last executing test programs: 20m0.557457559s ago: executing program 0 (id=1666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xca000) r2 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r6 = socket(0x2b, 0x80801, 0x1) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0xc19, @loopback, 0x2ac}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0x8101, 0x0, 0x0, 0x24f}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x83, 0x3, 0x0, 0x9276, 0x0, 0x1, {0x1}}) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x146) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r10) io_uring_enter(r7, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 19m58.507480521s ago: executing program 0 (id=1668): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0x9c}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, r2, 0x0, 0x6, 0xe, 0x4, 0x2, 0x0, 0x932, {[@timestamp={0x8, 0xa, 0x200, 0xb}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x12, [0x5, 0x7f, 0x7723, 0x1]}]}}}}}}}, 0x0) syz_emit_ethernet(0x128c, &(0x7f0000000940)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "1c0adf", 0x1256, 0x21, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@dstopts={0x62, 0x1d, '\x00', [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @private0}, @generic={0x0, 0xb1, "3e37976828218c4d55e8171b9c32b3c326efadb96fa840efd8b79271f5ca730e9d66c92dca45f8f1719d018cbdc78107311ec8926f8376f1da7f17a14e78b3dbcee40806baeaaaee5f51e2bbe2a1f23c03e0afb3ce5dc2cf33e512da95326ed1ae06292089bd64f80b4a9e09f88907cf4f2e5e2f224c231995eac6b39fa48713176c7eea5f6e911619d7d29ac3a80790f70bd40f15bbd619c48cf8b6aad2f1dea44e2bf6ab3ceb8e1a3adc8dc1a4ef0799"}, @enc_lim={0x4, 0x1, 0x1}]}, @routing={0x0, 0x6, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @mcast1]}, @srh={0x1, 0x2, 0x4, 0x1, 0x8, 0x10, 0x9, [@dev={0xfe, 0x80, '\x00', 0xa}]}, @dstopts={0x21, 0x18, '\x00', [@enc_lim={0x4, 0x1, 0x43}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn, @jumbo={0xc2, 0x4, 0x8001}, @jumbo={0xc2, 0x4, 0x3ff}, @generic={0x2, 0x9b, "9903b006ca6d1b5e0c94f29123acaba3e9408e50524dc3fbe64d5c9d1bb7efe6262435aea45043bfc5a012197d5ecb6f4c5d668e9b3fdbbe419e233c76fd006a62766609831ac1e6747169964712cfb0647cfe4433b5aa598020393e93601f47851e7d22620fd7766d3734c7217e48ef75cc28bb0ec0ef9f4042e08bf23154da2d6e380090b42c3d8de4e0296bd5baa26357d05d9a13cbdb8647c1"}]}, @hopopts={0x89, 0x200, '\x00', [@pad1, @generic={0x7, 0xffe, "451cb00c76dc8677fd55cedd81d37db28daf431b790c750040c3c9f9c6cd241ee16f35cb122dab938ca2629b819908eebf3d54b1cbf686c11553d14443fe8b7218304ed2fdb33525925c0add0c39c07725fb66b19c5ef9035ac0e83d5f9739bd231c1b11f73cca9524dde36af74a62d49bd13586e88ead3c20d1f75952e52a384764ecbcb5e85fa1d53774cb1fc02b4c77318562983327c0c593164aead8f6e485511af583402576e6b5f51493e97fb4b87bc09a860630bc403cd3a6122405d5659eac132ef5247cc6509cdcdcbcada00164b61b4d2abfd3072113282b6e64ef030e7a9c298795585363a92e0f89f2a579e1131e9b4f1aeac7503c8d56a4d4d9af886882b11d896b59e3fff335cba66619399e2986ddd1bae7f88248900b72bb9f33f89be962ec6c66f139d9f732632583f8c26853d72ce8e1db6a557b808bf86d4ce01ff8332a6fe6035b479a18f1c4674206391d71cfdb3fa1801b8b8ce15ce0ab420554ee9894accbc95169722e0ae9f7a441ed3b990fc89e135859501ed975adf8a4fa9237822305a664ceab2788ec55ba9761e26fe89d9d89d771d2592efc7efcf27ef63fbbb357b6c2f68ec13672d6a367b97e2672d383d0ad037a10a3ea662011dd46ccd0ce5aba32728170623bf43aeceeed36c39f02c799dd471f23070ae8d1dc349e303d9d6926f8dbd3e1ee484230478307b59292f70a4e570f11229b4422f512bd511e8f72bad64619a0016b962871505dcc4be4d5314810f8159e1ac95356c46ab59a11635803326eca8bfccd0c67c5e8342dfa6df4e0e60f972874cddc1ee3cf4aedc29ab4bf4c5afcff8d29fb9d1b6a435f12ab4f68df4d37e1184e7d15a4e8cc300e7f01ef083f6f0c24c7bb11caeed95875c5901f8d910f7a1ec3b66e98cf26b22a3994f1623ede17c95ec39a81544cd5f549ea63591e3fb93b28b74a97080144a87b951031497f2a632f995077fa9a7c9c94155a2f4ce5538de89aa483144b4fb6edc7f7664eab751fed099f8a82eca2c6b40c189cbab7c728b0efd44e8e0cfb14cde759089397558c6d800403f464c453e854feeebf5832093ec5706cfaed6a87a68af3ce0bc78ce335cb2826cefe8ef23584dfdc1b7f3fae7ec51e96cc231ce7c1b1edf6b1f97a5535177d159772d7ae398fc7682272d80699f793fc1d3c97d7297d7dd38c89783b93692c39cd979b2a50f15993260a846810da182786c3275f06e11a0f4667707f42d45ae75ed0c5b3560f0d62c3dea204c0b01efe3654cb914fbcc282b214083c87178e9b81b1021c7fb5157d5aac2bf7e956f6c5f03b4f313de403551d8681bf744529197348a2c5c40622f28e2a2a6c688387e90ca66645edfe87883a36dcf8cfd5d63e93dce9620f4718153fc4586dc4e79cd70da6f2492a82b83f25a70d81bf12d244362baa84ec3fb9b2368f15517feb7744bfa7bb7a15dee2c025312fd570f74497decd713b34aa050372f52eadf41311f4f79d584824a8054f3e5773799a6db254596c26e3819ef80c19b8046226124b1c46d40f40d4326a9a4911ba1b37e07a9ab2afce8ee178d48de5ae24bd5d887bea8aec260de42638733427751b90812b76f3d2a8fc904ef11224e4813ad39999c59cf8e1290b5a427b2c4fdb701027750632644f38852fa3d219da89d618a6fa5ee66e739dd13e026f795a3a54f386726009504dfb81a5c4518cfe9ed03c8ae912e6a35621c6b30f61619a4ef228794d76c3651c2bd50c8b1998b455a0ae3d6ea564450623f701a957f3578eb7305e69f023e39c3b348ddbd67edee335390aaadb457bd4251afd71033260f244ebd06371de3b44508f6f0e2fa578bf1770157b58e32e845f032b1054afe7151cb6949e94e199630d543c45c007057f24696fbc41615581f4cadaa68ca36f4472e32a163f800a28f895d32029f27c1af8e0a84d74881d377419d546e05471915a8986af4ae818de5c91c40253f273d6f3e0af17f8990fb969ae7e45a30c9e3ab75151af303774a61bb8d3c265ee05567467a3249342ca3b78b503032f5b92161c3f44dfc7f58198c38e2ad22879fdc24a2f0caef92430af53dc9bb40ab8fc7ee1a4977247e2ac57ad31d316d340049f0ea3467884cb8ef66be8988f3e2da0f0dcb73dd9ef56666286d90c7e04031f4f770e2723592c7315d91f38e2f95c009e587b62241d23e840982c3cef002d5dcd5ac872b970184581314e17f8486582718eec46530e35cd9194a61b4150190855d904526bac3bd3e38d8f0c7b6a6715873f363cb3f26d0bd96d33848ddd1cb8c1c45e5b6fd6e73c853dd77893465b22528bf025402b42fa596c1e1fd9b8d5831f866e9a7aa6e741610304971441ab66ed706192037164bff33a08a78a5e5b100160c99c6df60547b57b4d236d0c76a8208d55e23ed74311581cf18a90e8de805073a5ba2f6ab41b8f7deac69e0650ee1953cb5a82a1cbcc2c40a2ceaed9ef3937527a3d5d0e3fc4d66307744f42221b75af36194daae81ac67c9b8c6aa819b7770883b19bbf5eca0333c5db7bf75e3d7342fe80882ca97a6e967fe3896ef8fbd0dbe364750ac17909074b3c9e519a7b4ff5d416e97cd53470573eda3090fcba2320cc5becb7543cf089954f7235a7a7bf86386d438f8fd70f171b6ae2fa494a4ac049e017f86e4130f36ba587bf3e0ffdac94c2cd4e112b8c14ade6a739bf1a39c2a06b7d235ac7595c972f7389a0eb9fd51a0c2f5c404a4eb53f49571b472b8a57df1dd465c6e6b3be15af332ecea083e58be0dcee002d404a4e6e4c608891a10136a257c7f47a8572f2376ae55a70dad9f95405178392782042ed1a917a26e2f902e3521cb18436dbbfe771ba7729f188a4296e9483e6df8f36cad93d487890dd535aac907423937c809fbbc53b2fd3b64d63799141f78d925d9803f5f52187a24fac79ad5d59cd4b3134ee416b77dc757255ac57b718273bda610fde563a89f23c4c9ab40acca058efcd195e31ed97da5da54b421eb6c2c99513537654f61ecdad5cc76f02a4b12e4ffe643ffae8a2c6236dfd3be0aed95d2f5aa5b51c0b6ac51f4d32e593935ddb2ca52e0cbc30a92609f37ab2f1eb5b0078d9808c91f5c5a32785b86a2f23d8dec2bbb4be30ce6ac194921041709f53e742a28c50e78f64e141fab6c42a866b17c2e2b5a882da1c912676ce9ac24ee6a491ccf0406879f6497474fbec59e4967cb8562ec6f76897438c0654b7dca4bf3f834946cdcb7989ba25121f74dc38612db2a3d750e66806e5bf9232f0a1cd40840611879a468ba379717ccd2eacd0757859fb9f53e30e7453fdd14d44798a9a701ae00ddd7ba2c957b3cf64ec1c8d7b2faf2aa431facbeac00c89f783ced1493be45a763215a8f61a8cf965aa0c22e988a5110bb2b3c8391d4e368971e9713b3012d86c5c3acac3852b9878bfb4eab62599cdac40306c003edb08ca071a03ea9cb65d362bc6df507581f5abceeee274f04feb0e2834517bfe106b1448423e3bf349a5b5fe097b8fb4a1ac8b7e82a193be8dc962ca5fe43bf8a30e48c8f0b79b18fe6a1b74c3bb9dbdfda49a28611bab7ed40555902b074e1156a3d03c36a89ad5c60f7176f182bf7660606b1b9d9062d4eeb678146e4e5e149a020020a11c82af9bff035fe287693d87175a276a263f33bb70f6e20b20659dcd769450c024f1b865748c197ac60877364feefec9b06559588b9a85076c2b6e812164e7d2fc1cb1f98968ecaa8aa83d1bb8196ca7624dc9daa01fb262e95f437d058aa7a29ab44720a80701d33b6a88c9c7e3e6cab7bc6d64011ad8d3163f35dad7f030d7dc269086a8ac027aba5e3c8b75bcd5d4ba5cd969cfbb68195eb9ae1bcd38c985b1ac0a04a361631f531e295ad8da17edf36d8bf1ade4afe6ac41b2219fe76b2d5bfec319327e7ed5c9a95b46d6f4db5b4d93c7be2c76d8a56ce1a6b177578b14bc1b23575491e785f1ab76960f0e005f0e865d907bcea2455b43540970a1dbbbf078a5777a075fa4d2309f0e51c62ba70d34459250a7853aff1990b355b11c7551cbd0ffabb05f5b016ad911c962ed3557a1aa0e943a84821109947e8b06cba389efe8a39f5965fe90275180a095411f3429cf55d0da4e55b16f67d04da9ba39e7e654db623a653d0562d0c04b33377718120e43bffceb10488e685a170c5d706528d64d71df967b9d6df2053ec30cbd520bd6bb2bdaa6cd647a6bc683f98ba71df64034e001d0110f7846a7817745eb6f3a511c1056152b58706d5fe349c488282480645e0a1f7aaa316d4b9a5e9c56e3809890c573afebd608846311de0ede45e94924f5583db7f6e2639c5c46466d89ac6b0f667cc63800efbce1ab57513e9b02cf024679d71ed410e50094ef237d4eaf056ed9456643e0cbd4ae5619b6e2422633afaec56a41d8bc16344e7e123720d09fd6543cdc67aa13c07de2059996cf2c67b9800b2b0642886af5e9a6a35b065dde9f1bb4c7b45da5c25380c1375ea2e3c5ce5830bcd6bfeef77e2a7414e1791ba2c5d1454586a2a33047549cf45b69d07882d0d977b118c0c5b74916d60ed6be8162e7f6e603a70bee1469269609da04045f2317843075a29524dfefa0edf5e7d1e1549264b97052f64b312819dfa0b65afa23112a5096e13a3443c9147c459588817e37dd35b9e00c443bca36787c7407413dc7ee6a4a1394fa20e7b2c93a1f5318e05d719b71a4fe30d426cbf71994b10f71c99b19572a4a94bcc24445ac26f47de7f5608360873184e7001c7f7c11c938ed581b30ec3b12aaa2327404750ae45f26866bd7237e6d8e8bda92ce534427f3683bc1ce1221a9cf8be265a81c2cbde388225087499691db97c56294d3abd558a67b589ae4fdb4131aac684592e7761675de6bbbf04fa14c2f46ea65ac4a1a4e7631a147f17cb4f9aa42d14bfd13de0dbd545c88baad3e51be14ba5ffebe6220bc4df5772bf88c8faaaa45ca32a959d539716c359fdd72e3cd9a2987d349c2341bbad06a1b4113427f68a032f2affa1af60e2272dffe3c5241a03a79a51ce2f96015b27ba3ace54b0848888983522f321ce39552e4b5d917f3ab8ecfc07b53331ab06e8014b74c7fa819123a316bb0c16586f5f48ac4892ddd814a6c692d8b528707700bb5cdd2cce3835700ff14a28eab9d43f138719e2388b111baeebf2fd9b8633e61b9871acad4d1481c7bbf538e702e73c2becf035527dd2100aaec2f045d5f4024972e9626cabb42b044d91aae9e0dbe3865b9ab0b2dd18fab6bc69724dbe02043770684f0cb427e0a364c206f8a52984b5bb1f996fe43d8a17865cd5e18e95b9e1025a227f86270c0bddc5e7dd58302521ced4c0d51e108e7aef777b206f6482b23975c9c58e17ba2a3760e94796140720d4b8867de74c40a026b31caf46dbf3a32a4b6856817af1038267fcaf047185a8792c04f719e51638d88b2524aa0140af57ad9b906939883b6925ca7c67f6adfd30a037ea8c1f8b2f18c65d3d38fd68bd6c4f9ccf7f1fe9002f1af0a8a653d29ebc2110e9719fbd3740756df5699078d05cc6bbf0a3a7b4cda42d70f372afeaf05b7b7eff19fc962b02ccfc4580b47cbec0863bf176b22cd279f6917f9bde3a0abc9b37d27e73abec20e110807b93dab7478634e3da1d504b54f25bdaa47b743c1e5940fca5e10d24e5d3f88aa4c21ab6d0481847964ecf5cd364855816870a434a2003aed5af7446b923505f82e1de74fd10166b9ba269bcf240eed9171b1387bc5e38ce3424728ecbdc484c51aa9"}]}, @fragment={0x3b, 0x0, 0x10, 0x0, 0x0, 0x3, 0x68}], {{0x4e20, 0x4e21, 0x4, 0x1, 0xe, 0x0, 0x0, 0xa, 0x1, "a43a72", 0x6, "5e6a98"}, "c72e76f2bfa5ab126751365f0803d9fbcd60ed354a4d00d18f7635414162"}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x9) pipe(&(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) 19m57.943664746s ago: executing program 0 (id=1672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b0001006272696467650000200002800800150088a8ffff05000700070000000a0014000180c2"], 0x50}}, 0x0) 19m57.691838027s ago: executing program 0 (id=1674): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x7ff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}}) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 19m56.603297841s ago: executing program 0 (id=1678): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0x7f}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick=0x3000000, {}, {}, @raw32}], 0x1c) 19m56.306703331s ago: executing program 0 (id=1679): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120104009d6fce202505882843d00000000109021b000100000000090400000193ee4300090504"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000100), 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010080000000000000006600000008002600940900000800b70099000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="26003300b0910300ffffffffffff08021100000050505050505457f99eb3c401010003005c0200000600cd00"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r9 = syz_io_uring_setup(0x79a7, &(0x7f0000000300)={0x0, 0x8301, 0x0, 0x8000000, 0x60, 0x0, r6}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2a, 0x4004, @fd=r3, 0xb402, 0x0, 0x0, 0x39, 0x0, {0x3}}) io_uring_enter(r9, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r12 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r12, &(0x7f0000001a40)=""/102392, 0x18ff8) 19m40.919481405s ago: executing program 32 (id=1679): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120104009d6fce202505882843d00000000109021b000100000000090400000193ee4300090504"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000100), 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010080000000000000006600000008002600940900000800b70099000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="26003300b0910300ffffffffffff08021100000050505050505457f99eb3c401010003005c0200000600cd00"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r9 = syz_io_uring_setup(0x79a7, &(0x7f0000000300)={0x0, 0x8301, 0x0, 0x8000000, 0x60, 0x0, r6}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2a, 0x4004, @fd=r3, 0xb402, 0x0, 0x0, 0x39, 0x0, {0x3}}) io_uring_enter(r9, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r12 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r12, &(0x7f0000001a40)=""/102392, 0x18ff8) 17m54.323072256s ago: executing program 5 (id=1953): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0x9c}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, r2, 0x0, 0x6, 0xe, 0x4, 0x2, 0x0, 0x932, {[@timestamp={0x8, 0xa, 0x200, 0xb}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x12, [0x5, 0x7f, 0x7723, 0x1]}]}}}}}}}, 0x0) syz_emit_ethernet(0x128c, &(0x7f0000000940)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "1c0adf", 0x1256, 0x21, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@dstopts={0x62, 0x1d, '\x00', [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @private0}, @generic={0x0, 0xb1, "3e37976828218c4d55e8171b9c32b3c326efadb96fa840efd8b79271f5ca730e9d66c92dca45f8f1719d018cbdc78107311ec8926f8376f1da7f17a14e78b3dbcee40806baeaaaee5f51e2bbe2a1f23c03e0afb3ce5dc2cf33e512da95326ed1ae06292089bd64f80b4a9e09f88907cf4f2e5e2f224c231995eac6b39fa48713176c7eea5f6e911619d7d29ac3a80790f70bd40f15bbd619c48cf8b6aad2f1dea44e2bf6ab3ceb8e1a3adc8dc1a4ef0799"}, @enc_lim={0x4, 0x1, 0x1}]}, @routing={0x0, 0x6, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @mcast1]}, @srh={0x1, 0x2, 0x4, 0x1, 0x8, 0x10, 0x9, [@dev={0xfe, 0x80, '\x00', 0xa}]}, @dstopts={0x21, 0x18, '\x00', [@enc_lim={0x4, 0x1, 0x43}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn, @jumbo={0xc2, 0x4, 0x8001}, @jumbo={0xc2, 0x4, 0x3ff}, @generic={0x2, 0x9b, "9903b006ca6d1b5e0c94f29123acaba3e9408e50524dc3fbe64d5c9d1bb7efe6262435aea45043bfc5a012197d5ecb6f4c5d668e9b3fdbbe419e233c76fd006a62766609831ac1e6747169964712cfb0647cfe4433b5aa598020393e93601f47851e7d22620fd7766d3734c7217e48ef75cc28bb0ec0ef9f4042e08bf23154da2d6e380090b42c3d8de4e0296bd5baa26357d05d9a13cbdb8647c1"}]}, @hopopts={0x89, 0x200, '\x00', [@pad1, @generic={0x7, 0xffe, "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"}]}, @fragment={0x3b, 0x0, 0x10, 0x0, 0x0, 0x3, 0x68}], {{0x4e20, 0x4e21, 0x4, 0x1, 0xe, 0x0, 0x0, 0xa, 0x1, "a43a72", 0x6, "5e6a98"}, "c72e76f2bfa5ab126751365f0803d9fbcd60ed354a4d00d18f7635414162"}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) 17m52.601593262s ago: executing program 5 (id=1957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400"], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x4}, 0x50) sendmmsg$inet6(r5, &(0x7f0000001600)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x9, @mcast2, 0x80000000}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@rthdr={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x2, 0x1, 0x0, [@private2]}}}], 0x28}}], 0x1, 0x20000000) socket$pptp(0x18, 0x1, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd08, 0x8000, {0x0, 0x0, 0x0, r9, {0x10, 0xb}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x21, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 17m49.831814163s ago: executing program 5 (id=1963): r0 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x260281) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0xffff, 0x81, 0x693fffd, 0xf0, 0x9}, &(0x7f0000000380)=0x9c) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x2, 0x6, {0x0}, {0xee00}, 0x4, 0x80000000}) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r6 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904ff8000000020000000000000000800040001000000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) sched_setscheduler(r6, 0x2, &(0x7f00000000c0)=0x4) getsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000240)=[{}, {}], &(0x7f0000000280)=0x10) sched_setscheduler(r6, 0x1, &(0x7f0000000180)=0x3) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={0x660, 0x2b, 0xb, 0x0, 0x0, {0x4}, [@typed={0x6, 0x3, 0x0, 0x0, @str='}\x00'}, @generic="089283b1ea70dd8b6fcbe103fb51fb06c865ebee0506448795c84d3ebc1a6ef237f5172d85bc42bcb354c6b1c233ef6270075bf47bc5c23241889e64f40c9fb33b0a139f54090a00000000000000806ab7228e0d9f91d601b239d6a202fa26291957218e37712a509576d034b2951c6722f00b534c006f6951b97daac186e3439180d01d5e73a363b92dc06f19666ed970614b8a4071a28e60287e53b117ca495ebda733fea095a1a5fab9b1150fbe178d", @typed={0x13, 0x4, 0x0, 0x0, @str='fault_injection'}, @generic="374f8c95018d6f252b3b5b545885bdd2eae8d0aeabd5e069b821722dd7331b21e9dd5f1011ba718df26ea371857383861228ea7bd6da1ed589c813a07e0313ed2979cbe836624a5a38f04daeb8503c0ba4abde749b111eb0cded963526cd2ecae61698523d42acfd2bb13388ee9767ca8f48be54", @generic="151e5a6cb3347abae18b7aff58f178778e4e1216aadd57b388b53ebfa07e", @typed={0x8, 0x1d, 0x0, 0x0, @pid=r4}, @generic="3fbfa73d60b442a0fef8a2d62ea53066f55b470e11393791bb50ef9f07d80645cb21ad5f", @nested={0x3f8, 0x58, 0x0, 0x1, [@generic="b43a01497ed9cb721c72169156d8626cb8ea6b704351510b56c4740653c6ca37acf79d2558b4c939850927aa3d20090f6aeae49946b6d0cf75f86147069084f370493b7d1f051af00caa91ed4b75019ac2af31f4a440b78d", @typed={0x4, 0x128}, @typed={0x8, 0x61, 0x0, 0x0, @fd=r1}, @generic="5e34d2987510c0c4df52d6c63310227a66c8ff72447cbbab3fc7f308f0d48c508016d0ecc6d4c1d5b584f3e623670a9c416a4183204be6f6cfe543fadb257700bf0964c510099076f8118fc92d04e5baa4f436bf9cbae3f37f41026d02fdc27208af270f8cd744173341566bcb4f8b0e17ba22501b52a1f880ce3ad0dcc7254cae2876846fd3a7ee691b6335567b3bd99edcfb04", @typed={0x8, 0x4c, 0x0, 0x0, @u32=0x23}, @nested={0x155, 0x63, 0x0, 0x1, [@generic="d0e95e28f59c368f73c89aecca521b29dd41adcfb8e905b7b375be0fff9855ac1e0a5f85e82d3c7d4b66bccc81dff950edb1", @nested={0x4, 0x134}, @generic="eb9f02f739c62037095f4dcbdb638d01a2871f39b7bff11521bf78fe1e169a3b19e0f83c07db5eb9e1f3fee8660aa5bc6dea2439dc0a9255703c86ff41fde661a1cab2ec8ff70dd4e1336f1bb6e60987392b3ce58ee34950d6a271749fa00e1be25f6274acc46f119865be99b83434bb021f67426088ba9a11c9cc3ebb318419fad7db25229b47c245899189a927de59c4e30bd215e7042ea08ff52efc7f0533", @generic="13eb70005db9e650c81847c24415546ac2457986adee14b255a3adece8ca669cbadbb5d197075d6683a8a885b401d7014f54833caa48c8aa59563cbaf12202e48678f065487f2229080f67c1b82d1c16226fdd9d683ec6ca3f873e9d5210e1438a74375db745b08111dfaacfaa14f2f3c8c1717217d42eb8029515"]}, @nested={0x13b, 0x11b, 0x0, 0x1, [@nested={0x4, 0x2b}, @typed={0x14, 0xd3, 0x0, 0x0, @ipv6=@private0}, @generic="84c0b32c9768ec0dfbc4135c92de7adb45fc5b3c1ed4496faeb30f12bb79a27a1731fbeabc8433f1ea3c84cdc857ae21ca1fda86dc4465d9d9bdd52f90bdd49910a7c8ebf75d1c77c97c77ac11317a9b2e258ef260cefbfe85d3ef0a22f706f221144023f5007655cb751af51c2d7de80a8a295fff5d7a2d2f172058a06f5ff0798dac47b3f9e8ca49b3d14ff83394cbbcf9526ba725352b17027b361e6106a04a7868f64b9753b29b865e5f8aa39b5609181b78194a7784de61", @typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@remote}, @generic="5a31f4be7c027bfe501cbe5ea8028a9cc9a4cde73012756afa94f82bcce18f7079142e674339b1a7", @typed={0x8, 0x10b, 0x0, 0x0, @pid=r4}, @generic="34f608e8acd225adf69283725338d648756627f0d3a38e7285c5994604fbe41932b4a160d8ffd315f15f9f4cfc"]}, @generic="e6e5335eb6996aa6d713b4723cb1a59e6ff9728f183dd9655595c005920698db13642d4e29d72f9d504ceab219996e43fa6ed251dcba6a36cc9eb0478e753f725bd25df92d52f778d78e0f3a70d5c5c4", @typed={0x8, 0x56, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x8e, 0x0, 0x0, @pid=r6}]}, @generic="2d52b0f5552f2466b33caab4268caadce7b8f815472f2cb4c2d26337d8bef12d9a7d9e1f0902371f54caaa882d2be93e47f0d87f7d79c0c8eb92fe97fa9a0c53a36d3e809b850545bd8397aaa0ae3abdac38dca0117c91bbaed19f49922a7d465365b80a8fda665657b068a6efaf6758f6c905d0e61b470402529afc0f6611963e4a947bd48de0d1960bf0eb1a1bccdddffbe93267e1befe2153377c471a75a9acbb7d87d5396ce89d86109e7ee84bd189ce999b6c562cadfcf814f2c57dd6cb1e7bc9ee8dcb27d1"]}, 0x660}}, 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x5a, 0x408000) 17m47.575357173s ago: executing program 5 (id=1967): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x28a100a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) setxattr$security_ima(&(0x7f0000000340)='./file0/file0/file0\x00', &(0x7f0000000600), &(0x7f0000000640)=@v2={0x5, 