last executing test programs: 2m47.609755846s ago: executing program 1 (id=8): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) 2m44.663238238s ago: executing program 1 (id=14): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}, {&(0x7f00000001c0)="877ba26b4957606fb1e825155fdfd219a2e8852392b2a954ba3ca6a6b5d0196756af9d11b41e44527c82e6b6c4fa06b841a84e241cf4bea99ae1acfa07f4c1cc4c06552c51f0603fd5292b74f8981d3816a65292c9dc797ce027eac497a4cb85d44b5d44de727e037b8f6c2634f69f06c242271b572ce5942312154aa74c63ae7fcfa1b518cba69f51b8177d56ef01c3515eb9d9f84afcefc435ec2cc0427a66af12dd9cde0b06821e10dcd511e8be474460c24b7e3d9c3543ae26e6a34782fa47d4923e4c60000000", 0xffe7}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f0000001400)=""/4119, &(0x7f0000000000)=0x1017) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20050800) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000140)={r4}, 0x8) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r6, 0xffffffffffffffff, 0x1f, 0x0, @val=@netfilter={0x0, 0x1, 0x2, 0x1}}, 0x20) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="130a0000a000000000030000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000540)={0x18, &(0x7f0000000700)={0x40, 0xf, 0x29, "ae24e730aea79db58dc4cb23a48fb23800c13392415d0a8fc95877da2ac0213dba6f2fc9a415e7658a"}, 0x0, 0x0, 0x0, 0x0}) 2m40.147082725s ago: executing program 1 (id=20): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xffffff80}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r5, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) accept4(r6, 0x0, 0x0, 0x800) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44100}, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2m38.395962905s ago: executing program 1 (id=24): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) syz_io_uring_setup(0xc54, &(0x7f00000000c0)={0x0, 0xad7a, 0x1000, 0x3, 0x236}, &(0x7f0000000000)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x100, &(0x7f0000000180)=0x6c, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x5, @loopback, 0x4}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x1400c894) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@nombcache}, {@debug}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) pwritev2(r2, &(0x7f0000000600)=[{&(0x7f0000000080)='W', 0x1}], 0x1, 0x800be6b, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x44800, 0x0) sendfile(r3, r4, 0x0, 0xfffe82) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@deltaction={0x24, 0x31, 0x84a885ef6a85650f, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) writev(r2, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r0], 0x1000f) 2m35.21039658s ago: executing program 1 (id=31): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001400010000000000000000c9"], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) stat(0x0, 0x0) futimesat(r0, 0x0, &(0x7f0000000000)={{0x77359400}}) 2m33.997905595s ago: executing program 1 (id=35): r0 = socket$kcm(0x10, 0x3, 0x10) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x3, 0xa53, &(0x7f0000002640)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') r1 = openat$tun(0xffffff9c, &(0x7f00000000c0), 0x4824c2, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x7b9, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x85, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xa7, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000900)={0xc, &(0x7f0000000880)={0x40, 0x22, 0x61, {0x61, 0x21, "bc790f37128b1942c444f2bd0801a268a3e77d8e7ff97c069afead85dc7192264dbc253695f74f2acaadba0dd7bed53083bb76e5bd4affbb632f6c076c1256b33e9be7c5fa2ec24e7ca7358562ac42f1deec54ca718ffdc244e5f17aa51ad2"}}, &(0x7f0000000700)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "5b82b29f575cf227fcc1a547ca811d9ee213a31a089b4fc887"}}}, &(0x7f0000000b00)={0x18, &(0x7f0000000940)={0x20, 0x1, 0x7c, "efe62d2e80b1015847ca1efc01e2f06cc18f11f19d19c85b5bce74cebc987950daa4ceab35bb7f72cf231f34728be89032c418b2b65a1cbf039510f1666bd73f0a94cbccf9f2a9f61b2e4a773468e670ac0d133fb34353a6c0e85ea7de9e98984ae97d5b02c1f46402fa8266a85d0fd7cbca0d47cef4e0db2bd3639d"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a80)={0xc0, 0x5, 0x6, "7510dbbc7d11"}, &(0x7f0000000ac0)={0x40, 0x5, 0x5, "f4432878b8"}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) unshare(0x2a020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100), 0x4) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04P\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|\x92\x13\x874\xe3\x01\xfd-?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/272, &(0x7f0000000240)='/\t\x00\x00\x00\x98', 0x0) tkill(r7, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'gre0\x00', @remote}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2m31.358799512s ago: executing program 32 (id=35): r0 = socket$kcm(0x10, 0x3, 0x10) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x3, 0xa53, &(0x7f0000002640)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') r1 = openat$tun(0xffffff9c, &(0x7f00000000c0), 0x4824c2, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x7b9, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x85, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xa7, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000900)={0xc, &(0x7f0000000880)={0x40, 0x22, 0x61, {0x61, 0x21, "bc790f37128b1942c444f2bd0801a268a3e77d8e7ff97c069afead85dc7192264dbc253695f74f2acaadba0dd7bed53083bb76e5bd4affbb632f6c076c1256b33e9be7c5fa2ec24e7ca7358562ac42f1deec54ca718ffdc244e5f17aa51ad2"}}, &(0x7f0000000700)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "5b82b29f575cf227fcc1a547ca811d9ee213a31a089b4fc887"}}}, &(0x7f0000000b00)={0x18, &(0x7f0000000940)={0x20, 0x1, 0x7c, "efe62d2e80b1015847ca1efc01e2f06cc18f11f19d19c85b5bce74cebc987950daa4ceab35bb7f72cf231f34728be89032c418b2b65a1cbf039510f1666bd73f0a94cbccf9f2a9f61b2e4a773468e670ac0d133fb34353a6c0e85ea7de9e98984ae97d5b02c1f46402fa8266a85d0fd7cbca0d47cef4e0db2bd3639d"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a80)={0xc0, 0x5, 0x6, "7510dbbc7d11"}, &(0x7f0000000ac0)={0x40, 0x5, 0x5, "f4432878b8"}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) unshare(0x2a020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100), 0x4) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04P\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|\x92\x13\x874\xe3\x01\xfd-?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/272, &(0x7f0000000240)='/\t\x00\x00\x00\x98', 0x0) tkill(r7, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'gre0\x00', @remote}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 8.07018944s ago: executing program 3 (id=457): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c00001400028006001300"], 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x82000, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x4, 0x10002, 0x8, 0x7fffffff, 0x1b, "48b4299abf3991c75ba90fd2ee13ed2ee2f419"}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000c22000/0x3000)=nil, 0x3000}, 0x5}) ppoll(&(0x7f0000000180)=[{r2, 0x4047, 0x700}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4f}, 0x94) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x6559, 0x13580, 0x4000003}, &(0x7f0000000040), &(0x7f0000000140)) syz_usb_connect(0x3, 0x35, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000b58f55408205d5b9f773000000010902230001000000000904080001fff56a000800000000040e0009050b02"], 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x18, 0x0, 0x3, 0xc, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x9}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xfffffff8, @local, 0x8}}]}, 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x50}}, 0x8001) 7.750713455s ago: executing program 4 (id=458): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/22, 0x16}], 0x2}}], 0x1, 0x10003, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x20004801) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'team_slave_1\x00', 0x9}) write(r0, &(0x7f0000000340)="08000000010003", 0x7) 7.721473584s ago: executing program 5 (id=459): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0000000000000208", "5171bb74cdbb2ce49fd443b896000000a9856f4d0000000000773d00", "d8a024e5", "20000926190200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x20}) r2 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @local, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000300)="9e26931a501d9f3bce0f600bbabfb089d2bd5cfbf201ed03f412ba2bb38e28e5d771f008d3ebc1890818ba36f4f7e9d3e3e9f14916c2bbe04803ef7ac941a1c34a8af7f55c1b7d7223cd92c0139ea07efe1b", 0x52}, {&(0x7f0000000500)="176b60bc7645e02aeae82717a529470991ec6c27a12c28304e3bd9c8906dea7b39fc621ade3de5b07bda1c9c900c93c67061c98a33b2316de5b3535ee5533028f18eb6a124d849d13cda62f6318e770286ff7b0261a6d73ed3f6086941818f6c59a3576549b7060e1b9ef4955152bc69dd7726e6a60e1bd16dd848464b6f675c09aa4056d9b67bb371951978ba4720ba6032b9d0b1ab391cb5b436c0864966c82fafccb2380f2112467816487204acd76cc75a2f9ec4cbd5fe03c472f809028be774cded4fc889d7e322e2a38ee8dfed3e84e0d6f9cef7aa9b41163ef0e82c26df732ad7bd6e0708c6d946eb4464bac10afa4f6537", 0xf5}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="2400000029000000370000003b010000000000000001000401ec010100c20400000005001000000029000000ebffffffd83a000010000020290000003400000006000000"], 0x44}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000380)="a9f2fd4f5d8146a298fc181dd9360da6d1a6058746c839aa049d23f7225bc2cfe9159d41bba68d63716ef7367125d74a147cdd66", 0x34}, {&(0x7f0000000400)="55a9c0736711a4ad1ca401b4ac00cf26400b81615f36442713f2459d8ad124b0f58bd709f17f71d1216ea12c9759ce14094b44e06ee7", 0x36}, {&(0x7f0000000680)="5bdee51e97e7d30adf2326073c81c1aa818dccf506fc2d5184481bb78eec2673ea3edb9a795f1beeb9310c525b8f8732e4de2c26b387549cfa1c6734b494690cbc20d7b60b20711277161f5b510ff729959742e000f13200a73ef1bd095c0b83055e58f6a3ded915ef40ce7af9833562a07ec9f1822db1e51e46bf31ca292da038c8acaf7425ccf81fbfb3b9bebebe86e33f993166dba05d9722479f04ba2fde6a9ee9e722416a38ecafbed4fe223afc219be7a6", 0xb4}, {&(0x7f0000000740)="30a060b9a06a4629548ffdb43ec0b9c2f567668663972e9c1d2b3e67c58d988c609cb25260d33946da45d450f086c860942a86bb5ec2512265f9a2c178a76eb5bd8952476abb09a58353dc87dfeab7b3683a73", 0x53}, {&(0x7f0000000480)="893c33fe2c1ac0808e196281e2aa25833ee36782bf60c2fe703dafe1f0a1be0ef335de7a", 0x24}, {&(0x7f0000000940)="8f0fb16eaa230e84784135964eb64b046ef9d2c403572512750b6d1f876f926dcf83dbb8333177511422c1a263b14cf716c1787b666f6da08abc941aa518a4d10deb50dec1c7ac95d52822fa2d767dcdb5f525bae7aa2d34feb879f62a10accf9117b3b5d70dfe389995b88d7d8ddbda47a4cb888abd01bbc9", 0x79}, {&(0x7f00000009c0)="e57264c32e0d85cff2adbab923645a122536cc76319c9548d332f014beaa7337418ee7064c5cde8ea73222510f63e5282833bf6bf4fa26dbbc7a2d0377f76defcc4324ad71cc6bf99042a49595cff7f40bff2a0740e019ba5aac4a6ac67dd98e99f01d4286781a25d631aaa793fcd351b0db939ba7b7e3c223f549bbc9305a8869376c619224b049314350d8033507272317822a9e40053d45b3148ef54a", 0x9e}, {&(0x7f00000007c0)="7a4da4d283031d08e4c50d2ad0c0c9fd6d8d2a55a38dbadc5939b3d3d6cc423030a753f34313fcc38226fb8cb0307e5880b31e3028d90a0f", 0x38}], 0x8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="10000000290000004300000007000000100000002900000008000000080000005400000029000000390000002f0801b6000000027a800000000000000000000000eeff3afe8000000000000000000000000000bbfe8000000000000000000000000000bbfe8000000000000000000000000000bbfb5a03598d8854ed8a3b73f57c410e223d2464ff55d5291258e2d532375885191f4e0fee1ecb2d3bdb55"], 0x74}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, &(0x7f0000000b80)}}], 0x3, 0x1) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000037c0000040000000c0001800600060008"], 0x528}}, 0xc000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 6.668400632s ago: executing program 4 (id=462): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) 6.50594159s ago: executing program 5 (id=463): r0 = fanotify_init(0x0, 0x0) syz_usb_connect(0x1, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058da203002a00000905050200ab4e6459908ebf09e35822844d801aea9c89801cd0e9374dffd4f1bbfc6bf22321ce97db72da750d556c8792d9b1590c5efda28a1a42c410bbdba19153105d4a31ab281dfcf6246afd46b77bca970c4f0e24234762cac040", @ANYRESOCT=r0, @ANYRESDEC=r0], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)="11212e", 0x3}}, 0x24008000) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0xfe, 0x0) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) r5 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000140)={0x100000000, 0xe8, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x72, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2050000, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB="2c616c6c6f775f6f746865722c616c6c6f775f6f766865722c626c6b73697a653d30783030309155fcc9d8e73b2530313030302c616c6c6f775f6f746c65722c6435c641cd84b057656661756c745f7065726d697373696f6e732c616c6c6f775f6f746865722c626c6b736978653d3078303030303030303030303030303830302c7569643e", @ANYRESDEC=0xee01, @ANYBLOB=',pcr=00000000000000000023,\x00'], 0x1, 0x0, &(0x7f0000000440)="5c91990fc0c3a0c8ade15f9409f7fbe0bce11df7028864ef6972613636c5d0b7e92a5fc2033f4cfc70389e749cc7bd5a7578ae9368c77d0c64cdb7e4b8c6b03f04da548bcc9d056ffefd076968c2817e7d6616d7e3e1290ab6a7e5c97aea22dfb7ba8f329e19c9f9b83904b57294163a3d4e8c4b0cca697753e514c7e9a033f5d1f72228d895e7055881d62aae22f73c0065d05475e06ab528431db840af686cfea2f9b267614fdf562c0e58017cde4111f441a8a4dcdb19b9125684b23e4af2c828f020c37ed761593ab124") bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000800000000100000400000001c000000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6bf1bd4dd20d9ff28cfc3426239dc4f9a47195fe39caebd203000000f124a5535a1fde2acb6ac25a68"], 0x50) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000002c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="0000000041f5a129958261070b9bd756794e8cacc195ba6dcba14c7bb3dfa919cd6e715f2482a1582dc82cce60f407a8ee1898174b285b7c11fc426f2d21073da174609483fc0cdddf9b2f8640c24fc07fccdc480353bf4af464d07d26abdf1167a9e190c6c3fd59ef19d9e635b2782465b3b10f9ab178ad6dcd4b61b5393aa49e6dd3bbfc1525324cee2bb0329a371ee9b97b1e", @ANYRESHEX=0x0, @ANYRES16=0x0], 0x3, 0x6af, &(0x7f0000000a00)="$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") ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x2000, 0x1ffd, 0x6, 0xfffc}) unshare(0x28040680) r7 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r7, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 6.444107903s ago: executing program 2 (id=464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000780)={0x28, r1, 0x81d9ca8d71236eb5, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (fail_nth: 4) 6.216858432s ago: executing program 0 (id=465): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c00000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00840000000004003c001a80380004803400058008000700010100000800000000f000000800160001000000080002000db4000008001a000600000008000d000f000000115c5c04374f46c9e7c0da2b0925b71c8b7dab32760739fd48817e9b39d908d7650daf8e7cc9565495fcca84507d34cabeb0d9e9efd6f609ab20a6c9a1dbb902004825d6f1fc"], 0x5c}}, 0x0) 5.941631795s ago: executing program 4 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) pwrite64(r0, &(0x7f0000000000)="b6c320f9", 0x4, 0x450) 5.604738601s ago: executing program 0 (id=467): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000300)="d88b9593204eeb", 0x7}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1}}, 0x3c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 5.31432209s ago: executing program 2 (id=468): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4600000006ffffffffffffffff03003e0000000000040000000000000040000000020000009a01000000000000000000000000380001"], 0x78) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0xfff, 0x5}, 0x50) socket(0x2b, 0x80801, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ab}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x20004000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x20, 0x0, @fd, 0x7d, {}, 0x4, 0x5}) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x5c3603) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x4ee}) 5.088091365s ago: executing program 4 (id=469): syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000003080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x40, 0x0, 0x44, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x1, 0xa, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xc9, 0x18, 0x2}}}}}]}}]}}, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000003140)=@lang_id={0x4, 0x3, 0x813}}, {0xf0, &(0x7f0000003180)=ANY=[@ANYBLOB="f0030100eade90b735da1023fc3252f142f91ca7ce6897a21efb4d9a8eb4a9373a80bb66b349132b39c746d44974cd64e6b8c61b9d32bb2603bbeea4d649cc186cc40dfe881c2ad0496ab3265c3d1ce6b266019990bb8d338ea67f3c4d613f691c75c02d663149f7b0f63dd764d21f7bc8fda160b0b5d7375425038b2bf0e715b3fcb7f2e058e74d7c3509beb327a77da480f444c6a7f74737437de1cbec3fa03b9df214305fe0b2516976c8c68a8de1a2b55d578ac2fc93d858687e7f2af34cc89d7d5282ae4b6cbfcf17f38e28f08a287a27e0d5be6bb6fe3e11b9cc49127caba715b6cee3fa6cc63e14f429e958dd"]}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x2) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x2) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x8, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000804) (async) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x8, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000804) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e6b3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7a29aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e17fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4314f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc06000000000000008fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b22589f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b24464e0ff504b87c90697ec2a82bbfd1c31713190d3e6e502c434909d6ba06cd0361a0fd90552272f24519ea9938413947edd3a0a7aa780c1dcdddf13b46ca94f37c89664c9cc1857d64ca371fa1b6131"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00210000000000180000000700000073000000000000000a000200"], 0x28}}, 0x0) 4.665123416s ago: executing program 0 (id=470): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x202}, [@IFLA_LINKINFO={0x11, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 4.545231094s ago: executing program 3 (id=471): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x22) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001400)=""/4119, &(0x7f0000000000)=0x1017) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000140)={r2}, 0x8) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}]}}]}}]}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, 0xffffffffffffffff, 0x1f, 0x0, @val=@netfilter={0x0, 0x1, 0x2, 0x1}}, 0x20) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="130a0000a000000000030000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000540)={0x18, &(0x7f0000000700)={0x40, 0xf, 0x29, "ae24e730aea79db58dc4cb23a48fb23800c13392415d0a8fc95877da2ac0213dba6f2fc9a415e7658a"}, 0x0, 0x0, 0x0, 0x0}) 4.072162112s ago: executing program 0 (id=472): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c696f636861727365743de3703836332c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,fmask=00000000000000000000201,iocharset=euc-jp,errors=continue,zero_size_dir,\x00'], 0x1, 0x14e1, &(0x7f0000002a80)="$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") setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080), 