last executing test programs: 24m13.978830426s ago: executing program 2 (id=677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x0, 0xf, 0x0, 0x0, 0x3}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) 24m12.895537301s ago: executing program 2 (id=680): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000300)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200011002bbd70000000000002002000000000000000000008000200e0000000"], 0x24}, 0x1, 0x0, 0x0, 0x20048055}, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x35, 0x38, 0x33, 0x31, 0x30, 0x32, 0x37, 0x6a, 0x65, 0x38, 0x34, 0x34, 0x64, 0x61, 0x36, 0x61]}, &(0x7f00000000c0)={0x0, "9f9b00cabff1b04a2685eaddb138ad40d57fd3b5cc7675207ccde03ba14cc45e3ac2e9f4af46b7a2fc4e3b42cadc7b747fe8257fc195cbb8b3986d8aa7e544a2", 0x3a}, 0x48, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000ecffffff81000040"]) (async) r7 = add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$set_timeout(0xf, r7, 0x0) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r8, &(0x7f0000001600)=[{{&(0x7f0000000580)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}], 0x20}}, {{&(0x7f0000001200)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="110000"], 0xb0}}], 0x2, 0x40) (async) keyctl$search(0xa, r2, &(0x7f0000000180)='.dead\x00', &(0x7f00000001c0)={'syz', 0x0}, r7) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00!'], 0x28}}, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = dup(r11) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async) ioctl$SCSI_IOCTL_SYNC(r12, 0x4) 24m12.144644065s ago: executing program 2 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x5c, r6, 0x809, 0x0, 0x2, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x4044) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xb8, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48800}, 0x4004) 24m11.465197315s ago: executing program 2 (id=688): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x20060400) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @timestamp, @timestamp, @timestamp], 0x8) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000200)=0x80000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 24m9.688169265s ago: executing program 2 (id=692): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="700200001300290a000000050000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x200, 0x3) mount$afs(&(0x7f0000000280)=ANY=[@ANYBLOB="2373797a302eac830a646d92c5e36261636b757000"], &(0x7f0000008480)='./file0\x00', &(0x7f00000084c0), 0xc0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x1180010, 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) syz_open_procfs(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000ac0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\x00\x00\x00\x00(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85512, &(0x7f0000001340)={{0x1, 0x6, 0x7, 0x5}, 0x1, [0xffffffffffffffff, 0xfffffffffffffff8, 0x7f, 0xffff, 0x4, 0x40, 0xf73, 0x80000, 0x7, 0x8, 0x2, 0xb, 0x6, 0x3, 0x8, 0x8000000000000000, 0x7, 0x2, 0x9, 0x0, 0x7fffffff, 0x4, 0x800, 0xee0, 0x2, 0x100000000, 0x0, 0x1, 0xdd0, 0x100, 0xb, 0x4, 0xff, 0x3, 0x100, 0x3, 0x7fffffffffffffff, 0x8000000000000001, 0x7, 0x8000, 0x80000000, 0x5, 0x1, 0x3, 0x5, 0x1, 0x10000, 0x399d, 0x5, 0x1, 0x6, 0x2, 0x2, 0xf, 0x10001, 0x22bd0af6, 0x7, 0x80, 0x400, 0xca12, 0x100000000, 0xfffffffffffffff7, 0x200, 0xe9fa, 0x1, 0x8, 0x0, 0x1, 0x40, 0x86, 0x1, 0x8, 0xffffffffffffffff, 0x8, 0x2, 0x2, 0x7, 0x7, 0x9, 0x7, 0xbe, 0x101, 0x9, 0x41, 0x8, 0x2, 0x7, 0x3, 0x8001, 0x6, 0xfffffffffffffff9, 0x795, 0x1, 0x1000, 0x2, 0x6, 0x9, 0x7, 0x8001, 0x9, 0x2, 0x4, 0x8, 0x0, 0x1, 0x2, 0x1, 0x800, 0x3, 0xb6d7, 0x8, 0x5, 0x7fffffff, 0x2c, 0x0, 0xe, 0x10, 0x4, 0x7, 0x6, 0x9, 0x9, 0x1, 0x720d, 0x5, 0xce, 0x8, 0x401]}) 24m9.399958714s ago: executing program 2 (id=696): r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES64, @ANYRES8, @ANYRES8=r0, @ANYRESDEC, @ANYRES64, @ANYRES16=r0, @ANYRES8, @ANYRES32=r0], 0x48) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x1, 0x2}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsync(r1) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) accept$phonet_pipe(r4, &(0x7f0000000080), &(0x7f0000000200)=0x10) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="e6594dad9970881feec9fc42e34665a0c3b78ddfaf113a7f2f13082246b13c143a16639b5b5c110d188c2f003d520b16254a43c9edbb51d640f0d0f63a85a9a08678f14ac1ec51d5483f40d07c0b19ad586a24e61e156b48eb172ec6b97830871167a199825a83bf0a611373dcf9c5984052965c0e4262", 0x77}], 0x1}, 0x480c0) recvmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x3401, 0x0}, 0x40000000) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000125000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0xffffd000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f00004a6000/0x14000)=nil, 0x14000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) 24m9.102173688s ago: executing program 32 (id=696): r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES64, @ANYRES8, @ANYRES8=r0, @ANYRESDEC, @ANYRES64, @ANYRES16=r0, @ANYRES8, @ANYRES32=r0], 0x48) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x1, 0x2}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsync(r1) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) accept$phonet_pipe(r4, &(0x7f0000000080), &(0x7f0000000200)=0x10) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="e6594dad9970881feec9fc42e34665a0c3b78ddfaf113a7f2f13082246b13c143a16639b5b5c110d188c2f003d520b16254a43c9edbb51d640f0d0f63a85a9a08678f14ac1ec51d5483f40d07c0b19ad586a24e61e156b48eb172ec6b97830871167a199825a83bf0a611373dcf9c5984052965c0e4262", 0x77}], 0x1}, 0x480c0) recvmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x3401, 0x0}, 0x40000000) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000125000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0xffffd000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f00004a6000/0x14000)=nil, 0x14000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) 15m49.671897691s ago: executing program 5 (id=2492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x3, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) rseq(0x0, 0x0, 0x1, 0x0) read(r2, &(0x7f0000001400)=""/4076, 0xfffffeea) 15m47.525611622s ago: executing program 5 (id=2501): socket(0x2, 0x80805, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000010c0)={0x1, [0x2b, 0x8001], 0x400}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) unshare(0x62040200) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[], 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x2, 0x4, 0x1800}], 0x2, 0x0) 15m43.892169345s ago: executing program 5 (id=2512): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040), 0x578ae82fb8259cfb}, 0x8010) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000500)=""/73}, 0x20) 15m43.832092241s ago: executing program 5 (id=2513): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x101b}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="b2b5a4628b974430c7c0a17615d91bcad617d04f74da9a5d14121db3ef344ae26b2e863b1f9b59b30a9602af858c988da8e270f82ea65e4bc845177d596a74c6126ac0019efd128a4d6e6504c556709b5f4c1805d0dd8cd56b8bce751f28ab4bc3f05d67a2cd081535880d72cc64e6aaad6d62a069740a004fb1f87eed23d0abde3a86b1f80bcaf4c287b893ebf5bae643b47aaee6866813dfb896d49b8ee2177c007f1717eb8361b5fd28169818ab46d46f5dc3349dc7d949b28bcde173a8f4445da32801", @ANYRES16=r4, @ANYBLOB="000125bd7000fcdbdf250200000008006100000400000800400000040000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r6, 0x1, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x10}}, 0x24, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000340)="acaa775d7005a734a1499ea05e55270100000000000000da77ac95cbbca957bb9a6468a103abe2b7ee35b3dcb64fa3ca26f4383c45243d18c8", 0x39) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getdents(r6, 0xfffffffffffffffd, 0x58) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 15m42.696176822s ago: executing program 5 (id=2518): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0, 0x60}) 15m42.374800129s ago: executing program 5 (id=2520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x5, 0x0, &(0x7f0000000280)=0x0) timer_delete(r4) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) fdatasync(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x2c}, 0x8841) 15m41.340846271s ago: executing program 33 (id=2520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x5, 0x0, &(0x7f0000000280)=0x0) timer_delete(r4) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) fdatasync(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x2c}, 0x8841) 5m59.377288729s ago: executing program 4 (id=4306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x42fffffe) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44000) socket$tipc(0x1e, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x20800, 0x0) getsockname$l2tp(r3, 0x0, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x490882, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 5m57.597593198s ago: executing program 4 (id=4310): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) gettid() 5m52.494116954s ago: executing program 4 (id=4322): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) lsetxattr$smack_xattr_label(&(0x7f0000000000)='./file2\x00', &(0x7f0000000100)='security.SMACK64EXEC\x00', &(0x7f0000000140)={'}&\'^\\'}, 0x6, 0x0) 5m52.170830161s ago: executing program 4 (id=4325): mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) syslog(0x2, 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') syslog(0x9, &(0x7f0000000080)=""/84, 0x54) r1 = syz_clone(0x1802000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r1, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x0, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x48) 5m51.254472912s ago: executing program 4 (id=4329): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000e3ffffffffffff63822f07c13b1974f100010000060202020202020108"], 0x36) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88441) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/vlan/vlan1\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd7}}, &(0x7f0000000400)='GPL\x00', 0x7, 0x6, &(0x7f0000000280)=""/6, 0x41100, 0x15, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r7, r2, r7, r0], &(0x7f0000000440), 0x10, 0x86, @void, @value}, 0x94) ioctl$TIOCMIWAIT(r4, 0x545c, 0x3000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r9], 0x44}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 5m50.914978393s ago: executing program 4 (id=4332): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0x101102, 0x0) r5 = socket(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setresuid(0xee01, 0x0, 0xffffffffffffffff) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) r7 = semget$private(0x0, 0x20000000102, 0x0) semctl$GETALL(r7, 0x0, 0xd, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) semtimedop(r7, &(0x7f0000000080)=[{0x2, 0x1, 0x800}, {0x3, 0x96c, 0x1000}, {0x2, 0xfd50, 0x1000}, {0x4, 0x800}, {0x2, 0x0, 0x1000}], 0x5, &(0x7f00000000c0)) ioctl$NBD_DO_IT(r6, 0xab03) 5m49.950720122s ago: executing program 34 (id=4332): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0x101102, 0x0) r5 = socket(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setresuid(0xee01, 0x0, 0xffffffffffffffff) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) r7 = semget$private(0x0, 0x20000000102, 0x0) semctl$GETALL(r7, 0x0, 0xd, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) semtimedop(r7, &(0x7f0000000080)=[{0x2, 0x1, 0x800}, {0x3, 0x96c, 0x1000}, {0x2, 0xfd50, 0x1000}, {0x4, 0x800}, {0x2, 0x0, 0x1000}], 0x5, &(0x7f00000000c0)) ioctl$NBD_DO_IT(r6, 0xab03) 18.077625952s ago: executing program 7 (id=5350): bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0xe, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000000)={'veth0_to_bridge\x00', &(0x7f0000000040)=@ethtool_ringparam={0x11, 0xf2b7, 0x3c, 0x8, 0x1000, 0x8, 0x5, 0x40}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x20) keyctl$session_to_parent(0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061107f000000000007"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="680001002a00939b"], 0x1c}}, 0x4000) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x7fc, 0x0, 0x0, 0x0, 0xa5, 0xad, 0x9, 0xa9, 0x4, 0x0, 0x0, 0x4000000040000003}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x20, 0x0, 0x0, 0x86, 0xff, 0x0, 0x2, 0x6}, {0x401, 0x9, 0x0, 0xfd, 0x0, 0xfb, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x9}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000300)="c463255cc84e0fc087428aab378f4970958b0000008047dfeb0f32f20f8304000000ef66ba4100ec400f01dbc48159655a02", 0x32}], 0x1, 0x20, &(0x7f0000000380)=[@vmwrite={0x8, 0x0, 0xb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) keyctl$session_to_parent(0x12) 16.364738268s ago: executing program 7 (id=5354): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') 13.647001255s ago: executing program 0 (id=5362): open(0x0, 0x1c1242, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) memfd_create(0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 12.884204344s ago: executing program 3 (id=5364): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x28, 0xa, 0x8000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x7}, @mss={0x2, 0x1000}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000400)="001d71d52a3879c9c7649475728f8a25a071a59c20c131e0364e8828e50cfb69d0561b1bf87522000e42847c81695082fb23c905f5713aa8cadb181f50020730a3af1cb5a2ec28f6a78f19956ad27fa369f8adf71664f8eaff", 0x59, 0x4044000, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000200)=""/15, 0xf, 0x36cfdfe49406adc, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000e8b000/0x3000)=nil, 0x1000, 0x3000008, 0x18910, 0xffffffffffffffff, 0x83000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) 12.013580292s ago: executing program 0 (id=5365): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000800000000000000004000000850000001300000085000000070000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x5d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:/', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x82100, 0x0) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0180c200feffffffffffffff000000000011907800000000000000004404c60000084e20000c907801000000"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a00000107241400efffff08058103"], 0x0) 10.655516005s ago: executing program 3 (id=5366): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000780)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x3, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) recvmmsg(r3, &(0x7f0000007e00)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000480)=""/112, 0x70}, {&(0x7f0000000540)=""/235, 0xeb}, {&(0x7f0000000280)=""/15, 0xf}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000004200)=""/4096, 0x1000}], 0x7}, 0x2}, {{&(0x7f00000006c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/124, 0x7c}, {&(0x7f0000005200)=""/4096, 0x1000}], 0x3, &(0x7f0000001900)=""/115, 0x73}, 0xf5}, {{0x0, 0x0, &(0x7f0000006200)=[{&(0x7f0000001980)=""/106, 0x6a}, {&(0x7f0000001a00)=""/141, 0x8d}, {&(0x7f0000001ac0)=""/137, 0x89}, {&(0x7f0000001b80)=""/76, 0x4c}, {&(0x7f0000001c00)=""/148, 0x94}, {&(0x7f0000001cc0)=""/225, 0xe1}, {&(0x7f0000001dc0)=""/194, 0xc2}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/233, 0xe9}, {&(0x7f0000001fc0)=""/169, 0xa9}], 0xa}, 0xc}, {{&(0x7f0000007380)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000007740)=[{&(0x7f0000007400)=""/205, 0xcd}, {&(0x7f0000007500)=""/86, 0x56}, {&(0x7f000000a380)=""/4096, 0x1000}, {&(0x7f0000002080)}, {&(0x7f0000002100)=""/62, 0x3e}, {&(0x7f0000007580)=""/57, 0x39}, {&(0x7f00000075c0)=""/104, 0x68}, {&(0x7f0000007640)=""/193, 0xc1}], 0x8, &(0x7f00000077c0)=""/131, 0x83}, 0x7f}, {{&(0x7f0000007880)=@caif, 0x80, &(0x7f0000007a00)=[{&(0x7f0000007900)=""/49, 0x31}, {&(0x7f0000007940)=""/142, 0x8e}], 0x2, &(0x7f000000b380)=""/4096, 0x1000}, 0x7fff}, {{&(0x7f0000007a40)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000007dc0)=[{&(0x7f0000007ac0)=""/156, 0x9c}, {&(0x7f0000007b80)=""/202, 0xca}, {&(0x7f0000007c80)=""/125, 0x7d}, {&(0x7f0000007d00)=""/165, 0xa5}], 0x4}, 0x8}], 0x6, 0x106, &(0x7f0000007f80)={0x77359400}) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x85, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) dup(r2) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xd, 0x0, 0xa189}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x101, 0x79, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 9.30440438s ago: executing program 7 (id=5369): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) io_setup(0x4, &(0x7f0000000280)) openat$rtc(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0)=0xc9e1, 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000400)=""/240, 0xf0}, {&(0x7f0000000500)=""/192, 0xc0}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/168, 0xa8}, {&(0x7f0000000780)=""/206, 0xce}, {&(0x7f0000000880)=""/233, 0xe9}], 0x8, &(0x7f0000000a00)=""/11, 0xb}, 0x2040) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={r3, r2, 0x0, 0x6, &(0x7f0000000a80)='//-^}\x00'}, 0x30) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0xc6e9f000) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="07d98d396058a855921d034d0fb8034a5317ce586c382c8d41f8212309f82dd261e5f9263338a10244d7b49f8608f304ee79d951cd4ca8c44b84d8b2da6feb009a0d53224f69c7a037105aa12b36d0f2fa926dad5b4a129773ae0025ee2dccc42c4cc23ddd896f77e5b427f7950212eaeb0dd9c789f8def4d9fbf6274bbf72f31c5a548464395d9a68564fc12ef2196d7eac2b93ba137c89c360011aa0c15d2a0db9dfc760b6e069968685b051123d404ba4e94ccfdfebeaa7a30c8de388e00edff56b0c6968ec98e00ad8decf9dec77295a37e60510e906474b55034f7f6594c92e49dd422bb4346631b852e64add94f0ee30da8e199a89d8969df24601639c324ea084f8b00dbb3322aa7b1759fde71e4279841257c589725c12070d0cd41423d566d8b73b2936119519e31f4c8243e9207e688e77550867081b9b685d277a4800", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000040)={r10, 0x400}, 0x8) 8.850193281s ago: executing program 6 (id=5371): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000200)={0x10, 0x9253, 0x3c4}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x80, 0x80, 0x4, 0x6, {{0x5, 0x4, 0x1, 0x2c, 0x14, 0x67, 0x0, 0x3, 0x4, 0x0, @local, @multicast2}}}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0xf8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x300}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0xffffffffffffff29, 0xfeffffffffffff, &(0x7f0000001c40)="d7"}) 8.14563534s ago: executing program 7 (id=5372): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setresgid(0xee00, 0x0, 0xee00) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0) syz_emit_ethernet(0x28e, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) msgget$private(0x0, 0x200) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, 0x0, 0x0) pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 7.667086805s ago: executing program 6 (id=5373): io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_usb_connect(0x5, 0x51, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$igmp6(0xa, 0x3, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000100000000200"/20, @ANYRES32, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000da7f51db973e019fa3086871feaa26c50066"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x7b) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 7.519229177s ago: executing program 3 (id=5374): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000200)={0x10, 0x9253, 0x3c4}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x80, 0x80, 0x4, 0x6, {{0x5, 0x4, 0x1, 0x2c, 0x14, 0x67, 0x0, 0x3, 0x4, 0x0, @local, @multicast2}}}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0xf8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, r7}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x5}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0xffffffffffffff29, 0xfeffffffffffff, &(0x7f0000001c40)="d7"}) 7.404440073s ago: executing program 1 (id=5375): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x2e, 0x61, 0x3e]}}, 0x0, 0x29, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_clone(0x20200, &(0x7f0000000000)="7c4ddca10aa4b19ed465425f0be10abc54462f98f283028c", 0x18, 0x0, 0x0, &(0x7f0000000180)="ecccef2879acf01587718c68539938") r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a067fbc45ff8105000002000072ba000b480400945f640094ff01000092bf01000000000000009f04000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) connect$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x2}}, 0x8) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) 5.459617209s ago: executing program 7 (id=5376): io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_usb_connect(0x5, 0x51, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$igmp6(0xa, 0x3, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000100000000200"/20, @ANYRES32, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000da7f51db973e019fa3086871feaa26c50066"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x7b) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 5.458419768s ago: executing program 1 (id=5377): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000300)={{0x3}, {0x4, 0x74}, 0x490d, 0x1, 0x9}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0x10b, &(0x7f0000000400)={0x0, 0x46ab, 0x0, 0x25, 0x3bc}, &(0x7f0000000040)=0x0, &(0x7f0000000480)) eventfd2(0x58, 0x80000) (async) r3 = eventfd2(0x58, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r3, 0x1) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000380)={0x1ff, 0x0, 0x0, 0x0, 0x68, 0x1}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) (async) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e6174aeff15f4e49e0d0fc464657673696d3000186a970000000000180016801400018010000200010001002a03000002"], 