0x2, 0x12, 0x7, 0x5a, "0a9eda228e31b9bd0a7828797e44453602072a09d00c493c2291479e4ceb61106e193967a052bebedf2c239c816d58c3797bb8a845d114851089ad957be38d5f38c609d12fe682860e56b59cfe0f17ac5ecb9e171ce2de162e7c"}, 0x63, 0x0) r2 = fanotify_init(0x4000, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002", 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc9ffb}]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000240)=0x8) fanotify_mark(r2, 0x400, 0x20, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)={0x1d8, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3b6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x45}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x70}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x204}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x64}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x4}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20004040}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) 17m42.856763396s ago: executing program 5 (id=1981): openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$dri(0x0, 0x8, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019480)=""/102400, 0x19000) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0xffffffffffffffff, 0x2, 0x5004) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x0, 0x100000a, 0x30, 0xffffffffffffffff, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x1) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, 0x0, 0x0, &(0x7f00000000c0)={0x0}) mlockall(0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003600010326bd7002fcc9df250600a6"], 0x14}, 0x1, 0x8000000000000, 0x0, 0x100488d5}, 0x8004) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) 17m42.090841006s ago: executing program 5 (id=1983): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="ec00000010000108000000000000000000", @ANYRES32=r3, @ANYBLOB="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"], 0xec}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x400000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet(0x2, 0x2, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x50009404, &(0x7f00000004c0)={0x0, 0xfd51, 0x3a}) setsockopt$inet_mreqn(r6, 0x0, 0x23, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) close(r9) add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)={0x3, 0x0, @a}, 0x48, 0xfffffffffffffffb) syz_clone(0x0, &(0x7f0000000300)="d7d0e43009f47a2f3ce03fd0071f04357be3fa3452e5e20d5ffb06201df6a9dabd0f7aeaab813ea9c4e84ef6135b911f02c69fd995ebc9f83d633ab4bb5fe33b4c65bf5039f9ff33bb339e500431794b496ef72eb5bb471237ca1131876fa52ffc36aac3a9b4bd212b8a12b90e9ad63cc00c932347c35740eb14ff16b78d797a4144ab1c0693b69666cf280b70837038c1b2ab35a6db505fbe22eb893049454e98506c680b86d133424c0eeeb84fee9c502faa60ec8f0a68c11c91223192e5b60cc6334e0a46e6f5a0ccb3f39ba70035a3c498", 0xd3, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="0d6ecc5114731610e3e538e04ddba9b5f5cbfccfaa") sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000030805000000000000000000000000007817d7ae5681"], 0x14}}, 0x0) 17m41.001441498s ago: executing program 33 (id=1983): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="ec00000010000108000000000000000000", @ANYRES32=r3, @ANYBLOB="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"], 0xec}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x400000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet(0x2, 0x2, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x50009404, &(0x7f00000004c0)={0x0, 0xfd51, 0x3a}) setsockopt$inet_mreqn(r6, 0x0, 0x23, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) close(r9) add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)={0x3, 0x0, @a}, 0x48, 0xfffffffffffffffb) syz_clone(0x0, &(0x7f0000000300)="d7d0e43009f47a2f3ce03fd0071f04357be3fa3452e5e20d5ffb06201df6a9dabd0f7aeaab813ea9c4e84ef6135b911f02c69fd995ebc9f83d633ab4bb5fe33b4c65bf5039f9ff33bb339e500431794b496ef72eb5bb471237ca1131876fa52ffc36aac3a9b4bd212b8a12b90e9ad63cc00c932347c35740eb14ff16b78d797a4144ab1c0693b69666cf280b70837038c1b2ab35a6db505fbe22eb893049454e98506c680b86d133424c0eeeb84fee9c502faa60ec8f0a68c11c91223192e5b60cc6334e0a46e6f5a0ccb3f39ba70035a3c498", 0xd3, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="0d6ecc5114731610e3e538e04ddba9b5f5cbfccfaa") sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000030805000000000000000000000000007817d7ae5681"], 0x14}}, 0x0) 49.037886894s ago: executing program 6 (id=4513): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2ac, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x298, 0x1, [@m_ife={0x90, 0xb, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x8, 0x1ff, 0x5}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x31, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad328a4154dd4046c261a61dc99ee70038b3509"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xc8, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x9b, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xb4, 0x9, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x87f3, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x9, 0x6, 0x3, 0x7fb}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x408, 0x6, 0x5, 0x5, 0x69e}}, @TCA_ACT_BPF_FD={0x8}]}, {0x29, 0x6, "a09e88b2fa7e2ad0dddad3cdaa9b726cf5b56034a46fe4468bd19b5780d1bd141230a65f0d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x88, 0xd, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x80}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x25, 0x6, "d53a6627b5c2b2c1126462fd280ec461bb61d2323e41566a3eaee195a84bb37143"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x900}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 48.438929189s ago: executing program 6 (id=4516): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x80200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) socket$key(0xf, 0x3, 0x2) socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x6, 0x9, 0x2, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000200)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0x0, 0x7fffffff, 0x100002}, 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r8 = semget$private(0x0, 0x207, 0x0) semtimedop(r8, 0x0, 0x0, 0x0) 45.932809426s ago: executing program 6 (id=4523): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) r1 = getpid() (rerun: 64) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) (async) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) (async, rerun: 32) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x195) (async) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2, 0x5}, 0xe) (async) shutdown(r5, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) (rerun: 32) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000200)={r6, 0x6, 0x5}, &(0x7f00000001c0)=0x8) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8}, 0x10, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRESHEX=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="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"], 0x20000600}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef77997e344e61482808c02b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 45.626851136s ago: executing program 6 (id=4524): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') socket$netlink(0x10, 0x3, 0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040000) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r5, &(0x7f0000000000)='2\x00', 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 44.212423406s ago: executing program 6 (id=4529): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000280)={0x10000, 0x6, 0x4, 0x70000, 0x80000000, {0x0, 0x2710}, {0x3, 0x8, 0x1, 0xe5, 0xf8, 0x5, "a6bce5f7"}, 0xb, 0x4, {}, 0x4, 0x0, r1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r2, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = getpid() lchown(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r10, 0xffffffffffffffff, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x5}}, 0x14}}, 0x40800) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\\]\n!', @ANYRES16=r15, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r16, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000880)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010800000000000000000b003dd108000300", @ANYBLOB="012c306e058cb8e8ec9dabd8da3907918dbea8d97a38389a72bb1f4e22f7524b7d35dbf943bb7d2732d516fd02cb8d54e3637f650a66986d1fa2c29482c4332be1d3a14f4ffdd1963c311d4b14b4311a1fd323af4d63d032bac868c1ffd0", @ANYBLOB="0a0006000802110000000000300050800800030002ac0f0011000100cabee339084eeef16f162471f40000000500090002000000050002", @ANYRES32=r3, @ANYRES64=r3, @ANYRES16=r8, @ANYRESOCT=r13, @ANYRES64=r10, @ANYRESOCT=r16], 0x58}}, 0x10000010) 43.503836294s ago: executing program 6 (id=4532): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) memfd_create(0x0, 0x0) socket(0x2, 0x80805, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000640)={{}, {0x0, 0x989680}}, &(0x7f00000017c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000140)={@empty, @broadcast}, &(0x7f0000000180)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1a174dc1351109a27b935a29978576cf928758042c90463143713200539e938f5a16a6b606d167397dce6bb9f188cb555843716261cc0743b0edeb659694f44eb2b314e777dff41472b0eac1a4b1e32d8d307e3fe386b63a37601e129bbd28980d7c91438e6d0ace795ffb52290623320fc8d5b989726c63c51ac951402ab02f21e2a3cc768129a7172708e4518cb489aba30a491cfa37c6832b1444f2c053706a99cece7992b47a024c7f656410d4a435a3c1cf8b20fedddd0fc03385ccec56725704b295336c0600fdfdb9495ac7b14e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5b1f849800000000deff00000000e6ffffff0000000000000046f5f06a00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000a00)={r10, r8, r9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x3, 0x800000}) 42.88322366s ago: executing program 34 (id=4532): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) memfd_create(0x0, 0x0) socket(0x2, 0x80805, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000640)={{}, {0x0, 0x989680}}, &(0x7f00000017c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000140)={@empty, @broadcast}, &(0x7f0000000180)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1a174dc1351109a27b935a29978576cf928758042c90463143713200539e938f5a16a6b606d167397dce6bb9f188cb555843716261cc0743b0edeb659694f44eb2b314e777dff41472b0eac1a4b1e32d8d307e3fe386b63a37601e129bbd28980d7c91438e6d0ace795ffb52290623320fc8d5b989726c63c51ac951402ab02f21e2a3cc768129a7172708e4518cb489aba30a491cfa37c6832b1444f2c053706a99cece7992b47a024c7f656410d4a435a3c1cf8b20fedddd0fc03385ccec56725704b295336c0600fdfdb9495ac7b14e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5b1f849800000000deff00000000e6ffffff0000000000000046f5f06a00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000a00)={r10, r8, r9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x3, 0x800000}) 27.086499676s ago: executing program 4 (id=4569): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x387, 0xff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x17b, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x20011814) r4 = syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0x0, 0x30c0, 0x0, 0x24}, &(0x7f00000001c0), &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r4}], 0x1, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x3734, &(0x7f0000000580)={0x0, 0x139b, 0x4, 0x1, 0x16a, 0x0, r4}, &(0x7f0000000600), &(0x7f0000000900)) r6 = syz_io_uring_setup(0x7dc0, &(0x7f0000000880)={0x0, 0x5, 0x20000, 0x2, 0x2000000, 0x0, r5}, &(0x7f0000000780), 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r8, 0x58, &(0x7f0000000500)}, 0x10) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000700)=0x0, 0x0) syz_io_uring_submit(r9, 0x0, 0x0) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) gettid() 24.884544183s ago: executing program 4 (id=4573): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r4, &(0x7f0000000500)=[{&(0x7f0000000280)=""/86, 0x56}, {0x0}], 0x2, 0x5, 0xfff7fffd) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x402401) socket$isdn_base(0x22, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x400000}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000400000de, 0x0) 20.761127104s ago: executing program 4 (id=4584): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000005080)={0x0, 'vlan0\x00', {}, 0x7fff}) 20.476710397s ago: executing program 4 (id=4588): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}]}}, 0x0, 0x36}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() signalfd4(r0, &(0x7f0000000100)={[0x2]}, 0x8, 0x1000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) mount(&(0x7f0000000380)=@sg0, &(0x7f0000000300)='./file3\x00', &(0x7f0000000340)='gfs2\x00', 0x800018, &(0x7f0000001040)='acl=\x8cB\xd0\x02\x91\x91mt\x15\x85\xe4\xf2\xdd\r@B\xa7\x88\xbe\r\x82\x9c\x16h~u\xd0\xba\xc8f\xc2\x12!\xc1\xeek\xa5~\x8f\x9c\xbe\n:\x91<\xac\x9f\xaa$Q\xae\b\x9c\xe2v&\xbc\xab\xf7\x90\x84\xb6\x17\xf6\xabWt<4\'\x93\x87\xcfP\xa0h\xc0\xc4L\x1f\x11\x86\xfe\xccPS\x8e\xb3#\\\x89}') fanotify_mark(r5, 0x201, 0x4800003e, r4, 0x0) 19.747709494s ago: executing program 4 (id=4590): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000012c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r4, 0x8b1b, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffe, 0x9, 0x0, 0xfffffff9}, 0x10, r2}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f00000000c0)=0xf3e, 0x4) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0xf6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', r6, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff37) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 18.946782198s ago: executing program 4 (id=4594): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r4, &(0x7f0000000500)=[{&(0x7f0000000280)=""/86, 0x56}, {0x0}], 0x2, 0x5, 0xfff7fffd) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x402401) socket$isdn_base(0x22, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x400000}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000400000de, 0x0) 18.888497997s ago: executing program 2 (id=4595): mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@redirect_dir_off}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xc0a00, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fsopen(0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001040)=ANY=[@ANYBLOB="05000000890c00"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x77359400, @ANYRES64, @ANYBLOB="0000004001"], 0x80}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 18.859131336s ago: executing program 3 (id=4596): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x40, 0x2, 0x800001b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r2, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 18.598993917s ago: executing program 3 (id=4598): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) setregid(0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x7, 0x58d083) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getown(r3, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000103}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x0, 0x3fff}, 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000002680)="1e", 0x1}], 0x1) 16.3055313s ago: executing program 2 (id=4599): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f00000003c0)=@tipc=@id={0x1e, 0x3, 0x22b9e9f797def337, {0x4e21, 0x3}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000700)="82c6da265674a01e7b0cf8ffe2edfa37e1978d0b03921101391e1e9cebbf589611486cdb7a9440e49b481d11c02f1e07f9a948456287e47715e7e5cdfee32688aeafcd895ea76bfb400bc119193b56ac9c7ce5625ad44beed439d118082877940ad34708daaad274f9b6871acae267f3e06eedcf", 0x74}, {&(0x7f0000000900)="c7e2979000dfd99ef4da57e0a92d2748cfc7abb60555e11ae41f11a6f2a9c7d1f1cca6f45e7af334c3baf858bbaea5199529db137d8342b8a70a907ad17104d2de7bce15a83d4964678c9477f89d484f23031bcb433fa0086cf8e0ef4b0dc36e16fb6c44f94401c13b98dc05de18e2b1d379dadb9bffd8b25da1909648da65ea1d26a86ee2b22a4691c13fa2e68d07a4c54a3f4f178635f3f6dd69b085306ca51730", 0xa2}], 0x2}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/219, 0xdb}], 0x1, &(0x7f0000000480)=""/19, 0x13}, 0x40000010) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/111, 0x6f}, {0x0}], 0x2) syz_clone3(&(0x7f0000000300)={0x110080000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x21}, &(0x7f00000000c0)=""/81, 0x51, 0x0, &(0x7f0000000200)=[0x0, 0x0], 0x2}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) r4 = syz_open_procfs(0x0, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x141}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x9800d1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r6 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x208c9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 14.58398186s ago: executing program 3 (id=4602): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x140}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x10022, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000014) setsockopt$sock_attach_bpf(r4, 0x6, 0x25, &(0x7f0000000040), 0x4) sendmmsg(r4, &(0x7f0000002980), 0x0, 0x4000855) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080002010900680000800900456f009100660000401190780a010102ac1414aa4f204e22007d9078c10200169c79cb22459ff50866ff829694a603d3c443eead4100af7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d"], 0x9f) memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa294}) 13.463164137s ago: executing program 1 (id=4603): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000440)='rpc_clnt_new\x00', r0, 0x0, 0x1}, 0x18) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="144800002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 13.347168071s ago: executing program 2 (id=4604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x7, 0xa, 0x80000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x3, 0x0, 0x7, 0x89d4, 0x0, 0x10000}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) 13.225336185s ago: executing program 3 (id=4605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r1, &(0x7f00000001c0)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x12, 0x800) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2026012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="5001000000000000018000000000000003000000473041000000000000000000000000ff0f0000000000008000000000000000ffffff991a0d0000050000ffffffffff7f020000000000000004000000000000000800000000000000070000000000e4000000008000001000"/120, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="090000000000000000000000000000000000000002000000000000000700000008"], 0x0, 0x0, 0x0}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=ANY=[@ANYBLOB="300000004a00030000000000000000000a008080", @ANYRES32=0x0, @ANYBLOB="0000000014000100fe8000000000000000000000000000bb"], 0x30}}, 0x24008880) getdents64(r7, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) statx(r7, &(0x7f0000000b00)='./file0\x00', 0x0, 0x400, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x9192, 0x5, 0xb, 0x3}, {0x5, 0xe, 0x70, 0x7}, {0x7f, 0x10, 0xa3, 0xffffff80}, {0xad4, 0x6, 0x2, 0xfffffffe}, {0x5, 0xd, 0x2, 0x7}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a050400000000000000000200000088000480340001800c0001007061796c6f6164002400028008000340000000000800024000000000080001400000001008000440000000022c0001800e000100696d6d6564696174650000001800028008000140000000140c000280050001002d00000024000180090001006d6574610000000014000280080001400000001408000240000000db0900010073797a30000000000900020073797a32"], 0xdc}}, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x13, 0x0, 0x26) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) 13.150425162s ago: executing program 1 (id=4606): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007111b7000000000037000000000000009500744af32befa5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x4d) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_io_uring_setup(0xf6f, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r5 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r5, 0x4}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000240)={r5, 0x4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r6, @ANYBLOB=',rootmode=0']) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x2, {0x6, 0x0, 0x0, 0x3, 0x4000, 0x0, {0x3, 0x7ff, 0x1, 0x0, 0x403, 0x0, 0x20, 0x1, 0x3ff, 0x8000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@private1}, &(0x7f0000000080)=0x14) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r8, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 11.526781295s ago: executing program 2 (id=4607): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x1, 0x10b000) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1802003f5bbde80000000000000000008500000041000000b70800007b08ff33a828c3ed00000000b7080000000000007b8af0ff00000000bfa10000000000000701f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000b40)=@multiplanar_mmap={0x7cd4, 