0x2, 0x1) 3.692195717s ago: executing program 2 (id=473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0000000000000208", "5171bb74cdbb2ce49fd443b896000000a9856f4d0000000000773d00", "d8a024e5", "20000926190200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x20}) r2 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @local, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000300)="9e26931a501d9f3bce0f600bbabfb089d2bd5cfbf201ed03f412ba2bb38e28e5d771f008d3ebc1890818ba36f4f7e9d3e3e9f14916c2bbe04803ef7ac941a1c34a8af7f55c1b7d7223cd92c0139ea07efe1b", 0x52}, {&(0x7f0000000500)="176b60bc7645e02aeae82717a529470991ec6c27a12c28304e3bd9c8906dea7b39fc621ade3de5b07bda1c9c900c93c67061c98a33b2316de5b3535ee5533028f18eb6a124d849d13cda62f6318e770286ff7b0261a6d73ed3f6086941818f6c59a3576549b7060e1b9ef4955152bc69dd7726e6a60e1bd16dd848464b6f675c09aa4056d9b67bb371951978ba4720ba6032b9d0b1ab391cb5b436c0864966c82fafccb2380f2112467816487204acd76cc75a2f9ec4cbd5fe03c472f809028be774cded4fc889d7e322e2a38ee8dfed3e84e0d6f9cef7aa9b41163ef0e82c26df732ad7bd6e0708c6d946eb4464bac10afa4f6537", 0xf5}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="2400000029000000370000003b010000000000000001000401ec010100c20400000005001000000029000000ebffffffd83a000010000020290000003400000006000000"], 0x44}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000380)="a9f2fd4f5d8146a298fc181dd9360da6d1a6058746c839aa049d23f7225bc2cfe9159d41bba68d63716ef7367125d74a147cdd66", 0x34}, {&(0x7f0000000400)="55a9c0736711a4ad1ca401b4ac00cf26400b81615f36442713f2459d8ad124b0f58bd709f17f71d1216ea12c9759ce14094b44e06ee7", 0x36}, {&(0x7f0000000680)="5bdee51e97e7d30adf2326073c81c1aa818dccf506fc2d5184481bb78eec2673ea3edb9a795f1beeb9310c525b8f8732e4de2c26b387549cfa1c6734b494690cbc20d7b60b20711277161f5b510ff729959742e000f13200a73ef1bd095c0b83055e58f6a3ded915ef40ce7af9833562a07ec9f1822db1e51e46bf31ca292da038c8acaf7425ccf81fbfb3b9bebebe86e33f993166dba05d9722479f04ba2fde6a9ee9e722416a38ecafbed4fe223afc219be7a6", 0xb4}, {&(0x7f0000000740)="30a060b9a06a4629548ffdb43ec0b9c2f567668663972e9c1d2b3e67c58d988c609cb25260d33946da45d450f086c860942a86bb5ec2512265f9a2c178a76eb5bd8952476abb09a58353dc87dfeab7b3683a73", 0x53}, {&(0x7f0000000480)="893c33fe2c1ac0808e196281e2aa25833ee36782bf60c2fe703dafe1f0a1be0ef335de7a", 0x24}, {&(0x7f0000000940)="8f0fb16eaa230e84784135964eb64b046ef9d2c403572512750b6d1f876f926dcf83dbb8333177511422c1a263b14cf716c1787b666f6da08abc941aa518a4d10deb50dec1c7ac95d52822fa2d767dcdb5f525bae7aa2d34feb879f62a10accf9117b3b5d70dfe389995b88d7d8ddbda47a4cb888abd01bbc9", 0x79}, {&(0x7f00000009c0)="e57264c32e0d85cff2adbab923645a122536cc76319c9548d332f014beaa7337418ee7064c5cde8ea73222510f63e5282833bf6bf4fa26dbbc7a2d0377f76defcc4324ad71cc6bf99042a49595cff7f40bff2a0740e019ba5aac4a6ac67dd98e99f01d4286781a25d631aaa793fcd351b0db939ba7b7e3c223f549bbc9305a8869376c619224b049314350d8033507272317822a9e40053d45b3148ef54a", 0x9e}, {&(0x7f00000007c0)="7a4da4d283031d08e4c50d2ad0c0c9fd6d8d2a55a38dbadc5939b3d3d6cc423030a753f34313fcc38226fb8cb0307e5880b31e3028d90a0f", 0x38}], 0x8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="10000000290000004300000007000000100000002900000008000000080000005400000029000000390000002f0801b6000000027a800000000000000000000000eeff3afe8000000000000000000000000000bbfe8000000000000000000000000000bbfe8000000000000000000000000000bbfb5a03598d8854ed8a3b73f57c410e223d2464ff55d5291258e2d532375885191f4e0fee1ecb2d3bdb55"], 0x74}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, &(0x7f0000000b80)}}], 0x3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000037c0000040000000c0001800600060008"], 0x528}}, 0xc000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 3.341856567s ago: executing program 3 (id=474): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0x0, 0xffffffffffffffff}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@rand_addr=0x64010101}}, 0xe8) close(r1) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) r2 = io_uring_setup(0x1873, &(0x7f0000000100)={0x0, 0x9390, 0x200, 0x0, 0xf6}) r3 = eventfd2(0x9, 0x80001) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f00000039c0)={0x2020}, 0x2020) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000240)=0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180)=r3, 0x1) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x10000, {0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, {0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) write$FUSE_INIT(r0, &(0x7f0000000780)={0x50, 0x0, r5, {0x7, 0x2b, 0x3, 0x40000000, 0x5, 0x6, 0x2, 0x9, 0x0, 0x0, 0x100, 0x8}}, 0x50) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2, 0x5}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800086}, r8, 0xfffffffe}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x4, @remote, 0x5}, {0xa, 0x0, 0xfa, @empty}, r8}}, 0x48) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af78b49b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda2d42527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd03e5b04bfdb61f5e169b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0xff, {0xfffffffffffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000080045"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x84) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r11, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) 3.249161787s ago: executing program 5 (id=475): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="20000280", @ANYRES32=r1, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32], 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003000000018000180140002"], 0x2c}}, 0x0) 2.966030498s ago: executing program 0 (id=476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000056"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) 2.712522482s ago: executing program 2 (id=477): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c00000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00840000000004003c001a80380004803400058008000700010100000800000000f000000800160001000000080002000db4000008001a000600000008000d000f000000115c"], 0x5c}}, 0x0) 2.609864521s ago: executing program 4 (id=478): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) close(r0) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) 2.501733527s ago: executing program 3 (id=479): unshare(0x22000600) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) pwrite64(r0, &(0x7f0000000000)="b6c320f9", 0x4, 0x450) 2.389933076s ago: executing program 5 (id=480): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000300)="d88b9593204eeb", 0x7}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0}}, 0x3c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 2.142166784s ago: executing program 0 (id=481): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c00001400028006001300"], 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x82000, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x4, 0x10002, 0x8, 0x7fffffff, 0x1b, "48b4299abf3991c75ba90fd2ee13ed2ee2f419"}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000c22000/0x3000)=nil, 0x3000}, 0x5}) ppoll(&(0x7f0000000180)=[{r2, 0x4047, 0x700}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4f}, 0x94) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x6559, 0x13580, 0x4000003}, &(0x7f0000000040), &(0x7f0000000140)) syz_usb_connect(0x3, 0x35, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000b58f55408205d5b9f773000000010902230001000000000904080001fff56a000800000000040e0009050b02"], 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x18, 0x0, 0x3, 0xc, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x9}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xfffffff8, @local, 0x8}}]}, 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x50}}, 0x8001) 1.978794862s ago: executing program 2 (id=482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x3, 0x1ff, 0x6, 0x120, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, 0xffffffffffffffff, &(0x7f00000000c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000000000000000000000008500000008000000660000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xad, &(0x7f0000000000)=""/173}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x17, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) 1.830567722s ago: executing program 3 (id=483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000009c0)={0x0, 0x300, &(0x7f0000000980)={&(0x7f0000000780)={0x28, r1, 0x81d9ca8d71236eb5, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 1.514462408s ago: executing program 5 (id=484): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x22) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001400)=""/4119, &(0x7f0000000000)=0x1017) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000140)={r2}, 0x8) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}]}}]}}]}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, 0xffffffffffffffff, 0x1f, 0x0, @val=@netfilter={0x0, 0x1, 0x2, 0x1}}, 0x20) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="130a0000a000000000030000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000540)={0x18, &(0x7f0000000700)={0x40, 0xf, 0x29, "ae24e730aea79db58dc4cb23a48fb23800c13392415d0a8fc95877da2ac0213dba6f2fc9a415e7658a"}, 0x0, 0x0, 0x0, 0x0}) 1.11476884s ago: executing program 2 (id=485): r0 = fanotify_init(0x0, 0x0) syz_usb_connect(0x1, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058da203002a00000905050200ab4e6459908ebf09e35822844d801aea9c89801cd0e9374dffd4f1bbfc6bf22321ce97db72da750d556c8792d9b1590c5efda28a1a42c410bbdba19153105d4a31ab281dfcf6246afd46b77bca970c4f0e24234762cac040", @ANYRESOCT=r0, @ANYRESDEC=r0], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)="11212e", 0x3}}, 0x24008000) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0xfe, 0x0) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) r5 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000140)={0x100000000, 0xe8, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x72, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2050000, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB="2c616c6c6f775f6f746865722c616c6c6f775f6f766865722c626c6b73697a653d30783030309155fcc9d8e73b2530313030302c616c6c6f775f6f746c65722c6435c641cd84b057656661756c745f7065726d697373696f6e732c616c6c6f775f6f746865722c626c6b736978653d3078303030303030303030303030303830302c7569643e", @ANYRESDEC=0xee01, @ANYBLOB=',pcr=00000000000000000023,\x00'], 0x1, 0x0, &(0x7f0000000440)="5c91990fc0c3a0c8ade15f9409f7fbe0bce11df7028864ef6972613636c5d0b7e92a5fc2033f4cfc70389e749cc7bd5a7578ae9368c77d0c64cdb7e4b8c6b03f04da548bcc9d056ffefd076968c2817e7d6616d7e3e1290ab6a7e5c97aea22dfb7ba8f329e19c9f9b83904b57294163a3d4e8c4b0cca697753e514c7e9a033f5d1f72228d895e7055881d62aae22f73c0065d05475e06ab528431db840af686cfea2f9b267614fdf562c0e58017cde4111f441a8a4dcdb19b9125684b23e4af2c828f020c37ed761593ab124") bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000800000000100000400000001c000000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6bf1bd4dd20d9ff28cfc3426239dc4f9a47195fe39caebd203000000f124a5535a1fde2acb6ac25a68"], 0x50) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000002c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="0000000041f5a129958261070b9bd756794e8cacc195ba6dcba14c7bb3dfa919cd6e715f2482a1582dc82cce60f407a8ee1898174b285b7c11fc426f2d21073da174609483fc0cdddf9b2f8640c24fc07fccdc480353bf4af464d07d26abdf1167a9e190c6c3fd59ef19d9e635b2782465b3b10f9ab178ad6dcd4b61b5393aa49e6dd3bbfc1525324cee2bb0329a371ee9b97b1e", @ANYRESHEX=0x0, @ANYRES16=0x0], 0x3, 0x6af, &(0x7f0000000a00)="$eJzs3U2InHcdB/DvM9nMZiKk2zZNowgNDRRtMNnNUBNBaBSRHIIEvfS6JJtmySQtm62kQcxErYInT9KDh4rEQ08iItSDiPUsCF485R7w5iEHdcvzMrOzu5PNbpPsbNvPB559/s/8337Pr8/LzFPCE+Az6+xr2dtPkbPHzt0ot+/e6fbu3uleHZSTTCdpJVP1KkUnKT5MzqRe8vnyw2a44kHzvHLvg2Lq3fe79dZUs1TtW5v122Bsy36yb7ixJ8mRuvjfLQ+7Ybxqqca5sDreg01vVlkM4y4TdnSQOJi0lQ36q5Wth3bf+nkL7Fq36vvmBjPJ/tR31+oW11wdHn5lmLxNr039nYsDAAAAnpSxv+VHPXU/93MjB3YmHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0KOp3BhbN0koxeH1+MXj/f3vknfrtCYb6GLxzqVp996lJBwIAAAAAAAAAj+SF+7mfGzkw2F4p0kryYrVxsPr7ubyV61nIUo7nRuaznOUsZS7JzMhA7Rvzy8tLcxt7/jJlz5WVlVtNz5Nje55cG1d/faDtJNN5SCMAAAAAAAAA+Mz6Uc6u/v9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYDYpkT72qloOD8kxaU0n2JWkXR4bN2xMN9jH4y6QDAAAAgCev06wPFP+vCytF9Zv/UPW7f1/eyrUsZzHL6WUhF6tnAfWv/tY/+t3e3Tvdq+WyceBv/HtbcVQjpn72sHbmPU2L2arFc8MeZ/PtfC/HciTns5TFfD/zWc5CjuRbVWk+RWaapxczd+90Moh1Y7xn1mydXx/bCyPlMprDVSSdXMpilZXjudAehN5q2h0eme2P7WTdjLfL7BSvNraYo4vNutyjXzTr3WGm2vO9w4zMNrkvs/H0aN435n6bx8n6mebSGj6DOrg6S7m5fqaPlfP9zbrM9U+fbM63+ShtbSb6Py+3Bkffoc1znnz5n389f7l17crlS9eP7Z7D6GNaf0x0RzLx/JYy0Ssz0X+ETOx7lPgfn3aTjfqaub2r5YtV3wNZzHfyRi5mIacym7mczmy+lpPp5uRIXp/bPK/Vudba3rl29EtNobwn/Wzk3rRjph9UUeb16ZG8jl7pZqq60U9Ws/TMFrJUtDM+S/8aG8rUF5pCOcePR+44k7c+E3MjmXh280z8+n8rSa73rl1Zujz/5iZz3Pzz/pcG5UGhPG3fWXtt/s3j3K9taHa3PF6eKf9jpb5tjB4dZd2zg7o6X8VUVvsdHNatvc+126nO57ruYWdqOdKh2+NGquueHztLt6o7PFK35ltO3khv+C0EgF1s/8v72517nb933uv8pHO5c27fN6dPT3+xnb1/m/rTnt+1ftv6evFy3ssPc2DSkQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKfB9bdvXpnv9RaWdmEhrcc84O2xVYNU1J+0d8e+f1IL05sdUb9Pskn39iRi7iTZFanL1A7MNZ0xVeeGn3SS1jCeJFd2yQvugCfhxPLVN09cf/vmVxavzr++8PrCtZOnT716qvvVuVsnLi32Fmbrv5OOEngSVr8GTDoSAAAAAAAAAAAAYKt24p83jJm26E9gXwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBPprOvZW8/ReZmj8+W23fvdHvlMiivtpxK0kpS/CApPkzOpF4yMzJc8aB5Xrn3wa9eevf97upYU4P2rXX9/vCflZVt7kW/WXIkyZ5m/XDTWxrvwsh4/W0GViuGe1gm7OggcTBpHwUAAP//LTQGGA==") ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x2000, 0x1ffd, 0x6, 0xfffc}) unshare(0x28040680) socket$netlink(0x10, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 974.274957ms ago: executing program 3 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x5, 0x0, 0x4}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0x3e0b}}}]}, {0x41}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f0000000040)={[{@barrier}, {@autodefrag}, {@notreelog}, {@usebackuproot}, {@noflushoncommit}, {@usebackuproot}, {@max_inline={'max_inline', 0x3d, [0x37, 0x37, 0x6b, 0x37]}}, {@clear_cache}, {@ref_verify}]}, 0x1, 0x55ae, &(0x7f000000abc0)="$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") 5.02236ms ago: executing program 4 (id=487): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0000000000000208", "5171bb74cdbb2ce49fd443b896000000a9856f4d0000000000773d00", "d8a024e5", "20000926190200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x20}) r2 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @local, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000300)="9e26931a501d9f3bce0f600bbabfb089d2bd5cfbf201ed03f412ba2bb38e28e5d771f008d3ebc1890818ba36f4f7e9d3e3e9f14916c2bbe04803ef7ac941a1c34a8af7f55c1b7d7223cd92c0139ea07efe1b", 0x52}, {&(0x7f0000000500)="176b60bc7645e02aeae82717a529470991ec6c27a12c28304e3bd9c8906dea7b39fc621ade3de5b07bda1c9c900c93c67061c98a33b2316de5b3535ee5533028f18eb6a124d849d13cda62f6318e770286ff7b0261a6d73ed3f6086941818f6c59a3576549b7060e1b9ef4955152bc69dd7726e6a60e1bd16dd848464b6f675c09aa4056d9b67bb371951978ba4720ba6032b9d0b1ab391cb5b436c0864966c82fafccb2380f2112467816487204acd76cc75a2f9ec4cbd5fe03c472f809028be774cded4fc889d7e322e2a38ee8dfed3e84e0d6f9cef7aa9b41163ef0e82c26df732ad7bd6e0708c6d946eb4464bac10afa4f6537", 0xf5}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="2400000029000000370000003b010000000000000001000401ec010100c20400000005001000000029000000ebffffffd83a000010000020290000003400000006000000"], 0x44}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000380)="a9f2fd4f5d8146a298fc181dd9360da6d1a6058746c839aa049d23f7225bc2cfe9159d41bba68d63716ef7367125d74a147cdd66", 0x34}, {&(0x7f0000000400)="55a9c0736711a4ad1ca401b4ac00cf26400b81615f36442713f2459d8ad124b0f58bd709f17f71d1216ea12c9759ce14094b44e06ee7", 0x36}, {&(0x7f0000000680)="5bdee51e97e7d30adf2326073c81c1aa818dccf506fc2d5184481bb78eec2673ea3edb9a795f1beeb9310c525b8f8732e4de2c26b387549cfa1c6734b494690cbc20d7b60b20711277161f5b510ff729959742e000f13200a73ef1bd095c0b83055e58f6a3ded915ef40ce7af9833562a07ec9f1822db1e51e46bf31ca292da038c8acaf7425ccf81fbfb3b9bebebe86e33f993166dba05d9722479f04ba2fde6a9ee9e722416a38ecafbed4fe223afc219be7a6", 0xb4}, {&(0x7f0000000740)="30a060b9a06a4629548ffdb43ec0b9c2f567668663972e9c1d2b3e67c58d988c609cb25260d33946da45d450f086c860942a86bb5ec2512265f9a2c178a76eb5bd8952476abb09a58353dc87dfeab7b3683a73", 0x53}, {&(0x7f0000000480)="893c33fe2c1ac0808e196281e2aa25833ee36782bf60c2fe703dafe1f0a1be0ef335de7a", 0x24}, {&(0x7f0000000940)="8f0fb16eaa230e84784135964eb64b046ef9d2c403572512750b6d1f876f926dcf83dbb8333177511422c1a263b14cf716c1787b666f6da08abc941aa518a4d10deb50dec1c7ac95d52822fa2d767dcdb5f525bae7aa2d34feb879f62a10accf9117b3b5d70dfe389995b88d7d8ddbda47a4cb888abd01bbc9", 0x79}, {&(0x7f00000009c0)="e57264c32e0d85cff2adbab923645a122536cc76319c9548d332f014beaa7337418ee7064c5cde8ea73222510f63e5282833bf6bf4fa26dbbc7a2d0377f76defcc4324ad71cc6bf99042a49595cff7f40bff2a0740e019ba5aac4a6ac67dd98e99f01d4286781a25d631aaa793fcd351b0db939ba7b7e3c223f549bbc9305a8869376c619224b049314350d8033507272317822a9e40053d45b3148ef54a", 0x9e}, {&(0x7f00000007c0)="7a4da4d283031d08e4c50d2ad0c0c9fd6d8d2a55a38dbadc5939b3d3d6cc423030a753f34313fcc38226fb8cb0307e5880b31e3028d90a0f", 0x38}], 0x8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="10000000290000004300000007000000100000002900000008000000080000005400000029000000390000002f0801b6000000027a800000000000000000000000eeff3afe8000000000000000000000000000bbfe8000000000000000000000000000bbfe8000000000000000000000000000bbfb5a03598d8854ed8a3b73f57c410e223d2464ff55d5291258e2d532375885191f4e0fee1ecb2d3bdb55"], 0x74}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, &(0x7f0000000b80)}}], 0x3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000037c0000040000000c0001800600060008"], 0x528}}, 0xc000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 0s ago: executing program 5 (id=488): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x25, 0x10, @void}, 0x10) pwrite64(r2, &(0x7f0000000980)="a5f65ea7c46e91a134199b54e9c45b455daa86ac22e701b3a44d684cb05cab266abc392f050ad06fba085453db7925cac44ee073b82cb49fbf994310e6cadc53af28bbaa5f17a6bafbd0729c41140f8056e0451a629fe1e2ee87632a2e2285af2bf7e243aeb8d2f6e5", 0x69, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r5 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x1, 0x654, &(0x7f0000000a40)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) mount_setattr(0xffffffffffffff9c, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file2\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) write$dsp(r4, &(0x7f0000000780)="8bc474749366123c75ddfde584b0fb1723514b591bbd760ef259ba79a71766de0d8fb2196fbeb01178b3d52f354451bc60fe56ece3ed4d725511ef573ce5561452588c9754b7b59581ae2099f8b3ed370c83b953c79a1d776a5053f9e67c65cfc13983899988e45e154b11912dc5a90274451f12242f1bf9950c4c09dda5e253f604e0f6f3f63a20ddc92dac8c40ba02ce3324c7f59097", 0x97) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x1c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000840)={0x0}, &(0x7f0000000880)=0xc) syz_open_procfs(r8, &(0x7f00000008c0)='attr/keycreate\x00') r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8c4, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffff9}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @ldst={0x0, 0x3, 0x0, 