last executing test programs: 1m52.474838086s ago: executing program 3 (id=4): r0 = openat(0xffffffffffffffff, 0x0, 0x210000, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x2, 0x0, 0x6}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x3, 0x980001}) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r2 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "6196b2", 0x48, 0x11, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {0x4e24, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "1634a8ccea30783d48ea69d3f705181c93b9d3cd4cda3f7d", "7417ab23cc9d84fc206e1e59bb2042f4ce5fb8e9adeb5b8d76d00f0000228d79"}}}}}}}, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)={0x14, r7, 0xd, 0x70bd26}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x78, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4806}, 0x0) write$9p(r4, &(0x7f0000000100)="d5", 0x1) write$cgroup_subtree(r4, &(0x7f0000000180)={[{0x2d, 'net_cls'}]}, 0x9) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) read$msr(r4, &(0x7f0000000140)=""/136, 0x88) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$uac2(0x98898155621c81d2, 0xfd, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x241, 0x7, 0x0, 0x2, 0xff, 0x80}, 0x29, &(0x7f0000000280)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x9, 0xe9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x100, 0x2, 0xe, 0x40}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x9, 0x9, 0x6, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x0, 0x40}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x827}}, {0xad, &(0x7f0000000380)=@string={0xad, 0x3, "2f41e08ee02437fa02f35fcfcbb673e96a4da9d0f15e82f262c2a004ac077b207fb92a719aa8a33a947f5680020a0b0b6bdcf404f874b2c185b55760cc7eaef621f4af83ab71e66e29cc1d0cf21e5abf61306fe6bc751d69085433b5da1a428ff715dd617e367c03455c991827ec3f8e09df72798c272e2d313898b19dbd03cd9873805207f731016f981e83dd6bcee238d27e673e9dc4c065aafc60a491c39c469a511dc605bd433671e9"}}]}) pwrite64(r8, &(0x7f0000000000)="16b59d13ef9e9e7f11a07703ce9ee456feb60343beda86931522725746cc4c06d485d0a84ff12425b3e221b31fb6f3afd39e0de219f0f93e0228e31078190ef81b963fd01e3f4a894a6c8fc7061a144164c2b59c4303763043c3ba1e1ec332728a6edbab208f0d1d07f2483cf8d1bad25e0e010504024d8d3b9be11722bf2ceaf94828df2737b3070dbccacc272e7b36189db13568f87e7bbef8074c1f655ced8814d17a", 0xa4, 0x5) ioctl$EVIOCGMASK(r8, 0x40045b17, 0x0) 1m49.744216637s ago: executing program 3 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/vlan_stats_enabled\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=0000000000000000', @ANYRESDEC=0x0]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='b '], 0x9) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) fchown(0xffffffffffffffff, 0x0, 0xee01) listen(0xffffffffffffffff, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000002c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xa8, 0x3a, '#:', 0x3a, '\r\x90\xc5Y:LT\xc3\x8a\x83p\x97(\f-\x95(\xa3\x112\xb5\t\xa1\xc0CR\x87{w\xaa\x02D\xd7\xcb\xb45L', 0x3a, './file0'}, 0x4e) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x200000000000, 0x1, 0x8, 0x7f, 0x3}) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/179}, 0xbb, 0x0, 0x2800) 1m48.338553087s ago: executing program 3 (id=14): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0xffe0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[], 0xd8}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8020002, 0x3d3644a612588b7d, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r5) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x28, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x28}}, 0x40080) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040), 0x1, 0x4d6, &(0x7f0000000b40)="$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") pipe(&(0x7f0000000240)={0xffffffffffffffff}) fadvise64(r8, 0x6, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0) 1m33.23667357s ago: executing program 32 (id=14): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0xffe0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[], 0xd8}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8020002, 