0x9, 0x4, 0x4, 0x2, {}, {0x3, 0x1, 0x9, 0x9, 0x7f, 0xc5, "a776d977"}, 0xfffffff8, 0x1, {&(0x7f0000000a40)=[{0x837, 0x3, {0x401}, 0x3}, {0x80000000, 0x14500, {}, 0xdd1}]}, 0x4}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604110, &(0x7f0000000380)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0xfbf1a000], [0x8002]], '\x00', [{0x0, 0x9}, {0x0, 0xc}, {0x0, 0x1efb660a}, {}, {}, {0x0, 0x2000}, {0x0, 0x8000000}, {}, {}, {}, {}, {0x8}], '\x00', 0x3f9, 0x0, 0x0, 0x0, 0x0, 0x2}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendto$inet(r6, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 11.403437055s ago: executing program 1 (id=4608): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000002000000000000060400000000612e00232897e250a791e7f5db733a517331942a98d14e5a0ba8dc891f4018a7367f2552b6ba5b643454bfbbbab204accbf0d09799cec299d4bd0bd7aac954afd56495a88cbfff2d7acce7e8674d8ae3ac5be220482f6fd5c6c41eaae5d03bc20d57b2e1d01374b9f754973c1c5c5ad50e4c0c69b9ecca0b6f08e82da3b1aa4bad04eba0bc0277267eaeeb"], 0x0, 0x28, 0x0, 0x1, 0x2}, 0x28) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) 11.358916296s ago: executing program 3 (id=4609): socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448de, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_FNAME(r7, 0x1, 0x53, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r10, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x1, 0x2, 0x1}, 0x5, 0x5, 0x400001}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_tid_address(&(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd70000000000002000000", @ANYRES32=r3, @ANYBLOB="0a0002"], 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 11.287133673s ago: executing program 1 (id=4610): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800020001"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000400000000000000030000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400005b6dbe53850000000300000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="b6f373fee74ae2747582810e493a", 0x0, 0x9, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 11.244701336s ago: executing program 1 (id=4611): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) setregid(0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x7, 0x58d083) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getown(r3, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000103}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x0, 0x3fff}, 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000002680)="1e", 0x1}], 0x1) 10.416286066s ago: executing program 2 (id=4612): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000140)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r4, &(0x7f00000029c0)={0x658, 0x0, r5, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r6, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0x8, 0x2, 0xfffffe01, 0x3000, 0x2, r6, r7, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r6, r7, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r6, r7, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r6, r7, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x4, 0x3, 0x6, 0x7, 0x8000, 0x8, r6, r7, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x20006, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0x1, 0x2, 0x6, 0x69504f9e, 0x80000000, 0x2000, 0x6, r6, r7, 0x6, 0x5}}, {0x0, 0xfffffffffffffffc, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x8, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf53, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, r6, r7, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r7, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x658) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, 0x0, 0x0) bind$tipc(r8, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) chdir(&(0x7f0000000080)='./file1\x00') syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') 10.214180374s ago: executing program 3 (id=4613): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xcff5}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8021d08000b000000e8fe55a1180015000600142603640e1209000d000104", 0x1f}], 0x1}, 0x80c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x200000000000000}, 0x18) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="10008100c23b88a8", 0x8, 0x0, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x1, 0x6, @multicast}, 0x14) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x800, '\x00', r3, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) r5 = syz_io_uring_setup(0x493, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@enum64={0x8, 0x7, 0x0, 0x13, 0x1, 0x2, [{0x4, 0x2, 0x2}, {0x2, 0x9, 0x7}, {0xc, 0x9, 0x6b1}, {0x10, 0x86, 0x5}, {0xa, 0x8, 0x3}, {0x3, 0x7, 0x8}, {0x10, 0x6, 0x3926}]}]}, {0x0, [0x30, 0x30, 0x61, 0x2e, 0x30]}}, &(0x7f0000000980)=""/4096, 0x7f, 0x1000, 0x0, 0x6, 0x10000}, 0x28) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x17, 0x1, 0xedd, 0x6, 0x40001, r4, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0x10, &(0x7f0000000300)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000400)='GPL\x00', 0xc, 0xcb, &(0x7f00000004c0)=""/203, 0x41000, 0xe, '\x00', r3, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0xe, 0x80000001, 0xf}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000840)=[r4, r4, r9, r4, r4, r10, r4, r4, r4, r4], &(0x7f0000000880)=[{0x1, 0x2, 0x5, 0x5}, {0x0, 0x4, 0x3, 0x6}, {0x0, 0x4, 0x9}, {0x3, 0x3, 0x0, 0x2}, {0x5, 0x2, 0x2}], 0x10, 0x2}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x4, 0x0, 0x0) r11 = syz_open_dev$video4linux(0x0, 0xa, 0x181000) ioctl$VIDIOC_G_CTRL(r11, 0xc008561b, &(0x7f0000000040)={0x800, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r12 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r12, &(0x7f0000001a40)=""/102392, 0x18ff8) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x293, 0x0, r5}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) 10.211481216s ago: executing program 1 (id=4614): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x140}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x10022, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000014) setsockopt$sock_attach_bpf(r4, 0x6, 0x25, &(0x7f0000000040), 0x4) sendmmsg(r4, &(0x7f0000002980), 0x0, 0x4000855) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080002010900680000800900456f009100660000401190780a010102ac1414aa4f204e22007d9078c10200169c79cb22459ff50866ff829694a603d3c443eead4100af7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d"], 0x9f) memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa294}) 9.128268431s ago: executing program 7 (id=4533): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000004c40)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0x50, 0x0, &(0x7f0000000240)="020000000000000019a77741beaddc2dcee9a9bbf148ec79e44db5fd72a5bddf0f5540da828e6b5f74cff18b2249ac45dbebce392268b1e26c0773a873eaedbd1ebcdec4fb99f52fb6503c957f8d4624", 0x0, 0x7, 0x300, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff80fe, 0x8}, 0x50) close(r1) socketpair$tipc(0x1e, 0xc0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 8.908627954s ago: executing program 7 (id=4615): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 8.647402566s ago: executing program 2 (id=4616): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000000800"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) r2 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="30200000000804001c001a8018000a8014000700fe8800000000000000000000000001011400350062617461647630000000000000000000"], 0x50}}, 0x20004400) mount(&(0x7f0000000200)=@filename='./file0/../file0/../file0\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x1000000, &(0x7f0000000300)='trans=rdma,') 0s ago: executing program 7 (id=4617): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000000800"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) r2 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="30200000000804001c001a8018000a8014000700fe8800000000000000000000000001011400350062617461647630000000000000000000"], 0x50}}, 0x20004400) mount(&(0x7f0000000200)=@filename='./file0/../file0/../file0\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x1000000, &(0x7f0000000300)='trans=rdma,') kernel console output (not intermixed with test programs): 31.549351][ T30] audit: type=1326 audit(1754690723.431:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20450 comm="syz.4.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1731.727846][T20465] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3811'. [ 1734.726883][T20485] gfs2: Unexpected value for 'acl' [ 1735.264142][T20493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3817'. [ 1735.441306][ T5834] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1735.597428][ T5834] usb 3-1: Using ep0 maxpacket: 8 [ 1735.612600][ T5834] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1735.634803][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.678500][ T5834] usb 3-1: Product: syz [ 1735.682742][ T5834] usb 3-1: Manufacturer: syz [ 1735.722386][ T5834] usb 3-1: SerialNumber: syz [ 1735.744208][ T5834] usb 3-1: config 0 descriptor?? [ 1735.790273][ T5834] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1737.245026][ T5834] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 1737.257439][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1737.317232][ T5834] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1737.557438][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1737.662359][T20506] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3822'. [ 1737.672249][T20506] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3822'. [ 1737.681492][T20506] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3822'. [ 1738.364196][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1739.157737][ T9] usb 4-1: config 0 has no interface number 0 [ 1739.163867][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1739.270342][T14568] usb 3-1: USB disconnect, device number 48 [ 1739.341949][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1739.537405][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.556059][ T9] usb 4-1: Product: syz [ 1739.570041][ T9] usb 4-1: Manufacturer: syz [ 1739.574849][ T9] usb 4-1: SerialNumber: syz [ 1739.643633][T20513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3824'. [ 1740.331626][ T9] usb 4-1: config 0 descriptor?? [ 1740.669996][T14568] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1740.706852][ T9] usb 4-1: can't set config #0, error -71 [ 1740.822407][ T9] usb 4-1: USB disconnect, device number 29 [ 1740.877422][T14568] usb 2-1: Using ep0 maxpacket: 8 [ 1741.413415][T14568] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1741.521500][T14568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.606609][T14568] usb 2-1: Product: syz [ 1741.614869][T14568] usb 2-1: Manufacturer: syz [ 1741.647072][T14568] usb 2-1: SerialNumber: syz [ 1741.727851][T20528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3828'. [ 1742.106516][T14568] usb 2-1: config 0 descriptor?? [ 1742.118126][T14568] gspca_main: se401-2.14.0 probing 047d:5003 [ 1742.386679][T20532] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3829'. [ 1743.080427][T14568] gspca_se401: read req failed req 0x06 error -19 [ 1743.206467][T14568] usb 2-1: USB disconnect, device number 52 [ 1747.025136][T20576] 9pnet_fd: Insufficient options for proto=fd [ 1747.821484][T20586] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3843'. [ 1748.115205][T20592] FAULT_INJECTION: forcing a failure. [ 1748.115205][T20592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1748.237673][T20592] CPU: 1 UID: 0 PID: 20592 Comm: syz.1.3844 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1748.237704][T20592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1748.237717][T20592] Call Trace: [ 1748.237727][T20592] [ 1748.237738][T20592] dump_stack_lvl+0x189/0x250 [ 1748.237768][T20592] ? __pfx____ratelimit+0x10/0x10 [ 1748.237789][T20592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1748.237811][T20592] ? __pfx__printk+0x10/0x10 [ 1748.237837][T20592] ? __might_fault+0xb0/0x130 [ 1748.237869][T20592] should_fail_ex+0x414/0x560 [ 1748.237896][T20592] strncpy_from_user+0x36/0x290 [ 1748.237930][T20592] getname_flags+0xf3/0x540 [ 1748.237959][T20592] __x64_sys_rename+0x5d/0x90 [ 1748.237981][T20592] do_syscall_64+0xfa/0x3b0 [ 1748.238002][T20592] ? lockdep_hardirqs_on+0x9c/0x150 [ 1748.238023][T20592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.238043][T20592] ? clear_bhb_loop+0x60/0xb0 [ 1748.238067][T20592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.238086][T20592] RIP: 0033:0x7fd2c558ebe9 [ 1748.238104][T20592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1748.238122][T20592] RSP: 002b:00007fd2c37d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1748.238143][T20592] RAX: ffffffffffffffda RBX: 00007fd2c57b6090 RCX: 00007fd2c558ebe9 [ 1748.238160][T20592] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 1748.238174][T20592] RBP: 00007fd2c37d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.238187][T20592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.238199][T20592] R13: 00007fd2c57b6128 R14: 00007fd2c57b6090 R15: 00007ffc9e099088 [ 1748.238232][T20592] [ 1751.934518][T20626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1752.543204][T20621] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3852'. [ 1755.444793][T20650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3857'. [ 1758.274314][T20693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3868'. [ 1760.146432][T20706] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3871'. [ 1761.858534][T20729] autofs: Unknown parameter 'ąd' [ 1761.892163][ T8915] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1762.039773][ T8915] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1763.428029][T20743] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3881'. [ 1763.540688][T20745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3882'. [ 1765.306173][T20762] No such timeout policy "syz0" [ 1766.521344][T20776] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3889'. [ 1767.242764][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3890'. [ 1767.627931][ T30] audit: type=1326 audit(1754690760.161:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20786 comm="syz.1.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c558ebe9 code=0x7ffc0000 [ 1767.672287][ T30] audit: type=1326 audit(1754690760.171:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20786 comm="syz.1.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c558ebe9 code=0x7ffc0000 [ 1767.699693][ T30] audit: type=1326 audit(1754690760.191:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20786 comm="syz.1.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2c558ebe9 code=0x7ffc0000 [ 1767.782344][T20788] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1767.797187][ T30] audit: type=1326 audit(1754690760.191:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20786 comm="syz.1.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c558ebe9 code=0x7ffc0000 [ 1767.852650][T20788] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1767.908423][ T30] audit: type=1326 audit(1754690760.191:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20786 comm="syz.1.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c558ebe9 code=0x7ffc0000 [ 1767.969875][ T30] audit: type=1326 audit(1754690760.191:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20786 comm="syz.1.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2c558ebe9 code=0x7ffc0000 [ 1768.825146][T20794] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3895'. [ 1769.131816][T20799] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3896'. [ 1769.295324][ T5834] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1769.663197][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 1769.683651][ T5834] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 1769.714978][ T5834] usb 2-1: config 0 has no interface number 0 [ 1769.746070][ T5834] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1769.785441][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.811946][ T5834] usb 2-1: Product: syz [ 1769.822895][ T5834] usb 2-1: Manufacturer: syz [ 1769.834233][ T5834] usb 2-1: SerialNumber: syz [ 1769.858970][ T5834] usb 2-1: config 0 descriptor?? [ 1770.093343][ T5834] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1770.106619][ T5834] dvb-usb: bulk message failed: -22 (2/0) [ 1770.453237][ T5834] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1770.463215][ T5834] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1770.471309][ T5834] usb 2-1: media controller created [ 1770.489140][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1770.515439][T20797] dvb-usb: bulk message failed: -22 (5/0) [ 1770.582420][ T5834] cxusb: set interface failed [ 1770.620095][ T5834] dvb-usb: bulk message failed: -22 (1/0) [ 1771.201391][ T5834] DVB: Unable to find symbol lgdt330x_attach() [ 1771.207930][ T5834] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1771.786574][ T5834] rc_core: IR keymap rc-dvico-portable not found [ 1771.797556][ T5834] Registered IR keymap rc-empty [ 1771.808616][ T5834] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1771.919850][ T5834] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input54 [ 1771.998611][ T5834] dvb-usb: schedule remote query interval to 100 msecs. [ 1772.005680][ T5834] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1772.087765][ T5834] usb 2-1: USB disconnect, device number 53 [ 1772.669222][T20828] overlayfs: missing 'lowerdir' [ 1772.716636][ T5834] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1778.020886][T20864] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1778.081560][T20864] bond0: entered promiscuous mode [ 1778.212222][T20864] bond_slave_0: entered promiscuous mode [ 1778.287713][T20864] bond_slave_1: entered promiscuous mode [ 1778.360405][T20864] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 1778.416219][T20864] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 1778.562742][T20864] hsr1: entered allmulticast mode [ 1778.597736][T20864] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1778.600897][T20868] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3914'. [ 1778.797496][T20864] bond0: entered allmulticast mode [ 1778.802652][T20864] bond_slave_0: entered allmulticast mode [ 1778.896464][T20864] bond_slave_1: entered allmulticast mode [ 1779.059426][T20874] FAULT_INJECTION: forcing a failure. [ 1779.059426][T20874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1779.197567][T20874] CPU: 1 UID: 0 PID: 20874 Comm: syz.1.3915 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1779.197598][T20874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1779.197610][T20874] Call Trace: [ 1779.197618][T20874] [ 1779.197628][T20874] dump_stack_lvl+0x189/0x250 [ 1779.197654][T20874] ? __pfx____ratelimit+0x10/0x10 [ 1779.197675][T20874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1779.197695][T20874] ? __pfx__printk+0x10/0x10 [ 1779.197729][T20874] should_fail_ex+0x414/0x560 [ 1779.197754][T20874] _copy_to_user+0x31/0xb0 [ 1779.197781][T20874] simple_read_from_buffer+0xe1/0x170 [ 1779.197807][T20874] proc_fail_nth_read+0x1df/0x250 [ 1779.197835][T20874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1779.197862][T20874] ? rw_verify_area+0x258/0x650 [ 1779.197890][T20874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1779.197917][T20874] vfs_read+0x200/0x980 [ 1779.197951][T20874] ? __pfx___mutex_lock+0x10/0x10 [ 1779.197974][T20874] ? __pfx_vfs_read+0x10/0x10 [ 1779.198005][T20874] ? __fget_files+0x2a/0x420 [ 1779.198032][T20874] ? __fget_files+0x3a0/0x420 [ 1779.198052][T20874] ? __fget_files+0x2a/0x420 [ 1779.198083][T20874] ksys_read+0x145/0x250 [ 1779.198105][T20874] ? __pfx_ksys_read+0x10/0x10 [ 1779.198120][T20874] ? rcu_is_watching+0x15/0xb0 [ 1779.198148][T20874] ? do_syscall_64+0xbe/0x3b0 [ 1779.198174][T20874] do_syscall_64+0xfa/0x3b0 [ 1779.198195][T20874] ? lockdep_hardirqs_on+0x9c/0x150 [ 1779.198214][T20874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.198231][T20874] ? clear_bhb_loop+0x60/0xb0 [ 1779.198252][T20874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.198270][T20874] RIP: 0033:0x7fd2c558d5fc [ 1779.198287][T20874] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1779.198303][T20874] RSP: 002b:00007fd2c37d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1779.198324][T20874] RAX: ffffffffffffffda RBX: 00007fd2c57b6090 RCX: 00007fd2c558d5fc [ 1779.198336][T20874] RDX: 000000000000000f RSI: 00007fd2c37d50a0 RDI: 0000000000000004 [ 1779.198346][T20874] RBP: 00007fd2c37d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1779.198352][T20874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1779.198359][T20874] R13: 