0x9, 0x2, 0xffffffffffffffe0}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x7e, 0x36, &(0x7f00000005c0)=""/54, 0x40f00, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x0, 0x10, 0x80000000, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[r7, r1, r7, r7, r3, r7, r7, r1, r1], &(0x7f0000000680)=[{0x3, 0x3}, {0x0, 0x1, 0xa}, {0x2, 0x1, 0xb, 0x3}, {0x3, 0x5, 0x0, 0x9}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x26, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xed}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x401}, @generic={0x3, 0x0, 0x6, 0x5, 0xaa17}, @alu={0x4, 0x1, 0xd, 0x5, 0x6, 0x20, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): loop5): force clearing of disk cache [ 262.617394][ T6508] BTRFS info (device loop5): enabling auto defrag [ 262.624011][ T6508] BTRFS info (device loop5): doing ref verification [ 262.630926][ T6508] BTRFS info (device loop5): trying to use backup root at mount time [ 262.639484][ T6508] BTRFS info (device loop5): max_inline set to 4096 [ 262.851541][ T6160] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 263.260069][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 263.633457][ T6534] loop4: detected capacity change from 0 to 512 [ 263.710830][ T6534] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.745477][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 264.993266][ T5875] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.002774][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.026221][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 265.111315][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0049, bcdDevice= 0.40 [ 265.121390][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.129878][ T24] usb 4-1: Product:  [ 265.134055][ T24] usb 4-1: Manufacturer: ⠁ [ 265.139008][ T24] usb 4-1: SerialNumber: В [ 265.185232][ T5875] usb 3-1: can't set config #1, error -71 [ 265.326770][ T5875] usb 3-1: USB disconnect, device number 8 [ 265.540274][ T6555] fuse: Unknown parameter 'fd0x0000000000000003' [ 265.649140][ T24] usbhid 4-1:1.0: can't add hid device: -71 [ 265.655924][ T24] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 265.826678][ T24] usb 4-1: USB disconnect, device number 9 [ 266.576696][ T6563] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 267.046978][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 268.506280][ T5875] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 268.762182][ T5875] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 268.770822][ T5875] usb 3-1: config 0 has no interface number 0 [ 268.777270][ T5875] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xF has invalid maxpacket 1479, setting to 64 [ 268.788742][ T5875] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=65.bf [ 268.798139][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.938954][ T6601] fuse: Unknown parameter 'fd0x0000000000000003' [ 268.977526][ T5875] usb 3-1: config 0 descriptor?? [ 269.006402][ T5875] rndis_host 3-1:0.219: invalid descriptor buffer length [ 269.013961][ T5875] usb 3-1: bad CDC descriptors [ 269.020879][ T5875] cdc_acm 3-1:0.219: invalid descriptor buffer length [ 269.175081][ T5878] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 269.325551][ T5878] usb 4-1: device descriptor read/64, error -71 [ 269.367868][ T5875] usb 3-1: USB disconnect, device number 9 [ 269.608798][ T5878] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 269.785547][ T5878] usb 4-1: device descriptor read/64, error -71 [ 269.859155][ T6610] netlink: 36 bytes leftover after parsing attributes in process `syz.4.145'. [ 269.872575][ T6610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.145'. [ 269.883128][ T6610] netlink: 36 bytes leftover after parsing attributes in process `syz.4.145'. [ 269.892483][ T6610] netlink: 36 bytes leftover after parsing attributes in process `syz.4.145'. [ 269.917202][ T5878] usb usb4-port1: attempt power cycle [ 270.305236][ T5878] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 270.425096][ T5878] usb 4-1: device descriptor read/8, error -71 [ 270.695339][ T5878] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 270.782989][ T6617] loop2: detected capacity change from 0 to 256 [ 270.808509][ T5878] usb 4-1: device descriptor read/8, error -71 [ 270.937671][ T5878] usb usb4-port1: unable to enumerate USB device [ 271.030599][ T6617] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 271.041513][ T6617] FAT-fs (loop2): Filesystem has been set read-only [ 271.048765][ T6617] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 271.059332][ T6617] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 271.089648][ T30] audit: type=1800 audit(1759081708.309:2): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.148" name="file1" dev="loop2" ino=1048609 res=0 errno=0 [ 271.596779][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 272.354268][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 273.166098][ T6639] tipc: Enabled bearer , priority 0 [ 273.196948][ T6639] syzkaller0: entered promiscuous mode [ 273.202872][ T6639] syzkaller0: entered allmulticast mode [ 273.269178][ T6645] fuse: Unknown parameter 'fd0x0000000000000003' [ 273.357069][ T6636] tipc: Resetting bearer [ 273.465407][ T6636] tipc: Disabling bearer [ 274.175887][ T2158] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 274.399827][ T2158] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.410297][ T2158] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.423810][ T2158] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.433345][ T2158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.892962][ T2158] usb 6-1: usb_control_msg returned -32 [ 274.899224][ T2158] usbtmc 6-1:16.0: can't read capabilities [ 275.270833][ T6672] netlink: 1 bytes leftover after parsing attributes in process `syz.5.157'. [ 275.281668][ T6672] xt_policy: neither incoming nor outgoing policy selected [ 275.386629][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.401162][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.718501][ T5875] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 275.942442][ T5875] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 275.951480][ T5875] usb 5-1: config 0 has no interface number 0 [ 275.958093][ T5875] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 275.969421][ T5875] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.979945][ T5875] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 275.989462][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.074214][ T2158] usb 6-1: USB disconnect, device number 2 [ 276.222845][ T5875] usb 5-1: config 0 descriptor?? [ 276.664553][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'. [ 276.966139][ T5875] uclogic 0003:28BD:0094.0002: pen parameters not found [ 276.973656][ T5875] uclogic 0003:28BD:0094.0002: interface is invalid, ignoring [ 277.001402][ T6677] netlink: 17 bytes leftover after parsing attributes in process `syz.4.165'. [ 277.011455][ T6677] netlink: zone id is out of range [ 277.017202][ T6677] netlink: zone id is out of range [ 277.022478][ T6677] netlink: zone id is out of range [ 277.028157][ T6677] netlink: zone id is out of range [ 277.033410][ T6677] netlink: zone id is out of range [ 277.044860][ T6677] netlink: zone id is out of range [ 277.050140][ T6677] netlink: zone id is out of range [ 277.057627][ T6677] netlink: zone id is out of range [ 277.062965][ T6677] netlink: zone id is out of range [ 277.068688][ T6677] netlink: zone id is out of range [ 277.286160][ T5875] usb 5-1: USB disconnect, device number 5 [ 279.218098][ T6714] syzkaller0: entered promiscuous mode [ 279.223776][ T6714] syzkaller0: entered allmulticast mode [ 280.216312][ T6733] loop2: detected capacity change from 0 to 512 [ 280.299369][ T6733] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 280.401941][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 280.463330][ T6733] EXT4-fs (loop2): 1 truncate cleaned up [ 280.494190][ T6733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.136841][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.101554][ T6744] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 283.825654][ T30] audit: type=1326 audit(1759081721.049:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.4.193" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffe539 code=0x0 [ 283.847325][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.181350][ T6794] 9pnet_fd: Insufficient options for proto=fd [ 284.209670][ T6793] tipc: Enabled bearer , priority 0 [ 284.294987][ T6793] syzkaller0: entered promiscuous mode [ 284.300731][ T6793] syzkaller0: entered allmulticast mode [ 284.421849][ T6791] tipc: Resetting bearer [ 284.539337][ T6791] tipc: Disabling bearer [ 285.868526][ T6808] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 285.981648][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.989287][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.207835][ T30] audit: type=1326 audit(1759081723.429:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 286.230556][ T30] audit: type=1326 audit(1759081723.429:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 286.256271][ T30] audit: type=1326 audit(1759081723.449:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 286.262532][ T6826] FAULT_INJECTION: forcing a failure. [ 286.262532][ T6826] name failslab, interval 1, probability 0, space 0, times 0 [ 286.279538][ T30] audit: type=1326 audit(1759081723.449:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 286.292429][ T6826] CPU: 1 UID: 0 PID: 6826 Comm: syz.0.203 Tainted: G W syzkaller #0 PREEMPT(none) [ 286.292590][ T6826] Tainted: [W]=WARN [ 286.292637][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.292711][ T6826] Call Trace: [ 286.292760][ T6826] [ 286.292810][ T6826] __dump_stack+0x26/0x30 [ 286.292973][ T6826] dump_stack_lvl+0x1df/0x270 [ 286.293153][ T6826] dump_stack+0x1e/0x25 [ 286.293306][ T6826] should_fail_ex+0x7dc/0x8a0 [ 286.293473][ T6826] should_failslab+0x15b/0x200 [ 286.293641][ T6826] __kmalloc_noprof+0x182/0x1310 [ 286.293814][ T6826] ? aa_label_asxprint+0xe1/0x2d0 [ 286.293981][ T6826] aa_label_asxprint+0xe1/0x2d0 [ 286.294120][ T6826] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 286.294292][ T6826] apparmor_lsmprop_to_secctx+0x134/0x370 [ 286.294485][ T6826] security_lsmprop_to_secctx+0xc5/0x570 [ 286.294665][ T6826] ? audit_log_task_context+0x88/0x370 [ 286.294827][ T6826] audit_log_task_context+0xb9/0x370 [ 286.294999][ T6826] audit_log_task+0x265/0x630 [ 286.295164][ T6826] audit_seccomp+0xd2/0x370 [ 286.295312][ T6826] __seccomp_filter+0x2c7c/0x3770 [ 286.295499][ T6826] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 286.295652][ T6826] ? kmsan_get_metadata+0xfb/0x160 [ 286.295808][ T6826] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 286.296008][ T6826] __secure_computing+0x13e/0x3c0 [ 286.296203][ T6826] syscall_trace_enter+0x179/0x630 [ 286.296365][ T6826] ? kmsan_get_metadata+0xfb/0x160 [ 286.296535][ T6826] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 286.296685][ T6826] __do_fast_syscall_32+0x97/0x150 [ 286.296835][ T6826] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 286.297031][ T6826] do_fast_syscall_32+0x38/0x80 [ 286.297176][ T6826] do_SYSENTER_32+0x1f/0x30 [ 286.297309][ T6826] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.297479][ T6826] RIP: 0023:0xf706e539 [ 286.297577][ T6826] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 286.297693][ T6826] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 286.297821][ T6826] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 286.297909][ T6826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.297988][ T6826] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.298073][ T6826] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 286.298154][ T6826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.298266][ T6826] [ 286.298587][ T6826] audit: error in audit_log_task_context [ 286.314604][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.315031][ T30] audit: type=1326 audit(1759081723.459:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 286.622701][ T30] audit: type=1326 audit(1759081723.459:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 286.645069][ T30] audit: type=1326 audit(1759081723.459:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 286.667269][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.677846][ T30] audit: type=1326 audit(1759081723.459:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 286.699855][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.405721][ T6837] binder: 6836:6837 ioctl c018ae85 80000440 returned -22 [ 287.538109][ T6834] loop3: detected capacity change from 0 to 2048 [ 287.672991][ T6834] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 287.782719][ T6840] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.980018][ T6842] loop0: detected capacity change from 0 to 24 [ 288.056038][ T6842] VFS: Can't find a romfs filesystem on dev loop0. [ 288.056038][ T6842] [ 288.175690][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 288.182105][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 288.265989][ T6834] ceph: No mds server is up or the cluster is laggy [ 288.309328][ T6846] netlink: 'syz.3.207': attribute type 9 has an invalid length. [ 288.317455][ T6846] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.207'. [ 288.656365][ T6850] tipc: Enabled bearer , priority 0 [ 288.727382][ T6850] syzkaller0: entered promiscuous mode [ 288.733236][ T6850] syzkaller0: entered allmulticast mode [ 288.904520][ T6851] FAULT_INJECTION: forcing a failure. [ 288.904520][ T6851] name failslab, interval 1, probability 0, space 0, times 0 [ 288.922106][ T6851] CPU: 0 UID: 0 PID: 6851 Comm: syz.2.211 Tainted: G W syzkaller #0 PREEMPT(none) [ 288.922282][ T6851] Tainted: [W]=WARN [ 288.922331][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 288.922408][ T6851] Call Trace: [ 288.922457][ T6851] [ 288.922506][ T6851] __dump_stack+0x26/0x30 [ 288.922675][ T6851] dump_stack_lvl+0x1df/0x270 [ 288.922845][ T6851] dump_stack+0x1e/0x25 [ 288.922998][ T6851] should_fail_ex+0x7dc/0x8a0 [ 288.923179][ T6851] should_failslab+0x15b/0x200 [ 288.923345][ T6851] kmem_cache_alloc_node_noprof+0xf3/0xf00 [ 288.923517][ T6851] ? __alloc_skb+0x1e0/0x7d0 [ 288.923668][ T6851] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 288.923822][ T6851] ? kmsan_get_metadata+0xfb/0x160 [ 288.923977][ T6851] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 288.924153][ T6851] __alloc_skb+0x1e0/0x7d0 [ 288.924318][ T6851] rtmsg_ifinfo_build_skb+0xab/0x420 [ 288.924522][ T6851] rtnetlink_event+0x24d/0x3d0 [ 288.924658][ T6851] ? __pfx_rtnetlink_event+0x10/0x10 [ 288.924783][ T6851] ? __pfx_rtnetlink_event+0x10/0x10 [ 288.924909][ T6851] raw_notifier_call_chain+0xe0/0x410 [ 288.925075][ T6851] call_netdevice_notifiers_info+0x1ac/0x2b0 [ 288.925243][ T6851] netif_set_mtu_ext+0x882/0xaf0 [ 288.925422][ T6851] netif_set_mtu+0x71/0x250 [ 288.925612][ T6851] dev_set_mtu+0x183/0x320 [ 288.925765][ T6851] dev_ifsioc+0x657/0x1930 [ 288.925964][ T6851] dev_ioctl+0xa12/0x1100 [ 288.926138][ T6851] ? kmsan_get_metadata+0xfb/0x160 [ 288.926307][ T6851] sock_do_ioctl+0x36a/0x480 [ 288.926464][ T6851] compat_sock_ioctl+0xcb8/0xff0 [ 288.926628][ T6851] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 288.926762][ T6851] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 288.926922][ T6851] ? kmsan_get_metadata+0xfb/0x160 [ 288.927085][ T6851] ? kmsan_get_metadata+0xfb/0x160 [ 288.927260][ T6851] ia32_sys_call+0x2d5f/0x4310 [ 288.927398][ T6851] __do_fast_syscall_32+0xb0/0x150 [ 288.927554][ T6851] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 288.927773][ T6851] do_fast_syscall_32+0x38/0x80 [ 288.927913][ T6851] do_SYSENTER_32+0x1f/0x30 [ 288.928067][ T6851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 288.928256][ T6851] RIP: 0023:0xf709e539 [ 288.928354][ T6851] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 288.928478][ T6851] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 288.928606][ T6851] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 288.928695][ T6851] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 288.928778][ T6851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 288.928858][ T6851] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 288.928956][ T6851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 288.929074][ T6851] [ 289.216003][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.240012][ T6851] tipc: Resetting bearer [ 289.353920][ T6849] tipc: Resetting bearer [ 289.461189][ T6849] tipc: Disabling bearer [ 290.441229][ T6860] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 290.841219][ T6873] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 291.264359][ T6884] FAULT_INJECTION: forcing a failure. [ 291.264359][ T6884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.283781][ T6884] CPU: 1 UID: 0 PID: 6884 Comm: syz.5.222 Tainted: G W syzkaller #0 PREEMPT(none) [ 291.283950][ T6884] Tainted: [W]=WARN [ 291.283998][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 291.284073][ T6884] Call Trace: [ 291.284119][ T6884] [ 291.284167][ T6884] __dump_stack+0x26/0x30 [ 291.284330][ T6884] dump_stack_lvl+0x1df/0x270 [ 291.284494][ T6884] dump_stack+0x1e/0x25 [ 291.284645][ T6884] should_fail_ex+0x7dc/0x8a0 [ 291.284822][ T6884] should_fail+0x2a/0x40 [ 291.284953][ T6884] should_fail_usercopy+0x2e/0x40 [ 291.285107][ T6884] _copy_from_user+0x33/0x100 [ 291.285277][ T6884] userio_char_write+0x9c/0x850 [ 291.285426][ T6884] ? kmsan_get_metadata+0xfb/0x160 [ 291.285596][ T6884] ? __pfx_userio_char_write+0x10/0x10 [ 291.285747][ T6884] vfs_writev+0xb34/0x1500 [ 291.285928][ T6884] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 291.286087][ T6884] ? kmsan_get_metadata+0xfb/0x160 [ 291.286243][ T6884] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 291.286422][ T6884] do_writev+0x1b5/0x580 [ 291.286573][ T6884] __ia32_sys_writev+0x9c/0xf0 [ 291.286753][ T6884] ia32_sys_call+0x2f6a/0x4310 [ 291.286884][ T6884] __do_fast_syscall_32+0xb0/0x150 [ 291.287025][ T6884] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 291.287218][ T6884] do_fast_syscall_32+0x38/0x80 [ 291.287371][ T6884] do_SYSENTER_32+0x1f/0x30 [ 291.287501][ T6884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.287790][ T6884] RIP: 0023:0xf7f34539 [ 291.287886][ T6884] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 291.288002][ T6884] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 291.288125][ T6884] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 291.288212][ T6884] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 291.288288][ T6884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.288375][ T6884] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 291.288456][ T6884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.288614][ T6884] [ 291.659341][ T6886] loop3: detected capacity change from 0 to 24 [ 291.845140][ T6886] VFS: Can't find a romfs filesystem on dev loop3. [ 291.845140][ T6886] [ 292.382580][ T6894] loop0: detected capacity change from 0 to 2048 [ 292.490691][ T6894] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 292.592473][ T6903] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.928221][ T2158] libceph: connect (1)[c::]:6789 error -101 [ 292.935143][ T2158] libceph: mon0 (1)[c::]:6789 connect error [ 292.936752][ T5875] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 293.023570][ T6907] netlink: 'syz.0.227': attribute type 9 has an invalid length. [ 293.031856][ T6907] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.227'. [ 293.137076][ T6894] ceph: No mds server is up or the cluster is laggy [ 293.162292][ T5875] usb 4-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 293.173309][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 293.184049][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 293.194210][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.208157][ T5875] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 293.220830][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.256355][ T2158] libceph: connect (1)[c::]:6789 error -101 [ 293.262812][ T2158] libceph: mon0 (1)[c::]:6789 connect error [ 293.389971][ T5875] usb 4-1: config 0 descriptor?? [ 293.402127][ T6902] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 293.425834][ T6902] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 293.777292][ T6902] binder: 6899:6902 ioctl c0306201 80000640 returned -22 [ 293.961335][ T6916] loop5: detected capacity change from 0 to 256 [ 294.057832][ T6902] loop3: detected capacity change from 0 to 1024 [ 294.129207][ T6916] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 294.166277][ T6902] hfsplus: failed to load attributes file [ 294.412559][ T6902] netlink: 80 bytes leftover after parsing attributes in process `syz.3.229'. [ 294.492539][ T6902] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 294.588892][ T6920] Zero length message leads to an empty skb [ 294.673159][ T6921] exFAT-fs (loop5): error, in sector 160, dentry 11 should be unused, but 0xc1 [ 294.682707][ T6921] exFAT-fs (loop5): Filesystem has been set read-only [ 294.711502][ T6923] FAULT_INJECTION: forcing a failure. [ 294.711502][ T6923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.725734][ T6923] CPU: 1 UID: 0 PID: 6923 Comm: syz.0.236 Tainted: G W syzkaller #0 PREEMPT(none) [ 294.725898][ T6923] Tainted: [W]=WARN [ 294.725947][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 294.726024][ T6923] Call Trace: [ 294.726073][ T6923] [ 294.726122][ T6923] __dump_stack+0x26/0x30 [ 294.726307][ T6923] dump_stack_lvl+0x1df/0x270 [ 294.726480][ T6923] dump_stack+0x1e/0x25 [ 294.726633][ T6923] should_fail_ex+0x7dc/0x8a0 [ 294.726803][ T6923] should_fail+0x2a/0x40 [ 294.726936][ T6923] should_fail_usercopy+0x2e/0x40 [ 294.727106][ T6923] _copy_to_user+0x35/0x120 [ 294.727270][ T6923] simple_read_from_buffer+0x1b2/0x340 [ 294.727453][ T6923] proc_fail_nth_read+0x1e0/0x2d0 [ 294.727613][ T6923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.727751][ T6923] vfs_read+0x27c/0xf90 [ 294.727897][ T6923] ? stack_depot_save_flags+0x35/0x7b0 [ 294.728037][ T6923] ? kmsan_get_metadata+0xfb/0x160 [ 294.728201][ T6923] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 294.728415][ T6923] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 294.728589][ T6923] __ia32_sys_read+0x1f9/0x4d0 [ 294.728776][ T6923] ia32_sys_call+0x18b8/0x4310 [ 294.728913][ T6923] __do_fast_syscall_32+0xb0/0x150 [ 294.729059][ T6923] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 294.729264][ T6923] do_fast_syscall_32+0x38/0x80 [ 294.729403][ T6923] do_SYSENTER_32+0x1f/0x30 [ 294.729536][ T6923] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.729708][ T6923] RIP: 0023:0xf706e539 [ 294.729806][ T6923] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 294.729917][ T6923] RSP: 002b:00000000f545e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 294.730044][ T6923] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f545e620 [ 294.730140][ T6923] RDX: 000000000000000f RSI: 00000000f7405ff4 RDI: 0000000000000000 [ 294.730230][ T6923] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 294.730309][ T6923] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 294.730387][ T6923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.730500][ T6923] [ 295.519966][ T24] usb 4-1: USB disconnect, device number 14 [ 295.949777][ T6932] netlink: 'syz.5.239': attribute type 39 has an invalid length. [ 295.992461][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.122150][ T6932] bridge_slave_0 (unregistering): left allmulticast mode [ 296.130059][ T6932] bridge_slave_0 (unregistering): left promiscuous mode [ 296.138003][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.379157][ T6945] 9pnet_fd: Insufficient options for proto=fd [ 296.887405][ T6947] loop2: detected capacity change from 0 to 1764 [ 297.472904][ T6947] loop2: detected capacity change from 0 to 2048 [ 297.671991][ T6947] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 297.781061][ T6962] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 297.789569][ T6962] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.250'. [ 297.798780][ T6947] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 297.798877][ T6947] UDF-fs: Scanning with blocksize 512 failed [ 297.908617][ T6947] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 298.918004][ T24] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 299.169793][ T24] usb 5-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 299.181521][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 299.192104][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 299.202523][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.217426][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 299.227294][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.438979][ T24] usb 5-1: config 0 descriptor?? [ 299.447696][ T6970] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 299.478120][ T6970] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 299.804005][ T6970] binder: 6968:6970 ioctl c0306201 80000640 returned -22 [ 299.867498][ T6987] 9pnet_fd: Insufficient options for proto=fd [ 300.088922][ T6991] netlink: 'syz.5.259': attribute type 10 has an invalid length. [ 300.105908][ T6970] loop4: detected capacity change from 0 to 1024 [ 300.169344][ T6991] team0: Port device netdevsim3 added [ 300.253140][ T6993] loop5: detected capacity change from 0 to 512 [ 300.298457][ T6970] hfsplus: failed to load attributes file [ 300.405673][ T6970] netlink: 80 bytes leftover after parsing attributes in process `syz.4.253'. [ 300.597996][ T11] usb 5-1: USB disconnect, device number 7 [ 300.621747][ T6993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.636108][ T6993] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.880254][ T6991] EXT4-fs error (device loop5): ext4_get_first_dir_block:3552: inode #12: comm syz.5.259: directory missing '..' [ 301.354936][ T11] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 301.414372][ T6160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.429931][ T7005] loop3: detected capacity change from 0 to 1764 [ 301.574969][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 301.604019][ T11] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.619422][ T11] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 301.634421][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 301.641402][ T11] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 301.650930][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.927688][ T11] usb 1-1: config 0 descriptor?? [ 302.187734][ T5878] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 302.455524][ T5878] usb 6-1: Using ep0 maxpacket: 32 [ 302.547977][ T5878] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 302.557797][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.677778][ T5878] usb 6-1: config 0 descriptor?? [ 302.965761][ T5878] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 303.021440][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 303.120135][ T5878] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 303.128172][ T5878] usb 6-1: media controller created [ 303.336005][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.683822][ T7028] loop3: detected capacity change from 0 to 256 [ 303.824340][ T5878] az6027: usb out operation failed. (-71) [ 303.870355][ T5878] az6027: usb out operation failed. (-71) [ 303.876656][ T5878] stb0899_attach: Driver disabled by Kconfig [ 303.882972][ T5878] az6027: no front-end attached [ 303.882972][ T5878] [ 303.943849][ T7028] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 304.011333][ T5878] az6027: usb out operation failed. (-71) [ 304.017670][ T5878] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 304.031715][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input6 [ 304.269474][ T5878] dvb-usb: schedule remote query interval to 400 msecs. [ 304.281977][ T5878] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 304.340946][ T11] usbhid 1-1:0.0: can't add hid device: -71 [ 304.349225][ T11] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 304.436505][ T5878] usb 6-1: USB disconnect, device number 3 [ 304.453843][ T11] usb 1-1: USB disconnect, device number 9 [ 305.029396][ T7037] fuse: Bad value for 'group_id' [ 305.035794][ T7037] fuse: Bad value for 'group_id' [ 305.111586][ T5878] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 305.253890][ T7040] comedi comedi0: Minor 47 could not be opened [ 305.419235][ T7040] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 305.925728][ T2158] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 306.149466][ T2158] usb 6-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 306.161725][ T2158] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 306.172504][ T2158] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 306.183144][ T2158] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.196858][ T2158] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 306.206780][ T2158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.359821][ T2158] usb 6-1: config 0 descriptor?? [ 306.369221][ T7046] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 306.405632][ T7046] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 306.574206][ T7057] FAULT_INJECTION: forcing a failure. [ 306.574206][ T7057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.589179][ T7057] CPU: 0 UID: 0 PID: 7057 Comm: syz.4.282 Tainted: G W syzkaller #0 PREEMPT(none) [ 306.589347][ T7057] Tainted: [W]=WARN [ 306.589396][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 306.589481][ T7057] Call Trace: [ 306.589538][ T7057] [ 306.589588][ T7057] __dump_stack+0x26/0x30 [ 306.589757][ T7057] dump_stack_lvl+0x1df/0x270 [ 306.589938][ T7057] dump_stack+0x1e/0x25 [ 306.590095][ T7057] should_fail_ex+0x7dc/0x8a0 [ 306.590262][ T7057] should_fail+0x2a/0x40 [ 306.590393][ T7057] should_fail_usercopy+0x2e/0x40 [ 306.590545][ T7057] _copy_from_user+0x33/0x100 [ 306.590707][ T7057] binder_ioctl_write_read+0x130e/0x17210 [ 306.590867][ T7057] ? binder_debug+0xd1/0x340 [ 306.591014][ T7057] ? filter_irq_stacks+0x49/0x190 [ 306.591173][ T7057] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 306.591330][ T7057] ? kmsan_get_metadata+0xfb/0x160 [ 306.591528][ T7057] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 306.591684][ T7057] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 306.591881][ T7057] binder_ioctl+0x593/0x33b0 [ 306.592016][ T7057] ? kmsan_get_metadata+0xfb/0x160 [ 306.592166][ T7057] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.592338][ T7057] ? do_vfs_ioctl+0x13a3/0x2900 [ 306.592513][ T7057] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.592682][ T7057] ? __pfx_binder_ioctl+0x10/0x10 [ 306.592817][ T7057] compat_ptr_ioctl+0x85/0xe0 [ 306.592971][ T7057] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 306.593121][ T7057] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 306.593286][ T7057] ? kmsan_get_metadata+0xfb/0x160 [ 306.593439][ T7057] ? kmsan_get_metadata+0xfb/0x160 [ 306.593615][ T7057] ia32_sys_call+0x2d5f/0x4310 [ 306.593750][ T7057] __do_fast_syscall_32+0xb0/0x150 [ 306.593896][ T7057] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 306.594102][ T7057] do_fast_syscall_32+0x38/0x80 [ 306.594240][ T7057] do_SYSENTER_32+0x1f/0x30 [ 306.594374][ T7057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.594553][ T7057] RIP: 0023:0xf6ffe539 [ 306.594647][ T7057] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 306.594759][ T7057] RSP: 002b:00000000f53ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 306.594884][ T7057] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 306.594981][ T7057] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.595065][ T7057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.595144][ T7057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 306.595223][ T7057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.595336][ T7057] [ 306.868678][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.879828][ T7057] binder: 7056:7057 ioctl c0306201 800001c0 returned -14 [ 307.093128][ T7046] binder: 7044:7046 ioctl c0306201 80000640 returned -22 [ 307.498156][ T7046] loop5: detected capacity change from 0 to 1024 [ 307.612464][ T7046] hfsplus: failed to load attributes file [ 307.696933][ T7046] netlink: 80 bytes leftover after parsing attributes in process `syz.5.276'. [ 307.933719][ T5878] usb 6-1: USB disconnect, device number 4 [ 308.627023][ T7077] FAULT_INJECTION: forcing a failure. [ 308.627023][ T7077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.640648][ T7077] CPU: 1 UID: 0 PID: 7077 Comm: syz.4.285 Tainted: G W syzkaller #0 PREEMPT(none) [ 308.640820][ T7077] Tainted: [W]=WARN [ 308.640868][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 308.640948][ T7077] Call Trace: [ 308.640998][ T7077] [ 308.641049][ T7077] __dump_stack+0x26/0x30 [ 308.641219][ T7077] dump_stack_lvl+0x1df/0x270 [ 308.641397][ T7077] dump_stack+0x1e/0x25 [ 308.641552][ T7077] should_fail_ex+0x7dc/0x8a0 [ 308.641726][ T7077] should_fail+0x2a/0x40 [ 308.641859][ T7077] should_fail_usercopy+0x2e/0x40 [ 308.642014][ T7077] _copy_from_user+0x33/0x100 [ 308.642179][ T7077] __se_sys_mount+0x287/0x7d0 [ 308.642387][ T7077] __ia32_sys_mount+0xe2/0x150 [ 308.642624][ T7077] ia32_sys_call+0x2c16/0x4310 [ 308.642768][ T7077] __do_fast_syscall_32+0xb0/0x150 [ 308.642916][ T7077] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 308.643117][ T7077] do_fast_syscall_32+0x38/0x80 [ 308.643258][ T7077] do_SYSENTER_32+0x1f/0x30 [ 308.643393][ T7077] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 308.643564][ T7077] RIP: 0023:0xf6ffe539 [ 308.643661][ T7077] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 308.643784][ T7077] RSP: 002b:00000000f53ac55c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 308.643913][ T7077] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 308.644091][ T7077] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000400 [ 308.644185][ T7077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 308.644268][ T7077] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 308.644351][ T7077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.644469][ T7077] [ 309.875462][ T7082] fuse: Bad value for 'group_id' [ 309.880807][ T7082] fuse: Bad value for 'group_id' [ 310.908673][ T7089] loop5: detected capacity change from 0 to 512 [ 310.922277][ T7089] ext4: Unknown parameter 'permit_directio' [ 311.771026][ T7098] tipc: Enabled bearer , priority 0 [ 311.808723][ T7098] syzkaller0: entered promiscuous mode [ 311.814775][ T7098] syzkaller0: entered allmulticast mode [ 311.962097][ T7097] tipc: Resetting bearer [ 312.070402][ T7097] tipc: Disabling bearer [ 312.669340][ T7111] fuse: Bad value for 'group_id' [ 312.680772][ T7111] fuse: Bad value for 'group_id' [ 313.224958][ T5878] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 313.463845][ T5878] usb 3-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 313.476600][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 313.487265][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 313.501556][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.518369][ T5878] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 313.528206][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.676384][ T5879] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 313.679714][ T5878] usb 3-1: config 0 descriptor?? [ 313.716793][ T7113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 313.774140][ T7113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 313.907024][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 313.963680][ T5879] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 313.973952][ T5879] usb 5-1: config 0 has no interface number 0 [ 313.981101][ T5879] usb 5-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 313.991337][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.099092][ T2158] usb 3-1: USB disconnect, device number 12 [ 314.144487][ T5879] usb 5-1: config 0 descriptor?? [ 314.221218][ T5879] usb-storage 5-1:0.125: USB Mass Storage device detected [ 314.290876][ C0] hrtimer: interrupt took 419556 ns [ 314.426064][ T5879] usb 5-1: USB disconnect, device number 8 [ 314.870449][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 314.920922][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 316.292155][ T7144] loop4: detected capacity change from 0 to 32768 [ 316.302369][ T7144] btrfs: Deprecated parameter 'usebackuproot' [ 316.309384][ T7144] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 316.319757][ T7144] btrfs: Deprecated parameter 'usebackuproot' [ 316.326306][ T7144] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 316.341073][ T7144] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.310 (7144) [ 316.382773][ T7144] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 316.393576][ T7144] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 316.793005][ T7144] BTRFS info (device loop4): rebuilding free space tree [ 316.825501][ T7144] BTRFS info (device loop4): enabling ssd optimizations [ 316.832967][ T7144] BTRFS info (device loop4): disabling tree log [ 316.840076][ T7144] BTRFS info (device loop4): enabling free space tree [ 316.847224][ T7144] BTRFS info (device loop4): force clearing of disk cache [ 316.855146][ T7144] BTRFS info (device loop4): enabling auto defrag [ 316.861771][ T7144] BTRFS info (device loop4): doing ref verification [ 316.875922][ T7144] BTRFS info (device loop4): trying to use backup root at mount time [ 316.884410][ T7144] BTRFS info (device loop4): max_inline set to 4096 [ 316.900607][ T7173] FAULT_INJECTION: forcing a failure. [ 316.900607][ T7173] name failslab, interval 1, probability 0, space 0, times 0 [ 316.915131][ T7173] CPU: 0 UID: 0 PID: 7173 Comm: syz.3.315 Tainted: G W syzkaller #0 PREEMPT(none) [ 316.915314][ T7173] Tainted: [W]=WARN [ 316.915363][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 316.915441][ T7173] Call Trace: [ 316.915490][ T7173] [ 316.915539][ T7173] __dump_stack+0x26/0x30 [ 316.915711][ T7173] dump_stack_lvl+0x1df/0x270 [ 316.915892][ T7173] dump_stack+0x1e/0x25 [ 316.916045][ T7173] should_fail_ex+0x7dc/0x8a0 [ 316.916219][ T7173] should_failslab+0x15b/0x200 [ 316.916400][ T7173] __kmalloc_cache_noprof+0xcb/0xed0 [ 316.916579][ T7173] ? drm_atomic_state_alloc+0xde/0x210 [ 316.916739][ T7173] ? kmsan_get_metadata+0xfb/0x160 [ 316.916901][ T7173] ? kmsan_get_metadata+0xfb/0x160 [ 316.917069][ T7173] drm_atomic_state_alloc+0xde/0x210 [ 316.917241][ T7173] drm_mode_atomic_ioctl+0x5f8/0x1900 [ 316.917415][ T7173] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.917616][ T7173] ? kmsan_get_metadata+0xfb/0x160 [ 316.917931][ T7173] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 316.918100][ T7173] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 316.918282][ T7173] ? kmsan_get_metadata+0xfb/0x160 [ 316.918441][ T7173] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.918620][ T7173] drm_ioctl_kernel+0x46d/0x590 [ 316.918759][ T7173] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 316.918952][ T7173] drm_ioctl+0xefa/0x1730 [ 316.919123][ T7173] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 316.919331][ T7173] ? kmsan_get_metadata+0xfb/0x160 [ 316.919487][ T7173] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.919661][ T7173] drm_compat_ioctl+0x1b0/0x690 [ 316.919827][ T7173] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.920017][ T7173] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 316.920161][ T7173] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 316.920339][ T7173] ? kmsan_get_metadata+0xfb/0x160 [ 316.920495][ T7173] ? kmsan_get_metadata+0xfb/0x160 [ 316.920665][ T7173] ia32_sys_call+0x2d5f/0x4310 [ 316.920801][ T7173] __do_fast_syscall_32+0xb0/0x150 [ 316.920956][ T7173] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 316.921156][ T7173] do_fast_syscall_32+0x38/0x80 [ 316.921310][ T7173] do_SYSENTER_32+0x1f/0x30 [ 316.921444][ T7173] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.921617][ T7173] RIP: 0023:0xf7fb5539 [ 316.921711][ T7173] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 316.921826][ T7173] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 316.921960][ T7173] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c03864bc [ 316.922051][ T7173] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.922139][ T7173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.922310][ T7173] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 316.922413][ T7173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.922531][ T7173] [ 317.417476][ T5815] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 318.309209][ T2158] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 318.446367][ T5878] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 318.540976][ T7191] FAULT_INJECTION: forcing a failure. [ 318.540976][ T7191] name failslab, interval 1, probability 0, space 0, times 0 [ 318.554542][ T7191] CPU: 1 UID: 0 PID: 7191 Comm: syz.5.321 Tainted: G W syzkaller #0 PREEMPT(none) [ 318.554724][ T7191] Tainted: [W]=WARN [ 318.554774][ T7191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 318.554855][ T7191] Call Trace: [ 318.554906][ T7191] [ 318.554954][ T7191] __dump_stack+0x26/0x30 [ 318.555117][ T7191] dump_stack_lvl+0x1df/0x270 [ 318.555290][ T7191] dump_stack+0x1e/0x25 [ 318.555444][ T7191] should_fail_ex+0x7dc/0x8a0 [ 318.555613][ T7191] should_failslab+0x15b/0x200 [ 318.555791][ T7191] kmem_cache_alloc_noprof+0xf0/0xec0 [ 318.555966][ T7191] ? vm_area_dup+0x5c/0xcc0 [ 318.556149][ T7191] ? kmsan_get_metadata+0xfb/0x160 [ 318.556323][ T7191] vm_area_dup+0x5c/0xcc0 [ 318.556489][ T7191] ? kmsan_get_metadata+0xfb/0x160 [ 318.556646][ T7191] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 318.556829][ T7191] __split_vma+0x2a3/0x13a0 [ 318.557005][ T7191] ? zone_statistics+0x16b/0x240 [ 318.557138][ T7191] ? kmsan_get_metadata+0xfb/0x160 [ 318.557292][ T7191] ? do_vmi_munmap+0x442/0x4b0 [ 318.557447][ T7191] ? kmsan_get_metadata+0xfb/0x160 [ 318.557607][ T7191] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 318.557787][ T7191] vms_gather_munmap_vmas+0x153a/0x1970 [ 318.557954][ T7191] ? stack_depot_save_flags+0x35/0x7b0 [ 318.558098][ T7191] ? kmsan_get_metadata+0xfb/0x160 [ 318.558252][ T7191] ? kmsan_get_metadata+0xfb/0x160 [ 318.558442][ T7191] do_vmi_align_munmap+0x303/0x800 [ 318.558668][ T7191] do_vmi_munmap+0x442/0x4b0 [ 318.558847][ T7191] do_munmap+0xcf/0x100 [ 318.559007][ T7191] mremap_to+0x3bb/0xdb0 [ 318.559215][ T7191] __se_sys_mremap+0x149c/0x24a0 [ 318.559488][ T7191] __ia32_sys_mremap+0xe2/0x150 [ 318.559671][ T7191] ia32_sys_call+0x217c/0x4310 [ 318.559817][ T7191] __do_fast_syscall_32+0xb0/0x150 [ 318.559959][ T7191] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 318.560158][ T7191] do_fast_syscall_32+0x38/0x80 [ 318.560291][ T7191] do_SYSENTER_32+0x1f/0x30 [ 318.560429][ T7191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.560613][ T7191] RIP: 0023:0xf7f34539 [ 318.560713][ T7191] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 318.560836][ T7191] RSP: 002b:00000000f540555c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 318.560965][ T7191] RAX: ffffffffffffffda RBX: 0000000080006000 RCX: 0000000000003000 [ 318.561062][ T7191] RDX: 0000000000003000 RSI: 0000000000000007 RDI: 0000000080ffd000 [ 318.561145][ T7191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.561223][ T7191] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 318.561305][ T7191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.561417][ T7191] [ 318.773818][ T5878] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 318.793364][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.801027][ T2158] usb 3-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 318.802708][ T5878] usb 4-1: config 0 has no interface number 0 [ 318.813305][ T2158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 318.822910][ T5878] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 318.823068][ T5878] usb 4-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 318.823272][ T5878] usb 4-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 318.823419][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.948659][ T2158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 318.959203][ T2158] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.973099][ T2158] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 318.983264][ T2158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.998130][ T2158] usb 3-1: config 0 descriptor?? [ 319.007977][ T7181] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 319.016370][ T7181] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 319.064971][ T5879] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 319.129683][ T5878] usb 4-1: config 0 descriptor?? [ 319.290299][ T2158] usb 3-1: USB disconnect, device number 13 [ 319.322152][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.338488][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.351697][ T5879] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 319.362254][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.553039][ T5879] usb 5-1: config 0 descriptor?? [ 319.761538][ T6033] udevd[6033]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.017438][ T5879] usbhid 5-1:0.0: can't add hid device: -71 [ 321.024124][ T5879] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 321.167557][ T7195] loop5: detected capacity change from 0 to 32768 [ 321.182883][ T7195] btrfs: Deprecated parameter 'usebackuproot' [ 321.191791][ T7195] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 321.201741][ T7195] btrfs: Deprecated parameter 'usebackuproot' [ 321.208390][ T7195] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 321.220504][ T7195] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.324 (7195) [ 321.240150][ T5879] usb 5-1: USB disconnect, device number 9 [ 321.301899][ T7195] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 321.313620][ T7195] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 321.338909][ T2158] usb 4-1: USB disconnect, device number 15 [ 321.640549][ T7195] BTRFS info (device loop5): rebuilding free space tree [ 321.689617][ T7195] BTRFS info (device loop5): enabling ssd optimizations [ 321.696979][ T7195] BTRFS info (device loop5): disabling tree log [ 321.703522][ T7195] BTRFS info (device loop5): enabling free space tree [ 321.710732][ T7195] BTRFS info (device loop5): force clearing of disk cache [ 321.718364][ T7195] BTRFS info (device loop5): enabling auto defrag [ 321.725248][ T7195] BTRFS info (device loop5): doing ref verification [ 321.732393][ T7195] BTRFS info (device loop5): trying to use backup root at mount time [ 321.740977][ T7195] BTRFS info (device loop5): max_inline set to 4096 [ 322.514924][ T5879] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 322.715434][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 322.726095][ T7220] loop3: detected capacity change from 0 to 32768 [ 322.736660][ T7220] btrfs: Deprecated parameter 'usebackuproot' [ 322.743028][ T7220] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 322.752847][ T7220] btrfs: Deprecated parameter 'usebackuproot' [ 322.759330][ T7220] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 322.825453][ T6160] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 322.826732][ T7220] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 7bceabb9-53b8-4d12-9239-3b27b9f87d55 [ 322.847786][ T7220] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.328 (7220) [ 322.865805][ T5879] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 322.874779][ T7220] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 322.875018][ T7220] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 322.895070][ T5879] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 322.903907][ T5879] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 322.919537][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 322.931677][ T5879] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 322.942041][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 322.952420][ T5879] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 322.962644][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 322.976074][ T5879] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 322.985596][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.057296][ T5879] usb 1-1: config 0 descriptor?? [ 323.303188][ T5879] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 323.395028][ T7220] BTRFS info (device loop3): rebuilding free space tree [ 323.477914][ T7220] BTRFS info (device loop3): enabling ssd optimizations [ 323.485778][ T7220] BTRFS info (device loop3): disabling tree log [ 323.492230][ T7220] BTRFS info (device loop3): enabling free space tree [ 323.499558][ T7220] BTRFS info (device loop3): force clearing of disk cache [ 323.507001][ T7220] BTRFS info (device loop3): enabling auto defrag [ 323.513602][ T7220] BTRFS info (device loop3): doing ref verification [ 323.520535][ T7220] BTRFS info (device loop3): trying to use backup root at mount time [ 323.533580][ T7220] BTRFS info (device loop3): max_inline set to 4096 [ 323.716628][ T5817] BTRFS info (device loop3): last unmount of filesystem 7bceabb9-53b8-4d12-9239-3b27b9f87d55 [ 323.742375][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.752852][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.968001][ T7245] netlink: 24 bytes leftover after parsing attributes in process `syz.5.329'. [ 324.361655][ T7252] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.329'. [ 324.371505][ T7252] net_ratelimit: 75 callbacks suppressed [ 324.371582][ T7252] openvswitch: netlink: Missing key (keys=40, expected=80) [ 324.715967][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.726220][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.943770][ T5878] usb 1-1: USB disconnect, device number 11 [ 324.973137][ T7248] loop2: detected capacity change from 0 to 32768 [ 324.983264][ T7248] btrfs: Deprecated parameter 'usebackuproot' [ 324.989758][ T7248] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 324.999526][ T7248] btrfs: Deprecated parameter 'usebackuproot' [ 325.006030][ T7248] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 325.019098][ T7248] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.333 (7248) [ 325.070086][ T7248] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 325.077128][ T5878] usblp0: removed [ 325.082073][ T7248] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 325.389137][ T7248] BTRFS info (device loop2): rebuilding free space tree [ 325.427722][ T7248] BTRFS info (device loop2): enabling ssd optimizations [ 325.435191][ T7248] BTRFS info (device loop2): disabling tree log [ 325.441650][ T7248] BTRFS info (device loop2): enabling free space tree [ 325.448889][ T7248] BTRFS info (device loop2): force clearing of disk cache [ 325.456526][ T7248] BTRFS info (device loop2): enabling auto defrag [ 325.463169][ T7248] BTRFS info (device loop2): doing ref verification [ 325.475763][ T7248] BTRFS info (device loop2): trying to use backup root at mount time [ 325.484053][ T7248] BTRFS info (device loop2): max_inline set to 4096 [ 325.505661][ T11] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 325.718265][ T5826] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 325.850335][ T11] usb 5-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 325.861200][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 325.874237][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 325.890840][ T11] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.907244][ T11] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 325.916768][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.094537][ T11] usb 5-1: config 0 descriptor?? [ 326.103371][ T7264] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 326.159842][ T7264] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 326.582002][ T2158] usb 5-1: USB disconnect, device number 10 [ 326.946264][ T11] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 327.230400][ T11] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 327.238876][ T11] usb 3-1: config 0 has no interface number 0 [ 327.245639][ T11] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 327.255824][ T11] usb 3-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 327.265951][ T11] usb 3-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 327.275323][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.547519][ T7294] netlink: 'syz.5.340': attribute type 7 has an invalid length. [ 327.557264][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.340'. [ 327.651682][ T11] usb 3-1: config 0 descriptor?? [ 328.077582][ T7298] FAULT_INJECTION: forcing a failure. [ 328.077582][ T7298] name failslab, interval 1, probability 0, space 0, times 0 [ 328.091166][ T7298] CPU: 1 UID: 0 PID: 7298 Comm: syz.4.342 Tainted: G W syzkaller #0 PREEMPT(none) [ 328.091342][ T7298] Tainted: [W]=WARN [ 328.091392][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 328.091473][ T7298] Call Trace: [ 328.091527][ T7298] [ 328.091577][ T7298] __dump_stack+0x26/0x30 [ 328.091747][ T7298] dump_stack_lvl+0x1df/0x270 [ 328.091927][ T7298] dump_stack+0x1e/0x25 [ 328.092073][ T7298] should_fail_ex+0x7dc/0x8a0 [ 328.092240][ T7298] should_failslab+0x15b/0x200 [ 328.092401][ T7298] __kmalloc_cache_noprof+0xcb/0xed0 [ 328.092570][ T7298] ? drm_atomic_state_alloc+0xde/0x210 [ 328.092722][ T7298] ? kmsan_get_metadata+0xfb/0x160 [ 328.092879][ T7298] ? kmsan_get_metadata+0xfb/0x160 [ 328.093064][ T7298] drm_atomic_state_alloc+0xde/0x210 [ 328.093224][ T7298] drm_mode_atomic_ioctl+0x5f8/0x1900 [ 328.093398][ T7298] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 328.093582][ T7298] ? kmsan_get_metadata+0xfb/0x160 [ 328.093738][ T7298] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 328.093979][ T7298] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 328.094160][ T7298] ? kmsan_get_metadata+0xfb/0x160 [ 328.094319][ T7298] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 328.094490][ T7298] drm_ioctl_kernel+0x46d/0x590 [ 328.094633][ T7298] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 328.094869][ T7298] drm_ioctl+0xefa/0x1730 [ 328.095130][ T7298] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 328.095348][ T7298] ? kmsan_get_metadata+0xfb/0x160 [ 328.095510][ T7298] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 328.095691][ T7298] drm_compat_ioctl+0x1b0/0x690 [ 328.095871][ T7298] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 328.096059][ T7298] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 328.096208][ T7298] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 328.096378][ T7298] ? kmsan_get_metadata+0xfb/0x160 [ 328.096534][ T7298] ? kmsan_get_metadata+0xfb/0x160 [ 328.096714][ T7298] ia32_sys_call+0x2d5f/0x4310 [ 328.096855][ T7298] __do_fast_syscall_32+0xb0/0x150 [ 328.097008][ T7298] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 328.097211][ T7298] do_fast_syscall_32+0x38/0x80 [ 328.097351][ T7298] do_SYSENTER_32+0x1f/0x30 [ 328.097487][ T7298] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.097660][ T7298] RIP: 0023:0xf6ffe539 [ 328.097758][ T7298] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 328.097875][ T7298] RSP: 002b:00000000f53ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 328.098018][ T7298] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c03864bc [ 328.098113][ T7298] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.098197][ T7298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.098282][ T7298] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 328.098368][ T7298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.098482][ T7298] [ 328.781990][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804b93e600: rx timeout, send abort [ 328.792870][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804b93e600: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 329.222059][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.546996][ T7294] loop5: detected capacity change from 0 to 4096 [ 329.657710][ T7294] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 329.754500][ T5879] usb 3-1: USB disconnect, device number 14 [ 330.352081][ T7294] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 330.439307][ T7294] ntfs3(loop5): mft corrupted [ 330.444321][ T7294] ntfs3(loop5): Failed to load $Extend (-22). [ 330.450903][ T7294] ntfs3(loop5): Failed to initialize $Extend. [ 330.687463][ T7311] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.347'. [ 330.702961][ T7311] openvswitch: netlink: Missing key (keys=40, expected=80) [ 330.787888][ T7309] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 331.275858][ T5879] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 331.498268][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 331.610719][ T5879] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 331.625262][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.633508][ T5879] usb 5-1: Product: syz [ 331.639846][ T5879] usb 5-1: Manufacturer: syz [ 331.644836][ T5879] usb 5-1: SerialNumber: syz [ 331.795015][ T5879] usb 5-1: config 0 descriptor?? [ 332.220382][ T5879] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 332.318558][ T7324] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 332.678991][ T5879] usb write operation failed. (-71) [ 332.721551][ T5879] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 332.736422][ T5879] dvbdev: DVB: registering new adapter (Terratec