [ 286.903568][ T7287] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.937094][ T7287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.983273][ T7287] usb 1-1: Product: syz [ 287.008142][ T7287] usb 1-1: Manufacturer: syz [ 287.031764][ T7287] usb 1-1: SerialNumber: syz [ 287.286673][ T7351] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 287.538293][ T7287] usb 1-1: USB disconnect, device number 15 [ 287.596920][ T7404] netlink: 'syz.3.868': attribute type 1 has an invalid length. [ 287.672461][ T7381] loop5: detected capacity change from 0 to 32768 [ 287.699419][ T7404] mac80211_hwsim hwsim2 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 287.814758][ T7381] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.863 (7381) [ 287.839311][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.970458][ T7381] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 288.020497][ T7381] BTRFS info (device loop5): using free space tree [ 288.027057][ T7381] BTRFS info (device loop5): has skinny extents [ 288.360836][ T7438] mmap: syz.6.874 (7438) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 289.363093][ T7381] BTRFS info (device loop5): enabling ssd optimizations [ 289.453364][ T7402] loop1: detected capacity change from 0 to 32768 [ 289.525385][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 289.716274][ T5172] wlan0: Trigger new scan to find an IBSS to join [ 289.988707][ T7402] XFS (loop1): Mounting V5 Filesystem [ 290.038368][ T7287] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 290.186175][ T7402] XFS (loop1): Ending clean mount [ 290.224940][ T7402] XFS (loop1): Quotacheck needed: Please wait. [ 290.325906][ T7402] XFS (loop1): Quotacheck: Done. [ 290.456216][ T4172] XFS (loop1): Unmounting Filesystem [ 290.651790][ T7287] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 290.672683][ T7287] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.707158][ T7287] usb 7-1: Product: syz [ 290.717537][ T7287] usb 7-1: Manufacturer: syz [ 290.728270][ T7287] usb 7-1: SerialNumber: syz [ 290.790041][ T7287] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 290.902412][ T7483] loop0: detected capacity change from 0 to 32768 [ 291.344099][ T7483] XFS (loop0): Mounting V5 Filesystem [ 291.591800][ T7483] XFS (loop0): Ending clean mount [ 291.608730][ T7287] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 291.672783][ T7483] XFS (loop0): Quotacheck needed: Please wait. [ 291.835986][ T7483] XFS (loop0): Quotacheck: Done. [ 292.077458][ T7456] loop6: detected capacity change from 0 to 128 [ 292.111938][ T4167] XFS (loop0): Unmounting Filesystem [ 292.148045][ T7004] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 292.157335][ T7456] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 292.235240][ T7456] FAT-fs (loop6): Filesystem has been set read-only [ 292.760038][ T7287] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 292.770743][ T7287] ath9k_htc: Failed to initialize the device [ 293.152021][ T7518] loop1: detected capacity change from 0 to 32768 [ 293.230159][ T7518] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.882 (7518) [ 293.261165][ T5409] usb 7-1: USB disconnect, device