00007fd2c57b6128 R14: 00007fd2c57b6090 R15: 00007ffc9e099088 [ 1779.198401][T20874] [ 1780.828033][ T5972] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1781.246158][ T5972] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1781.299930][ T5972] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1781.330629][ T5972] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.360795][ T5972] usb 3-1: config 220 has no interface number 2 [ 1781.377726][ T5972] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1781.570375][ T5972] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1781.592683][ T5972] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1781.661466][ T5972] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1781.705859][ T5972] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1781.767485][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.837886][ T5972] usb 3-1: Product: syz [ 1781.846453][ T5972] usb 3-1: Manufacturer: syz [ 1781.866831][ T5972] usb 3-1: SerialNumber: syz [ 1781.903134][T20896] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3923'. [ 1782.515959][T20901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3925'. [ 1783.608175][ T5972] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1783.614672][ T5972] usb 3-1: No valid video chain found. [ 1783.677506][ T5972] usb 3-1: selecting invalid altsetting 0 [ 1783.718635][ T5972] usb 3-1: selecting invalid altsetting 0 [ 1783.725120][ T5972] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1784.060023][T20914] autofs4:pid:20914:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 1784.730166][ T5972] usb 3-1: USB disconnect, device number 49 [ 1785.140817][T20921] FAULT_INJECTION: forcing a failure. [ 1785.140817][T20921] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.153707][T20921] CPU: 1 UID: 0 PID: 20921 Comm: syz.1.3927 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1785.153733][T20921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1785.153746][T20921] Call Trace: [ 1785.153755][T20921] [ 1785.153764][T20921] dump_stack_lvl+0x189/0x250 [ 1785.153791][T20921] ? __pfx____ratelimit+0x10/0x10 [ 1785.153813][T20921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1785.153836][T20921] ? __pfx__printk+0x10/0x10 [ 1785.153866][T20921] ? __pfx___might_resched+0x10/0x10 [ 1785.153894][T20921] should_fail_ex+0x414/0x560 [ 1785.153920][T20921] should_failslab+0xa8/0x100 [ 1785.153943][T20921] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1785.153964][T20921] ? trace_irq_disable+0x37/0x110 [ 1785.153989][T20921] ? __alloc_skb+0x112/0x2d0 [ 1785.154021][T20921] __alloc_skb+0x112/0x2d0 [ 1785.154059][T20921] netlink_sendmsg+0x5c6/0xb30 [ 1785.154088][T20921] ? lockdep_hardirqs_on+0x9c/0x150 [ 1785.154116][T20921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1785.154141][T20921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1785.154173][T20921] ? netlink_sendmsg+0x10/0xb30 [ 1785.154201][T20921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1785.154230][T20921] __sock_sendmsg+0x21c/0x270 [ 1785.154256][T20921] ____sys_sendmsg+0x505/0x830 [ 1785.154290][T20921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1785.154329][T20921] ? import_iovec+0x74/0xa0 [ 1785.154360][T20921] ___sys_sendmsg+0x21f/0x2a0 [ 1785.154391][T20921] ? __pfx____sys_sendmsg+0x10/0x10 [ 1785.154459][T20921] ? __fget_files+0x2a/0x420 [ 1785.154480][T20921] ? __fget_files+0x3a0/0x420 [ 1785.154514][T20921] __x64_sys_sendmsg+0x19b/0x260 [ 1785.154546][T20921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1785.154595][T20921] ? do_syscall_64+0xbe/0x3b0 [ 1785.154621][T20921] do_syscall_64+0xfa/0x3b0 [ 1785.154644][T20921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.154662][T20921] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1785.154682][T20921] ? clear_bhb_loop+0x60/0xb0 [ 1785.154706][T20921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.154725][T20921] RIP: 0033:0x7fd2c558ebe9 [ 1785.154743][T20921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1785.154760][T20921] RSP: 002b:00007fd2c37b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1785.154780][T20921] RAX: ffffffffffffffda RBX: 00007fd2c57b6180 RCX: 00007fd2c558ebe9 [ 1785.154795][T20921] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1785.154808][T20921] RBP: 00007fd2c37b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1785.154821][T20921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1785.154833][T20921] R13: 00007fd2c57b6218 R14: 00007fd2c57b6180 R15: 00007ffc9e099088 [ 1785.154865][T20921] [ 1785.443627][T20920] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3928'. [ 1789.952486][T20969] FAULT_INJECTION: forcing a failure. [ 1789.952486][T20969] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.013618][T20969] CPU: 0 UID: 0 PID: 20969 Comm: syz.1.3941 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1790.013648][T20969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1790.013661][T20969] Call Trace: [ 1790.013670][T20969] [ 1790.013680][T20969] dump_stack_lvl+0x189/0x250 [ 1790.013705][T20969] ? __pfx____ratelimit+0x10/0x10 [ 1790.013718][T20969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1790.013729][T20969] ? __pfx__printk+0x10/0x10 [ 1790.013746][T20969] ? __pfx___might_resched+0x10/0x10 [ 1790.013757][T20969] ? fs_reclaim_acquire+0x7d/0x100 [ 1790.013773][T20969] should_fail_ex+0x414/0x560 [ 1790.013790][T20969] should_failslab+0xa8/0x100 [ 1790.013803][T20969] __kmalloc_noprof+0xcb/0x4f0 [ 1790.013812][T20969] ? newary+0x13e/0xac0 [ 1790.013822][T20969] ? security_sem_alloc+0x45/0x330 [ 1790.013836][T20969] ? trace_kmalloc+0x1f/0xd0 [ 1790.013848][T20969] security_sem_alloc+0x45/0x330 [ 1790.013864][T20969] newary+0x1be/0xac0 [ 1790.013873][T20969] ? __pfx_down_write+0x10/0x10 [ 1790.013893][T20969] ipcget+0x1c2/0xdd0 [ 1790.013907][T20969] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1790.013919][T20969] ? __pfx_vfs_write+0x10/0x10 [ 1790.013931][T20969] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1790.013945][T20969] ? __pfx_ipcget+0x10/0x10 [ 1790.013964][T20969] __x64_sys_semget+0x1a3/0x200 [ 1790.013977][T20969] ? __pfx___x64_sys_semget+0x10/0x10 [ 1790.013987][T20969] ? rcu_is_watching+0x15/0xb0 [ 1790.014002][T20969] ? do_syscall_64+0xbe/0x3b0 [ 1790.014016][T20969] do_syscall_64+0xfa/0x3b0 [ 1790.014027][T20969] ? lockdep_hardirqs_on+0x9c/0x150 [ 1790.014038][T20969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.014048][T20969] ? clear_bhb_loop+0x60/0xb0 [ 1790.014061][T20969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.014072][T20969] RIP: 0033:0x7fd2c558ebe9 [ 1790.014082][T20969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1790.014091][T20969] RSP: 002b:00007fd2c37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 1790.014103][T20969] RAX: ffffffffffffffda RBX: 00007fd2c57b5fa0 RCX: 00007fd2c558ebe9 [ 1790.014111][T20969] RDX: 0000000000000000 RSI: 0000000000000207 RDI: 0000000000000000 [ 1790.014118][T20969] RBP: 00007fd2c37f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.014125][T20969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.014131][T20969] R13: 00007fd2c57b6038 R14: 00007fd2c57b5fa0 R15: 00007ffc9e099088 [ 1790.014148][T20969] [ 1791.720496][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.727065][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.218264][T20979] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3944'. [ 1792.736364][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3946'. [ 1795.827677][T21009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3951'. [ 1796.938275][T21019] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3955'. [ 1797.847633][ T5972] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1799.089545][ T5972] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 1799.139693][T21037] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3962'. [ 1799.152074][ T5972] usb 4-1: config 0 has no interface number 0 [ 1799.159591][T21038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3960'. [ 1799.177730][ T5972] usb 4-1: config 0 interface 122 has no altsetting 0 [ 1799.287507][ T5972] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1799.307363][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.347551][ T5972] usb 4-1: Product: syz [ 1799.351809][ T5972] usb 4-1: Manufacturer: syz [ 1799.356417][ T5972] usb 4-1: SerialNumber: syz [ 1799.458341][ T5972] usb 4-1: config 0 descriptor?? [ 1800.471409][T14568] usb 4-1: USB disconnect, device number 30 [ 1800.522811][T14568] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1801.300910][T21061] netlink: 'syz.1.3967': attribute type 12 has an invalid length. [ 1801.312009][T21061] netlink: 'syz.1.3967': attribute type 29 has an invalid length. [ 1801.367611][T21061] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3967'. [ 1801.477496][T21061] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3967'. [ 1802.927086][T21073] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3969'. [ 1803.889424][T21081] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3974'. [ 1804.263469][T21079] overlayfs: missing 'workdir' [ 1808.476052][T21123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3985'. [ 1808.999350][T21129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1809.557996][T21133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1811.805133][T21137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1811.829464][T21151] gfs2: Unexpected value for 'acl' [ 1813.389175][T21167] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3998'. [ 1814.993646][ T24] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1815.190674][ T24] usb 4-1: config 0 has an invalid interface number: 197 but max is 0 [ 1815.221169][ T24] usb 4-1: config 0 has no interface number 0 [ 1815.260874][ T24] usb 4-1: config 0 interface 197 has no altsetting 0 [ 1815.305367][ T24] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=86.12 [ 1815.410909][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.597935][ T24] usb 4-1: Product: syz [ 1815.785336][ T24] usb 4-1: Manufacturer: syz [ 1815.790114][ T24] usb 4-1: SerialNumber: syz [ 1815.837251][ T24] usb 4-1: config 0 descriptor?? [ 1816.050406][T21184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.129330][T21184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.152773][T21195] netlink: 468 bytes leftover after parsing attributes in process `syz.2.4008'. [ 1816.162006][T21201] gfs2: Unexpected value for 'acl' [ 1816.171691][ T24] redrat3 4-1:0.197: Couldn't find all endpoints [ 1816.218979][ T24] usb 4-1: USB disconnect, device number 31 [ 1816.246662][T21195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4008'. [ 1816.847514][ T8915] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1817.028908][ T8915] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1817.085968][ T8915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1817.132406][ T8915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1817.614168][ T8915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1817.704265][ T8915] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1817.736952][ T8915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.779822][ T8915] usb 2-1: config 0 descriptor?? [ 1817.785506][T21204] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1817.798813][T21198] netlink: 'syz.2.4008': attribute type 4 has an invalid length. [ 1818.296328][ T5834] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 1818.597740][ T5834] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1818.770283][T21204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4010'. [ 1818.781846][ T8915] plantronics 0003:047F:FFFF.0040: reserved main item tag 0xd [ 1819.318066][T21223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.329148][T21223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.369637][ T8915] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1819.389273][ T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1819.534124][ T5834] usb 2-1: USB disconnect, device number 54 [ 1819.572744][T21228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4017'. [ 1819.607708][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1819.641063][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1819.693336][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1819.705634][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1819.765999][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 1819.854147][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.880956][ T9] usb 7-1: Product: syz [ 1819.889744][ T9] usb 7-1: Manufacturer: syz [ 1819.906930][ T9] usb 7-1: SerialNumber: syz [ 1820.052028][ T9] usb 7-1: config 0 descriptor?? [ 1820.799318][ T9] usb 7-1: USB disconnect, device number 31 [ 1820.952560][T21243] gfs2: Unexpected value for 'acl' [ 1820.965255][T21242] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1821.662873][T21249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4025'. [ 1822.061579][ T30] audit: type=1326 audit(1754690814.591:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21255 comm="syz.3.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c82f8ebe9 code=0x7ffc0000 [ 1822.307028][T21263] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4030'. [ 1822.400093][ T30] audit: type=1326 audit(1754690814.591:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21255 comm="syz.3.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c82f8ebe9 code=0x7ffc0000 [ 1822.422529][ T30] audit: type=1326 audit(1754690814.591:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21255 comm="syz.3.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c82f8ebe9 code=0x7ffc0000 [ 1822.450818][ T30] audit: type=1326 audit(1754690814.601:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21255 comm="syz.3.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c82f8ebe9 code=0x7ffc0000 [ 1822.726195][ T30] audit: type=1326 audit(1754690814.601:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21255 comm="syz.3.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c82f8ebe9 code=0x7ffc0000 [ 1822.752952][ T30] audit: type=1326 audit(1754690814.601:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21255 comm="syz.3.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5c82f8ebe9 code=0x7ffc0000 [ 1825.525411][T21289] gfs2: Unexpected value for 'acl' [ 1825.923406][ T30] audit: type=1326 audit(1754690818.461:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21300 comm="syz.4.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1826.061481][T21303] No such timeout policy "syz0" [ 1826.065844][ T30] audit: type=1326 audit(1754690818.461:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21300 comm="syz.4.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1826.165428][ T30] audit: type=1326 audit(1754690818.481:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21300 comm="syz.4.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1826.188292][ T30] audit: type=1326 audit(1754690818.491:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21300 comm="syz.4.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1829.254591][T21347] gfs2: Unexpected value for 'acl' [ 1830.599446][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1830.599466][ T30] audit: type=1326 audit(1754690823.121:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21356 comm="syz.6.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5224f8ebe9 code=0x7ffc0000 [ 1830.797702][ T5972] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1831.088768][ T30] audit: type=1326 audit(1754690823.121:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21356 comm="syz.6.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5224f8ebe9 code=0x7ffc0000 [ 1831.113059][T21361] overlayfs: failed to resolve './file0': -2 [ 1831.322205][T21364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4058'. [ 1831.372606][ T30] audit: type=1326 audit(1754690823.121:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21356 comm="syz.6.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5224f8ebe9 code=0x7ffc0000 [ 1831.375823][ T5972] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1831.409377][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.671389][ T30] audit: type=1326 audit(1754690823.121:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21356 comm="syz.6.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5224f8ebe9 code=0x7ffc0000 [ 1831.694121][ T5972] usb 5-1: config 0 descriptor?? [ 1831.705932][ T5972] cp210x 5-1:0.0: cp210x converter detected [ 1831.750854][ T30] audit: type=1326 audit(1754690823.121:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21356 comm="syz.6.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5224f8ebe9 code=0x7ffc0000 [ 1831.899976][ T30] audit: type=1326 audit(1754690823.121:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21356 comm="syz.6.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5224f8ebe9 code=0x7ffc0000 [ 1832.196827][ T5972] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1832.370971][ T5972] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1832.439943][ T9] usb 5-1: USB disconnect, device number 47 [ 1832.476948][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1832.484151][T21375] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4065'. [ 1832.507901][ T9] cp210x 5-1:0.0: device disconnected [ 1832.618579][T21379] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4064'. [ 1832.725872][T21379] fuse: Bad value for 'group_id' [ 1832.731247][T21379] fuse: Bad value for 'group_id' [ 1832.994736][T21390] fuse: Bad value for 'fd' [ 1833.399261][ T5956] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1833.965206][ T5956] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1834.006567][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.084416][ T5956] usb 5-1: config 0 descriptor?? [ 1834.545074][T21408] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4069'. [ 1835.105737][ T5956] usb 5-1: Cannot set autoneg [ 1835.125812][ T5956] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1835.217326][ T5956] usb 5-1: USB disconnect, device number 48 [ 1836.504107][T21428] fuse: Bad value for 'group_id' [ 1836.520846][T21428] fuse: Bad value for 'group_id' [ 1836.567531][ T5956] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1836.887832][ T5956] usb 7-1: device descriptor read/64, error -71 [ 1836.942157][T21431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1837.113081][T21438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4082'. [ 1837.157414][ T5956] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1837.478540][ T5956] usb 7-1: device descriptor read/64, error -71 [ 1838.341437][ T5956] usb usb7-port1: attempt power cycle [ 1838.540516][T21452] autofs: Unknown parameter 'ąd' [ 1839.441826][ T5956] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1839.764332][ T5956] usb 7-1: device descriptor read/8, error -71 [ 1840.858520][T21482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1841.773732][T21489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4096'. [ 1843.482385][T21502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1845.355516][T21523] fuse: Unknown parameter 'group_i00000000000000000000' [ 1845.391776][T21524] lo speed is unknown, defaulting to 1000 [ 1846.256018][T21533] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 1846.471971][T21541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4109'. [ 1848.270447][T14717] Bluetooth: hci4: command tx timeout [ 1848.587951][ T5902] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1849.634246][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 1849.647864][ T5902] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1849.660436][ T5902] usb 5-1: config 0 has no interface number 0 [ 1849.684136][ T5902] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1849.782615][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.961291][ T5902] usb 5-1: Product: syz [ 1850.086085][ T5902] usb 5-1: Manufacturer: syz [ 1850.090941][ T5902] usb 5-1: SerialNumber: syz [ 1850.098565][ T5902] usb 5-1: config 0 descriptor?? [ 1850.109028][ T5902] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1850.116764][ T5902] dvb-usb: bulk message failed: -22 (2/0) [ 1850.135012][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1850.172079][ T5902] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1850.190058][ T5902] usb 5-1: media controller created [ 1850.269694][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1850.353433][T21553] dvb-usb: bulk message failed: -22 (5/0) [ 1850.934995][ T5902] cxusb: set interface failed [ 1850.957494][ T5902] dvb-usb: bulk message failed: -22 (1/0) [ 1851.141697][ T5902] DVB: Unable to find symbol lgdt330x_attach() [ 