0x3d3644a612588b7d, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r5) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x28, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x28}}, 0x40080) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040), 0x1, 0x4d6, &(0x7f0000000b40)="$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") pipe(&(0x7f0000000240)={0xffffffffffffffff}) fadvise64(r8, 0x6, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0) 16.00475865s ago: executing program 2 (id=191): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0xffe0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe88963800000000000000010000000100000000000000"], 0xd8}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8020002, 0x3d3644a612588b7d, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r5) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x28, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x28}}, 0x40080) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040), 0x1, 0x4d6, &(0x7f0000000b40)="$eJzs3c9vVFsdAPDv3P6kFFqUxB9RQQTREGbaARrCwuBGYwiJkbhyAbUdmqYznaYzRVpZlP/BRBJX+ie4MHFhwsq9O90ZE1yYoBINfclbzMuduYVSZub18coM6Xw+yc3cc8/c+z2Hcs+5fIfOCWBgnY2I7YgYjYh7ETGVHc9lW9xsben7Xr54tLDz4tFCLkbjzn9yzfr0WOw5J3U8u+Z4RPzkhxE/z70dt7a5tTJfLpfWs3KhXlkr1Da3/rFcmV8qLZVWi8W52bmZ61euFQ+tr2cqv3/+g+VbP/3TH7/+7C/b3/1l2qzJrG5vP/aaPtilhzpVtLo+8ipOajgibn2Whn/AhrL+jPa7IbyTJCK+EBHn0vu/0e/WAAC90GhMRWNqbxkAOOqSZg4sl+SzXMBkJEk+38rhnY6JpFyt1S/dr26sLrZyZdMxktxfLpdmslzhdIzk0vJslivbLRf3la9ExKmI+NXYsWY5v1AtL/bzwQcABtjxffP//8da8z8AcMSN97sBAEDPmf8BYPCY/wFg8Jj/AWDwmP8BYPCY/wFg8Jj/AWCg/Pj27XRr7GTff734YHNjpfrg8mKptpKvbCzkF6rra/mlanWp+Z09lU+7XrlaXZu9GhsPC/VSrV6obW7drVQ3Vut3m9/rfbc00pNeAQDdnDrz9G+5iNi+cay5xZ61HMzVcLQl/W4A0DcdF64CjrzhfjcA6Bv/xgfaLNH7yki3/yL0pOtpwAfs4lfk/2FQyf/D4JL/h8El/w+Dq9HIWfMfAAaMHD/Q7fP/eLfP/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODIm2xuuSSfrQU+GUmSz0eciIjpGMndXy6XZiLiZET8dWxkLC3PpieO9rvlAMC7S/6Vy9b/ujh1fnJ/7Wjuo7HIpvtf/ObOrx/O1+vrs+nx/44dy95Tf5IdL3YNZKlBAOiT3Xl6dx7f9fLFo4XdrZftef791uKiadydbGvVDMdw83W8+eAw8b9cVm5Jn1eGDiH+9uOI+HK7/ueauZHpbOXT/fHT2Cd6Gj95I37SrGu9pn8WXzyEtsCgeZqOPzfb3X9JnG2+tr//x5sj1Oe3O/7tvDX+Ja/Gv6EO49/Zg8a4+ucfdax7HPHV4Xbxc9nwOn7hex3inz9g/L9/7Rvn3jzztcZvIy5G2/hvnFGoV9YKtc2ty8uV+aXSUmm1WJybnZu5fuVasdDMURd2M9Vv+/eNSye79X+iQ/zWT368Gb9d/y8csP+/+/jez77ZJf53vtX+53+6S/x0Tvz2AePPT/yh4/LdafzF9v3Pzunc/0sHjP/sn1uLB3wrANADtc2tlflyubRup2c76bPbB9AMO33bSf8GHMZ1vvQem9rvkQl4317f9P1uCQAAAAAAAAAAAAAA0EkvfuGp330EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6PokAAD//zpy1fY=") pipe(&(0x7f0000000240)={0xffffffffffffffff}) fadvise64(r8, 0x6, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0) 14.579833214s ago: executing program 2 (id=194): r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) pread64(r0, &(0x7f0000000040), 0x34, 0x7ff) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@cswp={0x58, 0x114, 0x7, {{0x4, 0x81e}, &(0x7f00000000c0)=0xb72, 0x0, 0x800008, 0xe0000, 0x1e, 0x2, 0x3b, 0xffffffff}}, @cswp={0x58, 0x114, 0x7, {{0xb, 0x3}, 0x0, 0x0, 0x401, 0x5, 0x8, 0x3, 0x40, 0x8}}], 0xb0}, 0x0) 13.798104405s ago: executing program 4 (id=196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000040)=@other={0x20300002000006a4, 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)={0x30, r2, 0x5707b563827c8365, 0x1, 0xbffffffd, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x50}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) getpgrp(r7) r8 = fcntl$dupfd(r0, 0x0, r0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4ae1ba0777cf292ad25566944452bf6ae77256da82f6184b8a34f9015cc99e57000010280000", 0x48}], 0x1}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r8) r12 = socket$netlink(0x10, 0x3, 0x10) r13 = socket$unix(0x1, 0x2, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r14, 0x1, 0x30bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1c, r11, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x41) 13.758889085s ago: executing program 0 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000240)=@filename='./file0\x00', r4, 0x0) r5 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x0) close(r6) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r7) keyctl$read(0xb, 0x0, &(0x7f00000009c0)=""/56, 0x38) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(0xffffffffffffffff, 