number 5 [ 293.284805][ T5409] usb 7-1: ath9k_htc: USB layer deinitialized [ 293.291711][ T7004] usb 6-1: config 2 has an invalid interface number: 43 but max is 0 [ 293.300072][ T7518] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 293.315938][ T7004] usb 6-1: config 2 has no interface number 0 [ 293.331246][ T7518] BTRFS info (device loop1): enabling auto defrag [ 293.348206][ T7004] usb 6-1: config 2 interface 43 altsetting 7 endpoint 0x8D has invalid wMaxPacketSize 0 [ 293.357892][ T7518] BTRFS info (device loop1): doing ref verification [ 293.381119][ T7004] usb 6-1: config 2 interface 43 has no altsetting 0 [ 293.386466][ T7518] BTRFS info (device loop1): max_inline at 0 [ 293.416942][ T7518] BTRFS info (device loop1): force clearing of disk cache [ 293.453542][ T7518] BTRFS info (device loop1): turning on sync discard [ 293.480254][ T7518] BTRFS info (device loop1): disabling free space tree [ 293.497493][ T7518] BTRFS info (device loop1): has skinny extents [ 293.568028][ T7004] usb 6-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice=24.17 [ 293.577117][ T7004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.607843][ T7004] usb 6-1: Product: syz [ 293.612049][ T7004] usb 6-1: Manufacturer: syz [ 293.616646][ T7004] usb 6-1: SerialNumber: syz [ 293.668608][ T7004] hub 6-1:2.43: bad descriptor, ignoring hub [ 293.674640][ T7004] hub: probe of 6-1:2.43 failed with error -5 [ 293.789001][ T7552] loop6: detected capacity change from 0 to 256 [ 293.941137][ T7004] usb 6-1: USB disconnect, device number 3 [ 293.958727][ T7518] BTRFS info (device loop1): enabling ssd optimizations [ 294.041447][ T7518] BTRFS info (device loop1): clearing free space tree [ 294.110762][ T7518] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 294.169646][ T7565] netlink: 20 bytes leftover after parsing attributes in process `syz.5.892'. [ 294.278300][ T7518] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 294.633923][ T7518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.713289][ T4348] wlan0: Trigger new scan to find an IBSS to join [ 295.514418][ T7594] sctp: [Deprecated]: syz.1.896 (pid 7594) Use of int in maxseg socket option. [ 295.514418][ T7594] Use struct sctp_assoc_value instead [ 295.821446][ T5172] wlan0: Creating new IBSS network, BSSID 4e:91:e6:b7:77:a1 [ 296.019997][ T7572] loop5: detected capacity change from 0 to 40427 [ 296.111811][ T7572] F2FS-fs (loop5): invalid crc value [ 296.171666][ T7572] F2FS-fs (loop5): invalid crc value [ 296.177100][ T7572] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 296.189009][ T7612] loop0: detected capacity change from 0 to 512 [ 296.296795][ T7612] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 768 [ 297.575108][ T7627] FAULT_INJECTION: forcing a failure. [ 297.575108][ T7627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.626842][ T7627] CPU: 0 PID: 7627 Comm: syz.0.903 Not tainted 5.15.175-syzkaller #0 [ 297.634952][ T7627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 297.645019][ T7627] Call Trace: [ 297.648307][ T7627] [ 297.651247][ T7627] dump_stack_lvl+0x1e3/0x2d0 [ 297.655937][ T7627] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 