1851.172900][ T5902] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1851.275721][T21585] gfs2: Unexpected value for 'acl' [ 1851.330095][ T5902] rc_core: IR keymap rc-dvico-portable not found [ 1851.342972][ T5902] Registered IR keymap rc-empty [ 1851.349976][ T5902] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1851.450627][ T5902] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input56 [ 1851.463117][ T5902] dvb-usb: schedule remote query interval to 100 msecs. [ 1851.470369][ T5902] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1851.481958][ T5902] usb 5-1: USB disconnect, device number 49 [ 1851.676814][ T5902] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1852.892727][T21601] loop6: detected capacity change from 0 to 7 [ 1852.963754][T21601] Dev loop6: unable to read RDB block 7 [ 1852.987456][T21601] loop6: AHDI p1 p2 p3 [ 1852.991697][T21601] loop6: partition table partially beyond EOD, truncated [ 1853.015416][T21601] loop6: p1 start 926365495 is beyond EOD, truncated [ 1853.164053][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.177624][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.219071][T21601] loop6: p2 size 116 extends beyond EOD, truncated [ 1854.169937][T21617] autofs: Unknown parameter 'ąd' [ 1854.873326][T21636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4136'. [ 1857.379221][T21650] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4138'. [ 1858.075562][T21670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1859.654202][T21681] autofs: Unknown parameter 'ąd' [ 1862.035225][T21702] FAULT_INJECTION: forcing a failure. [ 1862.035225][T21702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1862.051052][T21702] CPU: 1 UID: 0 PID: 21702 Comm: syz.1.4155 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1862.051088][T21702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1862.051101][T21702] Call Trace: [ 1862.051109][T21702] [ 1862.051119][T21702] dump_stack_lvl+0x189/0x250 [ 1862.051147][T21702] ? __pfx____ratelimit+0x10/0x10 [ 1862.051168][T21702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1862.051190][T21702] ? __pfx__printk+0x10/0x10 [ 1862.051216][T21702] ? __might_fault+0xb0/0x130 [ 1862.051249][T21702] should_fail_ex+0x414/0x560 [ 1862.051276][T21702] _copy_from_user+0x2d/0xb0 [ 1862.051305][T21702] ___sys_sendmsg+0x158/0x2a0 [ 1862.051338][T21702] ? __pfx____sys_sendmsg+0x10/0x10 [ 1862.051408][T21702] ? __fget_files+0x2a/0x420 [ 1862.051430][T21702] ? __fget_files+0x3a0/0x420 [ 1862.051464][T21702] __x64_sys_sendmsg+0x19b/0x260 [ 1862.051497][T21702] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1862.051538][T21702] ? __pfx_ksys_write+0x10/0x10 [ 1862.051555][T21702] ? rcu_is_watching+0x15/0xb0 [ 1862.051583][T21702] ? do_syscall_64+0xbe/0x3b0 [ 1862.051610][T21702] do_syscall_64+0xfa/0x3b0 [ 1862.051631][T21702] ? lockdep_hardirqs_on+0x9c/0x150 [ 1862.051652][T21702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1862.051672][T21702] ? clear_bhb_loop+0x60/0xb0 [ 1862.051697][T21702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1862.051717][T21702] RIP: 0033:0x7fd2c558ebe9 [ 1862.051736][T21702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1862.051755][T21702] RSP: 002b:00007fd2c37f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1862.051777][T21702] RAX: ffffffffffffffda RBX: 00007fd2c57b5fa0 RCX: 00007fd2c558ebe9 [ 1862.051793][T21702] RDX: 0000000004000080 RSI: 0000200000001200 RDI: 0000000000000003 [ 1862.051808][T21702] RBP: 00007fd2c37f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1862.051821][T21702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1862.051833][T21702] R13: 00007fd2c57b6038 R14: 00007fd2c57b5fa0 R15: 00007ffc9e099088 [ 1862.051867][T21702] [ 1864.325645][T21722] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.4161'. [ 1864.942688][T21729] autofs: Unknown parameter 'ąd' [ 1866.314514][T21739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4166'. [ 1868.122045][T21751] vlan0: entered promiscuous mode [ 1868.210728][T21752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4169'. [ 1868.300130][T21752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4169'. [ 1868.635491][T21751] [U] ^C [ 1870.211554][T21771] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4174'. [ 1870.685963][T21756] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1870.713695][T21756] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1871.400515][T14717] Bluetooth: hci0: command 0x0406 tx timeout [ 1872.146207][T21795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4179'. [ 1873.430062][T21804] syz.4.4184 (21804): attempted to duplicate a private mapping with mremap. This is not supported. [ 1873.462646][T21806] gfs2: Unexpected value for 'acl' [ 1873.477991][T14717] Bluetooth: hci0: command 0x0406 tx timeout [ 1874.626440][T21810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1874.668444][T21816] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4187'. [ 1875.247856][ T8915] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1875.987373][ T8915] usb 5-1: Using ep0 maxpacket: 16 [ 1875.997843][ T8915] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1876.006227][ T8915] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1876.016026][ T8915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1876.081084][ T8915] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1876.127334][ T8915] usb 5-1: config 0 has no interface number 0 [ 1876.208025][ T8915] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1876.217209][ T8915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.247342][ T8915] usb 5-1: Product: syz [ 1876.277666][ T8915] usb 5-1: Manufacturer: syz [ 1876.387862][ T8915] usb 5-1: SerialNumber: syz [ 1876.405808][ T8915] usb 5-1: config 0 descriptor?? [ 1876.544583][T21833] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 1876.557964][T21833] syz.2.4193: attempt to access beyond end of device [ 1876.557964][T21833] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1876.571499][T21833] exFAT-fs (nbd2): unable to read boot sector [ 1876.577813][T21833] exFAT-fs (nbd2): failed to read boot sector [ 1876.584040][T21833] exFAT-fs (nbd2): failed to recognize exfat type [ 1876.650557][T21834] syz.2.4193: attempt to access beyond end of device [ 1876.650557][T21834] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1876.665408][T21834] syz.2.4193: attempt to access beyond end of device [ 1876.665408][T21834] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1876.679303][T21834] Mount JFS Failure: -5 [ 1877.345694][T21835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4192'. [ 1877.749598][T21827] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4191'. [ 1879.145875][ T5972] usb 5-1: USB disconnect, device number 50 [ 1879.814789][T21856] gfs2: Unexpected value for 'acl' [ 1879.833114][T21855] fuse: Unknown parameter 'grou00000000000000000000' [ 1881.955965][T21874] FAULT_INJECTION: forcing a failure. [ 1881.955965][T21874] name failslab, interval 1, probability 0, space 0, times 0 [ 1881.969822][T21874] CPU: 0 UID: 0 PID: 21874 Comm: syz.4.4203 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1881.969848][T21874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1881.969861][T21874] Call Trace: [ 1881.969872][T21874] [ 1881.969882][T21874] dump_stack_lvl+0x189/0x250 [ 1881.969911][T21874] ? __pfx____ratelimit+0x10/0x10 [ 1881.969932][T21874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1881.970025][T21874] ? __pfx__printk+0x10/0x10 [ 1881.970065][T21874] ? __pfx___might_resched+0x10/0x10 [ 1881.970087][T21874] ? fs_reclaim_acquire+0x7d/0x100 [ 1881.970116][T21874] should_fail_ex+0x414/0x560 [ 1881.970143][T21874] should_failslab+0xa8/0x100 [ 1881.970168][T21874] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1881.970186][T21874] ? security_inode_alloc+0x39/0x330 [ 1881.970219][T21874] security_inode_alloc+0x39/0x330 [ 1881.970250][T21874] inode_init_always_gfp+0x9ed/0xdc0 [ 1881.970280][T21874] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 1881.970306][T21874] alloc_inode+0x82/0x1b0 [ 1881.970325][T21874] ? __pfx_ovl_inode_test+0x10/0x10 [ 1881.970352][T21874] ? __pfx_ovl_inode_set+0x10/0x10 [ 1881.970378][T21874] iget5_locked+0x4a/0xa0 [ 1881.970404][T21874] ovl_get_inode+0x6fc/0xfb0 [ 1881.970450][T21874] ? __pfx_ovl_get_inode+0x10/0x10 [ 1881.970479][T21874] ? do_raw_spin_unlock+0x122/0x240 [ 1881.970517][T21874] ovl_lookup+0x1893/0x1bc0 [ 1881.970580][T21874] ? __pfx_ovl_lookup+0x10/0x10 [ 1881.970605][T21874] ? irqentry_exit+0x74/0x90 [ 1881.970627][T21874] ? lockdep_hardirqs_on+0x9c/0x150 [ 1881.970656][T21874] ? __pfx_ovl_lookup+0x10/0x10 [ 1881.970695][T21874] __lookup_slow+0x297/0x3d0 [ 1881.970725][T21874] ? __pfx___lookup_slow+0x10/0x10 [ 1881.970758][T21874] ? bpf_lsm_inode_permission+0x9/0x20 [ 1881.970778][T21874] ? security_inode_permission+0xb7/0x310 [ 1881.970806][T21874] ? down_read+0x1ad/0x2e0 [ 1881.970832][T21874] lookup_slow+0x53/0x70 [ 1881.970860][T21874] walk_component+0x2d2/0x400 [ 1881.970882][T21874] ? path_lookupat+0x156/0x430 [ 1881.970910][T21874] path_lookupat+0x163/0x430 [ 1881.970950][T21874] filename_lookup+0x212/0x570 [ 1881.970975][T21874] ? __might_fault+0xb0/0x130 [ 1881.970999][T21874] ? __pfx_filename_lookup+0x10/0x10 [ 1881.971052][T21874] ? strncpy_from_user+0x150/0x290 [ 1881.971087][T21874] ? getname_flags+0x1e5/0x540 [ 1881.971115][T21874] user_path_at+0x3a/0x60 [ 1881.971143][T21874] do_fchownat+0x105/0x270 [ 1881.971170][T21874] ? __pfx_do_fchownat+0x10/0x10 [ 1881.971202][T21874] __x64_sys_lchown+0x85/0xa0 [ 1881.971228][T21874] do_syscall_64+0xfa/0x3b0 [ 1881.971252][T21874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1881.971271][T21874] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1881.971290][T21874] ? clear_bhb_loop+0x60/0xb0 [ 1881.971324][T21874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1881.971344][T21874] RIP: 0033:0x7fcd2bd8ebe9 [ 1881.971364][T21874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1881.971382][T21874] RSP: 002b:00007fcd29fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1881.971404][T21874] RAX: ffffffffffffffda RBX: 00007fcd2bfb6180 RCX: 00007fcd2bd8ebe9 [ 1881.971420][T21874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1881.971433][T21874] RBP: 00007fcd29fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1881.971447][T21874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1881.971459][T21874] R13: 00007fcd2bfb6218 R14: 00007fcd2bfb6180 R15: 00007ffe9a909a28 [ 1881.971493][T21874] [ 1881.972016][T21874] overlayfs: failed to get inode (-12) [ 1882.480658][T21878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1882.916116][T21879] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4204'. [ 1884.850568][T21900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4209'. [ 1886.233205][ T5834] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1886.296606][ T5834] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1886.754049][T21915] gfs2: Unexpected value for 'acl' [ 1886.995077][T14568] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1887.025707][T14568] hid-generic 0000:0000:0000.0042: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1887.407541][ T8915] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1887.567499][ T8915] usb 5-1: Using ep0 maxpacket: 32 [ 1887.600249][ T8915] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1887.608915][ T8915] usb 5-1: config 0 has no interface number 0 [ 1887.620466][ T8915] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1887.635854][ T8915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.644218][ T8915] usb 5-1: Product: syz [ 1887.687724][ T8915] usb 5-1: Manufacturer: syz [ 1887.718605][ T8915] usb 5-1: SerialNumber: syz [ 1887.735307][ T8915] usb 5-1: config 0 descriptor?? [ 1887.801544][ T8915] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1887.838278][ T8915] dvb-usb: bulk message failed: -22 (2/0) [ 1887.855411][ T8915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1887.929069][ T8915] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1887.965495][ T8915] usb 5-1: media controller created [ 1887.978315][T21918] dvb-usb: bulk message failed: -22 (5/0) [ 1888.128479][T21930] FAULT_INJECTION: forcing a failure. [ 1888.128479][T21930] name failslab, interval 1, probability 0, space 0, times 0 [ 1888.218717][T21930] CPU: 0 UID: 0 PID: 21930 Comm: syz.6.4219 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1888.218748][T21930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1888.218761][T21930] Call Trace: [ 1888.218770][T21930] [ 1888.218780][T21930] dump_stack_lvl+0x189/0x250 [ 1888.218807][T21930] ? __pfx____ratelimit+0x10/0x10 [ 1888.218830][T21930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1888.218852][T21930] ? __pfx__printk+0x10/0x10 [ 1888.218882][T21930] ? __pfx___might_resched+0x10/0x10 [ 1888.218904][T21930] ? fs_reclaim_acquire+0x7d/0x100 [ 1888.218933][T21930] should_fail_ex+0x414/0x560 [ 1888.218958][T21930] ? __pfx_kernfs_test_super+0x10/0x10 [ 1888.218980][T21930] should_failslab+0xa8/0x100 [ 1888.219003][T21930] __kmalloc_cache_noprof+0x70/0x3d0 [ 1888.219023][T21930] ? alloc_super+0x59/0x970 [ 1888.219051][T21930] ? __pfx_kernfs_test_super+0x10/0x10 [ 1888.219074][T21930] alloc_super+0x59/0x970 [ 1888.219099][T21930] ? do_raw_spin_unlock+0x122/0x240 [ 1888.219127][T21930] ? __pfx_kernfs_test_super+0x10/0x10 [ 1888.219149][T21930] sget_fc+0x329/0xa40 [ 1888.219180][T21930] ? __pfx_kernfs_set_super+0x10/0x10 [ 1888.219205][T21930] kernfs_get_tree+0x1eb/0x930 [ 1888.219231][T21930] ? sb_end_write+0xe9/0x1c0 [ 1888.219254][T21930] ? __pfx_kernfs_get_tree+0x10/0x10 [ 1888.219275][T21930] ? rcu_is_watching+0x15/0xb0 [ 1888.219298][T21930] ? cap_capable+0x11f/0x460 [ 1888.219316][T21930] ? __pfx___mutex_lock+0x10/0x10 [ 1888.219339][T21930] ? safesetid_security_capable+0xa9/0x1a0 [ 1888.219364][T21930] sysfs_get_tree+0x46/0x110 [ 1888.219389][T21930] vfs_get_tree+0x92/0x2b0 [ 1888.219413][T21930] vfs_cmd_create+0xa2/0x200 [ 1888.219444][T21930] __se_sys_fsconfig+0x78e/0x8d0 [ 1888.219477][T21930] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1888.219502][T21930] ? ksys_write+0x1e1/0x250 [ 1888.219524][T21930] ? __pfx_ksys_write+0x10/0x10 [ 1888.219540][T21930] ? rcu_is_watching+0x15/0xb0 [ 1888.219567][T21930] ? do_syscall_64+0xbe/0x3b0 [ 1888.219587][T21930] ? __x64_sys_fsconfig+0x20/0xc0 [ 1888.219624][T21930] do_syscall_64+0xfa/0x3b0 [ 1888.219645][T21930] ? lockdep_hardirqs_on+0x9c/0x150 [ 1888.219666][T21930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.219685][T21930] ? clear_bhb_loop+0x60/0xb0 [ 1888.219710][T21930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.219730][T21930] RIP: 0033:0x7f5224f8ebe9 [ 1888.219748][T21930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1888.219765][T21930] RSP: 002b:00007f5225d34038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1888.219786][T21930] RAX: ffffffffffffffda RBX: 00007f52251b5fa0 RCX: 00007f5224f8ebe9 [ 1888.219801][T21930] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1888.219813][T21930] RBP: 00007f5225d34090 R08: 0000000000000000 R09: 0000000000000000 [ 1888.219826][T21930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1888.219838][T21930] R13: 00007f52251b6038 R14: 00007f52251b5fa0 R15: 00007ffde1a7ce98 [ 1888.219872][T21930] [ 1888.221862][ T8915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1888.321706][T21934] fuse: Bad value for 'user_id' [ 1888.607523][T21934] fuse: Bad value for 'user_id' [ 1888.666761][ T8915] cxusb: set interface failed [ 1888.716143][ T8915] dvb-usb: bulk message failed: -22 (1/0) [ 1889.576546][ T8915] DVB: Unable to find symbol lgdt330x_attach() [ 1889.645813][ T8915] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1890.098614][T21945] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4222'. [ 1891.177565][ T8915] rc_core: IR keymap rc-dvico-portable not found [ 1891.183954][ T8915] Registered IR keymap rc-empty [ 1891.198673][T21953] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4225'. [ 1891.205982][ T8915] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1891.308899][ T8915] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input57 [ 1891.777111][ T8915] dvb-usb: schedule remote query interval to 100 msecs. [ 1891.831701][ T8915] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1891.901562][ T8915] usb 5-1: USB disconnect, device number 51 [ 1893.135392][ T8915] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1893.403714][T21971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4230'. [ 1893.707827][ T5902] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1894.037412][ T5902] usb 3-1: device descriptor read/64, error -71 [ 1894.637579][ T5902] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1894.777492][ T5902] usb 3-1: device descriptor read/64, error -71 [ 1894.889823][ T5902] usb usb3-port1: attempt power cycle [ 1895.377408][ T5902] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1895.457093][ T5902] usb 3-1: device descriptor read/8, error -71 [ 1895.687385][ T5956] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1895.729141][ T5902] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1896.192344][ T5902] usb 3-1: device descriptor read/8, error -71 [ 1896.267458][ T5956] usb 5-1: Using ep0 maxpacket: 32 [ 1896.283878][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1896.307412][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1896.317226][ T5956] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1896.403457][ T5902] usb usb3-port1: unable to enumerate USB device [ 1896.447480][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.488408][ T5956] usb 5-1: config 0 descriptor?? [ 1896.949252][ T5956] hub 5-1:0.0: USB hub found [ 1897.044031][ T5956] hub 5-1:0.0: 1 port detected [ 1898.605784][ T30] audit: type=1326 audit(1754690891.141:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1898.717519][ T30] audit: type=1326 audit(1754690891.141:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1898.779339][ T30] audit: type=1326 audit(1754690891.141:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1898.803138][ T30] audit: type=1326 audit(1754690891.171:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1898.837456][ T30] audit: type=1326 audit(1754690891.171:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1898.892043][ T5902] usb 5-1: USB disconnect, device number 52 [ 1898.916054][ T30] audit: type=1326 audit(1754690891.181:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1898.967435][ T30] audit: type=1326 audit(1754690891.181:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1899.131142][T22010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4240'. [ 1899.464855][ T30] audit: type=1326 audit(1754690891.341:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.4.