0x4c}, 0x1, 0x0, 0x0, 0x4801}, 0x24040800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x3, &(0x7f0000006680)) uname(&(0x7f0000000000)=""/182) (async) uname(&(0x7f0000000000)=""/182) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300090000000000000000000300000008000200", @ANYRES32=0x0, @ANYBLOB="8a562aa182c955ad71ef43704e8f467345a6ce485b4d18c785cdae952bcd5c04fbcdbec6e7337bd1dba5c1ba14ee665b3731c907241db627c959bcf470b40fea958e39e5b95d39f292911dab56565c57fcd9b9585dd4d78ab47f150080c660d47a62fc7c2850f7047dbc7be4db43c6a09bb27265354eb1174019dc9f9af5"], 0x1c}}, 0x24000044) socket(0x27, 0x5, 0x7fffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8480, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17b9310400876c1d0000007ea60864160af36514001ac00400020004000400eab556a705251e61aae5f66f8294ff0051f60a84c9f4d4938037e786a6d0001004000e4509c57f74ff24185499020000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24008880) pread64(r6, &(0x7f00000001c0)=""/174, 0xae, 0x8) 5.444374678s ago: executing program 0 (id=5378): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(r0) 5.443143418s ago: executing program 3 (id=5379): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') 5.069911164s ago: executing program 0 (id=5380): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff8000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r3, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006680)="8e503ba12553ae35664093744598ff2ed98313cfeff69bbb1f3ba451bc98d27cf439225d75522ac543a153ac5284bf131a87e53d0b20f8dddcb2af841def3e560070344be18fcee4983553ba856738012b512e3dc760fb581a17e5622e0e22e22546476d6cc6d6d94d828a2fa22ec77a1cf082f5ca88f1f8976e8b6c3a7a537f8f50b432bf4df69c912bfcc539a65851f86b23f24e714e0643429ec1198ea1647316538a3ce23fad21e19e087c0dedc7aa6d5e4b0dcbfcbe22c857f5a848aef15126b9ecc810249cbbc82c8b6ba49e46b71cb79f6ef9449d0838b9130946398941a4c64f6e2d84118b60ed4ccfed8a26446032fecf87434e71b7989253f64feb6d2e1013673a9600b1915174e55ad78d1d666fb75c24142e44ceca89a18ca66b4b5e66ba953ca42fb6a36d4a3612a2948393f67a7d1d0957a8553c73855fd007abbb6c3d4bbc943f3b102bb2ea6f40e714516a3de91acc6e1468e9e7b66ee57815da23054153d9d5fca6bdb26ed8f7754d88154d46df2f2e4964ee5d7f47e9218d6877c3b232c945cddeef70b24e5c6c434fa30fd0a2ad1c348c3658494f7cfdfb6bb56b43f1d9b2d049c1166161c3232ada01f3c789b2d6958cdd9f044a654f8397d64cb928f4d57f0c4e9739afbf3afbf0e9f84d56a1aba6db7538d98404b7cdfa97f8770a6df4a13145c1d0cfb7ec0349b5639d9180eada54b2f8c12472fb379901e6d514fbfd6d41d2dd77eb42608a784fc016ae48fb126776b10be5c03f62ec90987e766d20d821a17c03e0d867f4aa3f4902fb803e8261833aa9397e107e6c100daa3d8b792bf4b5081ef56670762b5ae3f528836029ca332f44fcc5cf3750f39091985032afa8dd2e80b69cbffc29aa13fcdc0ff811a108794b4154ecaf70e58a9f70a573cf9d1040e23f5a04a873a583e4ab0fa5f77d620c60f0a45cdc789b849e9e8746528846bbbf8251a84f2aa97ccc3e49f4c9b6abf0248344e86a71486eba9e62ff5920bb80ceccc5813f068da0d5aa208c440b7889118d2f4e8baf22a84544f232d6a3a1aedf31d5fc22f0ece56ac611b1363ff35e5071342a0257d3f146dc3ea1cc795d2f06afeb1d6995e50eb2d2d21dc6c4377a2626dd9486446517d03a4a03c43ef2e255a92b775c198bfe92c21375599235aac33c69190bbbfaad76860d0c9e70ad53273460c370b06bdf94ee8bfc31c48609ff6de0d39f873ec11e8c2835f17b3f18891c8ae335a7074fb5a5c794007a327fbb2622e71d62e43f50a00cc59b7eeb3f8ceed5d87fa5eb62a7a8c74ec90b1096a0b24606bf14b1f13f78ea4ab522304c7ca1d7b8ae47b5859f6a0d9baf3b6ffd29a4fb6782732febcfa51446aa87691ac81bf891717fbf8e4deaccac63477d3bc7b8ed52e9b6ca3fd39eefee6a337c2ad76df9739e2fbff34bf36027be0cfbebfe5b2fd168d75b2fd64479e2faf85654c013955e04044a9b7bf8b3d42da91962796bfe6eb53fe29e36a7a7512a155c712ae561d885703cb26d72e6f1df3976cc665960f871f3110309ffb6b5a79e54057a7a286c62c11e973ef671e86051686f77992f985d729740f38fecf83e03a1fef542cd6b4cee48546f67873a9c682c4afe4a5beccfc64085c622c5a0b5a1f6355f938d16925cabe61426a837c48fd6ad790afe54448fb296a03322f3427e132e8c0623bd311af8a619c2d91415e851744941700f09a2d8471def9dbc448c6aefb4c664f8902c872cc7de9d26e8b300b55b1d08a80257095efef35d9b497487607a22bc95c68f39aeeae243e76ccd40dd1b7ccad6eb39b35d91d239b2b005c8bb6e50037ffb1253276e20384398a5e97ad705fcffd04c720539ddf80cf4e929e82e3fec3d7542e0b7495733eb5da29f6dff5a34ec88a71881f660a5bc9481e755fd3c5683e95ed97cc91ab0edf49afda477aea42bc436b364747d973d61be806e1e63b6982e42814a13c5adb3bd767ec724d2d654afb106198fba6b4c798f4b82f329c2b8055ac4d247da971e32eb4cb971c9ac99d18c0a216d48dd7dffd372e0cad9ce6f05b06e47842c2f53b7c987139c6ddac3446fdb163342f8ca8f5401db91d324a6b710f28dece5839d37760c2515d6ad815a746cd7ccd3a438a5d3f28ca331f6874dedbab107c64127a7590a2813c1287ca977807827d52df80a9c19bc7ef335791da1be53c89f6de8ee1f02f26069b786f22bfd23cd8366e3ca02c0b296d0966d7f8fdbc0ef06895c547224f1a01c92d5f43f81b35539469d1fd9cd76dbf8cdd21b479a6474578863c9906ce6b12d0dbf5a458dafc042fcabe64aeebeb70c0da9300ed22e5d2851c5e77b20f9da1cd26cd810e0b8f1ba17d7c819e8a8ad86aa5bc4eb64748b75ab4a85f05bb1dc542234ac175eced1fe8f3fbd86f1c7349a360f5af0244818df303dce6842ea7afa722be19cf162d671256e5659c77c5569d827b28dc44b7dbb7d9433bc9eff26edbff36cf796b8afb285393f2dab6bb9a3ed40dd065ba8a8ab62cb575e696b97a2853b1700835ae429b983a5bb88972e367f5996a21e9a3b00e943e15c1163fdee023e1cf6e8dc42655cb175590fb6b8c46148b37957c5026aa94e96cbb71bcf9e7899c489edd9b34ca2d3d0dbd29f135cb158652ded6c959820b26a5fb6e8f3a6cfb80bcfa52c36ae0a3868914bda36b5ac09d2ae6cfccff9859550cfc5c6c3b30cddf6a2130c0c563445ae10634f38c65a47aeb8c72a0f25a6747a6787e703e1723303dd6d5bd4303240cb6d4659ee32d80b92859327e882ec84d9bb2a6976d9c6fa450d5598c6af1c92fc4ed7614e3192a06e62e704278424e2e5d521ec4f2cbd87d9b8a65405e807f6247e3f9228e8a5c44e31c9de9247d1b8248ce71d34663cbfcce728c9f08628629fca3f334566118aeb86470886147d714d2dce240408fac3c971b851dd33cb7997e238a2362195ba4f0e83d5c1c5039328817f258d6645bcbc20512398a7a34e2288585b4dc626c6867f3af5a0f573492cdb04e5613bd95bcfe6a61541c3912b4e841b34db2820ed5aca226dcba496f9586b83ab44ed3b9f34cfd2397f36dc4f9811815b975a208b6cd163031296b289b7d202036bca9c4e862f6b1d6356c3c54d47de63e0d0b38e7b9e41e1b25d94fbd03853f786fcf2325020355469e52dd2cfc879e2758382f609173cb2c01775030d1d536af97f5bd0a4b71ad9bf3e5becfccd7dce72fa8882733d2c32cab1338ce67f301be74b1c51dbacff9bdc22868f3f16531cb86b7597aff03040a821c4f7cae2b5b92db792f327dce81e79ac83d4ca15aa248ddc2fad518ebd360c5ac8ff3636e15e8ff61501b1e5c6338847ff43c0d3ed38c87aa623c318c8facffb72fbad8bf4effdd2013dc60ad91f1f5a791905b572321ce0956ffded80e2152b0672875fe71923de673ce343a665d327560c5267223b6fa636ef188b94d4a42884721b4f2d51f90ff3e5145aab164fb56982648a7215601d23017b749c01b684082e250330d109af89bf5d20ca788fbd95fd8d1c128aad3306c4e1bd1c054def7b7ea1948e3c95826078991d234808f55c2314706c8177d7674b2378792afe66b2d65484b481b0e52d8b60e0980163fcf2fffa2cd81f4dbf57afd76fd4e71ec8a6604a697fcaf57e65bba50489f6f0c5b4c046a14303eac05700550ee10fa29d8f68a9eb02fa504b640865f7e2c21f1451ed7d75c90a4734ba64327bc3597b5aff23d0a8f1229f0539720bece2b980f85e11c5ecbf3a560e5dedc40e1260349ccbc647d4d9763b17a45fe1b63e5d16e1a49d55c0011e3ab898b64a6618682bd7bb7e8ed18dafa1b462f20f6aaf2d7c4777a6fb73aa7a1720d67a644f4f4b0bc3ff965e696fd3513979f2e72289dec447af56b240380cfa2a9ce38a808e961d26b6ee6810c75778e9d23a93b3f79b3b293f138f23ef2596b60ecd4afc2036debb7e14f61774d84c1325ee7b8f95dc80c12b001e32e894516473a82aa2c24b5ff7f8c3374e245f1b3ff2a8cf0cc33ecd4b9b7528c34cf54d77756ed3e1b74a0e66c9c1dd8e53c123872c084f70e8a04efe8a8c3527ba75f4d9ced8469229ad7453a1376cae90b155638696103216a07b02e93e3924c4a98d159ce8633b2c8bda44ef28f37ba5edf1e80184c9ac2c8b0db77096dbf2f866536ac4f5ee9eed4bb8dfe0dad4361e901450ba499c119aa1af2a1a7c527b09562a47d8260bd7647e29ee422432f063a84d195e9c843e6f6fa684dd044bd09b8cb3e7a976df68049f09caba37b69a595cea61667f2631e561be743309568b4c37fdaed8ebc628889bc3bf9c5a63bc74e9358a9c2228f51370eb483ee39e682cd4f56f15a16217904c6189ef50044e04f244da23d1c9f41a5209f4f485df4ad8d1922203d365eb11102d48c93c09b700e177aef00f8bf729c0406b89de32490fca998bd34f80c99be60601d4de10e9a86a5a22652eb9df948daa66529b6445cdde70ad125d06e41a3469216233a8b9eeb928f2d041eded321d518f0435ca377e90ae49e95793aabccf299c1f1a82ddec49b2b8732aecd1610d5f09cc5e509d4065c5cfb4edc55f6a15fbaf4dea24439ea95b63bae312ed90e47787000810f22ab9b6aa0622ab969fa30b724b24d82447d6a357468b2d1ec61a80ae680ff7b8b894158218b0e63f99103879f3c1dae33aedec60a1e755755604e33a6698cd0e378b0a0b04017278411f33eade9c4c0e3b7d0d6e62fdc3ebf5559310e0a2913d5aff1ce1bead51578b3879c0e25d96a7a150ba655c97875d864c3a6d5b595ff9dd9698857b3b0bab2d087bbf7f80f5a7225cdebf794ede16a61ca73201f311f87ef9cececb8fd07b2bf384a22a8ae988a5e91e6355e26ac923e78004968bf7f4ae3b319e61a422a43841831a51e2c41df8a118da5239c87b4b0aceb32854413d53e0228090babc167ed6600041390ce04e96c94c65c51fdc00e617e4ed870fe9ed2bbef84c1e1f3f796b2867b0f383b6e01ba2b82ecfced722ac5a7c092716d18b9b41674c342a1a6a7ef961893d451648cce5d0ccb4c180e0493a53f5453de43a6535c486acbfb9f480f3255f998831b684a468a88840e1e7e8a310ef296ce89bef65b7e54265c88bff204e48963cea9945608260e5de37b949acacc938e8e2de9fff925022c010f94a0cd6c7bf16d4e3132034a8a3301f1c1950b9a31ee8227b17cbf460db666f6207a59783064115eac2d4f29f9483ebcd34e8792809d5c25a380b2137bbcd7cda502f4a41a043f7d626e922adec9b4c6478ac0df9842bd4e8912deb2ad2026461510ca392383ee9a7ad0388ae499951a4283db39ca57ed9bebf43dcaa6caa391169077a189641fda3151d8e3a3a0b525dcafa2d9d7b2a01468e658c10c27a8ba74b487a968b05031a3d53b59139068b28ca87c5bfd9db867c0e9b9abd91142c96dbf8883e1a89db8d96c9f0a8999a4f9d6b07f32d6f8bb2ea6d2eaa8a531edf85f25aef35c84eb4bf3f46ab4213602be20cad885d404ef47fafc7793247247848f1c3a06ea31c23d0cbffa07aa5981714dc85736e95cd4d60ed1f25351b1c723e4f042f55f02d24a089862df124c75cc4f618853914439c1406a393a0f1ec0f2346f4cbd6beb17713149d67b9bf1854c814bd8ba3a199218e6eac655db998c955df382c8dee2b4d30c750a63a08e9a88009840e96a331bde3767bce177fc5c44528cb673e862e24c2dc2399be1435cd20916e9e060f8bef39d4b47f335dde4493e0e44b0f619822a35e69b7c5d93dc69575ff71ced7c858e43dbee46f4e50846288cbc8fecbb9291d455a015fdd6e1412aec0e6104d0377074b8e160ec7d813bbc6d3b8e6b0256bce8d255d7a592b408cdf6e63164c99d94f00a693e06c2ecba9dc6d36c6a35697c1647f942df4c805c18344b8e5ac885689068f864c395e8c970702e40cf6c683d10455c7ad75fc035ae260f359c2d8c91305406c6f56ec535be445601c75ffdde1758904787f29a558d0f3bd04bfa08f1612a7ee8a7acf129ed5eb854bba757d34afa354098ed8b4e3a599db4b7611a665fcbbb182a0774cb026a00714d8b91c7fb8691b629b6a93f92da2f3701348885dcefe5a548c90101e50dbaf3f4907611623f7616bcea943bd3feedecf3b3681b4d04a938ac83d9f18a21991a90dc17005e7c56d2e09a0f4ad9f3c676e7da478e96122046d0a167f7e1a28d97d514aa68d24dac8501a1a35ddb6f3703311b26bfa3319361ff5e4d38cd55a04ef1b4fb417a3b638cde7f8569531a22c0fa12ad3a55dfe3c2642205fe1ba0c82d36f8815ec52f6381fe789fcf89efb305498a9b1f0ffafe01bcc5581f5b5d195bba77797085ab1837fd081cf5f086da2a16b6a7f8ca9efbc4c9cf771961b70626120e3715b16b222932291e4ee2449591b1807d56a53d4d86f25011704e7d5efcb799ab130ec2aacd54afd3c43c8acda1c5874ce23234b090c4eaa8ddaedf979b1218a5b9dfb36b8196ce05924dcdc7f50d96b95d0c288551a0498ff23f56c7ccdfb8966480477849c7471bea99cb0af35dbcaa5e781b5ddecf3cde51d78067aed9ca267550dfae119a3d83710ecb92fe80841837b41a40d262f5fad16c20203d1cc3455ca63ebdf0f5dbb7a498b4629dcb87333f2d58726871e6b5adf60faa0f8c9cb4718005e5e199457330da1a11cd0d7e78f617b6805fff8fa45c2cb56e1e17904773e165d2a39470ce1616418e7e15481c798afed92efad9c2babcc3e3346f8022ce30b3e1db015a2b9f5dbd4560ee9776c77eb9cff5cf2af28ebf1085650e29bd8dac01b814e6c285bf964da2eb1a442aeb671589a02c29d58208829c9501c355644ac28c38835f4025dcdabfd3852b1a16e45e9c032e97f7f2f0f612739c6569f44731692e3f3b97ba5bcd0b7f2dea1ee6303b5f92514c022e54aa4c587eff74a5d509c17785686c613bf6b778e3624ff3653674e6daab3f788ec9cf879f06957a673a20fdccf721ced05a0d23e074de82614f775a84dfcd31c621cf0369e28791ab742b62f271218fa1bc8681e9d41b4a93b05cc693013d54d367b1e6e1a7e74b43b44b920192ed8fbb63b89f393e5ffab584d7c201d1b99b7bc6907033109986a4fe7bb79e803315c4df94ed471cba889e148645fd1748374015ea8c696ff64bf6d23bce7e5efa7c7e6215ceefa938cd88aa0374da4ee1e10cbfa96d5283b4a0867f4d76b8492fc618e2bca34ba9bc2ff3368756080a78a1ece2f0d1d1cc30cb721677de3c4cd6da378697c40419bc1f2184b86b8e40abd627aab9c308d8fd2db8daf8b43225003ea9124c11dfcbd1b6ea959a86623e360b40c381d991892c1fa6c0c81bb4d03d8d3656cedd1e48539192fc8bd1474ce961159816dcdc76e95ed9d9893e91a0ca670cd1152cb014310facf952fa9fd0d30900196b604c10596c1a31c1e70416824c207656426b09ef9b558496ae87fc7449bfdba0d5628e9af6397385ddadc986424fde545c07664fb6ef2756ed9e443e39257eef2179fb9e4a9e84062f9b6048125151e2e7fad2560df277323b5e22ab2731dc802d6f372d2a335b5da7e5a86508329b3dceb56f0d4f9f6f9e48507af3ec99fc172c237e67ece3d51198a033a9c66f3243ef694893af85421ff6f93ecb95eacceba5fdc1a76810e999a40733b46433328b24ee17b718b135b74dd535202c7966de2de5a26412e600971704bb90007e42d3e6a3acd33e7358da6b32883c9ad30c2abb1cdef7452e211734c6fb6d199a397bea8aa3cf1f014929941c34ba06096e70d852fc420effc7924ec29c03bea29f289c82338f0115e00de549007456d5867253a5b9bb4493bcff815a3100fc45a0de0aad7b0b5c641ed1be3e8f07fb3b1a8a496ecfd3dff5abf0d8f5854621faeb4a9920d8c52b7a0338d49fd21d99c24e1943de3ba2668aea7bc95bcf21e2bf0b2d5f899f33d0cec31b60df4ef5a23e1b173cc89390c8bc3ee96e38de06f6016a2b0eafe86af9dc59bead4f5f948a81b1008a95e3ab39f8009bdb4f268f3002245e73ee2ff50cf1cd37e867cbe44ad370b9336e0dddcffb6dd8f2f79155235300bce6385e544105e6d278d345870216e61100337a871ab51b2cde74fe976e1f8b77a90bb8b51eefe7e4201db41915f482edbe1f8ae268314d5af95ffdeb94aba3f4e316990792d281a123d7febbba7f6abaed7ccfc0c567d4bd1c2d9ca217535167c9a09f1ad0ecaa99cc08338fead5deef7fab77d2082d893b91c27f8ea4e48e052a2a31c8e3f9510c4ce94ef16053bcc25eafa324e5a1d045a3de8f7d731e58ec9130427552323bcfde47f6b55b5634e8cb190fe183af132f12d72ef5e4d98508b57106ccb647ab505369c728958a0789c67ee80acc4bbf41b97fa56d8701c3ec5ead411aed16882dfb026c50c28b5fcc442c432837a82f8bfd47650b83aa71b909be61ea77cc029a0c615f8e390874995d19e224c38349c64bc166f50c54332d1a3eff0071d7a0b11a901c56a847b93ab5bd0bfad8f965cbfb53c2184c588fb7dbc5c693a3ade89b303e801a650b79c1ea957aabed937998b5df77ff29fd43515e8a5ffe441e323fefa45a2775237e1c749897d448f1f3ef60c7755d1a1441b96a136a86d341471d57c68c859813656658266c40b8bb8bafded8ed0d940f8c5954923eb43ad5afb58eb452d6430990bc924afb97191f31cd1a1f58e30b0c243f9636245c459280d16da1df1a30ff63de677554d6b252487455e8aff91370c4a0ba9f341384cf8483d18b9d3f2fc51b07ba8a5fa795d7925189ca344f0fddb8bf55e35013f6fab3806b3c4d17499ec1ae819d4f3aa6b6a570c2ea68558fa33373394584dbf11d41f7059b55f186bd54bdc30dea390872737bf0312f4c68dc963d28d5b218eca6314e23b7381cfbcd01c325d9a3869f1176eb82c183b37d65c8500a48e9bbb1c465e27bfb668a16100e5384d9116aa35f3b00b4ee3bc84700ab17283d4db6b420e6140d14d09b51ad020fc8e505d2c820ac307d45b211213c18487ce12dff233a5caf87cd94a77d0eba69d61452f41c1f82cbe32b567a39a4615a6d2155cc73c3b90dc55daf33c8d9eba3eb0e182c79dede1293dd30840ebf048df8a93e38d0136e856d94ea105cd04323406dc429b5551538625109105d88b1ac480d0fb1e9d1977099707f9f9534b683d855c4d3c30a29c6678a3221e0dea7772f8859f572420708da9a030ddf973cf9f221404117b05efb76bb08ecf34aa9b36b0418c74f90a07e8e5c91e1d7c8a8ea596c0de9b10c222e9588c2bbc77d860b7197b42b42a1ab834ce24fccbbe20f2579ec6dbd4efb9aa1a3d2e062de594d289273e98342440045a0c134e400003b50d4243826b029ecd177cf3d2cf3d164ddc58f88a970a0bbdc7f0d60271cab0df2dde79d1b929cd3028effccbe94c05008f4261297024e4f72604d52db9da7b0e5f2f4f59ebe77b319c54aaab9581a8355b75594eb6dc0fc25e91052c89764256ca464f9f6e45bc34d6e5aa28e1fd93997b58f21feff551aa3ecb5375c19ee4543f7339418c11b9ea18fe2637a9bc9744cc9fcb21a7643eb87683694732154bd1eec746f1c57bac65cf18a83267ea437f7993644c510ac44307703ea28b20e52644dbaabbe9ee1e23a38b29b91cf9077fecdb98ff4e4749c9d6ad2901c5a891c07a8b0c26ad1f8126e6db537df7fff65486afeb85eda80e2a04d09d46720330700267cbcf205b5c00076c01d9db0a64d5426864d14cce1781098afdc28f9f5948ab7791627baf78c3e9df2c0ed9ce50b083bc7a34ee0087f4efde579e2dea313e4e20580c5e63d5ef4509c05a9dc38ced91340bbb9cf948bb03ea5e60c666a1a5c4acd385d0c1a01797b9b3183f4afbc925dd2641d21410b4b1af2f21f8cca330fbc08834e1e8210fdcf332f70f08b48a2655cf017ec8a19640f2f263c54876d6f4ad2193be944667f6498baa32225d2b5b82abd3f2fc64033f1db9adff6b1c788555d5ffa1a35d4a691802447b163ba9a615d6c958036528bbab84230d676145054828d530f0e3af417ad0480eaf2004b9002b644bcd8f0ecf860c31766ace95769ab4fd01f297c595b45e6c7b1c9f662044f43fc82b6244e5d08b1e556599096c034600e20ff000d996b6ba3a6700116127b9468c9567ad920ddcf7ccf9c0a74f49984e24a7aaa2321ee58583c1bdba668cb98c319f682ffc5957015ba1799930d4b676bd3bc76037f6bc2d9ddcb47efebd366a90dc7e67076ebc25e2ef2929a89faee06aa04538a3ae7b196dfecd33725ce9f859c5df4713b220ecd18b1613ba76aebbe8f9f93eeaea9e88e46e7ed24c4efbd86fcd57a4f9fc76152175782871ab211a18ae303be8e9459aab930597d17875c5f5f24d9b16bd8dc4e25f6a7a1de05763da11ee7e26e1e32ee0a5ab2de5d069d03a6ea95a33abc1025d59800fccfff1f0e0f7335e2778b8731cbae94828dbe70507c5369f36d457e98d6042e342cbffde2ee74e05cf0f8aa7185de485e5050294472cd8c7ae03977b62cb287a9d6e4d66650dbc4d89e58ad4f7c24d46573acf85f633d1af73cf655788b431bf22315bdae78d9f6f9cfe32330cbf77bb0195a60244d4bcd0ea35b94bcdf7255ff58f1fb11a09a06747337c95f332a0ade622d49ce0f2943517fb4da8049f3c1b53cb68475c2eb52551d40cbeaf5e79a748c5314bb531b4fc28494b65ee8513427e1fd3cc990fe4ef5ead14b65f1c3e9e0598edf42e2862e2eb180b3e674fc3005859ac56ad17022a8f48b49dcc97e991cfece1d52b7ca82e711944a877567ca0da0663276480d69fa4be56f425bb84dc9177d3e3ed45fb737ce026b8df38336f9efedb89a8650f9fb73918d300c909e9f9189458e1930f09b05433980e79a2eacd0dda32852bdb1a417e4ba62b83d0e17ac8d39834f41c8cd49517013ec658c4e10b38d0788df96764d13ce074271b51041671240549d18540271c8898a5c9e4be4895881235d59666a1f0f3b3cd098786afd6ab4781b73275232b488fb3d9eff77e71f8448a95c653fc80d069c15aa2a80d5799e6c45eb27ea8d6675f28f7aa7cfe3cef877c91ecf3e576e942a20312ffb48a64a91876ec5d1ad2f6a68946e73db4785894736106906731793c3482365d4151051c8d5f16dcb0348628e3aba4087ea8c9ce24bb93190fa12916f529c8eed6dfd3f5bc24d09b1ad377699de3f687b392ec921d81e35dc27bd14be4d004e713c3d07cf600255d45fdfb326b4327c9507c6f69d01236eb9383133dbaa787ba37de14a12e850ec60381a9ffab939ce16cb9b490685343048c0933bc280e809fc8114096ae2d303bbcbbc941b70b5d1d03f59f0b534fa195cbcf34e57d2aaee9c1dcddb5eafd8399fd1d53bfdb48a6f6d3153bb903ce411800f7220bdcfa312ac603672c163a0896b85409859b817cd304e73f278634fab0b1dbe226d7e4f93f220180c3434c7c22ac3143e06702f9a21e66a46d4980bd20d9b0c62846362d0a1151584a28a87902dd0f35187850d501c68900", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x1, 0x16, 0x0, 0x9, 0x0, {0x2, 0x80000008000080, 0x4, 0x2, 0x800000000003, 0x100000000000008, 0x80000000, 0x4, 0x6, 0x8000, 0x7fffffff, r2, r3, 0x0, 0x4c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.861148678s ago: executing program 1 (id=5381): socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000010000003f0000000900000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000526f69d2d2a1dd5b45c00b08f5c4596610c3c26b0a7e4697bb5c04c6d68bab8f90f9c66796a366a21eadb404b7c25dddbc4ac41b4ac8a147810214dbfc5e9743411c2aabc660102846a2908cc5e25694d125b13d97c08d5e608c867f5de406300"/137], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_free_blocks\x00', r3, 0x0, 0x1}, 0x18) (async) syz_io_uring_setup(0x6921, &(0x7f0000000300)={0x0, 0xdeef, 0x10000, 0xfffffffc, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_io_uring_submit(r4, r5, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x48) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 4.473452393s ago: executing program 1 (id=5382): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) io_setup(0x4, &(0x7f0000000280)) openat$rtc(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000002c0)=0xc9e1, 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000040)=""/33, 0x21}, {&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000400)=""/240, 0xf0}, {&(0x7f0000000500)=""/192, 0xc0}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/168, 0xa8}, {&(0x7f0000000780)=""/206, 0xce}, {&(0x7f0000000880)=""/233, 0xe9}], 0x8}, 0x2040) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={r3, r2, 0x0, 0x6, &(0x7f0000000a80)='//-^}\x00'}, 0x30) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0xc6e9f000) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000040)={r10, 0x400}, 0x8) 3.560571477s ago: executing program 0 (id=5383): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x0, 'team_slave_1\x00', {}, 0x4}) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x1500, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = dup(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_require}, {@metacopy_off}, {@index_on}, {@userxattr}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2f}) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000580)={r6, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1c, "339f020bbe78d09843c601010000000000080d0ec0c1b4b3c341dd170000002369af6bc6889bdaff26000000000000000000001700", "a1163939c79ca16c1ca4070039f3b628973705000000a974a0193b3e8772fd29f35239ce00000000000000000000000000000000000000008000", "2477a68e114f0005e20000000000000000000000000000004000", [0x20000002]}}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r8 = semget$private(0x0, 0x6, 0x400) semtimedop(r8, &(0x7f00000003c0)=[{0x0, 0x1, 0x800}, {0x2, 0x4, 0x1800}], 0x2, 0x0) semop(r8, &(0x7f00000000c0)=[{0x1}, {0x2, 0x0, 0x1000}], 0x2) semop(r8, &(0x7f0000000040)=[{0x3, 0x0, 0x800}, {0x3, 0x3, 0x2000}], 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 3.540896738s ago: executing program 6 (id=5384): r0 = fsopen(&(0x7f00000000c0)='ext3\x00', 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_io_uring_setup(0x9f4, &(0x7f0000000100)={0x0, 0x66ef, 0x0, 0x0, 0x34f, 0x0, r0}, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7a, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r2, 0x47bc, 0x3000000, 0x0, 0x0, 0x0) 3.378770719s ago: executing program 1 (id=5385): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioperm(0x7, 0x449, 0x7ff) syz_clone3(&(0x7f0000001240)={0xfbff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) 3.374974598s ago: executing program 3 (id=5386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x220800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4081, 0x0) 2.521985674s ago: executing program 7 (id=5387): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') close_range(r0, r0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) read$FUSE(r0, &(0x7f000001d740)={0x2020}, 0x2020) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000006140)={0x2020}, 0x2020) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000080)=""/106, &(0x7f0000000100)=0x6a) socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_secret(0x80000) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x22c00) r4 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000022c0)=0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000002300)={{&(0x7f0000c61000/0x2000)=nil, 0x2000}, 0xc}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000001800)=""/216, 0xd8}, {0x0}], 0x2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xffffffffffffff76, 0xfffffcc2, 0x0, 0x0, 0x1000, 0x0, 0x36, 0x0, &(0x7f0000000000)="f4076889db68a7cca4bc7deaa8d3a989335a91755260ad8668cad4c01455b0b071282364b9a321647a62735d9fd21db93870c6c3e0bf0b6701d68e385b1945e69866df952954dba9be", 0x0, 0x0, 0x0, 0xfffffffe}, 0xfe33) syz_io_uring_setup(0x20, &(0x7f0000000400)={0x0, 0xcbe9, 0x4002, 0x3, 0x20000}, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) io_uring_enter(r4, 0x847ba, 0x1d39, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.353527414s ago: executing program 6 (id=5388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r3, 0x0, 0x1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x28000000}, 0x8000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvfrom(r5, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) syz_genetlink_get_family_id$nl80211(0x0, r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.351287272s ago: executing program 0 (id=5389): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000800000000000000004000000850000001300000085000000070000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x5d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:/', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x82100, 0x0) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0180c200feffffffffffffff000000000011907800000000000000004404c60000084e20000c907801000000"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a00000107241400efffff08058103"], 0x0) 1.108078772s ago: executing program 3 (id=5390): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r2, 0x0, 0x6) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, r4, 0x0, 0x3000000}, 0x38) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = fsopen(&(0x7f00000000c0)='affs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b//\\o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15m.