297.661583][ T7627] ? panic+0x860/0x860 [ 297.665692][ T7627] should_fail+0x38a/0x4c0 [ 297.670143][ T7627] _copy_from_user+0x2d/0x170 [ 297.674840][ T7627] input_event_from_user+0x1dd/0x4a0 [ 297.680147][ T7627] ? input_handlers_seq_show+0x160/0x160 [ 297.685796][ T7627] ? input_inject_event+0x2ab/0x300 [ 297.691033][ T7627] evdev_write+0x4e8/0x7c0 [ 297.695475][ T7627] ? evdev_read+0xe00/0xe00 [ 297.699991][ T7627] ? end_current_label_crit_section+0x147/0x170 [ 297.706251][ T7627] ? common_file_perm+0x17d/0x1d0 [ 297.711292][ T7627] ? fsnotify_perm+0x64/0x590 [ 297.715976][ T7627] ? security_file_permission+0x75/0xa0 [ 297.721528][ T7627] ? evdev_read+0xe00/0xe00 [ 297.726054][ T7627] vfs_write+0x30c/0xe50 [ 297.730318][ T7627] ? file_end_write+0x250/0x250 [ 297.735196][ T7627] ? __fget_files+0x413/0x480 [ 297.739908][ T7627] ? __fdget_pos+0x1e9/0x380 [ 297.744518][ T7627] ? ksys_write+0x77/0x2c0 [ 297.748955][ T7627] ksys_write+0x1a2/0x2c0 [ 297.753302][ T7627] ? print_irqtrace_events+0x210/0x210 [ 297.758783][ T7627] ? __ia32_sys_read+0x80/0x80 [ 297.763559][ T7627] ? syscall_enter_from_user_mode+0x2e/0x240 [ 297.769561][ T7627] ? lockdep_hardirqs_on+0x94/0x130 [ 297.774780][ T7627] ? syscall_enter_from_user_mode+0x2e/0x240 [ 297.780784][ T7627] do_syscall_64+0x3b/0xb0 [ 297.785213][ T7627] ? clear_bhb_loop+0x15/0x70 [ 297.789906][ T7627] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.795816][ T7627] RIP: 0033:0x7f7f7f6e7d29 [ 297.800238][ T7627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.819854][ T7627] RSP: 002b:00007f7f7d537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 297.828276][ T7627] RAX: ffffffffffffffda RBX: 00007f7f7f8d8080 RCX: 00007f7f7f6e7d29 [ 297.836256][ T7627] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003 [ 297.844234][ T7627] RBP: 00007f7f7d537090 R08: 0000000000000000 R09: 0000000000000000 [ 297.852218][ T7627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.860196][ T7627] R13: 0000000000000001 R14: 00007f7f7f8d8080 R15: 00007ffffd084298 [ 297.868190][ T7627] [ 299.978172][ T5795] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 300.368666][ T5795] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 300.470422][ T5795] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 300.754604][ T5795] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 300.796473][ T5795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.904931][ T7650] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 300.993101][ T7671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.915'. [ 301.153866][ T7647] loop0: detected capacity change from 0 to 32768 [ 301.319317][ T7647] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.908 (7647) [ 301.406050][ T7647] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 301.426501][ T7647] BTRFS info (device loop0): using free space tree [ 301.453833][ T7647] BTRFS info (device loop0): has skinny extents [ 301.486463][ T4245] usb 2-1: USB disconnect, device number 19 [ 301.782274][ T7700] loop5: detected capacity change from 0 to 2048 [ 301.877405][ T7700] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.881732][ T7647] BTRFS error (device loop0): open_ctree