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1899.488994][T22012] netlink: 'syz.3.4241': attribute type 10 has an invalid length. [ 1902.500124][T22032] XFS (nullb0): Invalid superblock magic number [ 1902.697655][T19289] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1902.981209][T14568] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1903.010501][T14568] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1903.230740][T22048] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4249'. [ 1903.276916][T19289] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1903.295581][T19289] usb 2-1: not running at top speed; connect to a high speed hub [ 1903.316334][T19289] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1903.366969][T22050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4247'. [ 1903.406994][T19289] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1903.428307][T19289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.463283][T19289] usb 2-1: Product: syz [ 1903.478833][T19289] usb 2-1: Manufacturer: syz [ 1903.507372][T19289] usb 2-1: SerialNumber: syz [ 1904.874263][T19289] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1905.008985][T19289] usb 2-1: USB disconnect, device number 55 [ 1905.045759][T22066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4254'. [ 1905.102064][T22066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4254'. [ 1905.501530][T22066] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1905.510910][T22066] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1905.519696][T22066] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1905.528762][T22066] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1905.903357][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4255'. [ 1906.273628][T22076] netlink: 'syz.2.4257': attribute type 10 has an invalid length. [ 1908.677298][ T977] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1909.187606][ T977] usb 5-1: device descriptor read/64, error -71 [ 1909.447682][ T977] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1910.352442][ T977] usb 5-1: device descriptor read/64, error -71 [ 1910.491531][ T977] usb usb5-port1: attempt power cycle [ 1910.923385][T14569] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1911.045958][T22104] vlan0: left promiscuous mode [ 1911.072297][T14568] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1911.230688][T14569] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1911.293735][ T977] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1911.489800][T14568] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1911.537976][T14568] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.583041][T14568] usb 3-1: config 0 descriptor?? [ 1911.623838][T14568] cp210x 3-1:0.0: cp210x converter detected [ 1911.757346][ T977] usb 5-1: device not accepting address 55, error -71 [ 1911.972048][T22115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4267'. [ 1912.103846][T14568] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1912.137705][T14568] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1912.189367][T14568] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1912.265694][T14568] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1912.536351][T14568] usb 3-1: USB disconnect, device number 54 [ 1912.894071][T14568] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1912.929606][T14568] cp210x 3-1:0.0: device disconnected [ 1912.952661][T22128] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4271'. [ 1913.224780][T22133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4272'. [ 1914.442469][T22156] netlink: 'syz.4.4278': attribute type 1 has an invalid length. [ 1914.658671][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.809553][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.210163][T22156] bond1: entered promiscuous mode [ 1915.215650][T22156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1915.303629][T22160] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1915.310552][T22165] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 1915.468076][T22165] syz.1.4282: attempt to access beyond end of device [ 1915.468076][T22165] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1915.474470][T22153] lo speed is unknown, defaulting to 1000 [ 1915.586045][T22170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4284'. [ 1915.587376][T22165] exFAT-fs (nbd1): unable to read boot sector [ 1915.637548][T22165] exFAT-fs (nbd1): failed to read boot sector [ 1915.674136][T22165] exFAT-fs (nbd1): failed to recognize exfat type [ 1915.798923][T22172] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4283'. [ 1917.667727][ T5902] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1917.817531][ T5902] usb 4-1: device descriptor read/64, error -71 [ 1918.123799][ T5902] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1918.777472][ T5902] usb 4-1: device descriptor read/64, error -71 [ 1918.909108][ T5902] usb usb4-port1: attempt power cycle [ 1919.217959][T22200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4291'. [ 1919.987669][ T5902] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1920.031655][ T5902] usb 4-1: device descriptor read/8, error -71 [ 1920.267556][T22217] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4295'. [ 1920.282362][T22218] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 1920.318984][T22218] syz.2.4296: attempt to access beyond end of device [ 1920.318984][T22218] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1920.349773][ T5902] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1920.350134][T22218] exFAT-fs (nbd2): unable to read boot sector [ 1920.378140][ T5902] usb 4-1: device descriptor read/8, error -71 [ 1920.388975][T22218] exFAT-fs (nbd2): failed to read boot sector [ 1920.397094][T22213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1920.413933][T22218] exFAT-fs (nbd2): failed to recognize exfat type [ 1920.442110][T22223] gfs2: Unexpected value for 'acl' [ 1920.487856][ T5902] usb usb4-port1: unable to enumerate USB device [ 1920.955373][T22235] netlink: 'syz.6.4302': attribute type 5 has an invalid length. [ 1920.971819][T22235] ip6erspan0: entered promiscuous mode [ 1920.992259][T22235] tipc: Started in network mode [ 1920.998980][T22235] tipc: Node identity 2ee63c6aa89f, cluster identity 4711 [ 1921.006540][T22235] tipc: Enabled bearer , priority 0 [ 1921.014920][T22235] syzkaller0: entered promiscuous mode [ 1921.021537][T22235] syzkaller0: entered allmulticast mode [ 1921.065181][T22235] tipc: Resetting bearer [ 1921.083420][T22234] tipc: Resetting bearer [ 1921.112031][T22234] tipc: Disabling bearer [ 1921.825799][T22253] binder: 22247:22253 ioctl c00c620f 0 returned -14 [ 1921.844580][ T5834] IPVS: starting estimator thread 0... [ 1922.508290][T22254] IPVS: using max 30 ests per chain, 72000 per kthread [ 1922.888211][ T5834] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1922.937628][ T5834] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1923.004082][T22255] ip6erspan0: left promiscuous mode [ 1923.824671][T22267] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 1923.944203][T22267] syz.2.4311: attempt to access beyond end of device [ 1923.944203][T22267] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1924.031344][T22267] exFAT-fs (nbd2): unable to read boot sector [ 1924.053586][T22264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1924.066630][T22267] exFAT-fs (nbd2): failed to read boot sector [ 1924.073662][T22267] exFAT-fs (nbd2): failed to recognize exfat type [ 1924.608113][T22276] exFAT-fs (nbd6): mounting with "discard" option, but the device does not support discard [ 1924.620238][T22276] syz.6.4313: attempt to access beyond end of device [ 1924.620238][T22276] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1924.635756][T22276] exFAT-fs (nbd6): unable to read boot sector [ 1924.643308][T22276] exFAT-fs (nbd6): failed to read boot sector [ 1924.649595][T22276] exFAT-fs (nbd6): failed to recognize exfat type [ 1925.258796][T22278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4314'. [ 1925.320771][T22281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1925.330020][T22281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1926.261701][ T30] audit: type=1326 audit(1754690918.801:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22295 comm="syz.3.4320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c82f8ebe9 code=0x0 [ 1926.418000][T14568] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1927.715619][T14568] usb 5-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 1927.876972][T14568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.888393][T14568] usb 5-1: config 0 descriptor?? [ 1927.896887][T14568] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 1929.226924][T14568] gspca_sn9c20x: Write register 1000 failed -71 [ 1929.296528][T14568] gspca_sn9c20x: Device initialization failed [ 1929.499758][T14568] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 1929.511525][T14568] usb 5-1: USB disconnect, device number 57 [ 1929.958020][T22322] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 1929.968571][T22322] syz.3.4323: attempt to access beyond end of device [ 1929.968571][T22322] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1929.981642][T22322] exFAT-fs (nbd3): unable to read boot sector [ 1929.988116][T22322] exFAT-fs (nbd3): failed to read boot sector [ 1929.994422][T22322] exFAT-fs (nbd3): failed to recognize exfat type [ 1930.830919][T22331] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4328'. [ 1930.883012][T22333] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4330'. [ 1930.928944][T22335] autofs: Unknown parameter 'ąd' [ 1931.196467][ T8915] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1931.542304][ T8915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1931.567336][ T8915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1931.615818][ T8915] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1931.799920][ T5902] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1931.900412][ T8915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.267462][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 1932.277304][ T8915] usb 4-1: Product: syz [ 1932.281515][ T8915] usb 4-1: Manufacturer: syz [ 1932.364260][ T8915] usb 4-1: SerialNumber: syz [ 1932.422551][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1932.643180][ T5902] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1932.840903][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.854931][ T8915] usb 4-1: config 0 descriptor?? [ 1932.884111][ T8915] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 1932.908641][ T5902] usb 5-1: config 0 descriptor?? [ 1933.408421][T22358] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 1933.420556][T22358] syz.1.4337: attempt to access beyond end of device [ 1933.420556][T22358] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1933.434131][T22358] exFAT-fs (nbd1): unable to read boot sector [ 1933.440539][T22358] exFAT-fs (nbd1): failed to read boot sector [ 1933.446739][T22358] exFAT-fs (nbd1): failed to recognize exfat type [ 1934.420094][ T5902] usbhid 5-1:0.0: can't add hid device: -71 [ 1934.425225][T22361] FAULT_INJECTION: forcing a failure. [ 1934.425225][T22361] name failslab, interval 1, probability 0, space 0, times 0 [ 1934.444818][ T5902] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1934.481785][T22361] CPU: 0 UID: 0 PID: 22361 Comm: syz.1.4339 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1934.481815][T22361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1934.481828][T22361] Call Trace: [ 1934.481836][T22361] [ 1934.481845][T22361] dump_stack_lvl+0x189/0x250 [ 1934.481871][T22361] ? __pfx____ratelimit+0x10/0x10 [ 1934.481892][T22361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1934.481914][T22361] ? __pfx__printk+0x10/0x10 [ 1934.481945][T22361] ? __pfx___might_resched+0x10/0x10 [ 1934.481964][T22361] ? fs_reclaim_acquire+0x7d/0x100 [ 1934.481993][T22361] should_fail_ex+0x414/0x560 [ 1934.482020][T22361] should_failslab+0xa8/0x100 [ 1934.482043][T22361] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 1934.482063][T22361] ? __d_alloc+0x31/0x6f0 [ 1934.482087][T22361] ? __lock_acquire+0xab9/0xd20 [ 1934.482110][T22361] __d_alloc+0x31/0x6f0 [ 1934.482149][T22361] d_alloc_pseudo+0x1f/0xb0 [ 1934.482175][T22361] alloc_file_pseudo+0xcc/0x210 [ 1934.482203][T22361] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1934.482226][T22361] ? do_raw_spin_unlock+0x122/0x240 [ 1934.482254][T22361] ? _raw_spin_unlock+0x28/0x50 [ 1934.482291][T22361] sock_alloc_file+0xb8/0x2e0 [ 1934.482311][T22361] ? __sys_socket+0x12c/0x1b0 [ 1934.482337][T22361] __sys_socket+0x13d/0x1b0 [ 1934.482365][T22361] __x64_sys_socket+0x7a/0x90 [ 1934.482390][T22361] do_syscall_64+0xfa/0x3b0 [ 1934.482410][T22361] ? lockdep_hardirqs_on+0x9c/0x150 [ 1934.482430][T22361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.482450][T22361] ? clear_bhb_loop+0x60/0xb0 [ 1934.482474][T22361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.482494][T22361] RIP: 0033:0x7fd2c558ebe9 [ 1934.482512][T22361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1934.482529][T22361] RSP: 002b:00007fd2c37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1934.482551][T22361] RAX: ffffffffffffffda RBX: 00007fd2c57b5fa0 RCX: 00007fd2c558ebe9 [ 1934.482567][T22361] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000022 [ 1934.482579][T22361] RBP: 00007fd2c37f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1934.482593][T22361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1934.482604][T22361] R13: 00007fd2c57b6038 R14: 00007fd2c57b5fa0 R15: 00007ffc9e099088 [ 1934.482631][T22361] [ 1934.736823][ T5902] usb 5-1: USB disconnect, device number 58 [ 1934.766656][T19289] usb 4-1: USB disconnect, device number 36 [ 1934.811939][T22365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4341'. [ 1934.872346][ T5956] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1935.047909][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 1935.235203][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1935.414432][ T5956] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1935.449127][ T5956] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1935.477396][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.504043][ T5956] usb 3-1: config 0 descriptor?? [ 1935.514176][T22374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1935.536226][T22372] Mount JFS Failure: -22 [ 1935.563777][T22372] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1935.580810][ T30] audit: type=1326 audit(1754690928.101:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22373 comm="syz.4.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1935.623750][T22376] lo speed is unknown, defaulting to 1000 [ 1935.666051][ T30] audit: type=1326 audit(1754690928.101:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22373 comm="syz.4.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1935.741890][ T30] audit: type=1326 audit(1754690928.111:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22373 comm="syz.4.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1936.003549][T22389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1936.015127][T22389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1936.025225][ T5956] HID 045e:07da: Invalid code 65791 type 1 [ 1936.083262][ T30] audit: type=1326 audit(1754690928.111:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22373 comm="syz.4.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd2bd85ba7 code=0x7ffc0000 [ 1936.219632][ T5956] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0046/input/input59 [ 1936.233720][ T30] audit: type=1326 audit(1754690928.111:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22373 comm="syz.4.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd2bd2add9 code=0x7ffc0000 [ 1936.438629][ T5956] microsoft 0003:045E:07DA.0046: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1936.477454][ T30] audit: type=1326 audit(1754690928.111:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22373 comm="syz.4.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1936.664116][ T5956] usb 3-1: USB disconnect, device number 56 [ 1936.758059][T22397] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 1936.769790][T22397] syz.3.4349: attempt to access beyond end of device [ 1936.769790][T22397] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1936.783717][T22397] exFAT-fs (nbd3): unable to read boot sector [ 1936.789937][T22397] exFAT-fs (nbd3): failed to read boot sector [ 1936.796513][T22397] exFAT-fs (nbd3): failed to recognize exfat type [ 1937.201236][ T30] audit: type=1326 audit(1754690928.111:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22373 comm="syz.4.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd2bd85ba7 code=0x7ffc0000 [ 1937.849596][ T30] audit: type=1326 audit(1754690928.111:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22373 comm="syz.4.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd2bd2add9 code=0x7ffc0000 [ 1937.914399][ T30] audit: type=1326 audit(1754690928.111:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22373 comm="syz.4.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2bd8ebe9 code=0x7ffc0000 [ 1937.987332][ T30] audit: type=1326 audit(1754690928.111:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22373 comm="syz.4.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd2bd85ba7 code=0x7ffc0000 [ 1939.216800][T22408] No such timeout policy "syz0" [ 1939.317644][ T5956] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1939.348677][T22414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4355'. [ 1939.477593][ T5956] usb 3-1: Using ep0 maxpacket: 8 [ 1939.489137][ T5956] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1939.507559][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.515908][ T5956] usb 3-1: Product: syz [ 1939.535469][ T5956] usb 3-1: Manufacturer: syz [ 1939.621727][ T5956] usb 3-1: SerialNumber: syz [ 1939.664426][ T5956] usb 3-1: config 0 descriptor?? [ 1939.809672][ T5956] gspca_main: se401-2.14.0 probing 047d:5003 [ 1940.621164][T22422] netlink: 'syz.3.4356': attribute type 4 has an invalid length. [ 1940.729753][ T5956] gspca_se401: ExtraFeatures: 64 [ 1940.734853][ T5956] gspca_se401: Too many frame sizes [ 1940.963704][T14568] usb 3-1: USB disconnect, device number 57 [ 1941.016398][T22435] binder: BINDER_SET_CONTEXT_MGR already set [ 1941.023228][T22435] binder: 22434:22435 ioctl 4018620d 200000000040 returned -16 [ 1941.967446][ T5956] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1942.147712][ T5956] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1942.156048][ T5956] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1942.167524][ T8915] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1942.236314][ T5956] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1942.367515][ T8915] usb 7-1: Using ep0 maxpacket: 16 [ 1942.384859][ T5956] usb 2-1: config 220 has no interface number 2 [ 1942.459846][ T5956] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1942.460015][ T8915] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1942.484896][ T5956] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1942.761005][ T5956] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1942.768228][ T8915] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1942.778289][ T5956] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1942.786291][ T8915] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1942.797124][ T8915] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1942.808241][ T8915] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1942.824280][ T5956] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1942.847008][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.868069][ T8915] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1942.887458][ T5956] usb 2-1: Product: syz [ 1942.895176][T22459] bond1: left promiscuous mode [ 1942.904520][ T8915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1942.933360][ T5956] usb 2-1: Manufacturer: syz [ 1942.944074][ T5956] usb 2-1: SerialNumber: syz [ 1942.963919][ T8915] usb 7-1: SerialNumber: syz [ 1942.992335][T22450] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1943.005894][ T8915] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 1943.031537][ T8915] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 1943.103606][T22462] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4368'. [ 1943.225080][ T5956] usb 2-1: selecting invalid altsetting 0 [ 1943.268292][ T5956] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1943.287591][ T5956] usb 2-1: No valid video chain found. [ 1943.342222][ T5956] usb 2-1: selecting invalid altsetting 0 [ 1943.599657][T22470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1943.601465][ T5956] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1943.818724][T14568] usb 7-1: USB disconnect, device number 36 [ 1943.849065][ T5956] usb 2-1: USB disconnect, device number 56 [ 1945.023740][T22495] No such timeout policy "syz0" [ 1945.851159][T22500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4379'. [ 1946.770161][T22502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4378'. [ 1947.002927][T22508] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4382'. [ 1947.046279][T22511] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4380'. [ 1947.267918][ T8915] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1947.640854][T22521] fuse: Bad value for 'rootmode' [ 1947.733301][ T8915] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1947.758912][ T8915] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1947.790270][ T8915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1947.815037][ T8915] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 1947.855041][ T8915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1947.894746][ T8915] usb 2-1: config 0 descriptor?? [ 1948.604487][ T8915] kye 0003:0458:501A.0047: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1948.634329][ T8915] kye 0003:0458:501A.0047: hidraw0: USB HID v0.01 Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 1948.656716][ T8915] kye 0003:0458:501A.0047: tablet-enabling feature report not found [ 1948.669562][T22541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4395'. [ 1948.680811][ T8915] kye 0003:0458:501A.0047: tablet enabling failed [ 1948.702659][T22545] netem: change failed [ 1948.806369][ T8915] usb 2-1: USB disconnect, device number 57 [ 1948.857677][ T5902] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1949.067609][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 1949.371072][ T5902] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1949.440280][ T5902] usb 5-1: can't read configurations, error -61 [ 