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8\t\x00\x00\x00\x00\x00\x00\x00\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0xd6}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) close(r0) 579.640284ms ago: executing program 6 (id=5392): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000200)={0x10, 0x9253, 0x3c4}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x80, 0x80, 0x4, 0x6, {{0x5, 0x4, 0x1, 0x2c, 0x14, 0x67, 0x0, 0x3, 0x4, 0x0, @local, @multicast2}}}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, r6}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0xffffffffffffff29, 0xfeffffffffffff, &(0x7f0000001c40)="d7"}) 0s ago: executing program 1 (id=5393): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@none, "8048a33a4610035f"}}}, 0x11) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x4, 0x2, 0x5192}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x2, 'gretap0\x00', {}, 0xc}) setreuid(0x0, 0xee00) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000000)="480000001400190c09004beafd0d3602028447000b4e230f00000001a2bc5603ca00000f7f89000000200000495101ff0000000309ff5bffff04000000000000005839c97b910000", 0x48}], 0x1) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0xd, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008005) write$sndseq(r3, &(0x7f0000000040)=[{0x3f, 0x35, 0xff, 0xfd, @tick=0xfffffffc, {0xff}, {0xf}, @queue={0x0, {0x401, 0x322}}}], 0x1c) kernel console output (not intermixed with test programs): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25018 comm="syz.3.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8edf85927 code=0x7ffc0000 [ 1510.382283][ T30] audit: type=1326 audit(1746818441.836:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25018 comm="syz.3.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8edf2ab39 code=0x7ffc0000 [ 1510.411000][T25017] veth0_macvtap: entered allmulticast mode [ 1510.532891][T25030] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1510.539513][T25030] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 1510.547338][T25030] audit: backlog limit exceeded [ 1510.561692][ T30] audit: type=1326 audit(1746818441.836:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25018 comm="syz.3.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8edf8e969 code=0x7ffc0000 [ 1511.459763][ T30] audit: type=1326 audit(1746818441.846:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25018 comm="syz.3.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8edf85927 code=0x7ffc0000 [ 1511.481757][ T30] audit: type=1326 audit(1746818441.846:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25018 comm="syz.3.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8edf2ab39 code=0x7ffc0000 [ 1511.488992][T25035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4668'. [ 1511.521816][ T5827] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1511.532975][ T30] audit: type=1326 audit(1746818441.846:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25018 comm="syz.3.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb8edf8e969 code=0x7ffc0000 [ 1511.603593][T25035] SET target dimension over the limit! [ 1515.733500][T25077] vlan2: entered allmulticast mode [ 1515.808803][T25088] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4683'. [ 1516.841834][T25103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4685'. [ 1518.339089][T25115] bond_slave_1: entered promiscuous mode [ 1518.345991][T25114] bond_slave_1: left promiscuous mode [ 1518.377895][ T5902] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1518.536878][ T5902] usb 2-1: device descriptor read/64, error -71 [ 1519.272920][T25123] loop6: detected capacity change from 0 to 524287999 [ 1519.381658][ T5902] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1520.014863][ T5902] usb 2-1: device descriptor read/64, error -71 [ 1520.130161][ T5902] usb usb2-port1: attempt power cycle [ 1520.526943][ T5902] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1520.587166][ T5902] usb 2-1: device descriptor read/8, error -71 [ 1520.611279][T25149] bond_slave_1: entered promiscuous mode [ 1520.625271][T25148] bond_slave_1: left promiscuous mode [ 1521.177452][ T5902] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 1521.238278][ T5902] usb 2-1: device descriptor read/8, error -71 [ 1521.328167][T25166] FAULT_INJECTION: forcing a failure. [ 1521.328167][T25166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1521.370309][ T5902] usb usb2-port1: unable to enumerate USB device [ 1521.380752][T25166] CPU: 1 UID: 0 PID: 25166 Comm: syz.3.4708 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1521.380786][T25166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1521.380797][T25166] Call Trace: [ 1521.380805][T25166] [ 1521.380813][T25166] dump_stack_lvl+0x189/0x250 [ 1521.380837][T25166] ? __lock_acquire+0xaac/0xd20 [ 1521.380861][T25166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1521.380882][T25166] ? __pfx__printk+0x10/0x10 [ 1521.380906][T25166] ? __might_fault+0xb0/0x130 [ 1521.380940][T25166] should_fail_ex+0x414/0x560 [ 1521.380970][T25166] _copy_from_user+0x2d/0xb0 [ 1521.380992][T25166] ___sys_recvmsg+0x12e/0x510 [ 1521.381019][T25166] ? __pfx____sys_recvmsg+0x10/0x10 [ 1521.381064][T25166] ? __fget_files+0x3a0/0x420 [ 1521.381098][T25166] do_recvmmsg+0x307/0x760 [ 1521.381127][T25166] ? __pfx_do_recvmmsg+0x10/0x10 [ 1521.381159][T25166] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1521.381196][T25166] __x64_sys_recvmmsg+0x190/0x240 [ 1521.381216][T25166] ? rcu_is_watching+0x15/0xb0 [ 1521.381240][T25166] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1521.381264][T25166] ? do_syscall_64+0xba/0x210 [ 1521.381287][T25166] do_syscall_64+0xf6/0x210 [ 1521.381306][T25166] ? clear_bhb_loop+0x45/0xa0 [ 1521.381327][T25166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.381343][T25166] RIP: 0033:0x7fb8edf8e969 [ 1521.381358][T25166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1521.381373][T25166] RSP: 002b:00007fb8eed5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1521.381391][T25166] RAX: ffffffffffffffda RBX: 00007fb8ee1b6080 RCX: 00007fb8edf8e969 [ 1521.381404][T25166] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000005 [ 1521.381415][T25166] RBP: 00007fb8eed5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1521.381426][T25166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1521.381436][T25166] R13: 0000000000000000 R14: 00007fb8ee1b6080 R15: 00007ffca2105948 [ 1521.381463][T25166] [ 1521.593134][ C1] vkms_vblank_simulate: vblank timer overrun [ 1522.240859][T25182] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4715'. [ 1523.023184][T25187] syz_tun: entered allmulticast mode [ 1523.057707][T25184] syz_tun: left allmulticast mode [ 1523.351244][T25195] netlink: 'syz.0.4717': attribute type 16 has an invalid length. [ 1523.373710][T25196] loop6: detected capacity change from 0 to 524287999 [ 1525.099707][T25199] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 2 prio class 0 [ 1525.497675][T25195] netlink: 'syz.0.4717': attribute type 17 has an invalid length. [ 1525.575178][T25202] FAULT_INJECTION: forcing a failure. [ 1525.575178][T25202] name failslab, interval 1, probability 0, space 0, times 0 [ 1525.683156][T25199] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 2 prio class 0 [ 1525.691015][T25202] CPU: 1 UID: 0 PID: 25202 Comm: syz.7.4719 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1525.691044][T25202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1525.691054][T25202] Call Trace: [ 1525.691061][T25202] [ 1525.691068][T25202] dump_stack_lvl+0x189/0x250 [ 1525.691097][T25202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1525.691118][T25202] ? __pfx__printk+0x10/0x10 [ 1525.691146][T25202] ? __pfx___might_resched+0x10/0x10 [ 1525.691172][T25202] should_fail_ex+0x414/0x560 [ 1525.691200][T25202] should_failslab+0xa8/0x100 [ 1525.691224][T25202] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1525.691247][T25202] ? __alloc_skb+0x112/0x2d0 [ 1525.691269][T25202] __alloc_skb+0x112/0x2d0 [ 1525.691291][T25202] netlink_sendmsg+0x5c6/0xb30 [ 1525.691307][T25202] ? is_bpf_text_address+0x26/0x2b0 [ 1525.691336][T25202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1525.691360][T25202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1525.691376][T25202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1525.691400][T25202] __sock_sendmsg+0x219/0x270 [ 1525.691427][T25202] ____sys_sendmsg+0x505/0x830 [ 1525.691452][T25202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1525.691479][T25202] ? import_iovec+0x74/0xa0 [ 1525.691503][T25202] ___sys_sendmsg+0x21f/0x2a0 [ 1525.691525][T25202] ? __pfx____sys_sendmsg+0x10/0x10 [ 1525.691576][T25202] ? __fget_files+0x2a/0x420 [ 1525.691597][T25202] ? __fget_files+0x3a0/0x420 [ 1525.691629][T25202] __x64_sys_sendmsg+0x19b/0x260 [ 1525.691650][T25202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1525.691685][T25202] ? do_syscall_64+0xba/0x210 [ 1525.691707][T25202] do_syscall_64+0xf6/0x210 [ 1525.691726][T25202] ? clear_bhb_loop+0x45/0xa0 [ 1525.691745][T25202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.691761][T25202] RIP: 0033:0x7fbb3418e969 [ 1525.691776][T25202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1525.691789][T25202] RSP: 002b:00007fbb3501a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1525.691807][T25202] RAX: ffffffffffffffda RBX: 00007fbb343b6160 RCX: 00007fbb3418e969 [ 1525.691819][T25202] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 1525.691829][T25202] RBP: 00007fbb3501a090 R08: 0000000000000000 R09: 0000000000000000 [ 1525.691840][T25202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1525.691853][T25202] R13: 0000000000000000 R14: 00007fbb343b6160 R15: 00007fff38a8d2c8 [ 1525.691878][T25202] [ 1525.694471][T25194] overlayfs: missing 'lowerdir' [ 1525.721531][T25204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1526.021609][T25188] overlayfs: missing 'lowerdir' [ 1527.438726][T25227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4726'. [ 1527.449780][T25227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4726'. [ 1527.868849][T25229] loop6: detected capacity change from 0 to 524287999 [ 1529.170009][T25243] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1529.206916][T25243] CIFS mount error: No usable UNC path provided in device string! [ 1529.206916][T25243] [ 1529.224912][T25243] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1529.406384][T25243] netlink: 'syz.7.4730': attribute type 63 has an invalid length. [ 1530.190940][T25252] 9pnet_virtio: no channels available for device syz [ 1530.828711][T25268] (syz.3.4740,25268,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1531.444076][T25280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4743'. [ 1532.154503][T23805] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 1533.016654][T25307] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1533.943259][T25324] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1534.280398][T25328] tipc: Enabling of bearer rejected, failed to enable media [ 1534.368901][T25315] binder: 25313:25315 ioctl c0306201 200000001d40 returned -14 [ 1534.577216][T25335] o2cb: This node has not been configured. [ 1534.583451][T25335] o2cb: Cluster check failed. Fix errors before retrying. [ 1534.591401][T25335] (syz.1.4761,25335,1):user_dlm_register:674 ERROR: status = -22 [ 1534.599314][T25335] (syz.1.4761,25335,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1535.626653][T25340] netlink: 'syz.6.4764': attribute type 9 has an invalid length. [ 1535.662014][T25340] netlink: 146708 bytes leftover after parsing attributes in process `syz.6.4764'. [ 1536.391757][T25357] netlink: 'syz.3.4769': attribute type 4 has an invalid length. [ 1536.409412][T25358] vlan2: entered allmulticast mode [ 1536.445429][T23805] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1536.457094][T23805] Bluetooth: hci4: Injecting HCI hardware error event [ 1536.468202][T23805] Bluetooth: hci4: hardware error 0x00 [ 1536.760633][T25376] netlink: 'syz.3.4774': attribute type 21 has an invalid length. [ 1536.854688][T25377] kvm: emulating exchange as write [ 1536.893694][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4776'. [ 1538.704713][T23805] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1539.297633][T22944] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1539.613717][T22944] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 1539.653160][T22944] usb 2-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 1539.694136][T22944] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1539.730443][T22944] usb 2-1: config 1 has no interface number 0 [ 1539.743924][T22944] usb 2-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid maxpacket 21076, setting to 64 [ 1539.770802][T17897] Bluetooth: hci5: Frame reassembly failed (-84) [ 1539.772643][T22944] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1539.786550][T22944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.794741][T22944] usb 2-1: Product: syz [ 1539.799126][T22944] usb 2-1: Manufacturer: syz [ 1539.804048][T22944] usb 2-1: SerialNumber: syz [ 1539.814550][T25413] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1539.823029][T22944] cdc_wdm 2-1:1.128: skipping garbage [ 1539.832304][T22944] cdc_wdm 2-1:1.128: cdc-wdm0: USB WDM device [ 1539.844650][T22944] cdc_wdm 2-1:1.128: Unknown control protocol [ 1540.014364][ T5934] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1540.094325][T25431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4793'. [ 1540.324263][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 1540.333467][ T5934] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 1540.341737][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.965642][ T5934] usb 4-1: config 0 has no interface number 0 [ 1540.983558][ T5934] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1541.026296][ T5934] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1541.071537][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1541.071553][ T30] audit: type=1400 audit(1746818470.927:864): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=25440 comm="syz.7.4795" dest=20004 [ 1541.200692][ T5934] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 1541.247667][ T5934] usb 4-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1541.271583][ T5934] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1541.281134][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.302488][ T5902] usb 2-1: USB disconnect, device number 91 [ 1541.314798][ T5934] usb 4-1: Product: syz [ 1541.360512][ T5934] usb 4-1: Manufacturer: syz [ 1541.569301][ T5934] usb 4-1: SerialNumber: syz [ 1541.755094][ T5934] usb 4-1: config 0 descriptor?? [ 1541.761798][T25423] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1541.770606][T25423] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1541.922592][ T5823] Bluetooth: hci5: command 0x1003 tx timeout [ 1541.927190][T23805] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1542.042282][T25423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1542.101994][T25423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1542.261055][T25423] netlink: 'syz.3.4789': attribute type 16 has an invalid length. [ 1542.366213][T25424] netlink: 'syz.3.4789': attribute type 16 has an invalid length. [ 1542.661215][T25423] sp0: Synchronizing with TNC [ 1542.681803][ T5934] usb 4-1: NFC: intf ffff888043f37000 id ffffffff8e929bc0 [ 1542.879344][ T5934] nfcmrvl 4-1:0.122: NFC: registered with nci successfully [ 1542.975999][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1543.357555][ T5934] usb 4-1: USB disconnect, device number 95 [ 1543.377703][ T5934] usb 4-1: NFC: intf ffff888043f37000 [ 1543.653719][T25479] program syz.3.4800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1543.808995][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1544.014817][T25485] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4798'. [ 1544.269288][T18741] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 1544.301281][ T5827] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1544.529436][ T5827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1544.585275][ T5827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1544.635049][ T5827] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1544.703614][ T5827] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1544.749774][ T5827] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.796098][ T5827] usb 8-1: config 0 descriptor?? [ 1544.803689][ T9] usb 2-1: device descriptor read/64, error -71 [ 1544.838536][T18741] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1544.848258][T18741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.898606][T18741] usb 1-1: config 0 descriptor?? [ 1544.906593][T18741] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1545.081743][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1545.257030][ T5827] plantronics 0003:047F:FFFF.0025: reserved main item tag 0xd [ 1545.272304][ T5827] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 1545.296952][ T9] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.320946][ T5827] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1545.327676][ T9] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1545.428383][T18741] gp8psk: usb in 128 operation failed. [ 1545.434123][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 1545.444586][T18741] gp8psk: usb in 137 operation failed. [ 1545.459894][T18741] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1545.473726][T18741] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1545.484965][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.505552][T18741] usb 1-1: USB disconnect, device number 124 [ 1545.531796][T25501] FAULT_INJECTION: forcing a failure. [ 1545.531796][T25501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1545.545803][T25501] CPU: 0 UID: 0 PID: 25501 Comm: syz.3.4810 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1545.545827][T25501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1545.545838][T25501] Call Trace: [ 1545.545845][T25501] [ 1545.545852][T25501] dump_stack_lvl+0x189/0x250 [ 1545.545877][T25501] ? __lock_acquire+0xaac/0xd20 [ 1545.545899][T25501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1545.545922][T25501] ? __pfx__printk+0x10/0x10 [ 1545.545946][T25501] ? __might_fault+0xb0/0x130 [ 1545.545979][T25501] should_fail_ex+0x414/0x560 [ 1545.546008][T25501] _copy_from_user+0x2d/0xb0 [ 1545.546030][T25501] __sys_bpf+0x1ed/0x860 [ 1545.546051][T25501] ? __pfx___sys_bpf+0x10/0x10 [ 1545.546080][T25501] ? ksys_write+0x1f0/0x250 [ 1545.546099][T25501] ? rcu_is_watching+0x15/0xb0 [ 1545.546132][T25501] __x64_sys_bpf+0x7c/0x90 [ 1545.546150][T25501] do_syscall_64+0xf6/0x210 [ 1545.546171][T25501] ? clear_bhb_loop+0x45/0xa0 [ 1545.546191][T25501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.546207][T25501] RIP: 0033:0x7fb8edf8e969 [ 1545.546222][T25501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1545.546237][T25501] RSP: 002b:00007fb8eed7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1545.546256][T25501] RAX: ffffffffffffffda RBX: 00007fb8ee1b5fa0 RCX: 00007fb8edf8e969 [ 1545.546268][T25501] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1545.546280][T25501] RBP: 00007fb8eed7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.546290][T25501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.546300][T25501] R13: 0000000000000000 R14: 00007fb8ee1b5fa0 R15: 00007ffca2105948 [ 1545.546328][T25501] [ 1545.740292][ T9] usb 2-1: string descriptor 0 read error: -71 [ 1545.749943][ T9] usb 2-1: USB disconnect, device number 93 [ 1545.805899][ T5827] usb 8-1: USB disconnect, device number 13 [ 1546.227830][T25505] block nbd2: server does not support multiple connections per device. [ 1546.238858][T25505] block nbd2: shutting down sockets [ 1547.647581][ T5934] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1548.171768][ T5934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.184899][T25528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1548.228793][ T5934] usb 2-1: config 0 has no interfaces? [ 1548.234344][ T5934] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1548.249534][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.306438][ T5934] usb 2-1: config 0 descriptor?? [ 1549.360894][ T30] audit: type=1400 audit(1746818478.570:865): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=25545 comm="syz.0.4825" daddr=::ffff:172.20.20.20 dest=20001 [ 1550.072516][ T30] audit: type=1326 audit(1746818478.579:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25545 comm="syz.0.4825" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16d918e969 code=0x0 [ 1550.155569][T25550] loop6: detected capacity change from 0 to 524287999 [ 1550.652662][T15841] usb 2-1: USB disconnect, device number 94 [ 1550.686255][T25566] FAULT_INJECTION: forcing a failure. [ 1550.686255][T25566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1550.700936][T25566] CPU: 1 UID: 0 PID: 25566 Comm: syz.0.4830 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1550.700961][T25566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1550.700971][T25566] Call Trace: [ 1550.700979][T25566] [ 1550.700986][T25566] dump_stack_lvl+0x189/0x250 [ 1550.701011][T25566] ? __lock_acquire+0xaac/0xd20 [ 1550.701031][T25566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1550.701051][T25566] ? __pfx__printk+0x10/0x10 [ 1550.701074][T25566] ? __might_fault+0xb0/0x130 [ 1550.701108][T25566] should_fail_ex+0x414/0x560 [ 1550.701138][T25566] _copy_from_user+0x2d/0xb0 [ 1550.701159][T25566] do_tcp_setsockopt+0x47d/0x1f10 [ 1550.701176][T25566] ? vfs_write+0x8d8/0xa90 [ 1550.701197][T25566] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1550.701220][T25566] ? __lock_acquire+0xaac/0xd20 [ 1550.701244][T25566] ? sock_common_setsockopt+0x36/0xc0 [ 1550.701260][T25566] ? tcp_setsockopt+0x3d/0xe0 [ 1550.701274][T25566] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1550.701292][T25566] do_sock_setsockopt+0x257/0x3e0 [ 1550.701314][T25566] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1550.701330][T25566] ? __fget_files+0x2a/0x420 [ 1550.701357][T25566] ? __fget_files+0x3a0/0x420 [ 1550.701379][T25566] ? __fget_files+0x2a/0x420 [ 1550.701409][T25566] __x64_sys_setsockopt+0x18b/0x220 [ 1550.701443][T25566] do_syscall_64+0xf6/0x210 [ 1550.701464][T25566] ? clear_bhb_loop+0x45/0xa0 [ 1550.701485][T25566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.701501][T25566] RIP: 0033:0x7f16d918e969 [ 1550.701516][T25566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1550.701530][T25566] RSP: 002b:00007f16da005038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1550.701548][T25566] RAX: ffffffffffffffda RBX: 00007f16d93b5fa0 RCX: 00007f16d918e969 [ 1550.701560][T25566] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 1550.701571][T25566] RBP: 00007f16da005090 R08: 00000000000000c7 R09: 0000000000000000 [ 1550.701582][T25566] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1550.701592][T25566] R13: 0000000000000000 R14: 00007f16d93b5fa0 R15: 00007ffc13a14a88 [ 1550.701618][T25566] [ 1551.084842][T25578] FAULT_INJECTION: forcing a failure. [ 1551.084842][T25578] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.232613][T25578] CPU: 1 UID: 0 PID: 25578 Comm: syz.0.4833 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1551.232640][T25578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1551.232651][T25578] Call Trace: [ 1551.232660][T25578] [ 1551.232669][T25578] dump_stack_lvl+0x189/0x250 [ 1551.232699][T25578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1551.232720][T25578] ? __pfx__printk+0x10/0x10 [ 1551.232749][T25578] ? __pfx___might_resched+0x10/0x10 [ 1551.232772][T25578] ? fs_reclaim_acquire+0x7d/0x100 [ 1551.232795][T25578] should_fail_ex+0x414/0x560 [ 1551.232823][T25578] should_failslab+0xa8/0x100 [ 1551.232846][T25578] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1551.232865][T25578] ? getname_flags+0xb8/0x540 [ 1551.232883][T25578] getname_flags+0xb8/0x540 [ 1551.232895][T25578] ? rcu_is_watching+0x15/0xb0 [ 1551.232920][T25578] __x64_sys_execveat+0xad/0xe0 [ 1551.232943][T25578] do_syscall_64+0xf6/0x210 [ 1551.232965][T25578] ? clear_bhb_loop+0x45/0xa0 [ 1551.232985][T25578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.233003][T25578] RIP: 0033:0x7f16d918e969 [ 1551.233020][T25578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1551.233036][T25578] RSP: 002b:00007f16da005038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1551.233054][T25578] RAX: ffffffffffffffda RBX: 00007f16d93b5fa0 RCX: 00007f16d918e969 [ 1551.233068][T25578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1551.233078][T25578] RBP: 00007f16da005090 R08: 0000000000000000 R09: 0000000000000000 [ 1551.233088][T25578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1551.233097][T25578] R13: 0000000000000000 R14: 00007f16d93b5fa0 R15: 00007ffc13a14a88 [ 1551.233123][T25578] [ 1551.419260][T15841] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1552.051473][T15841] usb 4-1: Using ep0 maxpacket: 16 [ 1552.073986][T15841] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1552.085702][T15841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1552.155022][T15841] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1552.178856][T15841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.285812][T15841] usb 4-1: Product: syz [ 1552.290704][T15841] usb 4-1: Manufacturer: syz [ 1552.295435][T15841] usb 4-1: SerialNumber: syz [ 1552.314718][T15841] usb 4-1: config 0 descriptor?? [ 1553.330168][T15841] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 1553.338593][ C0] usb 4-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 1553.349340][T15841] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 1553.404307][T25577] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1553.844968][T25576] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1553.881984][T15841] usb 4-1: USB disconnect, device number 96 [ 1553.956922][T25598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4840'. [ 1554.944016][T25596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4839'. [ 1555.052017][T25596] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4839'. [ 1555.134866][T25604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4841'. [ 1557.235096][ T5934] Process accounting resumed [ 1557.482046][T25618] loop9: detected capacity change from 0 to 7 [ 1557.533030][T25618] Dev loop9: unable to read RDB block 7 [ 1557.546911][T25618] loop9: AHDI p1 p2 [ 1557.664795][T25618] loop9: partition table partially beyond EOD, truncated [ 1557.672427][T25618] loop9: p1 start 118489088 is beyond EOD, truncated [ 1557.699578][T25622] loop6: detected capacity change from 0 to 524287999 [ 1558.397618][T25638] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4852'. [ 1559.043731][ T5827] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1559.368373][ T5827] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 1559.377399][T25646] vlan2: entered allmulticast mode [ 1559.411982][ T5827] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.467350][ T5827] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1559.490033][ T5827] usb 2-1: config 1 has no interface number 0 [ 1559.500472][ T5827] usb 2-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1559.585617][ T5827] usb 2-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1559.664080][ T5827] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1559.765195][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.822524][ T5827] usb 2-1: Product: syz [ 1559.842778][ T5827] usb 2-1: Manufacturer: syz [ 1559.905551][ T5827] usb 2-1: SerialNumber: syz [ 1560.256817][ T5827] cdc_wdm 2-1:1.128: skipping garbage [ 1560.270313][ T5827] cdc_wdm 2-1:1.128: cdc-wdm0: USB WDM device [ 1560.540469][ T5827] cdc_wdm 2-1:1.128: Unknown control protocol [ 1561.945888][ T5934] usb 2-1: USB disconnect, device number 95 [ 1561.995752][T25684] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4863'. [ 1563.158208][T25712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4872'. [ 1563.554541][T25723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4874'. [ 1564.522063][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1564.533849][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1564.559977][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1564.578592][T25743] UHID_CREATE from different security context by process 1218 (syz.3.4879), this is not allowed. [ 1564.601499][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1564.721600][T25750] binder: BINDER_SET_CONTEXT_MGR already set [ 1564.727709][T25750] binder: 25744:25750 ioctl 4018620d 200000000040 returned -16 [ 1565.013095][T25743] CIFS: VFS: Malformed UNC in devname [ 1565.030422][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.062396][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.113389][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.126537][T15840] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1565.136673][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.145299][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.153218][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.161040][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.168997][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.210504][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.234458][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.311065][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.314653][T15840] usb 8-1: device descriptor read/64, error -71 [ 1565.375029][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.397510][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.419038][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.558515][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.572739][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.585477][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.610982][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.629354][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.639997][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.662668][T15840] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1565.679138][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.726082][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.753035][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.768822][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.795877][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.832120][T15840] usb 8-1: device descriptor read/64, error -71 [ 1565.841236][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.861107][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.883911][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.899187][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.915291][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.948822][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.967460][T15840] usb usb8-port1: attempt power cycle [ 1565.973244][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1565.980866][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.023680][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.052000][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.083048][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.107485][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.134753][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.159110][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.191507][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.213693][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.233192][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.254944][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.284016][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.306818][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.338381][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.413148][T15840] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1566.440692][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.452979][T15840] usb 8-1: device descriptor read/8, error -71 [ 1566.469144][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.479844][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.491426][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.505564][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.513113][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.537656][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.545119][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.574298][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.587885][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.595962][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.618217][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.643068][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.654255][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.676629][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.684093][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.704917][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.712516][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.730071][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.737608][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.740903][T15840] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1566.751438][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.753080][T15841] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1566.770828][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.782907][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.795199][T15840] usb 8-1: device descriptor read/8, error -71 [ 1566.798301][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.814249][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.825244][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.833880][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.844453][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.852910][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.863203][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.871616][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.914404][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.936025][ T5902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1566.976929][ T5902] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1567.011952][T15840] usb usb8-port1: unable to enumerate USB device [ 1567.065446][T25771] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4888'. [ 1567.565828][T15841] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 1567.574363][T15841] usb 2-1: config 0 has no interface number 0 [ 1567.580940][T15841] usb 2-1: config 0 interface 124 has no altsetting 0 [ 1567.596121][T15841] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=a2.2a [ 1567.605557][T15841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.613825][T15841] usb 2-1: Product: syz [ 1567.618289][T15841] usb 2-1: Manufacturer: syz [ 1567.622978][T15841] usb 2-1: SerialNumber: syz [ 1567.630848][T15841] usb 2-1: config 0 descriptor?? [ 1567.951452][T15841] usbserial_generic 2-1:0.124: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1567.983532][T15841] usbserial_generic 2-1:0.124: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1567.995064][T15841] usbserial_generic 2-1:0.124: generic converter detected [ 1568.008678][T15841] usb 2-1: generic converter now attached to ttyUSB0 [ 1568.506480][T15841] usb 2-1: USB disconnect, device number 96 [ 1568.521911][T15841] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1568.530663][T15841] usbserial_generic 2-1:0.124: device disconnected [ 1569.564207][T25812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1569.574847][T25812] batadv_slave_0: entered promiscuous mode [ 1569.754529][T25817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4901'. [ 1574.104230][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1574.119498][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1574.130968][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1574.149822][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1574.160653][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1574.240461][T25848] netlink: 47 bytes leftover after parsing attributes in process `syz.7.4909'. [ 1574.243795][T25850] netlink: 'syz.0.4910': attribute type 30 has an invalid length. [ 1574.377411][T25842] lo speed is unknown, defaulting to 1000 [ 1574.433917][T25857] lo speed is unknown, defaulting to 1000 [ 1574.703727][T25869] syz.7.4913: attempt to access beyond end of device [ 1574.703727][T25869] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1574.717060][T25869] hfsplus: unable to find HFS+ superblock [ 1574.817821][T25869] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1574.831444][T25869] cramfs: wrong magic [ 1575.248494][T25874] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4914'. [ 1575.257854][T25874] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4914'. [ 1575.267694][T25874] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4914'. [ 1575.620007][ T7330] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.701097][T25874] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4914'. [ 1575.732085][T25874] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4914'. [ 1575.774538][T25874] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4914'. [ 1575.890516][ T7330] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.976046][T25874] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4914'. [ 1576.009790][T25874] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4914'. [ 1576.018877][T25874] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4914'. [ 1576.064389][T25879] loop6: detected capacity change from 0 to 524287999 [ 1576.480691][T23805] Bluetooth: hci5: command tx timeout [ 1576.501465][ T7330] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.848483][ T7330] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.521232][T25895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4918'. [ 1577.552082][T25842] chnl_net:caif_netlink_parms(): no params data found [ 1577.709410][ T30] audit: type=1400 audit(1746818505.172:867): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=25893 comm="syz.1.4918" daddr=::ffff:172.20.20.187 dest=19491 [ 1578.692943][T23805] Bluetooth: hci5: command tx timeout [ 1579.040246][T25918] binder: 25907:25918 ioctl c0306201 200000001d40 returned -11 [ 1579.304187][T25922] netlink: 'syz.1.4924': attribute type 9 has an invalid length. [ 1579.311970][T25922] netlink: 'syz.1.4924': attribute type 6 has an invalid length. [ 1580.581577][T25927] loop6: detected capacity change from 0 to 524287999 [ 1580.710384][ T7330] erspan0 (unregistering): left promiscuous mode [ 1580.928269][ T7330] gretap0 (unregistering): left promiscuous mode [ 1581.012807][T23805] Bluetooth: hci5: command tx timeout [ 1581.189778][T25931] Context (ID=0x1) not attached to queue pair (handle=0x1:0x40000) [ 1581.249773][T25931] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(16) [ 1581.256711][T25931] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1581.280603][T25931] vhci_hcd vhci_hcd.0: Device attached [ 1581.513856][ T7330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1581.527175][ T7330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1581.536658][T15841] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 1581.550184][ T7330] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1581.559839][ T7330] bond0 (unregistering): Released all slaves [ 1581.754007][ T7330] bond1 (unregistering): Released all slaves [ 1581.852783][T25935] vhci_hcd: connection reset by peer [ 1581.868633][T17897] vhci_hcd: stop threads [ 1581.891360][T17897] vhci_hcd: release socket [ 1581.907255][T25914] vlan2: entered allmulticast mode [ 1581.937762][T17897] vhci_hcd: disconnect device [ 1582.042344][ T7330] tipc: Disabling bearer [ 1582.124649][ T7330] tipc: Left network mode [ 1582.135836][T25842] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.243323][T25842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.253281][T25842] bridge_slave_0: entered allmulticast mode [ 1582.260966][T25842] bridge_slave_0: entered promiscuous mode [ 1582.855917][T25842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.873523][T25842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.883657][T25842] bridge_slave_1: entered allmulticast mode [ 1582.910121][T25842] bridge_slave_1: entered promiscuous mode [ 1583.066399][T25953] netlink: 'syz.3.4931': attribute type 9 has an invalid length. [ 1583.085590][T25953] netlink: 'syz.3.4931': attribute type 6 has an invalid length. [ 1583.353071][T23805] Bluetooth: hci5: command tx timeout [ 