H7) [ 332.751601][ T5879] usb 5-1: media controller created [ 332.858042][ T5879] usb read operation failed. (-71) [ 332.898674][ T5879] usb write operation failed. (-71) [ 333.001149][ T5879] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 333.087316][ T5879] usb 5-1: USB disconnect, device number 11 [ 333.215103][ T11] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 333.432074][ T11] usb 1-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 333.442748][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 333.453212][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 333.466809][ T11] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.482207][ T11] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 333.491743][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.518008][ T7332] loop5: detected capacity change from 0 to 256 [ 333.558082][ T11] usb 1-1: config 0 descriptor?? [ 333.576401][ T7328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 333.646290][ T7328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 333.820566][ T7332] exFAT-fs (loop5): error, data size is invalid(34359738378) [ 333.959043][ T7328] binder: 7327:7328 ioctl c0306201 80000640 returned -22 [ 333.975146][ T5878] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 334.206594][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 334.264210][ T5878] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 334.332203][ T5878] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 334.336321][ T5879] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 334.342209][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.358521][ T5878] usb 4-1: Product: syz [ 334.363162][ T5878] usb 4-1: Manufacturer: syz [ 334.368530][ T5878] usb 4-1: SerialNumber: syz [ 334.389410][ T7328] loop0: detected capacity change from 0 to 1024 [ 334.511096][ T7328] hfsplus: failed to load attributes file [ 334.521051][ T5878] usb 4-1: config 0 descriptor?? [ 334.566392][ T5879] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 334.575177][ T5879] usb 5-1: config 0 has no interface number 0 [ 334.577887][ T5878] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 334.581812][ T5879] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 334.596083][ T5878] usb 4-1: setting power ON [ 334.596187][ T5878] dvb-usb: bulk message failed: -22 (2/0) [ 334.609943][ T7328] netlink: 80 bytes leftover after parsing attributes in process `syz.0.352'. [ 334.630922][ T5879] usb 5-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 334.641132][ T5879] usb 5-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 334.651016][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.738322][ T7334] dvb-usb: bulk message failed: -22 (3/0) [ 334.738422][ T7334] cxusb: i2c wr: len=80 is too big! [ 334.738422][ T7334] [ 334.738573][ T7334] FAULT_INJECTION: forcing a failure. [ 334.738573][ T7334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.738731][ T7334] CPU: 1 UID: 0 PID: 7334 Comm: syz.3.355 Tainted: G W syzkaller #0 PREEMPT(none) [ 334.738895][ T7334] Tainted: [W]=WARN [ 334.738946][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 334.739027][ T7334] Call Trace: [ 334.739077][ T7334] [ 334.739129][ T7334] __dump_stack+0x26/0x30 [ 334.739305][ T7334] dump_stack_lvl+0x1df/0x270 [ 334.739476][ T7334] dump_stack+0x1e/0x25 [ 334.739630][ T7334] should_fail_ex+0x7dc/0x8a0 [ 334.739800][ T7334] should_fail+0x2a/0x40 [ 334.739925][ T7334] should_fail_usercopy+0x2e/0x40 [ 334.740075][ T7334] _copy_from_user+0x33/0x100 [ 334.740282][ T7334] kstrtouint_from_user+0x75/0x140 [ 334.740428][ T7334] ? kmsan_get_metadata+0xfb/0x160 [ 334.740611][ T7334] ? proc_fail_nth_write+0x43/0x300 [ 334.740780][ T7334] ? vfs_write+0x487/0x15d0 [ 334.740978][ T7334] proc_fail_nth_write+0x61/0x300 [ 334.741138][ T7334] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 334.741304][ T7334] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 334.741467][ T7334] vfs_write+0x487/0x15d0 [ 334.741619][ T7334] ? stack_depot_save_flags+0x35/0x7b0 [ 334.741762][ T7334] ? kmsan_get_metadata+0xfb/0x160 [ 334.741823][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 334.741922][ T7334] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 334.742079][ T7334] ? kmsan_get_metadata+0xfb/0x160 [ 334.742258][ T7334] __ia32_sys_write+0x1f9/0x4d0 [ 334.742437][ T7334] ia32_sys_call+0x35bc/0x4310 [ 334.742573][ T7334] __do_fast_syscall_32+0xb0/0x150 [ 334.742715][ T7334] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 334.742927][ T7334] do_fast_syscall_32+0x38/0x80 [ 334.743067][ T7334] do_SYSENTER_32+0x1f/0x30 [ 334.743205][ T7334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.743385][ T7334] RIP: 0023:0xf7fb5539 [ 334.743486][ T7334] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 334.743611][ T7334] RSP: 002b:00000000f54a6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 334.743743][ T7334] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54a6620 [ 334.743837][ T7334] RDX: 0000000000000001 RSI: 00000000f7445ff4 RDI: 0000000000000000 [ 334.743924][ T7334] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 334.744003][ T7334] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 334.744089][ T7334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.744205][ T7334] [ 334.772721][ T5878] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 334.772879][ T5878] usb 4-1: media controller created [ 334.886261][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.952613][ T24] usb 1-1: USB disconnect, device number 12 [ 335.240914][ T5879] usb 5-1: config 0 descriptor?? [ 335.693134][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.873802][ T5878] usb 4-1: selecting invalid altsetting 6 [ 335.880067][ T5878] usb 4-1: digital interface selection failed (-22) [ 335.887709][ T5878] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 335.971315][ T7348] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.360'. [ 335.980971][ T7348] openvswitch: netlink: Missing key (keys=40, expected=80) [ 335.990290][ T7350] loop5: detected capacity change from 0 to 64 [ 336.057183][ T7346] loop3: detected capacity change from 0 to 2048 [ 336.097495][ T5878] usb 4-1: setting power OFF [ 336.103367][ T5878] dvb-usb: bulk message failed: -22 (2/0) [ 336.109698][ T5878] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 336.120444][ T5878] (NULL device *): no alternate interface [ 336.218482][ T7346] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 336.396996][ T7353] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.800403][ T24] libceph: connect (1)[c::]:6789 error -101 [ 336.807140][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 336.901159][ T7360] netlink: 'syz.3.359': attribute type 9 has an invalid length. [ 336.909677][ T7360] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.359'. [ 337.137877][ T7346] ceph: No mds server is up or the cluster is laggy [ 337.154161][ T24] libceph: connect (1)[c::]:6789 error -101 [ 337.169419][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 337.446295][ T7355] loop0: detected capacity change from 0 to 32768 [ 337.461887][ T7355] btrfs: Deprecated parameter 'usebackuproot' [ 337.468570][ T7355] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 337.476641][ T24] usb 5-1: USB disconnect, device number 12 [ 337.478752][ T7355] btrfs: Deprecated parameter 'usebackuproot' [ 337.491003][ T7355] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 337.513490][ T7355] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.362 (7355) [ 337.542777][ T7355] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 337.557336][ T7355] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 337.633948][ T5878] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 337.652327][ T5878] usb 4-1: USB disconnect, device number 17 [ 337.982896][ T7355] BTRFS info (device loop0): rebuilding free space tree [ 338.026722][ T7355] BTRFS info (device loop0): enabling ssd optimizations [ 338.034082][ T7355] BTRFS info (device loop0): disabling tree log [ 338.041127][ T7355] BTRFS info (device loop0): enabling free space tree [ 338.048351][ T7355] BTRFS info (device loop0): force clearing of disk cache [ 338.055888][ T7355] BTRFS info (device loop0): enabling auto defrag [ 338.062519][ T7355] BTRFS info (device loop0): doing ref verification [ 338.074236][ T7355] BTRFS info (device loop0): trying to use backup root at mount time [ 338.082641][ T7355] BTRFS info (device loop0): max_inline set to 4096 [ 338.266542][ T5821] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 338.486152][ T7362] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 339.568487][ T7396] loop2: detected capacity change from 0 to 256 [ 339.647577][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.369'. [ 339.670557][ T7398] FAULT_INJECTION: forcing a failure. [ 339.670557][ T7398] name failslab, interval 1, probability 0, space 0, times 0 [ 339.684259][ T7398] CPU: 1 UID: 0 PID: 7398 Comm: syz.4.370 Tainted: G W syzkaller #0 PREEMPT(none) [ 339.684436][ T7398] Tainted: [W]=WARN [ 339.684491][ T7398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 339.684578][ T7398] Call Trace: [ 339.684628][ T7398] [ 339.684678][ T7398] __dump_stack+0x26/0x30 [ 339.684844][ T7398] dump_stack_lvl+0x1df/0x270 [ 339.685014][ T7398] dump_stack+0x1e/0x25 [ 339.685165][ T7398] should_fail_ex+0x7dc/0x8a0 [ 339.685332][ T7398] should_failslab+0x15b/0x200 [ 339.685512][ T7398] __kmalloc_cache_noprof+0xcb/0xed0 [ 339.685693][ T7398] ? drm_atomic_state_alloc+0xde/0x210 [ 339.685850][ T7398] ? kmsan_get_metadata+0xfb/0x160 [ 339.686009][ T7398] ? kmsan_get_metadata+0xfb/0x160 [ 339.686178][ T7398] drm_atomic_state_alloc+0xde/0x210 [ 339.686343][ T7398] drm_mode_atomic_ioctl+0x5f8/0x1900 [ 339.686527][ T7398] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 339.686717][ T7398] ? kmsan_get_metadata+0xfb/0x160 [ 339.686877][ T7398] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 339.687038][ T7398] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 339.687195][ T7398] ? kmsan_get_metadata+0xfb/0x160 [ 339.687352][ T7398] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 339.687537][ T7398] drm_ioctl_kernel+0x46d/0x590 [ 339.687673][ T7398] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 339.687868][ T7398] drm_ioctl+0xefa/0x1730 [ 339.688032][ T7398] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 339.688240][ T7398] ? kmsan_get_metadata+0xfb/0x160 [ 339.688399][ T7398] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 339.688581][ T7398] drm_compat_ioctl+0x1b0/0x690 [ 339.688750][ T7398] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 339.688920][ T7398] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 339.689070][ T7398] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 339.689237][ T7398] ? kmsan_get_metadata+0xfb/0x160 [ 339.689393][ T7398] ? kmsan_get_metadata+0xfb/0x160 [ 339.689572][ T7398] ia32_sys_call+0x2d5f/0x4310 [ 339.689710][ T7398] __do_fast_syscall_32+0xb0/0x150 [ 339.689857][ T7398] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 339.690064][ T7398] do_fast_syscall_32+0x38/0x80 [ 339.690203][ T7398] do_SYSENTER_32+0x1f/0x30 [ 339.690339][ T7398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.690518][ T7398] RIP: 0023:0xf6ffe539 [ 339.690622][ T7398] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 339.690743][ T7398] RSP: 002b:00000000f53ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 339.690873][ T7398] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000c03864bc [ 339.690966][ T7398] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.691054][ T7398] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.691138][ T7398] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 339.691222][ T7398] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.691339][ T7398] [ 340.411237][ T7396] exFAT-fs (loop2): error, data size is invalid(34359738378) [ 340.939119][ T24] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 341.042023][ T7404] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.373'. [ 341.051603][ T7404] openvswitch: netlink: Missing key (keys=40, expected=80) [ 341.166797][ T24] usb 6-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 341.179678][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 341.190381][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 341.200650][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.213994][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 341.223822][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.249138][ T7407] FAULT_INJECTION: forcing a failure. [ 341.249138][ T7407] name failslab, interval 1, probability 0, space 0, times 0 [ 341.262494][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.3.375 Tainted: G W syzkaller #0 PREEMPT(none) [ 341.262675][ T7407] Tainted: [W]=WARN [ 341.262723][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 341.262802][ T7407] Call Trace: [ 341.262850][ T7407] [ 341.262899][ T7407] __dump_stack+0x26/0x30 [ 341.263072][ T7407] dump_stack_lvl+0x1df/0x270 [ 341.263411][ T7407] dump_stack+0x1e/0x25 [ 341.263563][ T7407] should_fail_ex+0x7dc/0x8a0 [ 341.263730][ T7407] should_failslab+0x15b/0x200 [ 341.263903][ T7407] __kmalloc_cache_noprof+0xcb/0xed0 [ 341.264079][ T7407] ? drm_atomic_state_alloc+0xde/0x210 [ 341.264237][ T7407] ? kmsan_get_metadata+0xfb/0x160 [ 341.264399][ T7407] ? kmsan_get_metadata+0xfb/0x160 [ 341.264569][ T7407] drm_atomic_state_alloc+0xde/0x210 [ 341.264724][ T7407] drm_mode_atomic_ioctl+0x5f8/0x1900 [ 341.264895][ T7407] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.265082][ T7407] ? kmsan_get_metadata+0xfb/0x160 [ 341.265237][ T7407] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 341.265401][ T7407] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 341.265557][ T7407] ? kmsan_get_metadata+0xfb/0x160 [ 341.265718][ T7407] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.265893][ T7407] drm_ioctl_kernel+0x46d/0x590 [ 341.266031][ T7407] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 341.266221][ T7407] drm_ioctl+0xefa/0x1730 [ 341.266386][ T7407] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 341.266596][ T7407] ? kmsan_get_metadata+0xfb/0x160 [ 341.266880][ T7407] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.267062][ T7407] drm_compat_ioctl+0x1b0/0x690 [ 341.267405][ T7407] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.267596][ T7407] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 341.267754][ T7407] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 341.267931][ T7407] ? kmsan_get_metadata+0xfb/0x160 [ 341.268085][ T7407] ? kmsan_get_metadata+0xfb/0x160 [ 341.268264][ T7407] ia32_sys_call+0x2d5f/0x4310 [ 341.268413][ T7407] __do_fast_syscall_32+0xb0/0x150 [ 341.268563][ T7407] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 341.268766][ T7407] do_fast_syscall_32+0x38/0x80 [ 341.268904][ T7407] do_SYSENTER_32+0x1f/0x30 [ 341.269041][ T7407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.269212][ T7407] RIP: 0023:0xf7fb5539 [ 341.269314][ T7407] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 341.269448][ T7407] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 341.269579][ T7407] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000c03864bc [ 341.269674][ T7407] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.269762][ T7407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.269844][ T7407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 341.269927][ T7407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.270044][ T7407] [ 341.663021][ T24] usb 6-1: config 0 descriptor?? [ 341.676044][ T7402] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 341.717935][ T7402] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 342.098610][ T7402] binder: 7401:7402 ioctl c0306201 80000640 returned -22 [ 342.176281][ T5878] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 342.364415][ T7402] loop5: detected capacity change from 0 to 1024 [ 342.380565][ T7412] Failed to get privilege flags for destination (handle=0x2:0x2) [ 342.393832][ T5878] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 342.402530][ T5878] usb 3-1: config 0 has no interface number 0 [ 342.409080][ T5878] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 342.419131][ T5878] usb 3-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 342.429408][ T5878] usb 3-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 342.439232][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.517091][ T5878] usb 3-1: config 0 descriptor?? [ 342.582991][ T7402] hfsplus: failed to load attributes file [ 342.667967][ T7402] netlink: 80 bytes leftover after parsing attributes in process `syz.5.372'. [ 342.810110][ T24] usb 6-1: USB disconnect, device number 5 [ 342.942027][ T7375] udevd[7375]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.531248][ T7419] loop4: detected capacity change from 0 to 2048 [ 343.606897][ T7419] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 343.759696][ T7422] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 343.991328][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 343.998057][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 344.051567][ T7419] ceph: No mds server is up or the cluster is laggy [ 344.203225][ T7431] netlink: 'syz.4.377': attribute type 9 has an invalid length. [ 344.218106][ T7431] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.377'. [ 344.259716][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 344.275146][ T7421] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 344.474371][ T5875] usb 3-1: USB disconnect, device number 15 [ 344.491733][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.503524][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 344.513242][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.669056][ T24] usb 6-1: config 0 descriptor?? [ 344.731659][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 345.161093][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 345.185503][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 345.205151][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 345.436507][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 345.516529][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 345.548375][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 345.616230][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 345.987397][ T7449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.386'. [ 346.070703][ T7450] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.386'. [ 346.080439][ T7450] openvswitch: netlink: Missing key (keys=40, expected=80) [ 346.118345][ T7429] loop5: detected capacity change from 0 to 1024 [ 346.180751][ T7429] EXT4-fs: Ignoring removed nomblk_io_submit option [ 346.189012][ T7429] EXT4-fs: Ignoring removed nomblk_io_submit option [ 346.422254][ T7429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.436984][ T7429] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.444356][ T7455] FAULT_INJECTION: forcing a failure. [ 346.444356][ T7455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.462021][ T7455] CPU: 1 UID: 0 PID: 7455 Comm: syz.2.388 Tainted: G W syzkaller #0 PREEMPT(none) [ 346.462196][ T7455] Tainted: [W]=WARN [ 346.462245][ T7455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.462326][ T7455] Call Trace: [ 346.462375][ T7455] [ 346.462426][ T7455] __dump_stack+0x26/0x30 [ 346.462601][ T7455] dump_stack_lvl+0x1df/0x270 [ 346.462783][ T7455] dump_stack+0x1e/0x25 [ 346.462942][ T7455] should_fail_ex+0x7dc/0x8a0 [ 346.463111][ T7455] should_fail+0x2a/0x40 [ 346.463242][ T7455] should_fail_usercopy+0x2e/0x40 [ 346.463400][ T7455] _copy_from_user+0x33/0x100 [ 346.463564][ T7455] kstrtouint_from_user+0x75/0x140 [ 346.463701][ T7455] ? kmsan_get_metadata+0xfb/0x160 [ 346.463874][ T7455] ? proc_fail_nth_write+0x43/0x300 [ 346.464018][ T7455] ? vfs_write+0x487/0x15d0 [ 346.464180][ T7455] proc_fail_nth_write+0x61/0x300 [ 346.464323][ T7455] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 346.464510][ T7455] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 346.464653][ T7455] vfs_write+0x487/0x15d0 [ 346.464817][ T7455] ? stack_depot_save_flags+0x35/0x7b0 [ 346.464959][ T7455] ? kmsan_get_metadata+0xfb/0x160 [ 346.465115][ T7455] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 346.465271][ T7455] ? kmsan_get_metadata+0xfb/0x160 [ 346.465445][ T7455] __ia32_sys_write+0x1f9/0x4d0 [ 346.465634][ T7455] ia32_sys_call+0x35bc/0x4310 [ 346.465768][ T7455] __do_fast_syscall_32+0xb0/0x150 [ 346.465916][ T7455] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 346.466110][ T7455] do_fast_syscall_32+0x38/0x80 [ 346.466249][ T7455] do_SYSENTER_32+0x1f/0x30 [ 346.466380][ T7455] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 346.466553][ T7455] RIP: 0023:0xf709e539 [ 346.466653][ T7455] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 346.466775][ T7455] RSP: 002b:00000000f548e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 346.466911][ T7455] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f548e620 [ 346.467006][ T7455] RDX: 0000000000000001 RSI: 00000000f7435ff4 RDI: 0000000000000000 [ 346.467090][ T7455] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 346.467172][ T7455] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 346.467255][ T7455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.467371][ T7455] [ 346.917769][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 346.929711][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 346.939163][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 346.947599][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 346.955942][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 346.966848][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 346.984244][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 346.999780][ T24] pwc: Registered as video103. [ 347.008491][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7 [ 347.032652][ T24] usb 6-1: USB disconnect, device number 6 [ 347.417715][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.424883][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.654978][ T5879] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 347.883345][ T5879] usb 4-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 347.895402][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 347.913573][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 347.923901][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.937379][ T5879] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 347.946816][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.990214][ T5879] usb 4-1: config 0 descriptor?? [ 348.005296][ T7463] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 348.015938][ T7463] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 348.032366][ T5878] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 348.037389][ T6160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.256962][ T5878] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 348.265676][ T5878] usb 3-1: config 0 has no interface number 0 [ 348.271997][ T5878] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 348.282189][ T5878] usb 3-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 348.292408][ T5878] usb 3-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 348.301883][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.365658][ T7463] binder: 7460:7463 ioctl c0306201 80000640 returned -22 [ 348.485233][ T7470] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 348.550645][ T7463] loop3: detected capacity change from 0 to 1024 [ 348.608303][ T5878] usb 3-1: config 0 descriptor?? [ 348.688314][ T7463] hfsplus: failed to load attributes file [ 348.793786][ T7463] netlink: 80 bytes leftover after parsing attributes in process `syz.3.390'. [ 349.043993][ T6033] udevd[6033]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.106895][ T24] usb 4-1: USB disconnect, device number 19 [ 349.487100][ T7479] fuse: Unknown parameter 'grou00000000000000000000' [ 350.487680][ T7484] loop4: detected capacity change from 0 to 32768 [ 350.497697][ T7484] btrfs: Deprecated parameter 'usebackuproot' [ 350.503977][ T7484] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 350.513746][ T7484] btrfs: Deprecated parameter 'usebackuproot' [ 350.520527][ T7484] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 350.532857][ T7484] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.397 (7484) [ 350.553993][ T7484] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 350.569503][ T7484] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 350.852215][ T7484] BTRFS info (device loop4): rebuilding free space tree [ 350.890799][ T7484] BTRFS info (device loop4): enabling ssd optimizations [ 350.898442][ T7484] BTRFS info (device loop4): disabling tree log [ 350.905169][ T7484] BTRFS info (device loop4): enabling free space tree [ 350.912284][ T7484] BTRFS info (device loop4): force clearing of disk cache [ 350.919851][ T7484] BTRFS info (device loop4): enabling auto defrag [ 350.926817][ T7484] BTRFS info (device loop4): doing ref verification [ 350.937594][ T7484] BTRFS info (device loop4): trying to use backup root at mount time [ 350.948655][ T7484] BTRFS info (device loop4): max_inline set to 4096 [ 351.069859][ T24] usb 3-1: USB disconnect, device number 16 [ 351.148824][ T5815] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 351.880635][ T7516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.401'. [ 351.975788][ T5878] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 352.019400][ T7518] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.401'. [ 352.029033][ T7518] openvswitch: netlink: Missing key (keys=40, expected=80) [ 352.233458][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.245310][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.255517][ T5878] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 352.265019][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.480752][ T7521] netlink: 96 bytes leftover after parsing attributes in process `syz.2.406'. [ 352.605802][ T5878] usb 4-1: config 0 descriptor?? [ 352.796075][ T5875] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 353.073503][ T5875] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 353.082277][ T5875] usb 3-1: config 0 has no interface number 0 [ 353.155784][ T11] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 353.186024][ T5875] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=b6.43 [ 353.195816][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.204161][ T5875] usb 3-1: Product: syz [ 353.208967][ T5875] usb 3-1: Manufacturer: syz [ 353.213891][ T5875] usb 3-1: SerialNumber: syz [ 353.241965][ T7529] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 353.282604][ T5875] usb 3-1: config 0 descriptor?? [ 353.385741][ T11] usb 6-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 353.396998][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 353.407475][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 353.417756][ T11] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.434451][ T11] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 353.445589][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.523225][ T24] usb 3-1: USB disconnect, device number 17 [ 353.669890][ T11] usb 6-1: config 0 descriptor?? [ 353.672357][ T7528] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 353.672835][ T7528] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 353.793387][ T5878] hid-led 0003:27B8:01ED.0003: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 353.803298][ T5878] hid-led 0003:27B8:01ED.0003: ThingM blink(1) v1 initialized [ 353.880814][ T7535] fuse: Unknown parameter 'grou00000000000000000000' [ 353.910950][ T7528] binder: 7527:7528 ioctl c0306201 80000640 returned -22 [ 354.183077][ T7528] loop5: detected capacity change from 0 to 1024 [ 354.290445][ T7528] hfsplus: failed to load attributes file [ 354.440307][ T7528] netlink: 80 bytes leftover after parsing attributes in process `syz.5.409'. [ 354.485631][ T24] usb 6-1: USB disconnect, device number 7 [ 355.385385][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 355.561541][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 355.570458][ T24] usb 3-1: config 0 has no interface number 0 [ 355.581832][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 355.593527][ T24] usb 3-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 355.603735][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 355.613222][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.791026][ T24] usb 3-1: config 0 descriptor?? [ 355.871030][ T7541] loop4: detected capacity change from 0 to 4096 [ 355.962515][ T7541] ntfs3(loop4): It is recommened to use chkdsk. [ 356.018193][ T7541] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 356.027247][ T7541] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 356.035720][ T7541] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 356.038868][ T5878] usb 4-1: USB disconnect, device number 20 [ 356.043936][ T7541] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 356.058301][ T7541] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00 [ 356.066800][ T7541] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00 [ 356.075317][ T7541] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00 [ 356.083727][ T7541] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00 [ 356.098246][ T7541] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00 [ 356.418282][ T7550] FAULT_INJECTION: forcing a failure. [ 356.418282][ T7550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.432537][ T7550] CPU: 0 UID: 0 PID: 7550 Comm: syz.3.416 Tainted: G W syzkaller #0 PREEMPT(none) [ 356.432712][ T7550] Tainted: [W]=WARN [ 356.432760][ T7550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 356.432844][ T7550] Call Trace: [ 356.432893][ T7550] [ 356.432942][ T7550] __dump_stack+0x26/0x30 [ 356.433134][ T7550] dump_stack_lvl+0x1df/0x270 [ 356.433309][ T7550] dump_stack+0x1e/0x25 [ 356.433465][ T7550] should_fail_ex+0x7dc/0x8a0 [ 356.433632][ T7550] should_fail+0x2a/0x40 [ 356.433767][ T7550] should_fail_usercopy+0x2e/0x40 [ 356.433930][ T7550] _copy_from_user+0x33/0x100 [ 356.434102][ T7550] __sys_sendto+0x2e5/0x720 [ 356.434264][ T7550] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 356.434421][ T7550] ? vfs_write+0x13e2/0x15d0 [ 356.434579][ T7550] ? kmsan_get_metadata+0xfb/0x160 [ 356.434770][ T7550] __ia32_sys_sendto+0x12f/0x200 [ 356.434964][ T7550] ia32_sys_call+0x2141/0x4310 [ 356.435099][ T7550] __do_fast_syscall_32+0xb0/0x150 [ 356.435246][ T7550] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 356.435447][ T7550] do_fast_syscall_32+0x38/0x80 [ 356.435586][ T7550] do_SYSENTER_32+0x1f/0x30 [ 356.435721][ T7550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 356.435891][ T7550] RIP: 0023:0xf7fb5539 [ 356.435988][ T7550] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 356.436118][ T7550] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 356.436248][ T7550] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 356.436345][ T7550] RDX: 0000000000000001 RSI: 0000000000008014 RDI: 0000000080000100 [ 356.436432][ T7550] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 356.436512][ T7550] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 356.436593][ T7550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 356.436712][ T7550] [ 356.725335][ T24] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 357.029993][ T6033] udevd[6033]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.166819][ T24] usb 5-1: config 0 has an invalid interface number: 181 but max is 0 [ 357.175651][ T24] usb 5-1: config 0 has no interface number 0 [ 357.182094][ T24] usb 5-1: too many endpoints for config 0 interface 181 altsetting 248: 241, using maximum allowed: 30 [ 357.193794][ T24] usb 5-1: config 0 interface 181 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 357.207611][ T24] usb 5-1: config 0 interface 181 has no altsetting 0 [ 357.307675][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 357.322230][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.332554][ T24] usb 5-1: Product: syz [ 357.337192][ T24] usb 5-1: Manufacturer: syz [ 357.342159][ T24] usb 5-1: SerialNumber: syz [ 357.385021][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.418'. [ 357.448494][ T7556] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.418'. [ 357.458976][ T7556] openvswitch: netlink: Missing key (keys=40, expected=80) [ 357.484896][ T24] usb 5-1: config 0 descriptor?? [ 357.809294][ T24] usb 5-1: USB disconnect, device number 13 [ 357.950119][ T7560] loop3: detected capacity change from 0 to 1024 [ 358.110744][ T7560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.252498][ T24] usb 3-1: USB disconnect, device number 18 [ 358.575975][ T7571] fuse: Unknown parameter 'grou00000000000000000000' [ 358.658474][ T5878] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 358.857481][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 358.961853][ T5878] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 358.972419][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.980984][ T5878] usb 6-1: Product: syz [ 358.985416][ T5878] usb 6-1: Manufacturer: syz [ 358.990365][ T5878] usb 6-1: SerialNumber: syz [ 359.084013][ T5878] usb 6-1: config 0 descriptor?? [ 359.294000][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.334128][ T5878] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 359.485211][ T24] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 359.747480][ T24] usb 1-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 359.758791][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 359.769501][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 359.784499][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.797134][ T5878] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 359.799921][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 359.819433][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.870871][ T5878] usb 6-1: USB disconnect, device number 8 [ 360.128783][ T24] usb 1-1: config 0 descriptor?? [ 360.136857][ T7574] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 360.176933][ T7574] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 360.264834][ T11] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 360.507954][ T7574] binder: 7573:7574 ioctl c0306201 80000640 returned -22 [ 360.516861][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.528724][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.538973][ T11] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 360.548345][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.623688][ T7574] loop0: detected capacity change from 0 to 1024 [ 360.685989][ T11] usb 5-1: config 0 descriptor?? [ 360.787701][ T7574] hfsplus: failed to load attributes file [ 360.970870][ T7574] netlink: 80 bytes leftover after parsing attributes in process `syz.0.424'. [ 361.341570][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.429'. [ 361.460509][ T7594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.431'. [ 361.676305][ T5879] usb 1-1: USB disconnect, device number 15 [ 361.727633][ T5878] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 361.842254][ T7598] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.431'. [ 361.842376][ T7598] openvswitch: netlink: Missing key (keys=40, expected=80) [ 361.979506][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 362.009153][ T11] hid-led 0003:27B8:01ED.0004: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 362.019576][ T11] hid-led 0003:27B8:01ED.0004: ThingM blink(1) v1 initialized [ 362.026744][ T5878] usb 4-1: config 0 has an invalid interface number: 218 but max is 0 [ 362.031463][ T5878] usb 4-1: config 0 has no interface number 0 [ 362.104987][ T5878] usb 4-1: New USB device found, idVendor=05ac, idProduct=35f9, bcdDevice=6d.89 [ 362.105143][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.105277][ T5878] usb 4-1: Product: syz [ 362.105374][ T5878] usb 4-1: Manufacturer: syz [ 362.105476][ T5878] usb 4-1: SerialNumber: syz [ 362.118801][ T5878] usb 4-1: config 0 descriptor?? [ 362.128822][ T5878] ipheth 4-1:0.218: Unable to find alternate settings interface [ 363.357552][ T7615] fuse: Unknown parameter 'group_i00000000000000000000' [ 363.395956][ T5879] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 363.553289][ T5879] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 363.553431][ T5879] usb 6-1: config 0 has no interface number 0 [ 363.553557][ T5879] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 363.553694][ T5879] usb 6-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 363.553894][ T5879] usb 6-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 363.554050][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.560089][ T5879] usb 6-1: config 0 descriptor?? [ 363.970463][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.417692][ T5879] usb 5-1: USB disconnect, device number 14 [ 364.550520][ T24] usb 4-1: USB disconnect, device number 21 [ 365.492605][ T7630] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'. [ 365.564820][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.443'. [ 365.912909][ T7635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.445'. [ 365.916035][ T5879] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 366.047606][ T11] usb 6-1: USB disconnect, device number 9 [ 366.243733][ T7637] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.445'. [ 366.254302][ T5879] usb 3-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 366.254465][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 366.254831][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 366.266169][ T7637] openvswitch: netlink: Missing key (keys=40, expected=80) [ 366.276470][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.307431][ T5879] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 366.316968][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.497397][ T7642] fuse: Unknown parameter 'group_i00000000000000000000' [ 366.552500][ T5879] usb 3-1: config 0 descriptor?? [ 366.561315][ T7634] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 366.572975][ T7634] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 366.870105][ T7634] binder: 7631:7634 ioctl c0306201 80000640 returned -22 [ 367.267757][ T7634] loop2: detected capacity change from 0 to 1024 [ 367.387199][ T7634] hfsplus: failed