1949.571764][T22559] fuse: Bad value for 'rootmode' [ 1949.583868][T22558] loop1: detected capacity change from 0 to 7 [ 1949.609701][ T5902] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1949.632344][T22558] Dev loop1: unable to read RDB block 7 [ 1949.653742][T22558] loop1: AHDI p4 [ 1949.653955][T22563] netlink: 4092 bytes leftover after parsing attributes in process `syz.2.4398'. [ 1949.663245][T22558] loop1: partition table partially beyond EOD, [ 1949.668234][T22563] unsupported nlmsg_type 40 [ 1949.670441][T22558] truncated [ 1949.698789][T22562] input: syz1 as /devices/virtual/input/input60 [ 1949.709588][T22562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4400'. [ 1949.898325][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 1949.926959][ T5902] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1949.938660][ T5902] usb 5-1: can't read configurations, error -61 [ 1949.948620][ T5902] usb usb5-port1: attempt power cycle [ 1949.994869][T22566] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1950.350413][T22571] SET target dimension over the limit! [ 1950.397576][ T5902] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1950.482463][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 1950.504986][ T5902] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1950.533775][ T5902] usb 5-1: can't read configurations, error -61 [ 1950.635240][T22579] program syz.1.4405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1950.687476][ T5902] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1950.708168][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 1950.726051][ T5902] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1950.867950][ T5902] usb 5-1: can't read configurations, error -61 [ 1950.875508][ T5902] usb usb5-port1: unable to enumerate USB device [ 1950.998469][T22586] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4407'. [ 1951.615015][T22572] lo speed is unknown, defaulting to 1000 [ 1952.225093][ T8915] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1952.410348][ T8915] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1952.422409][ T8915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1952.454571][ T8915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1952.478123][ T8915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1952.517781][ T8915] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1952.538194][ T8915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.561982][ T8915] usb 4-1: config 0 descriptor?? [ 1953.498269][ T8915] plantronics 0003:047F:FFFF.0048: ignoring exceeding usage max [ 1953.653671][ T8915] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1953.726074][T22576] syz.1.4405: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1953.791717][T22611] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4415'. [ 1953.827535][T22576] CPU: 0 UID: 0 PID: 22576 Comm: syz.1.4405 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1953.827566][T22576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1953.827588][T22576] Call Trace: [ 1953.827597][T22576] [ 1953.827606][T22576] dump_stack_lvl+0x189/0x250 [ 1953.827637][T22576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1953.827660][T22576] ? __pfx__printk+0x10/0x10 [ 1953.827687][T22576] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1953.827713][T22576] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1953.827741][T22576] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1953.827770][T22576] warn_alloc+0x214/0x310 [ 1953.827800][T22576] ? __pfx_warn_alloc+0x10/0x10 [ 1953.827834][T22576] ? __get_vm_area_node+0x28f/0x300 [ 1953.827856][T22576] ? bpf_uprobe_multi_link_attach+0x585/0xf10 [ 1953.827890][T22576] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1953.827945][T22576] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1953.827977][T22576] ? rcu_is_watching+0x15/0xb0 [ 1953.828001][T22576] ? bpf_uprobe_multi_link_attach+0x585/0xf10 [ 1953.828030][T22576] ? bpf_uprobe_multi_link_attach+0x585/0xf10 [ 1953.828056][T22576] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 1953.828079][T22576] ? bpf_uprobe_multi_link_attach+0x585/0xf10 [ 1953.828109][T22576] ? bpf_uprobe_multi_link_attach+0x566/0xf10 [ 1953.828142][T22576] bpf_uprobe_multi_link_attach+0x585/0xf10 [ 1953.828185][T22576] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 1953.828213][T22576] ? __fget_files+0x2a/0x420 [ 1953.828240][T22576] ? __fget_files+0x2a/0x420 [ 1953.828263][T22576] ? __fget_files+0x2a/0x420 [ 1953.828289][T22576] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 1953.828316][T22576] link_create+0x647/0x7e0 [ 1953.828340][T22576] __sys_bpf+0x599/0x860 [ 1953.828371][T22576] ? __pfx___sys_bpf+0x10/0x10 [ 1953.828421][T22576] ? rcu_is_watching+0x15/0xb0 [ 1953.828451][T22576] __x64_sys_bpf+0x7c/0x90 [ 1953.828479][T22576] do_syscall_64+0xfa/0x3b0 [ 1953.828501][T22576] ? lockdep_hardirqs_on+0x9c/0x150 [ 1953.828522][T22576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1953.828543][T22576] ? clear_bhb_loop+0x60/0xb0 [ 1953.828568][T22576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1953.828594][T22576] RIP: 0033:0x7fd2c558ebe9 [ 1953.828614][T22576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1953.828633][T22576] RSP: 002b:00007fd2c37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1953.828655][T22576] RAX: ffffffffffffffda RBX: 00007fd2c57b5fa0 RCX: 00007fd2c558ebe9 [ 1953.828671][T22576] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 1953.828685][T22576] RBP: 00007fd2c5611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1953.828698][T22576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1953.828711][T22576] R13: 00007fd2c57b6038 R14: 00007fd2c57b5fa0 R15: 00007ffc9e099088 [ 1953.828744][T22576] [ 1953.828804][T22576] Mem-Info: [ 1954.159961][T22576] active_anon:7064 inactive_anon:7789 isolated_anon:0 [ 1954.159961][T22576] active_file:27790 inactive_file:38313 isolated_file:0 [ 1954.159961][T22576] unevictable:768 dirty:240 writeback:0 [ 1954.159961][T22576] slab_reclaimable:11326 slab_unreclaimable:123710 [ 1954.159961][T22576] mapped:35069 shmem:12024 pagetables:1046 [ 1954.159961][T22576] sec_pagetables:0 bounce:0 [ 1954.159961][T22576] kernel_misc_reclaimable:0 [ 1954.159961][T22576] free:1259132 free_pcp:9642 free_cma:0 [ 1954.367101][T22576] Node 0 active_anon:28256kB inactive_anon:31156kB active_file:110640kB inactive_file:153252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131924kB dirty:952kB writeback:0kB shmem:46560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14212kB pagetables:4036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1954.405821][T22576] Node 1 active_anon:0kB inactive_anon:0kB active_file:520kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:252kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1954.490714][T22576] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 1954.534862][T22576] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1954.561094][T22576] Node 0 DMA32 free:1102388kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28252kB inactive_anon:31012kB active_file:108876kB inactive_file:153184kB unevictable:1536kB writepending:952kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:39412kB local_pcp:22936kB free_cma:0kB [ 1954.888953][T22576] lowmem_reserve[]: 0 0 1 1 1 [ 1954.951376][T22576] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1764kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1955.103228][T22622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4417'. [ 1955.903189][T22576] lowmem_reserve[]: 0 0 0 0 0 [ 1955.908042][T22576] Node 1 Normal free:3918676kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:520kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1955.939085][T22576] lowmem_reserve[]: 0 0 0 0 0 [ 1955.943854][T22576] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1956.034468][T22576] Node 0 DMA32: 1541*4kB (UME) 645*8kB (UME) 1597*16kB (UME) 1122*32kB (UM) 551*64kB (UME) 277*128kB (UME) 124*256kB (UME) 39*512kB (UME) 16*1024kB (UM) 9*2048kB (UM) 214*4096kB (UM) = 1106572kB [ 1956.127442][T22576] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1956.139527][T22576] Node 1 Normal: [ 1956.139899][ T5956] usb 4-1: USB disconnect, device number 37 [ 1956.161991][T22576] 165*4kB (UE) 62*8kB (UME) 55*16kB (UME) 243*32kB (UME) 96*64kB (UME) 34*128kB (UME) 14*256kB (U) 9*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 948*4096kB (M) = 3918676kB [ 1956.322581][T22576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1956.421011][T22576] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1956.459151][T22576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1956.502974][T22576] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1956.604428][T22639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4422'. [ 1956.613956][T22639] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1956.691728][ T5972] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1957.033425][T22576] 78173 total pagecache pages [ 1957.057437][T22576] 0 pages in swap cache [ 1957.077764][T22576] Free swap = 124996kB [ 1957.091848][T22576] Total swap = 124996kB [ 1957.131649][T22576] 2097051 pages RAM [ 1957.140273][ T5972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1957.153339][T22576] 0 pages HighMem/MovableOnly [ 1957.162979][T22576] 424695 pages reserved [ 1957.174392][ T5972] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1957.191352][T22576] 0 pages cma reserved [ 1957.204266][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.225766][ T5972] usb 3-1: config 0 descriptor?? [ 1957.256988][ T5972] usb 3-1: bad CDC descriptors [ 1957.458039][T22645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1957.490170][T22645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1957.579164][ T8915] usb 3-1: USB disconnect, device number 58 [ 1957.813661][T22656] FAULT_INJECTION: forcing a failure. [ 1957.813661][T22656] name failslab, interval 1, probability 0, space 0, times 0 [ 1957.923945][T22656] CPU: 1 UID: 0 PID: 22656 Comm: syz.1.4428 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1957.923976][T22656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1957.923990][T22656] Call Trace: [ 1957.923999][T22656] [ 1957.924009][T22656] dump_stack_lvl+0x189/0x250 [ 1957.924037][T22656] ? __pfx____ratelimit+0x10/0x10 [ 1957.924059][T22656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1957.924082][T22656] ? __pfx__printk+0x10/0x10 [ 1957.924110][T22656] ? __pfx___might_resched+0x10/0x10 [ 1957.924132][T22656] ? fs_reclaim_acquire+0x7d/0x100 [ 1957.924161][T22656] should_fail_ex+0x414/0x560 [ 1957.924218][T22656] should_failslab+0xa8/0x100 [ 1957.924243][T22656] __kmalloc_noprof+0xcb/0x4f0 [ 1957.924261][T22656] ? nft_set_elem_expr_clone+0xe8/0xa90 [ 1957.924291][T22656] nft_set_elem_expr_clone+0xe8/0xa90 [ 1957.924326][T22656] nf_tables_newsetelem+0x13f2/0x4340 [ 1957.924393][T22656] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 1957.924438][T22656] ? nla_validate_array+0xfc/0x260 [ 1957.924497][T22656] ? __pfx___nla_validate_parse+0x10/0x10 [ 1957.924526][T22656] ? __lock_acquire+0xab9/0xd20 [ 1957.924558][T22656] ? nfnl_pernet+0x23/0x240 [ 1957.924590][T22656] ? __nla_parse+0x40/0x60 [ 1957.924620][T22656] nfnetlink_rcv+0x112f/0x2520 [ 1957.924678][T22656] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1957.924719][T22656] ? ref_tracker_free+0x63a/0x7d0 [ 1957.924775][T22656] ? __netlink_deliver_tap+0x807/0x850 [ 1957.924813][T22656] ? netlink_deliver_tap+0x2e/0x1b0 [ 1957.924839][T22656] ? netlink_deliver_tap+0x2e/0x1b0 [ 1957.924873][T22656] netlink_unicast+0x75c/0x8e0 [ 1957.924909][T22656] netlink_sendmsg+0x805/0xb30 [ 1957.924944][T22656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1957.924979][T22656] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1957.924998][T22656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1957.925018][T22656] __sock_sendmsg+0x21c/0x270 [ 1957.925033][T22656] ____sys_sendmsg+0x505/0x830 [ 1957.925052][T22656] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1957.925073][T22656] ? import_iovec+0x74/0xa0 [ 1957.925090][T22656] ___sys_sendmsg+0x21f/0x2a0 [ 1957.925107][T22656] ? __pfx____sys_sendmsg+0x10/0x10 [ 1957.925143][T22656] ? __fget_files+0x2a/0x420 [ 1957.925154][T22656] ? __fget_files+0x3a0/0x420 [ 1957.925171][T22656] __x64_sys_sendmsg+0x19b/0x260 [ 1957.925194][T22656] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1957.925216][T22656] ? __pfx_ksys_write+0x10/0x10 [ 1957.925224][T22656] ? rcu_is_watching+0x15/0xb0 [ 1957.925238][T22656] ? do_syscall_64+0xbe/0x3b0 [ 1957.925253][T22656] do_syscall_64+0xfa/0x3b0 [ 1957.925263][T22656] ? lockdep_hardirqs_on+0x9c/0x150 [ 1957.925274][T22656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1957.925284][T22656] ? clear_bhb_loop+0x60/0xb0 [ 1957.925297][T22656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1957.925307][T22656] RIP: 0033:0x7fd2c558ebe9 [ 1957.925317][T22656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1957.925327][T22656] RSP: 002b:00007fd2c37f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1957.925339][T22656] RAX: ffffffffffffffda RBX: 00007fd2c57b5fa0 RCX: 00007fd2c558ebe9 [ 1957.925347][T22656] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 1957.925354][T22656] RBP: 00007fd2c37f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1957.925361][T22656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1957.925367][T22656] R13: 00007fd2c57b6038 R14: 00007fd2c57b5fa0 R15: 00007ffc9e099088 [ 1957.925384][T22656] [ 1961.386444][T22687] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4436'. [ 1961.612341][T22691] No such timeout policy "syz0" [ 1965.434723][T22716] FAULT_INJECTION: forcing a failure. [ 1965.434723][T22716] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.447999][T22716] CPU: 0 UID: 0 PID: 22716 Comm: syz.1.4443 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1965.448033][T22716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1965.448046][T22716] Call Trace: [ 1965.448054][T22716] [ 1965.448063][T22716] dump_stack_lvl+0x189/0x250 [ 1965.448091][T22716] ? __pfx____ratelimit+0x10/0x10 [ 1965.448113][T22716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1965.448135][T22716] ? __pfx__printk+0x10/0x10 [ 1965.448168][T22716] ? __pfx___might_resched+0x10/0x10 [ 1965.448189][T22716] ? fs_reclaim_acquire+0x7d/0x100 [ 1965.448226][T22716] should_fail_ex+0x414/0x560 [ 1965.448252][T22716] should_failslab+0xa8/0x100 [ 1965.448277][T22716] __kmalloc_noprof+0xcb/0x4f0 [ 1965.448295][T22716] ? kfree+0x4d/0x440 [ 1965.448320][T22716] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1965.448353][T22716] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1965.448381][T22716] ? tomoyo_domain+0xda/0x130 [ 1965.448413][T22716] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1965.448435][T22716] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1965.448459][T22716] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1965.448501][T22716] ? trace_irq_disable+0x37/0x110 [ 1965.448559][T22716] ? security_file_ioctl+0x19/0x2d0 [ 1965.448588][T22716] security_file_ioctl+0xcb/0x2d0 [ 1965.448613][T22716] __se_sys_ioctl+0x47/0x170 [ 1965.448645][T22716] do_syscall_64+0xfa/0x3b0 [ 1965.448668][T22716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.448687][T22716] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1965.448706][T22716] ? clear_bhb_loop+0x60/0xb0 [ 1965.448731][T22716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.448750][T22716] RIP: 0033:0x7fd2c558ebe9 [ 1965.448768][T22716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1965.448785][T22716] RSP: 002b:00007fd2c37b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1965.448806][T22716] RAX: ffffffffffffffda RBX: 00007fd2c57b6180 RCX: 00007fd2c558ebe9 [ 1965.448822][T22716] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000009 [ 1965.448835][T22716] RBP: 00007fd2c37b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1965.448848][T22716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1965.448861][T22716] R13: 00007fd2c57b6218 R14: 00007fd2c57b6180 R15: 00007ffc9e099088 [ 1965.448895][T22716] [ 1965.448926][T22716] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1966.525846][T22729] syzkaller0: entered promiscuous mode [ 1966.546055][T22729] syzkaller0: entered allmulticast mode [ 1967.004177][T22733] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 1967.015899][T22733] syz.1.4448: attempt to access beyond end of device [ 1967.015899][T22733] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1967.029584][T22733] exFAT-fs (nbd1): unable to read boot sector [ 1967.035735][T22733] exFAT-fs (nbd1): failed to read boot sector [ 1967.042135][T22733] exFAT-fs (nbd1): failed to recognize exfat type [ 1967.463974][T22734] syz.1.4448: attempt to access beyond end of device [ 1967.463974][T22734] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1967.478135][T22734] syz.1.4448: attempt to access beyond end of device [ 1967.478135][T22734] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1967.491449][T22734] Mount JFS Failure: -5 [ 1967.770826][T22740] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4450'. [ 1969.243860][T22739] syzkaller0: entered promiscuous mode [ 1969.257517][T22739] syzkaller0: entered allmulticast mode [ 1970.422320][T22767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4454'. [ 1971.177595][ T5834] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1971.349599][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1971.401114][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1971.481577][ T5834] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1971.541964][T22787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4461'. [ 1971.631912][ T5834] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1971.690351][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.726469][ T5834] usb 3-1: config 0 descriptor?? [ 1972.431811][ T5834] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1972.836153][T22797] No such timeout policy "syz0" [ 1974.207339][ T5972] usb 3-1: reset high-speed USB device number 59 using dummy_hcd [ 1974.282375][T22814] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4469'. [ 1974.357383][ T5834] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1974.886760][ T5834] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1974.898150][ T5834] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1974.914036][ T5834] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 1974.930256][ T5834] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1974.975337][ T5834] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1974.985214][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1975.024482][ T5834] usb 2-1: SerialNumber: syz [ 1975.038301][T22812] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1975.045821][T22812] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1975.060323][ T5834] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1975.277114][T22812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1975.300036][T22812] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1976.032667][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.039277][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1979.357427][ T5972] usb 3-1: device descriptor read/64, error -110 [ 1979.580918][ T5834] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1979.591642][ T5834] usb 2-1: USB disconnect, device number 58 [ 1979.630641][ T5972] usb 3-1: reset high-speed USB device number 59 using dummy_hcd [ 1979.785941][T22834] exFAT-fs (nbd6): mounting with "discard" option, but the device does not support discard [ 1979.797874][T22834] syz.6.4470: attempt to access beyond end of device [ 1979.797874][T22834] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1979.811270][T22834] exFAT-fs (nbd6): unable to read boot sector [ 1979.819633][T22834] exFAT-fs (nbd6): failed to read boot sector [ 1979.825799][T22834] exFAT-fs (nbd6): failed to recognize exfat type [ 1979.886910][T22835] syz.6.4470: attempt to access beyond end of device [ 1979.886910][T22835] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1979.901029][T22835] syz.6.4470: attempt to access beyond end of device [ 1979.901029][T22835] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1979.914899][T22835] Mount JFS Failure: -5 [ 1980.348360][ T5972] usb 3-1: device descriptor read/64, error -32 [ 1980.917996][T22843] FAULT_INJECTION: forcing a failure. [ 1980.917996][T22843] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.970612][T22843] CPU: 1 UID: 0 PID: 22843 Comm: syz.2.4473 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1980.970642][T22843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1980.970656][T22843] Call Trace: [ 1980.970664][T22843] [ 1980.970673][T22843] dump_stack_lvl+0x189/0x250 [ 