1583.961576][T25842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.980611][T25842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.776505][T25967] vlan2: entered allmulticast mode [ 1585.172635][T25980] binder: 25977:25980 ioctl c0306201 200000001d40 returned -11 [ 1585.453739][T25842] team0: Port device team_slave_0 added [ 1585.522598][T25842] team0: Port device team_slave_1 added [ 1585.640496][T25965] syz.7.4933 (25965): drop_caches: 2 [ 1585.709780][T25988] __nla_validate_parse: 1 callbacks suppressed [ 1585.709793][T25988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4941'. [ 1585.742111][ T7330] hsr_slave_0: left promiscuous mode [ 1585.769138][ T7330] hsr_slave_1: left promiscuous mode [ 1585.775755][ T7330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1585.793279][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1585.804536][ T7330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1585.861047][ T7330] veth1_macvtap: left promiscuous mode [ 1585.869005][ T7330] veth0_macvtap: left allmulticast mode [ 1585.874785][ T7330] veth0_macvtap: left promiscuous mode [ 1585.880853][ T7330] veth1_vlan: left promiscuous mode [ 1585.886328][ T7330] veth0_vlan: left promiscuous mode [ 1587.352492][T26010] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4947'. [ 1587.406036][T15841] vhci_hcd: vhci_device speed not set [ 1588.091583][T26018] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4948'. [ 1588.487044][ T7330] team0 (unregistering): Port device team_slave_1 removed [ 1588.600876][ T7330] team0 (unregistering): Port device team_slave_0 removed [ 1588.686712][T26028] Invalid source name [ 1588.691174][T26028] UBIFS error (pid: 26028): cannot open "./file0", error -22 [ 1590.021250][T25842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1590.041319][T25842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1590.075472][T25842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1590.098837][T26016] bridge2: entered allmulticast mode [ 1590.113835][T26024] syz_tun: entered allmulticast mode [ 1590.119837][T26024] syz_tun: left allmulticast mode [ 1590.135578][T26029] dvmrp1: entered allmulticast mode [ 1590.147064][T25842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1590.194880][T25842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1590.221186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.262004][T25842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1590.616319][T26042] syz.3.4955: attempt to access beyond end of device [ 1590.616319][T26042] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1590.629395][T26042] (syz.3.4955,26042,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 1590.637450][T26042] (syz.3.4955,26042,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 1590.645555][T26042] (syz.3.4955,26042,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1590.654837][T26042] (syz.3.4955,26042,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1591.331782][T25842] hsr_slave_0: entered promiscuous mode [ 1591.366617][T25842] hsr_slave_1: entered promiscuous mode [ 1591.380987][T25842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1591.421687][T25842] Cannot create hsr debugfs directory [ 1591.477363][T26046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4956'. [ 1591.544825][T26050] netlink: 'syz.3.4957': attribute type 1 has an invalid length. [ 1591.552862][T26050] netlink: 'syz.3.4957': attribute type 2 has an invalid length. [ 1591.744894][T26063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4962'. [ 1591.836981][ T7330] IPVS: stop unused estimator thread 0... [ 1591.885101][ T5827] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1592.045553][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 1592.060211][ T5827] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1592.074118][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.097602][ T5827] usb 2-1: config 0 descriptor?? [ 1594.930500][ T5827] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1594.947930][ T5827] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1595.118343][ T5827] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1595.518318][T26097] xt_hashlimit: overflow, rate too high: 0 [ 1595.971573][T26099] overlayfs: empty lowerdir [ 1596.416457][T26106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1597.117770][T25842] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1597.140059][T25842] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1597.204829][T26119] netlink: 'syz.1.4977': attribute type 9 has an invalid length. [ 1597.212720][T26119] netlink: 'syz.1.4977': attribute type 6 has an invalid length. [ 1597.220782][T26119] FAULT_INJECTION: forcing a failure. [ 1597.220782][T26119] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.236424][T26119] CPU: 0 UID: 0 PID: 26119 Comm: syz.1.4977 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1597.236439][T26119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1597.236446][T26119] Call Trace: [ 1597.236453][T26119] [ 1597.236459][T26119] dump_stack_lvl+0x189/0x250 [ 1597.236480][T26119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1597.236493][T26119] ? __pfx__printk+0x10/0x10 [ 1597.236511][T26119] ? ref_tracker_alloc+0x318/0x460 [ 1597.236523][T26119] should_fail_ex+0x414/0x560 [ 1597.236541][T26119] should_failslab+0xa8/0x100 [ 1597.236558][T26119] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1597.236572][T26119] ? skb_clone+0x212/0x3a0 [ 1597.236587][T26119] skb_clone+0x212/0x3a0 [ 1597.236602][T26119] __netlink_deliver_tap+0x404/0x850 [ 1597.236620][T26119] ? netlink_deliver_tap+0x2e/0x1b0 [ 1597.236630][T26119] netlink_deliver_tap+0x19c/0x1b0 [ 1597.236641][T26119] __netlink_sendskb+0x47/0x90 [ 1597.236656][T26119] netlink_dump+0xa5c/0xe70 [ 1597.236673][T26119] ? __pfx_netlink_dump+0x10/0x10 [ 1597.236698][T26119] ? netlink_lookup+0x30/0x200 [ 1597.236712][T26119] ? netlink_lookup+0x30/0x200 [ 1597.236724][T26119] ? netlink_lookup+0x30/0x200 [ 1597.236742][T26119] __netlink_dump_start+0x5cb/0x7e0 [ 1597.236765][T26119] rtnetlink_rcv_msg+0x9eb/0xb70 [ 1597.236782][T26119] ? __pfx_neigh_dump_info+0x10/0x10 [ 1597.236801][T26119] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1597.236815][T26119] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1597.236829][T26119] ? __pfx_neigh_dump_info+0x10/0x10 [ 1597.236848][T26119] ? ref_tracker_free+0x63a/0x7d0 [ 1597.236862][T26119] ? __copy_skb_header+0xa7/0x550 [ 1597.236884][T26119] netlink_rcv_skb+0x219/0x490 [ 1597.236895][T26119] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1597.236906][T26119] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1597.236926][T26119] ? netlink_deliver_tap+0x2e/0x1b0 [ 1597.236935][T26119] ? netlink_deliver_tap+0x2e/0x1b0 [ 1597.236948][T26119] netlink_unicast+0x758/0x8d0 [ 1597.236968][T26119] netlink_sendmsg+0x805/0xb30 [ 1597.236978][T26119] ? is_bpf_text_address+0x26/0x2b0 [ 1597.236995][T26119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1597.237009][T26119] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1597.237019][T26119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1597.237030][T26119] __sock_sendmsg+0x219/0x270 [ 1597.237047][T26119] ____sys_sendmsg+0x505/0x830 [ 1597.237089][T26119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1597.237106][T26119] ? import_iovec+0x74/0xa0 [ 1597.237121][T26119] ___sys_sendmsg+0x21f/0x2a0 [ 1597.237134][T26119] ? __pfx____sys_sendmsg+0x10/0x10 [ 1597.237165][T26119] ? __fget_files+0x2a/0x420 [ 1597.237179][T26119] ? __fget_files+0x3a0/0x420 [ 1597.237198][T26119] __x64_sys_sendmsg+0x19b/0x260 [ 1597.237212][T26119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1597.237233][T26119] ? do_syscall_64+0xba/0x210 [ 1597.237247][T26119] do_syscall_64+0xf6/0x210 [ 1597.237259][T26119] ? clear_bhb_loop+0x45/0xa0 [ 1597.237271][T26119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.237280][T26119] RIP: 0033:0x7fb65458e969 [ 1597.237295][T26119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1597.237304][T26119] RSP: 002b:00007fb6554b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1597.237316][T26119] RAX: ffffffffffffffda RBX: 00007fb6547b5fa0 RCX: 00007fb65458e969 [ 1597.237323][T26119] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000004 [ 1597.237329][T26119] RBP: 00007fb6554b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1597.237335][T26119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1597.237341][T26119] R13: 0000000000000000 R14: 00007fb6547b5fa0 R15: 00007fff40795f88 [ 1597.237356][T26119] [ 1597.878384][T25842] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1597.951053][T26128] batman_adv: batadv0: Adding interface: geneve2 [ 1597.959569][T26128] batman_adv: batadv0: The MTU of interface geneve2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1597.986764][T26128] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 1598.000850][T25842] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1598.426012][T26131] netlink: 'syz.1.4982': attribute type 10 has an invalid length. [ 1598.504068][T25842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1598.571354][T25842] 8021q: adding VLAN 0 to HW filter on device team0 [ 1598.602474][ T7348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.609980][ T7348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1598.653115][ T883] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 1598.672688][ T7348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.681987][ T7348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1598.847232][ T883] usb 8-1: device descriptor read/64, error -71 [ 1598.857362][T25842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1598.868249][T25842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1598.955984][T26140] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4985'. [ 1599.112010][ T883] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 1599.369061][ T883] usb 8-1: device descriptor read/64, error -71 [ 1599.570702][ T883] usb usb8-port1: attempt power cycle [ 1600.075082][ T883] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 1600.149697][ T883] usb 8-1: device descriptor read/8, error -71 [ 1600.176789][T25842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1600.609413][ T883] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 1600.641370][ T883] usb 8-1: device descriptor read/8, error -71 [ 1600.801549][ T883] usb usb8-port1: unable to enumerate USB device [ 1601.307430][T25842] veth0_vlan: entered promiscuous mode [ 1601.365722][T25842] veth1_vlan: entered promiscuous mode [ 1601.380325][T26172] netlink: 'syz.0.4991': attribute type 21 has an invalid length. [ 1601.388646][T26172] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4991'. [ 1601.409800][T26172] netlink: 'syz.0.4991': attribute type 5 has an invalid length. [ 1601.417750][T26172] netlink: 'syz.0.4991': attribute type 6 has an invalid length. [ 1601.425565][T26172] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4991'. [ 1601.518091][T25842] veth0_macvtap: entered promiscuous mode [ 1601.643867][T25842] veth1_macvtap: entered promiscuous mode [ 1601.665243][T25842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1601.676230][T25842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1601.686769][T25842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.720230][T25842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1601.756371][T25842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.789097][T25842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1601.840051][T25842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.023800][T25842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.183930][T25842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.296494][T25842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1602.458902][T25842] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.509018][T25842] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.552329][T25842] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.629112][T25842] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.168955][T26198] bridge0: entered allmulticast mode [ 1603.782200][ T7327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.805166][ T7327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.893278][T17897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.908140][T17897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.215070][T26204] program syz.0.4998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1604.493957][T26207] loop2: detected capacity change from 0 to 7 [ 1605.210807][T26207] Dev loop2: unable to read RDB block 7 [ 1605.219974][T26207] loop2: unable to read partition table [ 1605.226524][T26207] loop2: partition table beyond EOD, truncated [ 1605.233817][T26207] loop_reread_partitions: partition scan of loop2 (žč¢«xü—ŸŃą– ) failed (rc=-5) [ 1605.992719][T26210] binder_alloc: 26209: binder_alloc_buf, no vma [ 1606.077446][T26210] binder: 26209:26210 ioctl c0306201 200000001d40 returned -11 [ 1607.135793][T26233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5004'. [ 1608.872214][T26246] loop6: detected capacity change from 0 to 524287999 [ 1608.984134][ T30] audit: type=1326 audit(1746818534.460:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26237 comm="syz.3.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8edf8e969 code=0x7fc00000 [ 1609.044791][ T30] audit: type=1326 audit(1746818534.460:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26237 comm="syz.3.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8edf8e969 code=0x7fc00000 [ 1609.155698][ T30] audit: type=1326 audit(1746818534.488:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26237 comm="syz.3.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8edf8e969 code=0x7fc00000 [ 1609.177869][ T30] audit: type=1326 audit(1746818534.563:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26237 comm="syz.3.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8edf8e969 code=0x7fc00000 [ 1609.200800][ T30] audit: type=1326 audit(1746818534.563:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26237 comm="syz.3.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8edf8e969 code=0x7fc00000 [ 1609.222914][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.322527][ T30] audit: type=1326 audit(1746818534.759:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26237 comm="syz.3.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8edf8e969 code=0x7fc00000 [ 1609.369362][T26259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5011'. [ 1609.430068][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5013'. [ 1609.485918][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.919418][T26281] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5017'. [ 1611.956717][T26286] o2cb: This node has not been configured. [ 1611.963230][T26286] o2cb: Cluster check failed. Fix errors before retrying. [ 1611.970877][T26286] (syz.7.5018,26286,1):user_dlm_register:674 ERROR: status = -22 [ 1611.979557][T26286] (syz.7.5018,26286,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1613.291109][ T30] audit: type=1800 audit(1746818538.463:874): pid=26295 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.5023" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1614.565348][ T30] audit: type=1400 audit(1746818539.679:875): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=26314 comm="syz.0.5027" daddr=::ffff:172.20.20.20 dest=20001 [ 1615.267472][T26325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5029'. [ 1615.918040][T26333] binder: 26330:26333 ioctl c0306201 200000001d40 returned -11 [ 1616.988316][T26335] vlan2: entered allmulticast mode [ 1617.868107][T26355] loop6: detected capacity change from 0 to 524287999 [ 1618.136545][ T30] audit: type=1326 audit(1746818543.019:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26366 comm="syz.3.5041" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8edf8e969 code=0x0 [ 1618.807139][T26372] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5042'. [ 1619.099411][T26376] netlink: 83 bytes leftover after parsing attributes in process `syz.7.5044'. [ 1619.449464][T26385] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1619.513067][T26385] VFS: Can't find a romfs filesystem on dev nullb0. [ 1619.513067][T26385] [ 1620.960376][T26392] binder: 26381:26392 ioctl c0306201 200000001d40 returned -11 [ 1621.521276][ T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1621.883146][ T9] usb 4-1: device descriptor read/64, error -71 [ 1622.860312][T26406] vlan2: entered allmulticast mode [ 1622.895184][ T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1623.386539][ T9] usb 4-1: device descriptor read/64, error -71 [ 1623.547546][ T9] usb usb4-port1: attempt power cycle [ 1623.993905][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1624.048607][ T9] usb 4-1: device descriptor read/8, error -71 [ 1624.082216][T26423] syz.6.5055 (26423): /proc/26423/oom_adj is deprecated, please use /proc/26423/oom_score_adj instead. [ 1624.164916][T26421] tipc: Started in network mode [ 1624.169863][T26421] tipc: Node identity a65050a00383, cluster identity 4711 [ 1624.309770][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1624.361057][T26421] tipc: Enabled bearer , priority 0 [ 1624.375906][T26416] tipc: Resetting bearer [ 1624.555960][ T9] usb 4-1: device not accepting address 101, error -71 [ 1624.880251][T26415] tipc: Disabling bearer [ 1624.882827][ T9] usb usb4-port1: unable to enumerate USB device [ 1624.996510][T26436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5057'. [ 1627.279558][T26456] ceph: No mds server is up or the cluster is laggy [ 1628.537721][T26466] vlan2: entered allmulticast mode [ 1629.901892][T26474] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1629.908464][T26474] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1629.934135][T26475] vhci_hcd: connection closed [ 1629.934805][T26473] syz.3.5066: attempt to access beyond end of device [ 1629.934805][T26473] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1629.935414][T26474] vhci_hcd vhci_hcd.0: Device attached [ 1629.954566][T26473] (syz.3.5066,26473,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 1629.999385][T26473] (syz.3.5066,26473,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 1630.007278][T26473] (syz.3.5066,26473,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1630.022820][T26473] (syz.3.5066,26473,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1630.126897][ T7331] vhci_hcd: stop threads [ 1630.131277][ T7331] vhci_hcd: release socket [ 1630.136965][ T9] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1630.163129][ T7331] vhci_hcd: disconnect device [ 1630.768545][ T9] usb 1-1: no configurations [ 1630.778527][ T9] usb 1-1: can't read configurations, error -22 [ 1630.798348][T26492] input: syz0 as /devices/virtual/input/input57 [ 1630.927491][ T9] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1631.030289][T26497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5073'. [ 1631.173630][ T9] usb 1-1: no configurations [ 1631.222659][ T9] usb 1-1: can't read configurations, error -22 [ 1631.294481][ T9] usb usb1-port1: attempt power cycle [ 1631.804482][ T9] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1632.135348][ T9] usb 1-1: device descriptor read/8, error -71 [ 1633.970663][T26530] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5082'. [ 1634.806835][T26537] Cannot find del_set index 0 as target [ 1635.561507][T26545] syz.3.5084: attempt to access beyond end of device [ 1635.561507][T26545] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1635.574588][T26545] (syz.3.5084,26545,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 1635.622541][T26545] (syz.3.5084,26545,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 1635.630572][T26545] (syz.3.5084,26545,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1635.655101][T26545] (syz.3.5084,26545,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 1635.770453][T17249] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1636.000806][T17249] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1636.092952][T17249] usb 7-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1636.240443][T17249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.305481][T17249] usb 7-1: config 0 descriptor?? [ 1636.620044][T26555] program syz.6.5085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1636.764639][T26556] netlink: 192 bytes leftover after parsing attributes in process `syz.7.5087'. [ 1638.157098][T26567] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5090'. [ 1639.246310][T17249] usbhid 7-1:0.0: can't add hid device: -71 [ 1639.258126][T17249] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1639.690798][T17249] usb 7-1: USB disconnect, device number 21 [ 1641.093571][T26591] FAULT_INJECTION: forcing a failure. [ 1641.093571][T26591] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.097302][T26589] binder: 26585:26589 ioctl c0306201 200000001d40 returned -11 [ 1641.107709][T26591] CPU: 1 UID: 0 PID: 26591 Comm: syz.1.5100 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1641.107734][T26591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1641.107745][T26591] Call Trace: [ 1641.107751][T26591] [ 1641.107759][T26591] dump_stack_lvl+0x189/0x250 [ 1641.107790][T26591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1641.107809][T26591] ? __pfx__printk+0x10/0x10 [ 1641.107844][T26591] should_fail_ex+0x414/0x560 [ 1641.107872][T26591] should_failslab+0xa8/0x100 [ 1641.107897][T26591] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1641.107919][T26591] ? getname_flags+0xb8/0x540 [ 1641.107938][T26591] getname_flags+0xb8/0x540 [ 1641.107956][T26591] do_sys_openat2+0xbc/0x1c0 [ 1641.107972][T26591] ? lockdep_hardirqs_on+0x9c/0x150 [ 1641.107992][T26591] ? __pfx_do_sys_openat2+0x10/0x10 [ 1641.108015][T26591] ? __x64_sys_openat+0xd6/0x170 [ 1641.108038][T26591] __x64_sys_openat+0x138/0x170 [ 1641.108059][T26591] do_syscall_64+0xf6/0x210 [ 1641.108079][T26591] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1641.108094][T26591] ? clear_bhb_loop+0x45/0xa0 [ 1641.108114][T26591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.108129][T26591] RIP: 0033:0x7fb65458d2d0 [ 1641.108145][T26591] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1641.108160][T26591] RSP: 002b:00007fb6554b7b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1641.108177][T26591] RAX: ffffffffffffffda RBX: 0000000000127081 RCX: 00007fb65458d2d0 [ 1641.108189][T26591] RDX: 0000000000127081 RSI: 00007fb6554b7c10 RDI: 00000000ffffff9c [ 1641.108200][T26591] RBP: 00007fb6554b7c10 R08: 0000000000000000 R09: 002367732f766564 [ 1641.108211][T26591] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1641.108221][T26591] R13: 0000000000000000 R14: 00007fb6547b5fa0 R15: 00007fff40795f88 [ 1641.108259][T26591] [ 1642.745737][T26614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5106'. [ 1642.798165][T22944] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1643.475345][T22944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1643.826848][T22944] usb 7-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1643.836674][T22944] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.853297][T22944] usb 7-1: config 0 descriptor?? [ 1644.996696][T26627] program syz.6.5105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1646.271451][T22944] usbhid 7-1:0.0: can't add hid device: -71 [ 1646.298692][T22944] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1646.580251][T22944] usb 7-1: USB disconnect, device number 22 [ 1646.589262][T17249] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1646.658033][T26645] input: syz0 as /devices/virtual/input/input58 [ 1646.664607][T26645] input: failed to attach handler leds to device input58, error: -6 [ 1647.700772][T17249] usb 4-1: Using ep0 maxpacket: 16 [ 1648.677396][T17249] usb 4-1: config index 0 descriptor too short (expected 38948, got 36) [ 1648.726740][T17249] usb 4-1: config 50 has too many interfaces: 81, using maximum allowed: 32 [ 1648.753769][T17249] usb 4-1: config 50 has an invalid interface number: 251 but max is 80 [ 1648.766635][T17249] usb 4-1: config 50 has 1 interface, different from the descriptor's value: 81 [ 1648.780441][T17249] usb 4-1: config 50 has no interface number 0 [ 1648.786813][T17249] usb 4-1: config 50 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1648.797368][T17249] usb 4-1: config 50 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1648.810558][T17249] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1648.819964][T17249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.828997][T17249] usb 4-1: Product: syz [ 1648.833444][T17249] usb 4-1: Manufacturer: syz [ 1649.727872][T17249] usb 4-1: SerialNumber: syz [ 1649.901393][T17249] usb 4-1: can't set config #50, error -71 [ 1649.999631][T26655] binder: 26652:26655 ioctl c0306201 200000001d40 returned -14 [ 1650.055318][T17249] usb 4-1: USB disconnect, device number 102 [ 1650.364343][T26663] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5118'. [ 1651.225105][T26667] xt_hashlimit: size too large, truncated to 1048576 [ 1651.264492][T26668] nbd: must specify an index to disconnect [ 1651.706773][T26671] : renamed from bond0 (while UP) [ 1653.425725][T26694] binder: 26689:26694 ioctl c0306201 200000001d40 returned -14 [ 1654.228814][T26698] syzkaller1: entered promiscuous mode [ 1654.239871][T26698] syzkaller1: entered allmulticast mode [ 1654.882387][T26708] syz.3.5130: attempt to access beyond end of device [ 1654.882387][T26708] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1654.896280][T26708] (syz.3.5130,26708,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 1654.904790][T26708] (syz.3.5130,26708,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 1654.912579][T26708] (syz.3.5130,26708,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1654.921821][T26708] (syz.3.5130,26708,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1654.933221][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1655.462990][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1655.473753][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1655.491992][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1655.595219][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1655.604944][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.616039][ T9] usb 1-1: config 0 descriptor?? [ 1655.712825][T26714] loop6: detected capacity change from 0 to 524287999 [ 1656.048208][T26723] FAULT_INJECTION: forcing a failure. [ 1656.048208][T26723] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.071478][T26723] CPU: 1 UID: 0 PID: 26723 Comm: syz.7.5135 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1656.071505][T26723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1656.071516][T26723] Call Trace: [ 1656.071523][T26723] [ 1656.071530][T26723] dump_stack_lvl+0x189/0x250 [ 1656.071559][T26723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1656.071580][T26723] ? __pfx__printk+0x10/0x10 [ 1656.071609][T26723] ? __pfx___might_resched+0x10/0x10 [ 1656.071630][T26723] ? fs_reclaim_acquire+0x7d/0x100 [ 1656.071650][T26723] should_fail_ex+0x414/0x560 [ 1656.071678][T26723] should_failslab+0xa8/0x100 [ 1656.071701][T26723] __kmalloc_cache_noprof+0x70/0x3d0 [ 1656.071720][T26723] ? snd_seq_queue_alloc+0x5d/0x790 [ 1656.071740][T26723] snd_seq_queue_alloc+0x5d/0x790 [ 1656.071759][T26723] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 1656.071785][T26723] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 1656.071810][T26723] snd_seq_oss_open+0x5e0/0xea0 [ 1656.071838][T26723] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 1656.071873][T26723] ? __lock_acquire+0xaac/0xd20 [ 1656.071919][T26723] ? rcu_is_watching+0x15/0xb0 [ 1656.071942][T26723] ? trace_contention_end+0x39/0x120 [ 1656.071971][T26723] ? __pfx___mutex_lock+0x10/0x10 [ 1656.071993][T26723] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 1656.072007][T26723] ? __pfx_free_devinfo+0x10/0x10 [ 1656.072024][T26723] ? do_raw_spin_unlock+0x122/0x240 [ 1656.072045][T26723] ? soundcore_open+0x2da/0x490 [ 1656.072067][T26723] odev_open+0x67/0xa0 [ 1656.072088][T26723] chrdev_open+0x4c9/0x5e0 [ 1656.072112][T26723] ? __pfx_chrdev_open+0x10/0x10 [ 1656.072139][T26723] ? __pfx_chrdev_open+0x10/0x10 [ 1656.072158][T26723] do_dentry_open+0xdf0/0x1970 [ 1656.072188][T26723] vfs_open+0x3b/0x340 [ 1656.072202][T26723] ? path_openat+0x2ecd/0x3830 [ 1656.072222][T26723] path_openat+0x2ee5/0x3830 [ 1656.072240][T26723] ? arch_stack_walk+0xfc/0x150 [ 1656.072289][T26723] ? __pfx_path_openat+0x10/0x10 [ 1656.072306][T26723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.072343][T26723] do_filp_open+0x1fa/0x410 [ 1656.072364][T26723] ? __pfx_do_filp_open+0x10/0x10 [ 1656.072402][T26723] ? _raw_spin_unlock+0x28/0x50 [ 1656.072417][T26723] ? alloc_fd+0x64c/0x6c0 [ 1656.072446][T26723] do_sys_openat2+0x121/0x1c0 [ 1656.072466][T26723] ? __pfx_do_sys_openat2+0x10/0x10 [ 1656.072487][T26723] ? ksys_write+0x1f0/0x250 [ 1656.072506][T26723] ? rcu_is_watching+0x15/0xb0 [ 1656.072533][T26723] __x64_sys_openat+0x138/0x170 [ 1656.072555][T26723] do_syscall_64+0xf6/0x210 [ 1656.072574][T26723] ? clear_bhb_loop+0x45/0xa0 [ 1656.072592][T26723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.072608][T26723] RIP: 0033:0x7fbb3418e969 [ 1656.072622][T26723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1656.072637][T26723] RSP: 002b:00007fbb3502e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1656.072656][T26723] RAX: ffffffffffffffda RBX: 00007fbb343b6080 RCX: 00007fbb3418e969 [ 1656.072668][T26723] RDX: 00000000001e4011 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1656.072681][T26723] RBP: 00007fbb3502e090 R08: 0000000000000000 R09: 0000000000000000 [ 1656.072691][T26723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1656.072702][T26723] R13: 0000000000000000 R14: 00007fbb343b6080 R15: 00007fff38a8d2c8 [ 1656.072730][T26723] [ 1656.267974][ T9] ft260 0003:0403:6030.0027: unknown main item tag 0x0 [ 1656.274825][T26234] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1656.451264][ T9] ft260 0003:0403:6030.0027: chip code: 0000 0000 [ 1656.593123][T26234] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=cc.97 [ 1656.603224][T26234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.676158][T26701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.684972][T26701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.148022][T26234] usb 4-1: config 0 descriptor?? [ 1657.186403][T26234] sisusb 4-1:0.0: Invalid USB2VGA device [ 1657.206823][ T9] ft260 0003:0403:6030.0027: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1657.217222][T26234] sisusb 4-1:0.0: probe with driver sisusb failed with error -22 [ 1657.361402][T26731] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5138'. [ 1657.374811][T26731] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5138'. [ 1657.395528][T26731] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5138'. [ 1657.443567][T15840] usb 4-1: USB disconnect, device number 103 [ 1657.517922][ T9] ft260 0003:0403:6030.0027: failed to retrieve status: -71, no wakeup [ 1657.585996][ T9] ft260 0003:0403:6030.0027: failed to retrieve status: -71 [ 1657.749008][ T9] ft260 0003:0403:6030.0027: failed to reset I2C controller: -71 [ 1658.476378][ T9] usb 1-1: USB disconnect, device number 3 [ 1658.643072][T26742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5142'. [ 1658.804908][T26746] SET target dimension over the limit! [ 1658.904518][T22944] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1660.137540][T22944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1660.191942][T22944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.209024][T22944] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1660.218259][T22944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.229243][T22944] usb 4-1: config 0 descriptor?? [ 1661.308751][T26764] loop6: detected capacity change from 0 to 524287999 [ 1661.429549][T22944] nzxt-kraken2 0003:1E71:170E.0028: item fetching failed at offset 5/7 [ 1661.484030][T22944] nzxt-kraken2 0003:1E71:170E.0028: hid parse failed with -22 [ 1661.534524][T22944] nzxt-kraken2 0003:1E71:170E.0028: probe with driver nzxt-kraken2 failed with error -22 [ 1661.624158][ T883] usb 4-1: USB disconnect, device number 104 [ 1662.282931][ T5870] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1663.108240][ T5870] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 1663.108270][ T5870] usb 1-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 1663.108289][ T5870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1663.108316][ T5870] usb 1-1: config 1 has no interface number 0 [ 1663.108356][ T5870] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid maxpacket 21076, setting to 64 [ 1663.113822][ T5870] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1663.113852][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.113871][ T5870] usb 1-1: Product: syz [ 1663.113885][ T5870] usb 1-1: Manufacturer: syz [ 1663.113899][ T5870] usb 1-1: SerialNumber: syz [ 1663.225243][T26770] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1663.237088][ T5870] cdc_wdm 1-1:1.128: skipping garbage [ 1663.256774][ T5870] cdc_wdm 1-1:1.128: cdc-wdm0: USB WDM device [ 1663.263007][ T5870] cdc_wdm 1-1:1.128: Unknown control protocol [ 1664.508268][ T5827] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1664.527552][ T5827] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1664.527928][T26790] netlink: 'syz.6.5153': attribute type 10 has an invalid length. [ 1664.539419][ T5827] usb 2-1: USB disconnect, device number 97 [ 1664.611886][T26790] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1664.865211][ T5870] usb 1-1: USB disconnect, device number 4 [ 1665.166157][T26805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5156'. [ 1665.288288][T26809] Cannot find del_set index 0 as target [ 1667.136402][ T5870] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1668.168131][T26832] netlink: 'syz.6.5167': attribute type 10 has an invalid length. [ 1668.173263][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 1668.196309][ T5870] usb 4-1: config 0 has an invalid interface number: 194 but max is 1 [ 1668.204524][ T5870] usb 4-1: config 0 has no interface number 1 [ 1668.214327][ T5870] usb 4-1: config 0 interface 194 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1668.457886][ T5870] usb 4-1: config 0 interface 194 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1668.593703][ T5870] usb 4-1: New USB device found, idVendor=0499, idProduct=5005, bcdDevice=29.33 [ 1668.622932][T26837] syzkaller1: entered promiscuous mode [ 1668.628448][T26837] syzkaller1: entered allmulticast mode [ 1668.635327][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.704227][ T5870] usb 4-1: Product: syz [ 1668.749434][ T5870] usb 4-1: Manufacturer: syz [ 1668.792116][ T5870] usb 4-1: SerialNumber: syz [ 1668.960804][ T5870] usb 4-1: config 0 descriptor?? [ 1668.996703][ T5870] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1669.013906][ T5870] usb 4-1: invalid MIDI in EP 0 [ 1669.020456][ T5870] snd-usb-audio 4-1:0.194: probe with driver snd-usb-audio failed with error -22 [ 1669.809975][ T5870] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1669.831927][ T5827] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1670.217146][ T5827] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 1670.333097][ T5870] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1670.387720][ T5827] usb 2-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 1670.399585][ T5870] usb 4-1: USB disconnect, device number 105 [ 1670.781625][ T5827] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1670.877957][ T5827] usb 2-1: config 1 has no interface number 0 [ 1670.901669][ T5827] usb 2-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid maxpacket 21076, setting to 64 [ 1671.091950][ T5827] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1671.113441][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.115926][T26857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5172'. [ 1671.130565][ T5827] usb 2-1: Product: syz [ 1671.130588][ T5827] usb 2-1: Manufacturer: syz [ 1671.130603][ T5827] usb 2-1: SerialNumber: syz [ 1671.145971][T26841] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1671.220103][T26858] netlink: 192 bytes leftover after parsing attributes in process `syz.7.5170'. [ 1671.635938][ T5827] cdc_wdm 2-1:1.128: skipping garbage [ 1671.643460][ T5827] cdc_wdm 2-1:1.128: cdc-wdm0: USB WDM device [ 1671.649773][ T5827] cdc_wdm 2-1:1.128: Unknown control protocol [ 1671.777750][T26859] Cannot find del_set index 0 as target [ 1671.808086][ T5870] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1673.100495][T26234] usb 2-1: USB disconnect, device number 98 [ 1673.212536][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1673.343068][ T5870] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1673.395135][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1673.434573][ T5870] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1673.485450][ T5870] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1673.513610][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.535402][ T5870] usb 4-1: Product: syz [ 1673.539651][ T5870] usb 4-1: Manufacturer: syz [ 1673.566130][ T5870] usb 4-1: SerialNumber: syz [ 1673.599124][ T5870] usb 4-1: config 0 descriptor?? [ 1673.611205][T26880] netlink: 'syz.0.5179': attribute type 10 has an invalid length. [ 1673.619207][ T5870] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1673.966425][T26873] tmpfs: Unknown parameter 'sizŲ' [ 1673.979065][ T5870] scsi host1: usb-storage 4-1:0.0 [ 1674.679647][ T5870] usb 4-1: USB disconnect, device number 106 [ 1674.783215][T26896] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5182'. [ 1674.849955][T26898] syz.1.5183: attempt to access beyond end of device [ 1674.849955][T26898] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1674.889174][T26898] efs: cannot read volume header [ 1674.926729][T26897] syzkaller1: entered promiscuous mode [ 1674.933724][T26897] syzkaller1: entered allmulticast mode [ 1675.170288][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.926613][T26912] vlan2: entered allmulticast mode [ 1677.814601][T26930] veth0_macvtap (unregistering): left allmulticast mode [ 1686.937216][T26952] syzkaller1: entered promiscuous mode [ 1687.052843][T26952] syzkaller1: entered allmulticast mode [ 1688.881446][T15841] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 1689.098204][T15841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1689.138882][T26955] ceph: No mds server is up or the cluster is laggy [ 1689.154390][T15841] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1689.208050][T15841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.225266][T15841] usb 4-1: config 0 descriptor?? [ 1689.504582][T26980] program syz.3.5202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1690.205393][T26986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5205'. [ 1690.522630][T26986] SET target dimension over the limit! [ 1691.721933][T15841] usbhid 4-1:0.0: can't add hid device: -71 [ 1691.728101][T15841] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1691.740661][T15841] usb 4-1: USB disconnect, device number 107 [ 1692.259340][T26234] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1692.437738][T26234] usb 8-1: config 1 has an invalid interface number: 128 but max is 1 [ 1692.467874][T26234] usb 8-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 1692.496212][T26234] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1692.507508][T26993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1692.524537][T26234] usb 8-1: config 1 has no interface number 0 [ 1692.539366][T26234] usb 8-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid maxpacket 21076, setting to 64 [ 1692.651165][T26234] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1692.682400][T26234] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.733841][T26234] usb 8-1: Product: syz [ 1692.738063][T26234] usb 8-1: Manufacturer: syz [ 1692.872733][T27004] netlink: 340 bytes leftover after parsing attributes in process `syz.1.5210'. [ 1692.907785][T23805] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1693.082680][T15841] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1693.199674][T26234] usb 8-1: SerialNumber: syz [ 1693.231085][T26994] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1693.254122][T15841] usb 1-1: device descriptor read/64, error -71 [ 1693.266761][T26234] cdc_wdm 8-1:1.128: skipping garbage [ 1693.268171][T27008] netlink: 'syz.6.5211': attribute type 10 has an invalid length. [ 1693.292480][T26234] cdc_wdm 8-1:1.128: cdc-wdm0: USB WDM device [ 1693.305594][T26234] cdc_wdm 8-1:1.128: Unknown control protocol [ 1693.453956][T27013] binder: 27012:27013 ioctl c0306201 200000001d40 returned -11 [ 1693.525500][T15841] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1693.563506][T22944] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 1693.663479][T27017] syzkaller1: entered promiscuous mode [ 1693.669190][T27017] syzkaller1: entered allmulticast mode [ 1693.862897][T22944] usb 7-1: Invalid ep0 maxpacket: 32 [ 1694.012037][T15841] usb 1-1: device descriptor read/64, error -71 [ 1694.130345][T15841] usb usb1-port1: attempt power cycle [ 1694.151763][T22944] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 1694.382877][T22944] usb 7-1: Invalid ep0 maxpacket: 32 [ 1694.670383][T15841] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1695.331124][T22944] usb usb7-port1: attempt power cycle [ 1695.695665][T15841] usb 1-1: device descriptor read/8, error -71 [ 1695.708854][T15840] usb 8-1: USB disconnect, device number 22 [ 1696.043756][T15841] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1696.706044][T27027] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1696.712253][T27027] syzkaller1: linktype set to 32 [ 1696.733893][T23805] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1696.790814][T22944] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 1696.957709][T22944] usb 7-1: device descriptor read/8, error -71 [ 1697.035214][T15841] usb 1-1: device not accepting address 8, error -71 [ 1697.047535][T15841] usb usb1-port1: unable to enumerate USB device [ 1697.647383][T15841] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1697.954207][T15841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1697.965469][T15841] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1698.142143][T15841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.220963][T15841] usb 1-1: config 0 descriptor?? [ 1698.535018][T27059] binder: 27055:27059 ioctl c0306201 200000001d40 returned -14 [ 1699.596047][T27062] program syz.0.5218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1700.106279][T26234] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1700.501783][T26234] usb 2-1: Using ep0 maxpacket: 8 [ 1700.512204][T26234] usb 2-1: config 0 has an invalid interface number: 180 but max is 1 [ 1700.936100][T26234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.946748][T26234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1700.955700][T26234] usb 2-1: config 0 has no interface number 0 [ 1700.987978][T15841] usbhid 1-1:0.0: can't add hid device: -71 [ 1701.004366][T26234] usb 2-1: config 0 interface 180 has no altsetting 0 [ 