failed [ 302.230325][ T7707] FAULT_INJECTION: forcing a failure. [ 302.230325][ T7707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.230420][ T7707] [ 302.230425][ T7707] ====================================================== [ 302.230431][ T7707] WARNING: possible circular locking dependency detected [ 302.230437][ T7707] 5.15.175-syzkaller #0 Not tainted [ 302.230446][ T7707] ------------------------------------------------------ [ 302.230452][ T7707] syz.5.919/7707 is trying to acquire lock: [ 302.230461][ T7707] ffffffff8c9fc578 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x1c/0xa0 [ 302.230509][ T7707] [ 302.230509][ T7707] but task is already holding lock: [ 302.230514][ T7707] ffff8880b8e3a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 302.230554][ T7707] [ 302.230554][ T7707] which lock already depends on the new lock. [ 302.230554][ T7707] [ 302.230559][ T7707] [ 302.230559][ T7707] the existing dependency chain (in reverse order) is: [ 302.230564][ T7707] [ 302.230564][ T7707] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 302.230586][ T7707] lock_acquire+0x1db/0x4f0 [ 302.230602][ T7707] _raw_spin_lock_nested+0x2d/0x40 [ 302.230621][ T7707] raw_spin_rq_lock_nested+0x26/0x140 [ 302.230640][ T7707] task_fork_fair+0x5d/0x350 [ 302.230656][ T7707] sched_cgroup_fork+0x2d3/0x330 [ 302.230675][ T7707] copy_process+0x224a/0x3ef0 [ 302.230691][ T7707] kernel_clone+0x210/0x960 [ 302.230706][ T7707] kernel_thread+0x168/0x1e0 [ 302.230720][ T7707] rest_init+0x21/0x330 [ 302.230737][ T7707] start_kernel+0x48c/0x540 [ 302.230754][ T7707] secondary_startup_64_no_verify+0xb1/0xbb [ 302.230773][ T7707] [ 302.230773][ T7707] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 302.230795][ T7707] lock_acquire+0x1db/0x4f0 [ 302.230812][ T7707] _raw_spin_lock_irqsave+0xd1/0x120 [ 302.230830][ T7707] try_to_wake_up+0xae/0x1300 [ 302.230848][ T7707] up+0x6e/0x90 [ 302.230870][ T7707] __up_console_sem+0x11a/0x1e0 [ 302.230887][ T7707] console_unlock+0x1145/0x12b0 [ 302.230903][ T7707] vprintk_emit+0xbf/0x150 [ 302.230918][ T7707] dev_vprintk_emit+0x2aa/0x330 [ 302.230934][ T7707] dev_printk_emit+0xd9/0x120 [ 302.230948][ T7707] _dev_info+0x11e/0x170 [ 302.230963][ T7707] usb_new_device+0x1028/0x18e0 [ 302.230982][ T7707] hub_event+0x2cdf/0x54c0 [ 302.230996][ T7707] process_one_work+0x8a1/0x10c0 [ 302.231015][ T7707] worker_thread+0xaca/0x1280 [ 302.231032][ T7707] kthread+0x3f6/0x4f0 [ 302.231047][ T7707] ret_from_fork+0x1f/0x30 [ 302.231063][ T7707] [ 302.231063][ T7707] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 302.231086][ T7707] validate_chain+0x1649/0x5930 [ 302.231102][ T7707] __lock_acquire+0x1295/0x1ff0 [ 302.231117][ T7707] lock_acquire+0x1db/0x4f0 [ 302.231131][ T7707] _raw_spin_lock_irqsave+0xd1/0x120 [ 302.231150][ T7707] down_trylock+0x1c/0xa0 [ 302.231167][ T7707] __down_trylock_console_sem+0x105/0x250 [ 302.231184][ T7707] console_trylock_spinning+0x8a/0x3f0 [ 302.231201][ T7707] vprintk_emit+0xa6/0x150 [ 302.231217][ T7707] _printk+0xd1/0x120 [ 302.231234][ T7707] should_fail+0x36c/0x4c0 [ 302.231251][ T7707] strncpy_from_user+0x32/0x370 [ 302.231267][ T7707] strncpy_from_user_nofault+0x6c/0x130 [ 302.231284][ T7707] bpf_probe_read_user_str+0x26/0x70 [ 302.231301][ T7707] bpf_prog_bc7c5c6b9645592f+0x35/0xd98 [ 302.231316][ T7707] bpf_trace_run3+0x1d1/0x380 [ 302.231332][ T7707] __traceiter_sched_switch+0x7d/0xb0 [ 302.231349][ T7707] __schedule+0x1e8d/0x45b0 [ 302.231364][ T7707] preempt_schedule_common+0x83/0xd0 [ 302.231380][ T7707] preempt_schedule+0xd9/0xe0 [ 302.231396][ T7707] preempt_schedule_thunk+0x16/0x18 [ 302.231415][ T7707] __local_bh_enable_ip+0x175/0x1f0 [ 302.231431][ T7707] __dev_queue_xmit+0x1bf8/0x32b0 [ 302.231451][ T7707] __netlink_deliver_tap+0x4d2/0x760 [ 302.231470][ T7707] netlink_deliver_tap+0x16c/0x180 [ 302.231489][ T7707] netlink_unicast+0x788/0x980 [ 302.231505][ T7707] netlink_sendmsg+0xa30/0xd60 [ 302.231523][ T7707] ____sys_sendmsg+0x59e/0x8f0 [ 302.231540][ T7707] ___sys_sendmsg+0x252/0x2e0 [ 302.231557][ T7707] __se_sys_sendmsg+0x19a/0x260 [ 302.231574][ T7707] do_syscall_64+0x3b/0xb0 [ 302.231590][ T7707] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.231610][ T7707] [ 302.231610][ T7707] other info that might help us debug this: [ 302.231610][ T7707] [ 302.231615][ T7707] Chain exists of: [ 302.231615][ T7707] (console_sem).lock --> &p->pi_lock --> &rq->__lock [ 302.231615][ T7707] [ 302.231640][ T7707] Possible unsafe locking scenario: [ 302.231640][ T7707] [ 302.231645][ T7707] CPU0 CPU1 [ 302.231650][ T7707] ---- ---- [ 302.231654][ T7707] lock(&rq->__lock); [ 302.231664][ T7707] lock(&p->pi_lock); [ 302.231675][ T7707] lock(&rq->__lock); [ 302.231686][ T7707] lock((console_sem).lock); [ 302.231697][ T7707] [ 302.231697][ T7707] *** DEADLOCK *** [ 302.231697][ T7707] [ 302.231700][ T7707] 3 locks held by syz.5.919/7707: [ 302.231710][ T7707] #0: ffffffff8cb1fd20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 302.231753][ T7707] #1: ffff8880b8e3a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 302.231795][ T7707] #2: ffffffff8cb1fd20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 302.231834][ T7707] [ 302.231834][ T7707] stack backtrace: [ 302.231839][ T7707] CPU: 0 PID: 7707 Comm: syz.5.919 Not tainted 5.15.175-syzkaller #0 [ 302.231857][ T7707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 302.231874][ T7707] Call Trace: [ 302.231879][ T7707] [ 302.231886][ T7707] dump_stack_lvl+0x1e3/0x2d0 [ 302.231904][ T7707] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 302.231927][ T7707] ? print_circular_bug+0x12b/0x1a0 [ 302.231947][ T7707] check_noncircular+0x2f8/0x3b0 [ 302.231967][ T7707] ? add_chain_block+0x850/0x850 [ 302.231986][ T7707] ? lockdep_lock+0x11f/0x2a0 [ 302.232004][ T7707] ? mark_lock+0x98/0x340 [ 302.232022][ T7707] ? _find_first_zero_bit+0xcf/0xf0 [ 302.232043][ T7707] validate_chain+0x1649/0x5930 [ 302.232072][ T7707] ? reacquire_held_locks+0x660/0x660 [ 302.232092][ T7707] ? rcu_lock_release+0x5/0x20 [ 302.232113][ T7707] ? __lock_acquire+0x1ff0/0x1ff0 [ 302.232134][ T7707] ? validate_chain+0x112/0x5930 [ 302.232152][ T7707] ? widen_string+0x3a/0x310 [ 302.232172][ T7707] ? dentry_name+0x6e2/0x840 [ 302.232192][ T7707] ? mark_lock+0x98/0x340 [ 302.232228][ T7707] __lock_acquire+0x1295/0x1ff0 [ 302.232253][ T7707] lock_acquire+0x1db/0x4f0 [ 302.232271][ T7707] ? down_trylock+0x1c/0xa0 [ 302.232292][ T7707] ? vsnprintf+0x1c70/0x1c70 [ 302.232314][ T7707] ? read_lock_is_recursive+0x10/0x10 [ 302.232333][ T7707] ? memcpy+0x3c/0x60 [ 302.232353][ T7707] ? vsnprintf+0x1b93/0x1c70 [ 302.232374][ T7707] ? _prb_commit+0x30a/0x3e0 [ 302.232395][ T7707] ? prb_reserve+0x1240/0x1240 [ 302.232416][ T7707] _raw_spin_lock_irqsave+0xd1/0x120 [ 302.232436][ T7707] ? down_trylock+0x1c/0xa0 [ 302.232460][ T7707] ? _raw_spin_lock+0x40/0x40 [ 302.232481][ T7707] ? vprintk_store+0xf1b/0x1300 [ 302.232501][ T7707] down_trylock+0x1c/0xa0 [ 302.232523][ T7707] __down_trylock_console_sem+0x105/0x250 [ 302.232545][ T7707] ? printk_parse_prefix+0x2c0/0x2c0 [ 302.232563][ T7707] ? vprintk_emit+0xa6/0x150 [ 302.232581][ T7707] ? console_trylock+0x70/0x70 [ 302.232605][ T7707] ? vprintk_emit+0xa6/0x150 [ 302.232623][ T7707] console_trylock_spinning+0x8a/0x3f0 [ 302.232643][ T7707] ? vprintk_emit+0x150/0x150 [ 302.232662][ T7707] ? kernelmode_fixup_or_oops+0x7f/0xd0 [ 302.232687][ T7707] ? mark_lock+0x98/0x340 [ 302.232707][ T7707] vprintk_emit+0xa6/0x150 [ 302.232727][ T7707] _printk+0xd1/0x120 [ 302.232749][ T7707] ? panic+0x860/0x860 [ 302.232774][ T7707] should_fail+0x36c/0x4c0 [ 302.232796][ T7707] strncpy_from_user+0x32/0x370 [ 302.232817][ T7707] strncpy_from_user_nofault+0x6c/0x130 [ 302.232839][ T7707] bpf_probe_read_user_str+0x26/0x70 [ 302.232874][ T7707] bpf_prog_bc7c5c6b9645592f+0x35/0xd98 [ 302.232891][ T7707] bpf_trace_run3+0x1d1/0x380 [ 302.232912][ T7707] ? bpf_trace_run2+0x340/0x340 [ 302.232935][ T7707] ? tracing_record_taskinfo_sched_switch+0x77/0x390 [ 302.232959][ T7707] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 302.232982][ T7707] __traceiter_sched_switch+0x7d/0xb0 [ 302.233004][ T7707] __schedule+0x1e8d/0x45b0 [ 302.233021][ T7707] ? ____sys_sendmsg+0x59e/0x8f0 [ 302.233041][ T7707] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.233074][ T7707] ? release_firmware_map_entry+0x190/0x190 [ 302.233094][ T7707] ? print_irqtrace_events+0x210/0x210 [ 302.233117][ T7707] ? preempt_schedule+0xd9/0xe0 [ 302.233146][ T7707] preempt_schedule_common+0x83/0xd0 [ 302.233164][ T7707] preempt_schedule+0xd9/0xe0 [ 302.233182][ T7707] ? schedule_preempt_disabled+0x20/0x20 [ 302.233198][ T7707] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 302.233218][ T7707] ? print_irqtrace_events+0x210/0x210 [ 302.233236][ T7707] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 302.233255][ T7707] preempt_schedule_thunk+0x16/0x18 [ 302.233276][ T7707] ? trace_hardirqs_on+0x30/0x80 [ 302.233297][ T7707] __local_bh_enable_ip+0x175/0x1f0 [ 302.233315][ T7707] ? local_bh_enable+0x5/0x20 [ 302.233335][ T7707] ? _local_bh_enable+0xa0/0xa0 [ 302.233355][ T7707] __dev_queue_xmit+0x1bf8/0x32b0 [ 302.233383][ T7707] ? __copy_skb_header+0x47b/0x600 [ 302.233402][ T7707] ? dev_queue_xmit+0x20/0x20 [ 302.233420][ T7707] ? memcpy+0x3c/0x60 [ 302.233438][ T7707] ? __copy_skb_header+0x47b/0x600 [ 302.233458][ T7707] ? __skb_clone+0x454/0x6c0 [ 302.233479][ T7707] ? skb_clone+0x1ee/0x350 [ 302.233499][ T7707] __netlink_deliver_tap+0x4d2/0x760 [ 302.233524][ T7707] netlink_deliver_tap+0x16c/0x180 [ 302.233544][ T7707] netlink_unicast+0x788/0x980 [ 302.233567][ T7707] ? netlink_detachskb+0x90/0x90 [ 302.233587][ T7707] ? security_netlink_send+0x3d/0x90 [ 302.233608][ T7707] ? bpf_lsm_netlink_send+0x5/0x10 [ 302.233626][ T7707] netlink_sendmsg+0xa30/0xd60 [ 302.233651][ T7707] ? netlink_getsockopt+0x5b0/0x5b0 [ 302.233673][ T7707] ? aa_sock_msg_perm+0x91/0x150 [ 302.233692][ T7707] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 302.233708][ T7707] ? security_socket_sendmsg+0x7d/0xa0 [ 302.233729][ T7707] ? netlink_getsockopt+0x5b0/0x5b0 [ 302.233750][ T7707] ____sys_sendmsg+0x59e/0x8f0 [ 302.233769][ T7707] ? iovec_from_user+0x300/0x390 [ 302.233790][ T7707] ? __sys_sendmsg_sock+0x30/0x30 [ 302.233816][ T7707] ___sys_sendmsg+0x252/0x2e0 [ 302.233848][ T7707] ? __sys_sendmsg+0x260/0x260 [ 302.233888][ T7707] ? __fdget+0x191/0x220 [ 302.233908][ T7707] __se_sys_sendmsg+0x19a/0x260 [ 302.233925][ T7707] ? asm_sysvec_call_function_single+0x16/0x20 [ 302.233946][ T7707] ? __x64_sys_sendmsg+0x80/0x80 [ 302.233968][ T7707] ? syscall_enter_from_user_mode+0x37/0x240 [ 302.233988][ T7707] ? syscall_enter_from_user_mode+0x2e/0x240 [ 302.234008][ T7707] do_syscall_64+0x3b/0xb0 [ 302.234023][ T7707] ? clear_bhb_loop+0x15/0x70 [ 302.234038][ T7707] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.234059][ T7707] RIP: 0033:0x7fb3f53efd29 [ 302.234072][ T7707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.234086][ T7707] RSP: 002b:00007fb3f3260038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.234102][ T7707] RAX: ffffffffffffffda RBX: 00007fb3f55dffa0 RCX: 00007fb3f53efd29 [ 302.234115][ T7707] RDX: 0000000000004014 RSI: 0000000020000040 RDI: 0000000000000005 [ 302.234126][ T7707] RBP: 00007fb3f3260090 R08: 0000000000000000 R09: 0000000000000000 [ 302.234136][ T7707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.234146][ T7707] R13: 0000000000000000 R14: 00007fb3f55dffa0 R15: 00007ffe0ca7be18 [ 302.234164][ T7707] [ 303.373483][ T7707] CPU: 0 PID: 7707 Comm: syz.5.919 Not tainted 5.15.175-syzkaller #0 [ 303.381544][ T7707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 303.391578][ T7707] Call Trace: [ 303.394838][ T7707] [ 303.397754][ T7707] dump_stack_lvl+0x1e3/0x2d0 [ 303.402423][ T7707] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 303.408046][ T7707] ? panic+0x860/0x860 [ 303.412104][ T7707] should_fail+0x38a/0x4c0 [ 303.416503][ T7707] strncpy_from_user+0x32/0x370 [ 303.421340][ T7707] strncpy_from_user_nofault+0x6c/0x130 [ 303.426874][ T7707] bpf_probe_read_user_str+0x26/0x70 [ 303.432141][ T7707] bpf_prog_bc7c5c6b9645592f+0x35/0xd98 [ 303.437662][ T7707] bpf_trace_run3+0x1d1/0x380 [ 303.442317][ T7707] ? bpf_trace_run2+0x340/0x340 [ 303.447165][ T7707] ? tracing_record_taskinfo_sched_switch+0x77/0x390 [ 303.453822][ T7707] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 303.460246][ T7707] __traceiter_sched_switch+0x7d/0xb0 [ 303.465599][ T7707] __schedule+0x1e8d/0x45b0 [ 303.470085][ T7707] ? ____sys_sendmsg+0x59e/0x8f0 [ 303.475017][ T7707] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.481079][ T7707] ? release_firmware_map_entry+0x190/0x190 [ 303.486951][ T7707] ? print_irqtrace_events+0x210/0x210 [ 303.492393][ T7707] ? preempt_schedule+0xd9/0xe0 [ 303.497222][ T7707] preempt_schedule_common+0x83/0xd0 [ 303.502486][ T7707] preempt_schedule+0xd9/0xe0 [ 303.507140][ T7707] ? schedule_preempt_disabled+0x20/0x20 [ 303.512750][ T7707] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 303.518711][ T7707] ? print_irqtrace_events+0x210/0x210 [ 303.524239][ T7707] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 303.530203][ T7707] preempt_schedule_thunk+0x16/0x18 [ 303.535388][ T7707] ? trace_hardirqs_on+0x30/0x80 [ 303.540308][ T7707] __local_bh_enable_ip+0x175/0x1f0 [ 303.545485][ T7707] ? local_bh_enable+0x5/0x20 [ 303.550151][ T7707] ? _local_bh_enable+0xa0/0xa0 [ 303.554985][ T7707] __dev_queue_xmit+0x1bf8/0x32b0 [ 303.559999][ T7707] ? __copy_skb_header+0x47b/0x600 [ 303.565094][ T7707] ? dev_queue_xmit+0x20/0x20 [ 303.569762][ T7707] ? memcpy+0x3c/0x60 [ 303.573729][ T7707] ? __copy_skb_header+0x47b/0x600 [ 303.578825][ T7707] ? __skb_clone+0x454/0x6c0 [ 303.583413][ T7707] ? skb_clone+0x1ee/0x350 [ 303.587815][ T7707] __netlink_deliver_tap+0x4d2/0x760 [ 303.593086][ T7707] netlink_deliver_tap+0x16c/0x180 [ 303.598185][ T7707] netlink_unicast+0x788/0x980 [ 303.602945][ T7707] ? netlink_detachskb+0x90/0x90 [ 303.607861][ T7707] ? security_netlink_send+0x3d/0x90 [ 303.613128][ T7707] ? bpf_lsm_netlink_send+0x5/0x10 [ 303.618223][ T7707] netlink_sendmsg+0xa30/0xd60 [ 303.622972][ T7707] ? netlink_getsockopt+0x5b0/0x5b0 [ 303.628148][ T7707] ? aa_sock_msg_perm+0x91/0x150 [ 303.633063][ T7707] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 303.638324][ T7707] ? security_socket_sendmsg+0x7d/0xa0 [ 303.643763][ T7707] ? netlink_getsockopt+0x5b0/0x5b0 [ 303.648946][ T7707] ____sys_sendmsg+0x59e/0x8f0 [ 303.653687][ T7707] ? iovec_from_user+0x300/0x390 [ 303.658607][ T7707] ? __sys_sendmsg_sock+0x30/0x30 [ 303.663622][ T7707] ___sys_sendmsg+0x252/0x2e0 [ 303.668285][ T7707] ? __sys_sendmsg+0x260/0x260 [ 303.673038][ T7707] ? __fdget+0x191/0x220 [ 303.677259][ T7707] __se_sys_sendmsg+0x19a/0x260 [ 303.682086][ T7707] ? asm_sysvec_call_function_single+0x16/0x20 [ 303.688218][ T7707] ? __x64_sys_sendmsg+0x80/0x80 [ 303.693138][ T7707] ? syscall_enter_from_user_mode+0x37/0x240 [ 303.699101][ T7707] ? syscall_enter_from_user_mode+0x2e/0x240 [ 303.705061][ T7707] do_syscall_64+0x3b/0xb0 [ 303.709458][ T7707] ? clear_bhb_loop+0x15/0x70 [ 303.714248][ T7707] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.720137][ T7707] RIP: 0033:0x7fb3f53efd29 [ 303.724580][ T7707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.744183][ T7707] RSP: 002b:00007fb3f3260038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.752589][ T7707] RAX: ffffffffffffffda RBX: 00007fb3f55dffa0 RCX: 00007fb3f53efd29 [ 303.760562][ T7707] RDX: 0000000000004014 RSI: 0000000020000040 RDI: 0000000000000005 [ 303.768522][ T7707] RBP: 00007fb3f3260090 R08: 0000000000000000 R09: 0000000000000000 [ 303.776481][ T7707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.784447][ T7707] R13: 0000000000000000 R14: 00007fb3f55dffa0 R15: 00007ffe0ca7be18 [ 303.792414][ T7707] [ 303.795553][ C1] vkms_vblank_simulate: vblank timer overrun