to load attributes file [ 367.485058][ T5878] usb 3-1: USB disconnect, device number 19 [ 367.599004][ T7645] loop4: detected capacity change from 0 to 4096 [ 367.641515][ T7645] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 367.645854][ T5879] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 367.730388][ T7656] FAULT_INJECTION: forcing a failure. [ 367.730388][ T7656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.744730][ T7656] CPU: 0 UID: 0 PID: 7656 Comm: syz.0.451 Tainted: G W syzkaller #0 PREEMPT(none) [ 367.744897][ T7656] Tainted: [W]=WARN [ 367.744949][ T7656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 367.745029][ T7656] Call Trace: [ 367.745079][ T7656] [ 367.745129][ T7656] __dump_stack+0x26/0x30 [ 367.745302][ T7656] dump_stack_lvl+0x1df/0x270 [ 367.745478][ T7656] dump_stack+0x1e/0x25 [ 367.745640][ T7656] should_fail_ex+0x7dc/0x8a0 [ 367.745808][ T7656] should_fail+0x2a/0x40 [ 367.745938][ T7656] should_fail_usercopy+0x2e/0x40 [ 367.746094][ T7656] _copy_to_user+0x35/0x120 [ 367.746263][ T7656] simple_read_from_buffer+0x1b2/0x340 [ 367.746449][ T7656] proc_fail_nth_read+0x1e0/0x2d0 [ 367.746618][ T7656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.746768][ T7656] vfs_read+0x27c/0xf90 [ 367.747027][ T7656] ? stack_depot_save_flags+0x35/0x7b0 [ 367.747176][ T7656] ? kmsan_get_metadata+0xfb/0x160 [ 367.747343][ T7656] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 367.747519][ T7656] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 367.747714][ T7656] __ia32_sys_read+0x1f9/0x4d0 [ 367.747906][ T7656] ia32_sys_call+0x18b8/0x4310 [ 367.748051][ T7656] __do_fast_syscall_32+0xb0/0x150 [ 367.748202][ T7656] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 367.748408][ T7656] do_fast_syscall_32+0x38/0x80 [ 367.748548][ T7656] do_SYSENTER_32+0x1f/0x30 [ 367.748692][ T7656] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 367.748872][ T7656] RIP: 0023:0xf706e539 [ 367.748971][ T7656] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 367.749099][ T7656] RSP: 002b:00000000f543d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 367.749235][ T7656] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f543d620 [ 367.749330][ T7656] RDX: 000000000000000f RSI: 00000000f7405ff4 RDI: 0000000000000000 [ 367.749408][ T7656] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 367.749481][ T7656] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 367.749558][ T7656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.749672][ T7656] [ 368.258909][ T5879] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 368.268819][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.282457][ T5879] usb 6-1: Product: syz [ 368.288606][ T5879] usb 6-1: Manufacturer: syz [ 368.293415][ T5879] usb 6-1: SerialNumber: syz [ 368.884974][ T5878] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 369.085870][ T5878] usb 5-1: device descriptor read/64, error -71 [ 369.333273][ T7666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.453'. [ 369.365131][ T5878] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 369.545597][ T5878] usb 5-1: device descriptor read/64, error -71 [ 369.661326][ T5878] usb usb5-port1: attempt power cycle [ 369.935208][ T5879] rtl8150 6-1:1.0: couldn't reset the device [ 369.942630][ T5879] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 370.084143][ T5878] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 370.108721][ T5879] usb 6-1: USB disconnect, device number 10 [ 370.275973][ T5878] usb 5-1: device descriptor read/8, error -71 [ 370.718508][ T7680] netlink: 24 bytes leftover after parsing attributes in process `syz.5.459'. [ 371.010311][ T7684] fuse: Unknown parameter 'group_i00000000000000000000' [ 371.049469][ T7680] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.459'. [ 371.059756][ T7680] openvswitch: netlink: Missing key (keys=40, expected=80) [ 371.340476][ T7690] fuse: Bad value for 'user_id' [ 371.350426][ T7690] fuse: Bad value for 'user_id' [ 371.425081][ T11] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 371.672694][ T11] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 371.681479][ T11] usb 4-1: config 0 has no interface number 0 [ 371.690669][ T11] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 371.721220][ T11] usb 4-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 371.731294][ T11] usb 4-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 371.740856][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.780085][ T11] usb 4-1: config 0 descriptor?? [ 371.937383][ T7695] FAULT_INJECTION: forcing a failure. [ 371.937383][ T7695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.951956][ T7695] CPU: 1 UID: 0 PID: 7695 Comm: syz.2.464 Tainted: G W syzkaller #0 PREEMPT(none) [ 371.952125][ T7695] Tainted: [W]=WARN [ 371.952174][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 371.952254][ T7695] Call Trace: [ 371.952303][ T7695] [ 371.952362][ T7695] __dump_stack+0x26/0x30 [ 371.952530][ T7695] dump_stack_lvl+0x1df/0x270 [ 371.952698][ T7695] dump_stack+0x1e/0x25 [ 371.952846][ T7695] should_fail_ex+0x7dc/0x8a0 [ 371.953012][ T7695] should_fail+0x2a/0x40 [ 371.953143][ T7695] should_fail_usercopy+0x2e/0x40 [ 371.953299][ T7695] _copy_from_iter+0x1d9/0x3350 [ 371.953476][ T7695] ? kmsan_get_metadata+0xfb/0x160 [ 371.953637][ T7695] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 371.953816][ T7695] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 371.954020][ T7695] netlink_sendmsg+0xc64/0x1250 [ 371.954230][ T7695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.954411][ T7695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.954589][ T7695] __sock_sendmsg+0x333/0x3d0 [ 371.954737][ T7695] ____sys_sendmsg+0x7e0/0xd80 [ 371.954958][ T7695] ___sys_sendmsg+0x271/0x3b0 [ 371.955145][ T7695] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 371.955317][ T7695] ? __rcu_read_unlock+0x6d/0xd0 [ 371.955466][ T7695] ? __fget_files+0x3b4/0x4a0 [ 371.955640][ T7695] ? __fget_files+0x3b9/0x4a0 [ 371.955818][ T7695] ? kmsan_get_metadata+0xfb/0x160 [ 371.955976][ T7695] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 371.956150][ T7695] __sys_sendmsg+0x1aa/0x300 [ 371.956362][ T7695] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 371.956564][ T7695] ia32_sys_call+0x3f6c/0x4310 [ 371.956698][ T7695] __do_fast_syscall_32+0xb0/0x150 [ 371.956844][ T7695] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 371.957042][ T7695] do_fast_syscall_32+0x38/0x80 [ 371.957185][ T7695] do_SYSENTER_32+0x1f/0x30 [ 371.957319][ T7695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 371.957502][ T7695] RIP: 0023:0xf709e539 [ 371.957601][ T7695] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 371.957720][ T7695] RSP: 002b:00000000f548e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 371.957848][ T7695] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800009c0 [ 371.957942][ T7695] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 371.958026][ T7695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 371.958107][ T7695] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 371.958193][ T7695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 371.958310][ T7695] [ 372.224832][ T5875] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 372.532630][ T5875] usb 6-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 372.543989][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 372.554336][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 372.564789][ T5875] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.582095][ T5875] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 372.592537][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.814037][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.891136][ T5875] usb 6-1: config 0 descriptor?? [ 372.906904][ T7696] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 372.955699][ T7696] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 373.346955][ T7696] binder: 7693:7696 ioctl c0306201 80000640 returned -22 [ 373.565896][ T5879] usb 4-1: USB disconnect, device number 22 [ 373.571545][ T7696] loop5: detected capacity change from 0 to 1024 [ 373.589615][ T5875] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 373.670885][ T7696] hfsplus: failed to load attributes file [ 373.732303][ T7711] netlink: 1 bytes leftover after parsing attributes in process `syz.0.470'. [ 373.820639][ T5875] usb 5-1: unable to get BOS descriptor or descriptor too short [ 373.855657][ T5893] usb 6-1: USB disconnect, device number 11 [ 373.857753][ T5875] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1023 [ 373.872176][ T5875] usb 5-1: config 1 interface 0 has no altsetting 0 [ 373.991859][ T5875] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 374.001611][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.013381][ T5875] usb 5-1: Product: syz [ 374.018937][ T5875] usb 5-1: Manufacturer: 랐⌐㋼壟ꜜ棎ꊗﬞ驍뒎㞩耺暻䦳⬓윹푆瑉操룦ᯆ㊝⚻묃ꓮ䧖ᣌ쑬︍ᲈ퀪橉⚳㵜暲餁뮐㎍Ꚏ㱿慍椿甜ⷀㅦ휽퉤笟﷈悡떰㟗╔謃ᗧﲳ壠䷧㕼븉➳綧肤䓴Ᶎ䟷䌷ꀿ鴻ᓲ弰닠楑졶諆떢坝슊鏼壘繨⩿䳳鷈剽꺂汋쾿⢎諰稨뻕뙫㻾뤑䧌簒Ɜ똕泺㻆 [ 374.054332][ T5875] usb 5-1: SerialNumber: syz [ 374.226819][ T7708] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 374.263744][ T7716] loop0: detected capacity change from 0 to 256 [ 374.741375][ T5875] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 374.777539][ T7719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.473'. [ 374.806638][ T5875] usb 5-1: USB disconnect, device number 19 [ 374.839644][ T7719] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.473'. [ 374.850371][ T7719] openvswitch: netlink: Missing key (keys=40, expected=80) [ 374.898145][ T5875] usblp0: removed [ 375.160011][ T7722] fuse: Unknown parameter 'group_id00000000000000000000' [ 376.189591][ T5879] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 376.416599][ T5879] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 376.426066][ T5879] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 376.435342][ T5879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.446002][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 376.455335][ T5879] usb 5-1: config 1 has no interface number 0 [ 376.461659][ T5879] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 376.476346][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.710675][ T5879] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 376.919415][ T5879] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 376.928710][ T5879] snd_usb_pod 5-1:1.1: invalid control EP [ 376.935407][ T5879] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 376.942429][ T5879] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 376.952453][ T5879] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 377.269926][ T5879] usb 5-1: USB disconnect, device number 20 [ 377.426800][ T7754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.486'. [ 377.436759][ T7754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.486'. [ 377.446285][ T7754] netlink: 'syz.3.486': attribute type 4 has an invalid length. [ 377.457013][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 377.633396][ T24] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 377.642313][ T24] usb 1-1: config 0 has no interface number 0 [ 377.648877][ T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 377.659042][ T24] usb 1-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 377.669511][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 377.679508][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.691907][ T5893] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 377.757692][ T24] usb 1-1: config 0 descriptor?? [ 377.924355][ T5893] usb 3-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 377.935458][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 377.945848][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 377.956088][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.969647][ T5893] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 377.979205][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.160693][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.601114][ T7758] loop5: detected capacity change from 0 to 1024 [ 378.656560][ T7759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.487'. [ 378.731745][ T5893] usb 3-1: config 0 descriptor?? [ 378.736104][ T7759] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.487'. [ 378.747061][ T7759] openvswitch: netlink: Missing key (keys=40, expected=80) [ 378.759081][ T7753] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 378.781221][ T7753] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 378.875925][ T7758] ===================================================== [ 378.883378][ T7758] BUG: KMSAN: uninit-value in hfsplus_lookup+0x674/0xf70 [ 378.890855][ T7758] hfsplus_lookup+0x674/0xf70 [ 378.895874][ T7758] __lookup_slow+0x563/0x760 [ 378.900628][ T7758] lookup_slow+0x6a/0xd0 [ 378.905355][ T7758] walk_component+0x444/0x650 [ 378.910516][ T7758] path_lookupat+0x251/0x6b0 [ 378.915484][ T7758] filename_lookup+0x2bd/0x800 [ 378.920942][ T7758] user_path_at+0x91/0x3d0 [ 378.932578][ T7758] __se_sys_mount+0x645/0x7d0 [ 378.940277][ T7758] __ia32_sys_mount+0xe2/0x150 [ 378.946054][ T7758] ia32_sys_call+0x2c16/0x4310 [ 378.950985][ T7758] __do_fast_syscall_32+0xb0/0x150 [ 378.956388][ T7758] do_fast_syscall_32+0x38/0x80 [ 378.961664][ T7758] do_SYSENTER_32+0x1f/0x30 [ 378.966645][ T7758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 378.973462][ T7758] [ 378.975993][ T7758] Uninit was created at: [ 378.980536][ T7758] __alloc_frozen_pages_noprof+0x689/0xf00 [ 378.986899][ T7758] alloc_pages_mpol+0x328/0x860 [ 378.991921][ T7758] alloc_frozen_pages_noprof+0xf7/0x200 [ 378.999330][ T7758] allocate_slab+0x24d/0x1220 [ 379.004357][ T7758] ___slab_alloc+0xff3/0x3470 [ 379.009732][ T7758] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 379.016121][ T7758] hfsplus_alloc_inode+0x5a/0xd0 [ 379.021418][ T7758] alloc_inode+0x87/0x4a0 [ 379.030860][ T7758] iget_locked+0x239/0x12d0 [ 379.036937][ T7758] hfsplus_iget+0x5c/0xb80 [ 379.041524][ T7758] hfsplus_btree_open+0x128/0x1cf0 [ 379.046966][ T7758] hfsplus_fill_super+0x1161/0x2730 [ 379.052351][ T7758] get_tree_bdev_flags+0x6e6/0x920 [ 379.058229][ T7758] get_tree_bdev+0x38/0x50 [ 379.062873][ T7758] hfsplus_get_tree+0x35/0x40 [ 379.068033][ T7758] vfs_get_tree+0xb3/0x5c0 [ 379.072719][ T7758] do_new_mount+0x733/0x1420 [ 379.077751][ T7758] path_mount+0x6db/0x1e90 [ 379.082340][ T7758] __se_sys_mount+0x6eb/0x7d0 [ 379.087609][ T7758] __ia32_sys_mount+0xe2/0x150 [ 379.092654][ T7758] ia32_sys_call+0x2c16/0x4310 [ 379.097779][ T7758] __do_fast_syscall_32+0xb0/0x150 [ 379.103079][ T7758] do_fast_syscall_32+0x38/0x80 [ 379.108267][ T7758] do_SYSENTER_32+0x1f/0x30 [ 379.112941][ T7758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 379.119797][ T7758] [ 379.122324][ T7758] CPU: 0 UID: 0 PID: 7758 Comm: syz.5.488 Tainted: G W syzkaller #0 PREEMPT(none) [ 379.137783][ T7758] Tainted: [W]=WARN [ 379.142233][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 379.145247][ T7753] binder: 7751:7753 ioctl c0306201 80000640 returned -22 [ 379.154984][ T7758] ===================================================== [ 379.168250][ T7758] Disabling lock debugging due to kernel taint [ 379.174513][ T7758] Kernel panic - not syncing: kmsan.panic set ... [ 379.181066][ T7758] CPU: 0 UID: 0 PID: 7758 Comm: syz.5.488 Tainted: G B W syzkaller #0 PREEMPT(none) [ 379.192050][ T7758] Tainted: [B]=BAD_PAGE, [W]=WARN [ 379.197177][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 379.207451][ T7758] Call Trace: [ 379.210835][ T7758] [ 379.213864][ T7758] __dump_stack+0x26/0x30 [ 379.218482][ T7758] dump_stack_lvl+0x53/0x270 [ 379.223271][ T7758] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 379.229420][ T7758] dump_stack+0x1e/0x25 [ 379.233785][ T7758] vpanic+0x361/0xc50 [ 379.237989][ T7758] panic+0x15d/0x160 [ 379.242161][ T7758] kmsan_report+0x31c/0x320 [ 379.246914][ T7758] ? __msan_warning+0x1b/0x30 [ 379.251773][ T7758] ? hfsplus_lookup+0x674/0xf70 [ 379.256826][ T7758] ? __lookup_slow+0x563/0x760 [ 379.261768][ T7758] ? lookup_slow+0x6a/0xd0 [ 379.266428][ T7758] ? walk_component+0x444/0x650 [ 379.271453][ T7758] ? path_lookupat+0x251/0x6b0 [ 379.276481][ T7758] ? filename_lookup+0x2bd/0x800 [ 379.281677][ T7758] ? user_path_at+0x91/0x3d0 [ 379.286457][ T7758] ? __se_sys_mount+0x645/0x7d0 [ 379.291524][ T7758] ? __ia32_sys_mount+0xe2/0x150 [ 379.296685][ T7758] ? ia32_sys_call+0x2c16/0x4310 [ 379.301837][ T7758] ? __do_fast_syscall_32+0xb0/0x150 [ 379.307399][ T7758] ? do_fast_syscall_32+0x38/0x80 [ 379.312794][ T7758] ? do_SYSENTER_32+0x1f/0x30 [ 379.317680][ T7758] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 379.324399][ T7758] ? kmsan_get_metadata+0xfb/0x160 [ 379.329960][ T7758] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 379.336398][ T7758] ? __msan_memcpy+0x108/0x1c0 [ 379.341427][ T7758] ? hfsplus_bnode_read+0x6f8/0x990 [ 379.347031][ T7758] ? kmsan_get_metadata+0xfb/0x160 [ 379.352328][ T7758] ? kmsan_get_metadata+0xfb/0x160 [ 379.357626][ T7758] __msan_warning+0x1b/0x30 [ 379.362362][ T7758] hfsplus_lookup+0x674/0xf70 [ 379.367245][ T7758] ? __d_lookup_rcu_op_compare+0x656/0x6a0 [ 379.373336][ T7758] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 379.380027][ T7758] ? kmsan_get_metadata+0xfb/0x160 [ 379.385401][ T7758] ? __pfx_hfsplus_lookup+0x10/0x10 [ 379.390777][ T7758] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 379.396764][ T7758] ? __pfx_hfsplus_lookup+0x10/0x10 [ 379.402146][ T7758] __lookup_slow+0x563/0x760 [ 379.406938][ T7758] lookup_slow+0x6a/0xd0 [ 379.411438][ T7758] walk_component+0x444/0x650 [ 379.416278][ T7758] ? kmsan_get_metadata+0xfb/0x160 [ 379.421609][ T7758] path_lookupat+0x251/0x6b0 [ 379.426464][ T7758] filename_lookup+0x2bd/0x800 [ 379.431402][ T7758] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 379.437581][ T7758] ? strncpy_from_user+0x255/0x470 [ 379.443021][ T7758] ? kmsan_get_metadata+0xfb/0x160 [ 379.448321][ T7758] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 379.454442][ T7758] user_path_at+0x91/0x3d0 [ 379.459010][ T7758] ? __se_sys_mount+0x622/0x7d0 [ 379.464040][ T7758] __se_sys_mount+0x645/0x7d0 [ 379.468938][ T7758] __ia32_sys_mount+0xe2/0x150 [ 379.473916][ T7758] ia32_sys_call+0x2c16/0x4310 [ 379.478845][ T7758] __do_fast_syscall_32+0xb0/0x150 [ 379.484114][ T7758] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 379.490035][ T7758] do_fast_syscall_32+0x38/0x80 [ 379.495034][ T7758] do_SYSENTER_32+0x1f/0x30 [ 379.499683][ T7758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 379.506182][ T7758] RIP: 0023:0xf7f34539 [ 379.510458][ T7758] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 379.530666][ T7758] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 379.539325][ T7758] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000180 [ 379.547461][ T7758] RDX: 00000000800001c0 RSI: 0000000000008000 RDI: 0000000080000940 [ 379.555850][ T7758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 379.564110][ T7758] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 379.572270][ T7758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.580384][ T7758] [ 379.583812][ T7758] Kernel Offset: disabled [ 379.588305][ T7758] Rebooting in 86400 seconds..