1701.009384][T15841] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1701.011194][T26234] usb 2-1: New USB device found, idVendor=19d2, idProduct=1476, bcdDevice=22.51 [ 1701.033281][T26234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.038555][T15841] usb 1-1: USB disconnect, device number 9 [ 1701.069927][T26234] usb 2-1: config 0 descriptor?? [ 1701.285786][T18741] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 1701.322292][T26234] usb 2-1: string descriptor 0 read error: -71 [ 1701.356974][T26234] option 2-1:0.180: GSM modem (1-port) converter detected [ 1701.866236][T26234] usb 2-1: USB disconnect, device number 99 [ 1701.875895][T26234] option 2-1:0.180: device disconnected [ 1702.053242][T18741] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 1702.061493][T18741] usb 4-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 1702.072971][T18741] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1702.575318][T18741] usb 4-1: config 1 has no interface number 0 [ 1702.581743][T18741] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid maxpacket 21076, setting to 64 [ 1702.610392][T18741] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1702.633044][T18741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.653417][T18741] usb 4-1: Product: syz [ 1702.668798][T18741] usb 4-1: Manufacturer: syz [ 1702.698647][T18741] usb 4-1: SerialNumber: syz [ 1702.942255][T27077] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1702.952676][T18741] cdc_wdm 4-1:1.128: skipping garbage [ 1703.134465][T27093] binder: 27089:27093 ioctl c0306201 200000001d40 returned -14 [ 1703.217267][T18741] cdc_wdm 4-1:1.128: cdc-wdm0: USB WDM device [ 1703.227850][T18741] cdc_wdm 4-1:1.128: Unknown control protocol [ 1703.342262][T26234] usb 4-1: USB disconnect, device number 108 [ 1704.126588][T27109] netlink: 'syz.0.5237': attribute type 16 has an invalid length. [ 1704.217031][T27109] netlink: 'syz.0.5237': attribute type 17 has an invalid length. [ 1704.560875][T27109] overlayfs: missing 'lowerdir' [ 1704.783231][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 1706.200238][T18741] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 1706.365707][T27135] netlink: 'syz.1.5246': attribute type 10 has an invalid length. [ 1706.486826][T18741] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1706.499534][T18741] usb 8-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1706.508692][T18741] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.014617][T18741] usb 8-1: config 0 descriptor?? [ 1707.325015][T27126] program syz.7.5241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1708.272816][T27154] binder: 27150:27154 ioctl c0306201 200000001d40 returned -11 [ 1708.580333][T27156] binder: 27152:27156 ioctl c0306201 200000001d40 returned -11 [ 1708.797644][T18741] usbhid 8-1:0.0: can't add hid device: -71 [ 1708.803626][T18741] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1708.938544][T18741] usb 8-1: USB disconnect, device number 23 [ 1709.282688][T27165] netlink: 'syz.6.5252': attribute type 16 has an invalid length. [ 1709.488288][T27165] netlink: 'syz.6.5252': attribute type 17 has an invalid length. [ 1710.523942][T27162] overlayfs: missing 'lowerdir' [ 1710.794097][T27184] netlink: 'syz.0.5258': attribute type 10 has an invalid length. [ 1710.900596][T27186] binder: 27181:27186 ioctl c0306201 200000001d40 returned -14 [ 1712.498054][T27200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1712.859279][T27204] Cannot find del_set index 0 as target [ 1716.266482][T27227] binder: 27225:27227 ioctl c0306201 200000001d40 returned -11 [ 1716.597375][T27229] netlink: 'syz.3.5270': attribute type 10 has an invalid length. [ 1717.747697][T27238] netlink: 'syz.6.5271': attribute type 16 has an invalid length. [ 1717.755647][T27238] netlink: 'syz.6.5271': attribute type 17 has an invalid length. [ 1717.938102][T18741] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 1718.689148][T18741] usb 8-1: config 1 has an invalid interface number: 128 but max is 1 [ 1719.094382][T18741] usb 8-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 1719.142929][T18741] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1719.158830][T18741] usb 8-1: config 1 has no interface number 0 [ 1719.165160][T18741] usb 8-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid maxpacket 21076, setting to 64 [ 1719.232489][T18741] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1719.273368][T27246] overlayfs: missing 'lowerdir' [ 1719.276644][T18741] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.514506][T18741] usb 8-1: Product: syz [ 1719.527194][T18741] usb 8-1: Manufacturer: syz [ 1719.547996][T18741] usb 8-1: SerialNumber: syz [ 1719.567232][T27245] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1719.616945][T15840] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1720.046441][T18741] cdc_wdm 8-1:1.128: skipping garbage [ 1720.054431][T18741] cdc_wdm 8-1:1.128: cdc-wdm0: USB WDM device [ 1720.061390][T18741] cdc_wdm 8-1:1.128: Unknown control protocol [ 1720.134552][T15840] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1720.227718][T15840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.243715][T15840] usb 2-1: Product: syz [ 1720.257429][T15840] usb 2-1: Manufacturer: syz [ 1720.263829][T15840] usb 2-1: SerialNumber: syz [ 1720.352382][T15840] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1720.378613][T18741] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1720.687674][T27272] netlink: 'syz.0.5281': attribute type 10 has an invalid length. [ 1720.761267][ T30] audit: type=1400 audit(1746818639.009:877): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=27249 comm="syz.1.5276" [ 1721.067571][ T5870] usb 8-1: USB disconnect, device number 24 [ 1721.572622][T18741] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1721.581964][ T5827] usb 2-1: USB disconnect, device number 100 [ 1721.603268][T18741] ath9k_htc: Failed to initialize the device [ 1721.612682][ T5827] usb 2-1: ath9k_htc: USB layer deinitialized [ 1721.703724][T27283] netlink: 'syz.7.5284': attribute type 10 has an invalid length. [ 1722.940641][ C0] vkms_vblank_simulate: vblank timer overrun [ 1723.564208][ T5827] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1724.459376][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 1724.467026][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1724.480049][ T5827] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1724.489452][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.516837][ T5827] usb 1-1: Product: syz [ 1724.615839][ T5827] usb 1-1: Manufacturer: syz [ 1724.649645][ T5827] usb 1-1: SerialNumber: syz [ 1724.920622][ T5827] usb 1-1: config 0 descriptor?? [ 1724.944608][ T5827] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1724.969419][T27315] FAULT_INJECTION: forcing a failure. [ 1724.969419][T27315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.002602][ T5827] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1725.014328][T27318] netlink: 'syz.6.5295': attribute type 10 has an invalid length. [ 1725.023606][T27315] CPU: 1 UID: 0 PID: 27315 Comm: syz.1.5293 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1725.023638][T27315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1725.023651][T27315] Call Trace: [ 1725.023659][T27315] [ 1725.023669][T27315] dump_stack_lvl+0x189/0x250 [ 1725.023699][T27315] ? __lock_acquire+0xaac/0xd20 [ 1725.023724][T27315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1725.023744][T27315] ? __pfx__printk+0x10/0x10 [ 1725.023764][T27315] ? __might_fault+0xb0/0x130 [ 1725.023798][T27315] should_fail_ex+0x414/0x560 [ 1725.023829][T27315] _copy_from_user+0x2d/0xb0 [ 1725.023851][T27315] ___sys_sendmsg+0x158/0x2a0 [ 1725.023876][T27315] ? __pfx____sys_sendmsg+0x10/0x10 [ 1725.023930][T27315] ? __fget_files+0x2a/0x420 [ 1725.023952][T27315] ? __fget_files+0x3a0/0x420 [ 1725.024058][T27315] __x64_sys_sendmsg+0x19b/0x260 [ 1725.024101][T27315] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1725.024138][T27315] ? do_syscall_64+0xba/0x210 [ 1725.024162][T27315] do_syscall_64+0xf6/0x210 [ 1725.024181][T27315] ? clear_bhb_loop+0x45/0xa0 [ 1725.024202][T27315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.024219][T27315] RIP: 0033:0x7fb65458e969 [ 1725.024236][T27315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1725.024250][T27315] RSP: 002b:00007fb6554b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1725.024269][T27315] RAX: ffffffffffffffda RBX: 00007fb6547b5fa0 RCX: 00007fb65458e969 [ 1725.024282][T27315] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1725.024292][T27315] RBP: 00007fb6554b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1725.024302][T27315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.024311][T27315] R13: 0000000000000000 R14: 00007fb6547b5fa0 R15: 00007fff40795f88 [ 1725.024336][T27315] [ 1725.472726][T27326] binder: 27322:27326 ioctl c0306201 200000001d40 returned -14 [ 1725.964688][ T5827] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1726.148462][T18741] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 1726.322326][T18741] usb 8-1: config 1 has an invalid interface number: 128 but max is 1 [ 1726.343374][T18741] usb 8-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 1726.361213][T18741] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1726.486014][T18741] usb 8-1: config 1 has no interface number 0 [ 1726.507994][T18741] usb 8-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid maxpacket 21076, setting to 64 [ 1726.524946][T18741] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1726.577073][T18741] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.586787][T18741] usb 8-1: Product: syz [ 1726.591069][T18741] usb 8-1: Manufacturer: syz [ 1726.596846][T18741] usb 8-1: SerialNumber: syz [ 1726.605626][T27327] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1726.614392][T18741] cdc_wdm 8-1:1.128: skipping garbage [ 1726.631251][T18741] cdc_wdm 8-1:1.128: cdc-wdm0: USB WDM device [ 1726.683025][T18741] cdc_wdm 8-1:1.128: Unknown control protocol [ 1726.749167][ T5827] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1726.789274][ T5827] em28xx 1-1:0.0: board has no eeprom [ 1726.866671][T27345] SET target dimension over the limit! [ 1727.527757][ T5827] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1727.717633][ T5827] em28xx 1-1:0.0: dvb set to bulk mode. [ 1727.827743][T27348] binder: 27343:27348 ioctl c0306201 200000001d40 returned -11 [ 1727.866659][ T5870] em28xx 1-1:0.0: Binding DVB extension [ 1728.198220][T27350] FAULT_INJECTION: forcing a failure. [ 1728.198220][T27350] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.265662][T27350] CPU: 1 UID: 0 PID: 27350 Comm: syz.6.5303 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1728.265689][T27350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1728.265701][T27350] Call Trace: [ 1728.265708][T27350] [ 1728.265716][T27350] dump_stack_lvl+0x189/0x250 [ 1728.265749][T27350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1728.265769][T27350] ? __pfx__printk+0x10/0x10 [ 1728.265799][T27350] ? __pfx___might_resched+0x10/0x10 [ 1728.265821][T27350] ? fs_reclaim_acquire+0x7d/0x100 [ 1728.265844][T27350] should_fail_ex+0x414/0x560 [ 1728.265876][T27350] should_failslab+0xa8/0x100 [ 1728.265901][T27350] __kmalloc_noprof+0xcb/0x4f0 [ 1728.265922][T27350] ? kfree+0x4d/0x440 [ 1728.265939][T27350] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1728.265965][T27350] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1728.265987][T27350] ? tomoyo_domain+0xda/0x130 [ 1728.266013][T27350] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1728.266030][T27350] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1728.266050][T27350] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1728.266085][T27350] ? __lock_acquire+0xaac/0xd20 [ 1728.266125][T27350] ? __fget_files+0x2a/0x420 [ 1728.266154][T27350] ? __fget_files+0x3a0/0x420 [ 1728.266176][T27350] ? __fget_files+0x2a/0x420 [ 1728.266202][T27350] security_file_ioctl+0xcb/0x2d0 [ 1728.266222][T27350] __se_sys_ioctl+0x47/0x170 [ 1728.266245][T27350] do_syscall_64+0xf6/0x210 [ 1728.266264][T27350] ? clear_bhb_loop+0x45/0xa0 [ 1728.266284][T27350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.266298][T27350] RIP: 0033:0x7ff59938e969 [ 1728.266314][T27350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1728.266328][T27350] RSP: 002b:00007ff59a145038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1728.266344][T27350] RAX: ffffffffffffffda RBX: 00007ff5995b6080 RCX: 00007ff59938e969 [ 1728.266356][T27350] RDX: 0000200000000040 RSI: 0000000000005403 RDI: 0000000000000003 [ 1728.266367][T27350] RBP: 00007ff59a145090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.266378][T27350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.266387][T27350] R13: 0000000000000000 R14: 00007ff5995b6080 R15: 00007ffcd5a2a648 [ 1728.266415][T27350] [ 1728.266423][T27350] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1728.302562][T22944] usb 8-1: USB disconnect, device number 25 [ 1728.330404][ T5827] usb 1-1: USB disconnect, device number 10 [ 1728.612400][T27355] lo speed is unknown, defaulting to 1000 [ 1728.718540][ T5827] em28xx 1-1:0.0: Disconnecting em28xx [ 1728.725808][ T5870] em28xx 1-1:0.0: Registering input extension [ 1728.917414][ T5827] em28xx 1-1:0.0: Closing input extension [ 1728.932980][ T5827] em28xx 1-1:0.0: Freeing device [ 1729.739437][ T5827] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1729.908466][ T5827] usb 8-1: Using ep0 maxpacket: 8 [ 1729.923336][ T5827] usb 8-1: no configurations [ 1729.928179][ T5827] usb 8-1: can't read configurations, error -22 [ 1729.973233][T27383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5313'. [ 1730.265774][ T5827] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1730.551911][ T5827] usb 8-1: Using ep0 maxpacket: 8 [ 1730.562314][ T5827] usb 8-1: no configurations [ 1730.571964][ T5827] usb 8-1: can't read configurations, error -22 [ 1730.599590][ T5827] usb usb8-port1: attempt power cycle [ 1730.996090][T27394] binder: 27392:27394 ioctl c0306201 200000001d40 returned -11 [ 1731.130410][ T5827] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1731.185618][ T5827] usb 8-1: Using ep0 maxpacket: 8 [ 1731.192778][ T5827] usb 8-1: no configurations [ 1731.202592][T27396] syzkaller1: entered promiscuous mode [ 1731.205052][ T5827] usb 8-1: can't read configurations, error -22 [ 1731.226632][T27396] syzkaller1: entered allmulticast mode [ 1731.498133][ T5827] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1731.529019][ T5827] usb 8-1: Using ep0 maxpacket: 8 [ 1731.542528][ T5827] usb 8-1: no configurations [ 1731.639882][ T5827] usb 8-1: can't read configurations, error -22 [ 1731.711607][ T5827] usb usb8-port1: unable to enumerate USB device [ 1732.338736][T15840] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1732.516355][T15840] usb 7-1: config 1 has an invalid interface number: 128 but max is 1 [ 1732.530145][T27408] vivid-007: ================= START STATUS ================= [ 1732.541587][T27408] vivid-007: Generate PTS: true [ 1732.546998][T27408] vivid-007: Generate SCR: true [ 1732.550465][T15840] usb 7-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 1732.551875][T27408] tpg source WxH: 640x360 (Y'CbCr) [ 1732.616234][T15840] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1732.626327][T27408] tpg field: 1 [ 1732.657406][T27412] fuse: Bad value for 'fd' [ 1732.659684][T15840] usb 7-1: config 1 has no interface number 0 [ 1732.665811][T27408] tpg crop: (0,0)/640x360 [ 1732.668169][T15840] usb 7-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid maxpacket 21076, setting to 64 [ 1732.686494][T15840] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1732.701903][T15840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.710001][T15840] usb 7-1: Product: syz [ 1732.715227][T15840] usb 7-1: Manufacturer: syz [ 1732.719942][T15840] usb 7-1: SerialNumber: syz [ 1732.744643][T27406] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1732.786362][T15840] cdc_wdm 7-1:1.128: skipping garbage [ 1732.850324][T15840] cdc_wdm 7-1:1.128: cdc-wdm0: USB WDM device [ 1732.886354][T27408] tpg compose: (0,0)/640x360 [ 1732.899780][T15840] cdc_wdm 7-1:1.128: Unknown control protocol [ 1732.959506][T27408] tpg colorspace: 8 [ 1733.643360][T27408] tpg transfer function: 0/0 [ 1733.660526][T27408] tpg Y'CbCr encoding: 0/0 [ 1733.711238][T27408] tpg quantization: 0/0 [ 1733.760002][T27408] tpg RGB range: 0/2 [ 1733.791746][T27408] vivid-007: ================== END STATUS ================== [ 1733.899704][T27415] netlink: 'syz.0.5320': attribute type 10 has an invalid length. [ 1733.967125][T27415] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1734.849814][ T5870] usb 7-1: USB disconnect, device number 27 [ 1736.816527][T23805] Bluetooth: hci5: ACL packet too small [ 1736.840601][T27452] binder: 27451:27452 ioctl c0306201 200000001d40 returned -14 [ 1737.417275][T27458] vlan2: entered allmulticast mode [ 1737.505727][T27464] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5330'. [ 1737.568690][T27463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.576404][T27463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.589334][T27466] netlink: 'syz.0.5333': attribute type 11 has an invalid length. [ 1737.606725][T27463] bridge0: entered allmulticast mode [ 1737.623669][T27464] veth0_vlan: entered allmulticast mode [ 1737.673100][T27468] bridge_slave_1: left allmulticast mode [ 1737.686733][T27468] bridge_slave_1: left promiscuous mode [ 1737.706697][T27468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.052367][T27468] bridge_slave_0: left allmulticast mode [ 1738.058855][T27468] bridge_slave_0: left promiscuous mode [ 1738.070490][T27468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.485875][ T30] audit: type=1400 audit(1746818655.575:878): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27470 comm="syz.0.5334" name="newroot" dev="tmpfs" ino=2 [ 1738.506818][ T30] audit: type=1400 audit(1746818655.575:879): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27470 comm="syz.0.5334" name="/" dev="devtmpfs" ino=1 [ 1738.526931][ T30] audit: type=1400 audit(1746818655.575:880): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=27470 comm="syz.0.5334" name="vbi3" dev="devtmpfs" ino=968 [ 1738.547300][ T30] audit: type=1400 audit(1746818655.575:881): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=27470 comm="syz.0.5334" path="/dev/vbi3" dev="devtmpfs" ino=968 [ 1738.567227][ T30] audit: type=1400 audit(1746818655.613:882): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27472 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1738.595629][ T30] audit: type=1400 audit(1746818655.613:883): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27472 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1738.615710][ T30] audit: type=1400 audit(1746818655.613:884): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27472 comm="syz-executor" name="186" dev="tmpfs" ino=1026 [ 1738.635112][ T30] audit: type=1400 audit(1746818655.631:885): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=27472 comm="syz-executor" opid=27472 ocomm="syz-executor" [ 1738.653809][ C0] vkms_vblank_simulate: vblank timer overrun [ 1738.762480][ T30] audit: type=1400 audit(1746818655.631:886): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27472 comm="syz-executor" name="186" dev="tmpfs" ino=1026 [ 1739.199352][ T30] audit: type=1400 audit(1746818655.631:887): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27472 comm="syz-executor" name="186" dev="tmpfs" ino=1026 [ 1739.602460][T27487] netlink: 'syz.0.5338': attribute type 2 has an invalid length. [ 1739.614428][T27487] FAULT_INJECTION: forcing a failure. [ 1739.614428][T27487] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.631133][T27487] CPU: 0 UID: 0 PID: 27487 Comm: syz.0.5338 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1739.631156][T27487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1739.631164][T27487] Call Trace: [ 1739.631171][T27487] [ 1739.631177][T27487] dump_stack_lvl+0x189/0x250 [ 1739.631197][T27487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1739.631211][T27487] ? __pfx__printk+0x10/0x10 [ 1739.631228][T27487] ? fs_reclaim_acquire+0x7d/0x100 [ 1739.631243][T27487] should_fail_ex+0x414/0x560 [ 1739.631261][T27487] should_failslab+0xa8/0x100 [ 1739.631277][T27487] __kmalloc_cache_noprof+0x70/0x3d0 [ 1739.631290][T27487] ? ovs_dp_cmd_new+0x3f3/0xaf0 [ 1739.631304][T27487] ovs_dp_cmd_new+0x3f3/0xaf0 [ 1739.631321][T27487] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1739.631335][T27487] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1739.631353][T27487] genl_family_rcv_msg_doit+0x212/0x300 [ 1739.631369][T27487] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1739.631389][T27487] ? bpf_lsm_capable+0x9/0x20 [ 1739.631402][T27487] ? security_capable+0x7e/0x2e0 [ 1739.631418][T27487] genl_rcv_msg+0x60e/0x790 [ 1739.631434][T27487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1739.631446][T27487] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1739.631463][T27487] netlink_rcv_skb+0x219/0x490 [ 1739.631474][T27487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1739.631487][T27487] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1739.631509][T27487] ? down_read+0x1ad/0x2e0 [ 1739.631523][T27487] genl_rcv+0x28/0x40 [ 1739.631533][T27487] netlink_unicast+0x758/0x8d0 [ 1739.631560][T27487] netlink_sendmsg+0x805/0xb30 [ 1739.631575][T27487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1739.631590][T27487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1739.631600][T27487] __sock_sendmsg+0x219/0x270 [ 1739.631617][T27487] ____sys_sendmsg+0x505/0x830 [ 1739.631633][T27487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1739.631649][T27487] ? import_iovec+0x74/0xa0 [ 1739.631664][T27487] ___sys_sendmsg+0x21f/0x2a0 [ 1739.631677][T27487] ? __pfx____sys_sendmsg+0x10/0x10 [ 1739.631692][T27487] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 1739.631718][T27487] ? __fget_files+0x2a/0x420 [ 1739.631732][T27487] ? __fget_files+0x3a0/0x420 [ 1739.631751][T27487] __x64_sys_sendmsg+0x19b/0x260 [ 1739.631764][T27487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1739.631784][T27487] ? do_syscall_64+0xba/0x210 [ 1739.631800][T27487] do_syscall_64+0xf6/0x210 [ 1739.631811][T27487] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1739.631821][T27487] ? clear_bhb_loop+0x45/0xa0 [ 1739.631832][T27487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.631841][T27487] RIP: 0033:0x7f16d918e969 [ 1739.631852][T27487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1739.631860][T27487] RSP: 002b:00007f16d9fe4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1739.631872][T27487] RAX: ffffffffffffffda RBX: 00007f16d93b6080 RCX: 00007f16d918e969 [ 1739.631879][T27487] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1739.631885][T27487] RBP: 00007f16d9fe4090 R08: 0000000000000000 R09: 0000000000000000 [ 1739.631891][T27487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.631897][T27487] R13: 0000000000000000 R14: 00007f16d93b6080 R15: 00007ffc13a14a88 [ 1739.631912][T27487] [ 1739.959008][ C0] vkms_vblank_simulate: vblank timer overrun [ 1740.891258][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1741.280774][T27503] binder: 27498:27503 ioctl c0306201 200000001d40 returned -14 [ 1741.297347][ T5827] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 1742.004538][T27517] binder_alloc: 27513: binder_alloc_buf, no vma [ 1742.023745][T27517] binder: 27513:27517 ioctl c0306201 200000001d40 returned -11 [ 1743.177823][ T5827] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1743.221106][ T5827] usb 4-1: too many configurations: 108, using maximum allowed: 8 [ 1743.299374][ T5827] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1743.328638][ T5827] usb 4-1: can't read configurations, error -71 [ 1743.742194][T27523] binder: 27521:27523 ioctl c0306201 200000001d40 returned -11 [ 1743.851840][ T30] kauditd_printk_skb: 2176 callbacks suppressed [ 1743.851857][ T30] audit: type=1400 audit(1746818660.608:2477): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27525 comm="syz.7.5350" name="newroot" dev="tmpfs" ino=2 [ 1743.862844][T27526] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1743.897895][T27528] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1743.904429][T27528] audit: audit_lost=200 audit_rate_limit=0 audit_backlog_limit=64 [ 1743.912791][T27528] audit: backlog limit exceeded [ 1743.918013][T27528] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1743.924613][T27528] audit: audit_lost=201 audit_rate_limit=0 audit_backlog_limit=64 [ 1743.932618][T27528] audit: backlog limit exceeded [ 1743.937717][T27528] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1743.944293][T27528] audit: audit_lost=202 audit_rate_limit=0 audit_backlog_limit=64 [ 1743.977761][T27529] SET target dimension over the limit! [ 1745.661135][T27551] siw: device registration error -23 [ 1745.672373][T27551] fuse: Unknown parameter '0x0000000000000003' [ 1747.171055][T27561] binder: 27554:27561 ioctl c0306201 200000001d40 returned -14 [ 1747.942217][T27568] binder: 27566:27568 ioctl c0306201 200000001d40 returned -11 [ 1748.140199][T27565] syz.7.5354: attempt to access beyond end of device [ 1748.140199][T27565] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1748.235363][T27565] (syz.7.5354,27565,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 1748.280663][T27565] (syz.7.5354,27565,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 1748.320598][T27565] (syz.7.5354,27565,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1748.353109][T27565] (syz.7.5354,27565,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1749.227350][ T30] kauditd_printk_skb: 2712 callbacks suppressed [ 1749.237842][ T30] audit: type=1400 audit(1746818665.640:3906): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=23801 comm="syz-executor" opid=27537 ocomm="syz.7.5354" [ 1749.357787][ T30] audit: type=1400 audit(1746818665.640:3907): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=23801 comm="syz-executor" opid=27537 ocomm="syz.7.5354" [ 1749.390140][T27573] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1749.396876][T27573] audit: audit_lost=632 audit_rate_limit=0 audit_backlog_limit=64 [ 1749.405043][T27573] audit: backlog limit exceeded [ 1749.410496][T27573] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1749.417234][T27573] audit: audit_lost=633 audit_rate_limit=0 audit_backlog_limit=64 [ 1749.425345][T27573] audit: backlog limit exceeded [ 1749.622638][T19298] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1749.638301][T27577] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1751.441616][T15840] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1751.711437][T27585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5366'. [ 1751.767510][T15840] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 1751.791190][T15840] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1751.810569][T15840] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1751.820140][T15840] usb 1-1: config 1 has no interface number 0 [ 1751.826273][T15840] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1751.841963][T15840] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.894258][T15840] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1751.913012][T15840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.953686][T15840] usb 1-1: Product: syz [ 1751.983773][T15840] usb 1-1: Manufacturer: syz [ 1752.015949][T15840] usb 1-1: SerialNumber: syz [ 1752.125152][T15840] cdc_wdm 1-1:1.128: skipping garbage [ 1752.192399][T15840] cdc_wdm 1-1:1.128: cdc-wdm0: USB WDM device [ 1752.223978][T15840] cdc_wdm 1-1:1.128: Unknown control protocol [ 1752.869796][T27602] fuse: Unknown parameter '0x0000000000000003' [ 1753.681720][T27608] loop6: detected capacity change from 0 to 524287999 [ 1754.760202][ T30] kauditd_printk_skb: 1513 callbacks suppressed [ 1754.760231][ T30] audit: type=1400 audit(1746818670.813:5219): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27617 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1754.972253][ T30] audit: type=1400 audit(1746818670.869:5220): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27617 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1754.991432][ C0] vkms_vblank_simulate: vblank timer overrun [ 1755.191795][T15840] usb 1-1: USB disconnect, device number 11 [ 1755.238576][T27619] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1755.248303][ T30] audit: type=1400 audit(1746818670.869:5221): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27617 comm="syz-executor" name="461" dev="tmpfs" ino=2526 [ 1755.268032][T27619] audit: audit_lost=702 audit_rate_limit=0 audit_backlog_limit=64 [ 1755.317711][T27620] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1755.325975][T27620] audit: audit_lost=703 audit_rate_limit=0 audit_backlog_limit=64 [ 1755.333896][T27620] audit: backlog limit exceeded [ 1755.340826][T27619] audit: backlog limit exceeded [ 1755.340995][T27620] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1755.470475][T27620] binder: BINDER_SET_CONTEXT_MGR already set [ 1755.476647][T27620] binder: 27617:27620 ioctl 4018620d 200000000040 returned -16 [ 1755.498099][T27620] binder: 27617:27620 ioctl c0306201 200000001d40 returned -11 [ 1756.706262][T27642] syz.3.5379: attempt to access beyond end of device [ 1756.706262][T27642] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1756.765568][T27642] (syz.3.5379,27642,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 1756.786041][T27642] (syz.3.5379,27642,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 1756.805943][T27642] (syz.3.5379,27642,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1756.819900][T27642] (syz.3.5379,27642,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1758.559411][T27658] random: crng reseeded on system resumption [ 1758.749124][T27654] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1758.749124][T27654] The task syz.0.5383 (27654) triggered the difference, watch for misbehavior. [ 1759.599369][T18741] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1760.114695][ T30] kauditd_printk_skb: 1936 callbacks suppressed [ 1760.114715][ T30] audit: type=1400 audit(1746818675.817:6892): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=27662 comm="syz.7.5387" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1760.140617][ C0] vkms_vblank_simulate: vblank timer overrun [ 1760.173045][ T30] audit: type=1400 audit(1746818675.855:6893): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=27662 comm="syz.7.5387" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1760.198901][ T30] audit: type=1400 audit(1746818675.855:6894): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=27662 comm="syz.7.5387" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1760.221923][ T30] audit: type=1400 audit(1746818675.902:6895): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18446 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1760.228028][T18446] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1760.244109][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1760.255528][ C0] audit: audit_lost=793 audit_rate_limit=0 audit_backlog_limit=64 [ 1760.263343][ C0] audit: backlog limit exceeded [ 1760.268603][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1760.275125][ C0] audit: audit_lost=794 audit_rate_limit=0 audit_backlog_limit=64 [ 1760.462687][T18741] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1760.483348][T18741] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1760.504270][T18741] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 50800, setting to 64 [ 1760.577481][T18741] usb 8-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1760.735395][T18741] usb 8-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1760.773357][T18741] usb 8-1: Manufacturer: syz [ 1760.800245][T18741] usb 8-1: config 0 descriptor?? [ 1760.814271][T18741] smsusb:smsusb_probe: board id=9, interface number 0 [ 1761.163097][T27683] binder: 27681:27683 ioctl c0306201 200000001d40 returned -11 [ 1761.345389][T18741] smsusb:siano_media_device_register: media controller created [ 1761.380623][T18741] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 1761.547602][T18741] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 1761.559064][T18741] ------------[ cut here ]------------ [ 1761.564774][T18741] WARNING: CPU: 0 PID: 18741 at mm/slub.c:4752 free_large_kmalloc+0x165/0x200 [ 1761.574205][T18741] Modules linked in: [ 1761.578986][T18741] CPU: 0 UID: 0 PID: 18741 Comm: kworker/0:4 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1761.591223][T18741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1761.601516][T18741] Workqueue: usb_hub_wq hub_event [ 1761.606547][T18741] RIP: 0010:free_large_kmalloc+0x165/0x200 [ 1761.612799][T18741] Code: 75 08 48 89 df e8 7b 0f e5 ff 65 48 8b 05 c3 e8 5c 10 48 3b 44 24 08 75 53 48 83 c4 10 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 65 48 8b 05 a0 e8 5c 10 48 3b 44 24 08 75 30 48 89 df 48 [ 1761.633666][T18741] RSP: 0018:ffffc90002ec6ba8 EFLAGS: 00010206 [ 1761.640166][T18741] RAX: 00000000ff000000 RBX: ffffea0001019880 RCX: ffffea0000000000 [ 1761.648600][T18741] RDX: ffffc9001a45c000 RSI: ffff888040662000 RDI: ffffea0001019880 [ 1761.656681][T18741] RBP: 0000000000000100 R08: ffff888028885103 R09: 1ffff11005110a20 [ 1761.664889][T18741] R10: dffffc0000000000 R11: ffffed1005110a21 R12: 1ffff11006936682 [ 1761.673136][T18741] R13: 0000000000000000 R14: ffff888028885160 R15: dffffc0000000000 [ 1761.681245][T18741] FS: 0000000000000000(0000) GS:ffff888126100000(0000) knlGS:0000000000000000 [ 1761.690342][T18741] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1761.697125][T18741] CR2: 00007fb6545a9670 CR3: 000000002e9d8000 CR4: 00000000003526f0 [ 1761.705160][T18741] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1761.713250][T18741] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1761.721891][T18741] Call Trace: [ 1761.725177][T18741] [ 1761.728136][T18741] usb_free_urb+0xd0/0x120 [ 1761.732570][T18741] smsusb_term_device+0x1d6/0x3b0 [ 1761.738139][T18741] smsusb_probe+0x1a04/0x2060 [ 1761.742825][T18741] ? __pfx_smsusb_probe+0x10/0x10 [ 1761.748300][T18741] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1761.753861][T18741] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1761.759868][T18741] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1761.766672][T18741] ? __pm_runtime_set_status+0x785/0xa50 [ 1761.772360][T18741] usb_probe_interface+0x641/0xbc0 [ 1761.777556][T18741] ? __pfx_usb_probe_interface+0x10/0x10 [ 1761.783218][T18741] really_probe+0x26a/0x9a0 [ 1761.787721][T18741] __driver_probe_device+0x18c/0x2f0 [ 1761.793058][T18741] driver_probe_device+0x4f/0x430 [ 1761.798083][T18741] __device_attach_driver+0x2ce/0x530 [ 1761.803535][T18741] bus_for_each_drv+0x24e/0x2e0 [ 1761.808392][T18741] ? __pfx___device_attach_driver+0x10/0x10 [ 1761.814325][T18741] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1761.819704][T18741] __device_attach+0x2b8/0x400 [ 1761.824510][T18741] ? __pfx___device_attach+0x10/0x10 [ 1761.829795][T18741] ? do_raw_spin_unlock+0x122/0x240 [ 1761.835020][T18741] bus_probe_device+0x185/0x260 [ 1761.839881][T18741] device_add+0x7b6/0xb50 [ 1761.844256][T18741] usb_set_configuration+0x1a87/0x20e0 [ 1761.850263][T18741] usb_generic_driver_probe+0x8d/0x150 [ 1761.856160][T18741] usb_probe_device+0x1c1/0x390 [ 1761.861026][T18741] ? __pfx_usb_probe_device+0x10/0x10 [ 1761.866481][T18741] really_probe+0x26a/0x9a0 [ 1761.871755][T18741] __driver_probe_device+0x18c/0x2f0 [ 1761.877117][T18741] driver_probe_device+0x4f/0x430 [ 1761.882497][T18741] __device_attach_driver+0x2ce/0x530 [ 1761.887959][T18741] bus_for_each_drv+0x24e/0x2e0 [ 1761.892886][T18741] ? __pfx___device_attach_driver+0x10/0x10 [ 1761.898803][T18741] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1761.904197][T18741] __device_attach+0x2b8/0x400 [ 1761.909070][T18741] ? __pfx___device_attach+0x10/0x10 [ 1761.914482][T18741] ? do_raw_spin_unlock+0x122/0x240 [ 1761.919758][T18741] bus_probe_device+0x185/0x260 [ 1761.924741][T18741] device_add+0x7b6/0xb50 [ 1761.929260][T18741] usb_new_device+0xa39/0x16c0 [ 1761.934093][T18741] ? __pfx_usb_new_device+0x10/0x10 [ 1761.939285][T18741] ? _raw_spin_unlock_irq+0x23/0x50 [ 1761.944513][T18741] ? lockdep_hardirqs_on+0x9c/0x150 [ 1761.949701][T18741] hub_event+0x2941/0x4a00 [ 1761.954186][T18741] ? __pfx_hub_event+0x10/0x10 [ 1761.959396][T18741] ? process_scheduled_works+0x9ec/0x17a0 [ 1761.965470][T18741] ? _raw_spin_unlock_irq+0x23/0x50 [ 1761.970768][T18741] ? process_scheduled_works+0x9ec/0x17a0 [ 1761.976745][T18741] ? process_scheduled_works+0x9ec/0x17a0 [ 1761.982464][T18741] process_scheduled_works+0xadb/0x17a0 [ 1761.988067][T18741] ? __pfx_process_scheduled_works+0x10/0x10 [ 1761.994115][T18741] worker_thread+0x8a0/0xda0 [ 1761.998709][T18741] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1762.005091][T18741] ? __kthread_parkme+0x7b/0x200 [ 1762.010029][T18741] kthread+0x70e/0x8a0 [ 1762.014117][T18741] ? __pfx_worker_thread+0x10/0x10 [ 1762.019265][T18741] ? __pfx_kthread+0x10/0x10 [ 1762.023848][T18741] ? __pfx_kthread+0x10/0x10 [ 1762.028449][T18741] ? _raw_spin_unlock_irq+0x23/0x50 [ 1762.033635][T18741] ? lockdep_hardirqs_on+0x9c/0x150 [ 1762.038866][T18741] ? __pfx_kthread+0x10/0x10 [ 1762.043449][T18741] ret_from_fork+0x4b/0x80 [ 1762.047869][T18741] ? __pfx_kthread+0x10/0x10 [ 1762.052448][T18741] ret_from_fork_asm+0x1a/0x30 [ 1762.057300][T18741] [ 1762.060434][T18741] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1762.067827][T18741] CPU: 0 UID: 0 PID: 18741 Comm: kworker/0:4 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1762.079989][T18741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1762.090122][T18741] Workqueue: usb_hub_wq hub_event [ 1762.095158][T18741] Call Trace: [ 1762.098423][T18741] [ 1762.101342][T18741] dump_stack_lvl+0x99/0x250 [ 1762.105924][T18741] ? __asan_memcpy+0x40/0x70 [ 1762.110497][T18741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1762.115692][T18741] ? __pfx__printk+0x10/0x10 [ 1762.120324][T18741] panic+0x2db/0x790 [ 1762.124237][T18741] ? __pfx_panic+0x10/0x10 [ 1762.128640][T18741] ? show_trace_log_lvl+0x4fb/0x550 [ 1762.133847][T18741] ? ret_from_fork_asm+0x1a/0x30 [ 1762.138780][T18741] __warn+0x31b/0x4b0 [ 1762.142749][T18741] ? free_large_kmalloc+0x165/0x200 [ 1762.147987][T18741] ? free_large_kmalloc+0x165/0x200 [ 1762.153174][T18741] report_bug+0x2be/0x4f0 [ 1762.157489][T18741] ? free_large_kmalloc+0x165/0x200 [ 1762.162677][T18741] ? free_large_kmalloc+0x165/0x200 [ 1762.167876][T18741] ? free_large_kmalloc+0x167/0x200 [ 1762.173067][T18741] handle_bug+0x84/0x160 [ 1762.177305][T18741] exc_invalid_op+0x1a/0x50 [ 1762.181799][T18741] asm_exc_invalid_op+0x1a/0x20 [ 1762.186635][T18741] RIP: 0010:free_large_kmalloc+0x165/0x200 [ 1762.192522][T18741] Code: 75 08 48 89 df e8 7b 0f e5 ff 65 48 8b 05 c3 e8 5c 10 48 3b 44 24 08 75 53 48 83 c4 10 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 65 48 8b 05 a0 e8 5c 10 48 3b 44 24 08 75 30 48 89 df 48 [ 1762.212141][T18741] RSP: 0018:ffffc90002ec6ba8 EFLAGS: 00010206 [ 1762.218220][T18741] RAX: 00000000ff000000 RBX: ffffea0001019880 RCX: ffffea0000000000 [ 1762.226183][T18741] RDX: ffffc9001a45c000 RSI: ffff888040662000 RDI: ffffea0001019880 [ 1762.234149][T18741] RBP: 0000000000000100 R08: ffff888028885103 R09: 1ffff11005110a20 [ 1762.242208][T18741] R10: dffffc0000000000 R11: ffffed1005110a21 R12: 1ffff11006936682 [ 1762.250179][T18741] R13: 0000000000000000 R14: ffff888028885160 R15: dffffc0000000000 [ 1762.258182][T18741] usb_free_urb+0xd0/0x120 [ 1762.262598][T18741] smsusb_term_device+0x1d6/0x3b0 [ 1762.267635][T18741] smsusb_probe+0x1a04/0x2060 [ 1762.272429][T18741] ? __pfx_smsusb_probe+0x10/0x10 [ 1762.277456][T18741] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1762.283026][T18741] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1762.288912][T18741] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1762.295244][T18741] ? __pm_runtime_set_status+0x785/0xa50 [ 1762.300884][T18741] usb_probe_interface+0x641/0xbc0 [ 1762.305999][T18741] ? __pfx_usb_probe_interface+0x10/0x10 [ 1762.311619][T18741] really_probe+0x26a/0x9a0 [ 1762.316117][T18741] __driver_probe_device+0x18c/0x2f0 [ 1762.321392][T18741] driver_probe_device+0x4f/0x430 [ 1762.326420][T18741] __device_attach_driver+0x2ce/0x530 [ 1762.331804][T18741] bus_for_each_drv+0x24e/0x2e0 [ 1762.336657][T18741] ? __pfx___device_attach_driver+0x10/0x10 [ 1762.342548][T18741] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1762.347928][T18741] __device_attach+0x2b8/0x400 [ 1762.352700][T18741] ? __pfx___device_attach+0x10/0x10 [ 1762.357981][T18741] ? do_raw_spin_unlock+0x122/0x240 [ 1762.363174][T18741] bus_probe_device+0x185/0x260 [ 1762.368024][T18741] device_add+0x7b6/0xb50 [ 1762.372354][T18741] usb_set_configuration+0x1a87/0x20e0 [ 1762.377845][T18741] usb_generic_driver_probe+0x8d/0x150 [ 1762.383309][T18741] usb_probe_device+0x1c1/0x390 [ 1762.388157][T18741] ? __pfx_usb_probe_device+0x10/0x10 [ 1762.393555][T18741] really_probe+0x26a/0x9a0 [ 1762.398055][T18741] __driver_probe_device+0x18c/0x2f0 [ 1762.403329][T18741] driver_probe_device+0x4f/0x430 [ 1762.408341][T18741] __device_attach_driver+0x2ce/0x530 [ 1762.413706][T18741] bus_for_each_drv+0x24e/0x2e0 [ 1762.418552][T18741] ? __pfx___device_attach_driver+0x10/0x10 [ 1762.424439][T18741] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1762.429803][T18741] __device_attach+0x2b8/0x400 [ 1762.434562][T18741] ? __pfx___device_attach+0x10/0x10 [ 1762.439837][T18741] ? do_raw_spin_unlock+0x122/0x240 [ 1762.445026][T18741] bus_probe_device+0x185/0x260 [ 1762.449871][T18741] device_add+0x7b6/0xb50 [ 1762.454218][T18741] usb_new_device+0xa39/0x16c0 [ 1762.459016][T18741] ? __pfx_usb_new_device+0x10/0x10 [ 1762.464229][T18741] ? _raw_spin_unlock_irq+0x23/0x50 [ 1762.469433][T18741] ? lockdep_hardirqs_on+0x9c/0x150 [ 1762.474626][T18741] hub_event+0x2941/0x4a00 [ 1762.479063][T18741] ? __pfx_hub_event+0x10/0x10 [ 1762.483817][T18741] ? process_scheduled_works+0x9ec/0x17a0 [ 1762.489619][T18741] ? _raw_spin_unlock_irq+0x23/0x50 [ 1762.494802][T18741] ? process_scheduled_works+0x9ec/0x17a0 [ 1762.500517][T18741] ? process_scheduled_works+0x9ec/0x17a0 [ 1762.506258][T18741] process_scheduled_works+0xadb/0x17a0 [ 1762.511816][T18741] ? __pfx_process_scheduled_works+0x10/0x10 [ 1762.518500][T18741] worker_thread+0x8a0/0xda0 [ 1762.523086][T18741] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1762.529404][T18741] ? __kthread_parkme+0x7b/0x200 [ 1762.534355][T18741] kthread+0x70e/0x8a0 [ 1762.538414][T18741] ? __pfx_worker_thread+0x10/0x10 [ 1762.543538][T18741] ? __pfx_kthread+0x10/0x10 [ 1762.548126][T18741] ? __pfx_kthread+0x10/0x10 [ 1762.552705][T18741] ? _raw_spin_unlock_irq+0x23/0x50 [ 1762.557898][T18741] ? lockdep_hardirqs_on+0x9c/0x150 [ 1762.563133][T18741] ? __pfx_kthread+0x10/0x10 [ 1762.567714][T18741] ret_from_fork+0x4b/0x80 [ 1762.572116][T18741] ? __pfx_kthread+0x10/0x10 [ 1762.576690][T18741] ret_from_fork_asm+0x1a/0x30 [ 1762.581455][T18741] [ 1762.584789][T18741] Kernel Offset: disabled [ 1762.589110][T18741] Rebooting in 86400 seconds..