1980.970691][T22843] ? __pfx____ratelimit+0x10/0x10 [ 1980.970704][T22843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1980.970715][T22843] ? __pfx__printk+0x10/0x10 [ 1980.970732][T22843] ? __pfx___might_resched+0x10/0x10 [ 1980.970743][T22843] ? fs_reclaim_acquire+0x7d/0x100 [ 1980.970759][T22843] should_fail_ex+0x414/0x560 [ 1980.970783][T22843] should_failslab+0xa8/0x100 [ 1980.970798][T22843] __kmalloc_cache_noprof+0x70/0x3d0 [ 1980.970810][T22843] ? __io_uring_add_tctx_node+0x149/0x4e0 [ 1980.970831][T22843] __io_uring_add_tctx_node+0x149/0x4e0 [ 1980.970850][T22843] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1980.970866][T22843] ? __fget_files+0x2a/0x420 [ 1980.970881][T22843] ? __fget_files+0x2a/0x420 [ 1980.970896][T22843] __io_uring_add_tctx_node_from_submit+0x91/0x120 [ 1980.970914][T22843] __se_sys_io_uring_enter+0x2505/0x2b20 [ 1980.970937][T22843] ? ksys_write+0x1cb/0x250 [ 1980.970950][T22843] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1980.970960][T22843] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1980.970974][T22843] ? __pfx_vfs_write+0x10/0x10 [ 1980.970986][T22843] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1980.971001][T22843] ? __fget_files+0x3a0/0x420 [ 1980.971018][T22843] ? fput+0xa0/0xd0 [ 1980.971032][T22843] ? ksys_write+0x22a/0x250 [ 1980.971043][T22843] ? __pfx_ksys_write+0x10/0x10 [ 1980.971057][T22843] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1980.971070][T22843] do_syscall_64+0xfa/0x3b0 [ 1980.971082][T22843] ? lockdep_hardirqs_on+0x9c/0x150 [ 1980.971094][T22843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1980.971106][T22843] ? clear_bhb_loop+0x60/0xb0 [ 1980.971119][T22843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1980.971131][T22843] RIP: 0033:0x7fe27cd8ebe9 [ 1980.971143][T22843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1980.971154][T22843] RSP: 002b:00007fe27afc5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1980.971167][T22843] RAX: ffffffffffffffda RBX: 00007fe27cfb6090 RCX: 00007fe27cd8ebe9 [ 1980.971176][T22843] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000006 [ 1980.971184][T22843] RBP: 00007fe27afc5090 R08: 0000000000000000 R09: 0000000000000000 [ 1980.971191][T22843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1980.971199][T22843] R13: 00007fe27cfb6128 R14: 00007fe27cfb6090 R15: 00007ffe127f9508 [ 1980.971216][T22843] [ 1981.823614][T22845] dvmrp0: entered allmulticast mode [ 1981.845409][ T8915] usb 3-1: USB disconnect, device number 59 [ 1981.924389][T22854] overlayfs: workdir and upperdir must be separate subtrees [ 1982.960099][T22874] No such timeout policy "syz0" [ 1984.108371][T22890] fuse: Bad value for 'rootmode' [ 1985.949608][T22913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4497'. [ 1986.037664][T22908] netlink: 'syz.1.4495': attribute type 41 has an invalid length. [ 1987.040736][T22925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4502'. [ 1988.288942][T22946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4507'. [ 1988.299370][T22946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4507'. [ 1988.506231][T22950] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1989.587501][T22958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4510'. [ 1991.293444][T22974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4518'. [ 1992.763893][T22992] program syz.1.4521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1993.222296][T14569] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1993.557621][T14569] usb 4-1: Using ep0 maxpacket: 8 [ 1994.436904][T14569] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1994.577673][T14569] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1995.024472][T14569] usb 4-1: string descriptor 0 read error: -22 [ 1995.033128][T14569] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1995.061053][T14569] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1995.122762][T14569] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1995.146627][T14569] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1995.157805][T14569] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1995.178995][T14569] usb 4-1: media controller created [ 1995.214117][T14569] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1995.390138][T23024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1995.448950][T23024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1995.541866][ T5834] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1995.624463][T19566] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1995.699755][ T5834] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1995.717521][ T5834] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1995.756270][ T5834] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1995.834247][ T5834] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1995.875070][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1995.896839][ T5834] usb 3-1: Product: syz [ 1995.912569][ T5834] usb 3-1: Manufacturer: syz [ 1995.917781][ T5834] usb 3-1: SerialNumber: syz [ 1996.015323][T19566] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1996.117991][T23032] fuse: Unknown parameter '0x000000000000000301777777777777777777777' [ 1996.180240][T23023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1996.210407][T23023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1996.388071][T14569] zl10353_read_register: readreg error (reg=127, ret==0) [ 1996.393804][T19566] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1996.886562][ T5834] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1997.203380][ T5956] usb 3-1: USB disconnect, device number 60 [ 1997.250449][ T5956] usblp0: removed [ 1997.423827][T19566] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1997.468089][T14569] usb 4-1: USB disconnect, device number 38 [ 1997.503436][T19163] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1997.513036][T19163] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1997.521539][T19163] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1997.531169][T19163] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1997.539346][T19163] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1997.633996][T23035] lo speed is unknown, defaulting to 1000 [ 1999.153597][T19566] vlan2: left allmulticast mode [ 1999.271897][T19566] dummy0: left allmulticast mode [ 1999.341540][T19566] vlan2: left promiscuous mode [ 1999.378540][T19566] dummy0: left promiscuous mode [ 1999.386218][T19566] bridge0: port 2(vlan2) entered disabled state [ 1999.588468][T19566] bridge_slave_0: left allmulticast mode [ 1999.594166][T19566] bridge_slave_0: left promiscuous mode [ 1999.624361][T19566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.637804][T19163] Bluetooth: hci2: command tx timeout [ 1999.707468][ T5834] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1999.870816][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1999.901214][ T5834] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1999.948055][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.121428][ T5834] usb 2-1: config 0 descriptor?? [ 2000.607604][T23068] syz.4.4543: attempt to access beyond end of device [ 2000.607604][T23068] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2000.630515][ T5834] usbhid 2-1:0.0: can't add hid device: -71 [ 2000.636573][ T5834] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2000.643776][T23068] (syz.4.4543,23068,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 2000.654385][ T5834] usb 2-1: USB disconnect, device number 59 [ 2000.660884][T23068] (syz.4.4543,23068,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 2000.660917][T23068] (syz.4.4543,23068,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 2000.660939][T23068] (syz.4.4543,23068,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 2002.099556][T19163] Bluetooth: hci2: command tx timeout [ 2002.687944][T19289] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2002.839703][T19289] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 2002.851539][T19289] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 2002.864331][T19289] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 77 [ 2002.876345][T19289] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 2002.889524][T19289] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2002.898734][T19289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.910783][T23082] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2003.123663][T19566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2003.136035][T19566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2003.160501][T19566] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2003.173375][T19566] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2003.188630][T19566] bond0 (unregistering): Released all slaves [ 2003.331452][T23076] can0: slcan on ttyS3. [ 2003.357367][T19566] tipc: Left network mode [ 2003.594359][T23081] can0 (unregistered): slcan off ttyS3. [ 2003.611546][T19289] ath6kl: Failed to submit usb control message: -71 [ 2003.618477][T19289] ath6kl: unable to send the bmi data to the device: -71 [ 2003.637639][T19289] ath6kl: Unable to send get target info: -71 [ 2003.660611][T19289] ath6kl: Failed to init ath6kl core: -71 [ 2003.673205][T19289] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 2003.723231][T19289] usb 5-1: USB disconnect, device number 63 [ 2004.107508][T19163] Bluetooth: hci2: command tx timeout [ 2006.060953][T19566] hsr_slave_0: left promiscuous mode [ 2006.073616][T19566] hsr_slave_1: left promiscuous mode [ 2006.088761][T19566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2006.101606][T19566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2006.111814][T19566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2006.122745][T19566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2006.161327][T19566] veth1_macvtap: left promiscuous mode [ 2006.167324][T19566] veth0_macvtap: left promiscuous mode [ 2006.173221][T19566] veth1_vlan: left promiscuous mode [ 2006.179262][T19566] veth0_vlan: left promiscuous mode [ 2006.187931][T19163] Bluetooth: hci2: command tx timeout [ 2006.390513][T23121] netlink: 'syz.4.4553': attribute type 1 has an invalid length. [ 2008.015411][T19566] team0 (unregistering): Port device team_slave_1 removed [ 2008.084676][T19566] team0 (unregistering): Port device team_slave_0 removed [ 2008.822008][T23115] tipc: Started in network mode [ 2008.846408][T23115] tipc: Node identity 8e2b7e109288, cluster identity 4711 [ 2008.859253][T23115] tipc: Enabled bearer , priority 0 [ 2008.909235][T23119] syzkaller0: entered promiscuous mode [ 2008.914763][T23119] syzkaller0: entered allmulticast mode [ 2008.944109][T23125] bond2: (slave gretap1): making interface the new active one [ 2008.991912][T23125] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 2009.033730][T23117] syzkaller0: entered promiscuous mode [ 2009.045358][T23117] syzkaller0: entered allmulticast mode [ 2009.556893][T23117] tipc: Resetting bearer [ 2009.631874][T23117] tipc: Disabling bearer [ 2009.653008][T23035] chnl_net:caif_netlink_parms(): no params data found [ 2011.334035][T23175] gfs2: Unexpected value for 'acl' [ 2011.426228][T19566] IPVS: stop unused estimator thread 0... [ 2011.504377][T23183] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4568'. [ 2011.665651][T23035] bridge0: port 1(bridge_slave_0) entered blocking state [ 2011.694377][T23035] bridge0: port 1(bridge_slave_0) entered disabled state [ 2011.726132][T23035] bridge_slave_0: entered allmulticast mode [ 2011.756591][T23035] bridge_slave_0: entered promiscuous mode [ 2011.779162][T23035] bridge0: port 2(bridge_slave_1) entered blocking state [ 2011.800417][T23035] bridge0: port 2(bridge_slave_1) entered disabled state [ 2013.181185][T23035] bridge_slave_1: entered allmulticast mode [ 2013.199343][T23035] bridge_slave_1: entered promiscuous mode [ 2013.700438][T23035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2013.731549][T23035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2013.931354][T23035] team0: Port device team_slave_0 added [ 2014.526384][T23035] team0: Port device team_slave_1 added [ 2014.579394][T23035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2014.673198][T23035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2014.700898][T23035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2014.729316][T23035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2014.750805][T23035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2014.803966][T23035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2015.136129][T23035] hsr_slave_0: entered promiscuous mode [ 2015.226356][T23035] hsr_slave_1: entered promiscuous mode [ 2015.265971][T23035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2015.289662][T23035] Cannot create hsr debugfs directory [ 2015.592797][T23218] gfs2: Unexpected value for 'acl' [ 2016.400576][T23035] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2016.453004][T23035] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2016.485524][T23035] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2016.975186][T23035] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2017.085887][T23231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2017.983679][T23236] No such timeout policy "syz0" [ 2018.302894][T23035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2018.588940][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4587'. [ 2018.831494][T23035] 8021q: adding VLAN 0 to HW filter on device team0 [ 2018.927095][T23035] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2018.945373][T23262] gfs2: Unexpected value for 'acl' [ 2018.987663][T23035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2019.009402][T19580] bridge0: port 1(bridge_slave_0) entered blocking state [ 2019.016529][T19580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2019.101531][T19580] bridge0: port 2(bridge_slave_1) entered blocking state [ 2019.108751][T19580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2019.355192][T23274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4592'. [ 2019.365406][T23274] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2021.123405][T23290] : entered promiscuous mode [ 2022.700387][T23293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4597'. [ 2024.115591][T23035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2025.374932][T23312] program syz.3.4602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2025.856802][T23326] fuse: Unknown parameter '0x000000000000000a' [ 2027.478887][T23035] veth0_vlan: entered promiscuous mode [ 2027.583249][T23035] veth1_vlan: entered promiscuous mode [ 2027.786301][T23035] veth0_macvtap: entered promiscuous mode [ 2027.798600][T23035] veth1_macvtap: entered promiscuous mode [ 2028.030959][T23346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4609'. [ 2028.260415][T23035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2028.281162][T23035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2028.306277][T23035] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2028.344887][T23035] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2028.370575][T23035] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2028.382520][T23035] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2028.628345][T23348] No control pipe specified [ 2028.660165][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2028.801881][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2029.427570][ T977] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2029.440535][T19586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2029.479861][T19586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2029.607470][ T977] usb 4-1: Using ep0 maxpacket: 8 [ 2029.620822][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2029.653967][ T977] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2029.689764][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.728517][ T977] usb 4-1: config 0 descriptor?? [ 2029.754743][ T977] hso 4-1:0.0: Can't find BULK IN endpoint [ 2030.124711][T23362] program syz.1.4614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2033.837199][ C1] sched: DL replenish lagged too much [ 2037.615793][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.633981][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.215088][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.235858][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2155.117168][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2155.124180][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23364/1:b..l [ 2155.132847][ C0] rcu: (detected by 0, t=10502 jiffies, g=116237, q=927942 ncpus=2) [ 2155.140943][ C0] task:syz.2.4616 state:R running task stack:28392 pid:23364 tgid:23363 ppid:16263 task_flags:0x400040 flags:0x00004000 [ 2155.156123][ C0] Call Trace: [ 2155.159433][ C0] [ 2155.162393][ C0] __schedule+0x16aa/0x4c90 [ 2155.166942][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 2155.172258][ C0] ? __pfx___schedule+0x10/0x10 [ 2155.177272][ C0] ? __lock_acquire+0xab9/0xd20 [ 2155.182157][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 2155.187483][ C0] preempt_schedule_irq+0xb5/0x150 [ 2155.192628][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2155.198471][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 2155.204332][ C0] irqentry_exit+0x6f/0x90 [ 2155.208774][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2155.214773][ C0] RIP: 0010:lock_release+0x2b5/0x3e0 [ 2155.220079][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 fb 42 fe 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 2155.239895][ C0] RSP: 0018:ffffc90004b17650 EFLAGS: 00000206 [ 2155.245976][ C0] RAX: c664c98be94e1700 RBX: 0000000000000202 RCX: c664c98be94e1700 [ 2155.253935][ C0] RDX: 0000000000000001 RSI: ffffffff8db6fcc6 RDI: ffffffff8be1ba40 [ 2155.261917][ C0] RBP: ffff88802ac3a918 R08: ffffc90004b17bb8 R09: 0000000000000000 [ 2155.269959][ C0] R10: ffffc90004b177d8 R11: fffff52000962efd R12: 0000000000000001 [ 2155.277913][ C0] R13: 0000000000000001 R14: ffffffff8e13f0e0 R15: ffff88802ac39e00 [ 2155.285987][ C0] ? unwind_next_frame+0xa5/0x2390 [ 2155.291097][ C0] ? unwind_next_frame+0xa5/0x2390 [ 2155.296212][ C0] unwind_next_frame+0x19a9/0x2390 [ 2155.301325][ C0] ? unwind_next_frame+0xa5/0x2390 [ 2155.306613][ C0] ? __kasan_kmalloc+0x22/0xb0 [ 2155.311476][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2155.317634][ C0] arch_stack_walk+0x11c/0x150 [ 2155.322510][ C0] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 2155.328045][ C0] stack_trace_save+0x9c/0xe0 [ 2155.332732][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2155.338203][ C0] save_stack+0xf7/0x1f0 [ 2155.342642][ C0] ? __pfx_save_stack+0x10/0x10 [ 2155.347789][ C0] ? __free_frozen_pages+0xc65/0xe60 [ 2155.353109][ C0] ? __slab_free+0x326/0x400 [ 2155.357701][ C0] ? qlist_free_all+0x97/0x140 [ 2155.362518][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 2155.368269][ C0] ? __kasan_kmalloc+0x22/0xb0 [ 2155.373023][ C0] ? page_ext_put+0x97/0xc0 [ 2155.377619][ C0] __reset_page_owner+0x71/0x1f0 [ 2155.382594][ C0] __free_frozen_pages+0xc65/0xe60 [ 2155.387729][ C0] __slab_free+0x326/0x400 [ 2155.392149][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2155.398040][ C0] ? __phys_addr+0xd3/0x180 [ 2155.402529][ C0] qlist_free_all+0x97/0x140 [ 2155.407120][ C0] kasan_quarantine_reduce+0x148/0x160 [ 2155.412652][ C0] __kasan_kmalloc+0x22/0xb0 [ 2155.417245][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 2155.422598][ C0] ? ref_tracker_alloc+0x133/0x460 [ 2155.427718][ C0] ref_tracker_alloc+0x133/0x460 [ 2155.432684][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2155.438231][ C0] ? sk_prot_alloc+0x161/0x220 [ 2155.443113][ C0] sk_alloc+0x1b1/0x370 [ 2155.447291][ C0] can_create+0x1ca/0x5a0 [ 2155.451632][ C0] __sock_create+0x4b0/0x9f0 [ 2155.456251][ C0] __sys_socket+0xd7/0x1b0 [ 2155.460744][ C0] __x64_sys_socket+0x7a/0x90 [ 2155.465576][ C0] do_syscall_64+0xfa/0x3b0 [ 2155.470095][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2155.475410][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2155.481591][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2155.486278][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2155.492186][ C0] RIP: 0033:0x7fe27cd8ebe9 [ 2155.496608][ C0] RSP: 002b:00007fe27afee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2155.505033][ C0] RAX: ffffffffffffffda RBX: 00007fe27cfb5fa0 RCX: 00007fe27cd8ebe9 [ 2155.513013][ C0] RDX: 0000000000000007 RSI: 0000000000000002 RDI: 000000000000001d [ 2155.520977][ C0] RBP: 00007fe27ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2155.528954][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2155.536909][ C0] R13: 00007fe27cfb6038 R14: 00007fe27cfb5fa0 R15: 00007ffe127f9508 [ 2155.544876][ C0]