0x0, 0x0) 11.60743801s ago: executing program 0 (id=199): syz_io_uring_setup(0x2af8, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x13090, 0xffffffff, 0x8000319}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/dev/scsi/logging_level\x00', 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x800000, 0x3, 0x253}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x2, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x0, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 11.583608404s ago: executing program 2 (id=200): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0x481, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002d40)={0x2020}, 0x2020) r5 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 11.446740779s ago: executing program 1 (id=202): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, 0x0, 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @mcast2, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000081100fe89000000000000000000000000000000000000000000014e600e22000890780000000000000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0xfffff000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$nl_generic(r6, 0x0, 0x4000014) mount(0x0, 0x0, &(0x7f0000000040)='minix\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@dev, @dev}, &(0x7f0000000280)=0xc) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) shmget(0x1, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) 10.402084759s ago: executing program 4 (id=203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) 9.082314871s ago: executing program 5 (id=204): socket$kcm(0x11, 0x200000000000003, 0x300) r0 = socket$kcm(0xa, 0x0, 0x3a) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 9.079298153s ago: executing program 2 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') 8.86451051s ago: executing program 4 (id=206): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1fe) 7.864029989s ago: executing program 2 (id=207): r0 = openat(0xffffffffffffffff, 0x0, 0x210000, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x2, 0x0, 0x6}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x3, 0x980001}) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r2 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "6196b2", 0x48, 0x11, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {0x4e24, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "1634a8ccea30783d48ea69d3f705181c93b9d3cd4cda3f7d", "7417ab23cc9d84fc206e1e59bb2042f4ce5fb8e9adeb5b8d76d00f0000228d79"}}}}}}}, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)={0x14, r7, 0xd, 0x70bd26}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x78, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4806}, 0x0) write$9p(r4, &(0x7f0000000100)="d5", 0x1) write$cgroup_subtree(r4, &(0x7f0000000180)={[{0x2d, 'net_cls'}]}, 0x9) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) read$msr(r4, &(0x7f0000000140)=""/136, 0x88) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x40045b17, 0x0) 6.232358104s ago: executing program 5 (id=208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x2, 0x634, &(0x7f0000000480)="$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") lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r4, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file1\x00', 0x0, r4) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000180)={&(0x7f00000000c0)=[r1], &(0x7f0000000140)=[0x2d0a, 0x22, 0x10, 0x2, 0x5], 0x1}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x7, 0x0, 0x9}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237646, 0x0, 0x9}]}) 6.020752284s ago: executing program 1 (id=209): socket$kcm(0x11, 0x200000000000003, 0x300) r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x5800, &(0x7f0000000800)='rp_size=0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 5.861256238s ago: executing program 4 (id=210): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000980)={'veth0_to_batadv\x00', &(0x7f0000000080)=@ethtool_dump={0x3f, 0x7, 0x4}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x4, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008800}, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fff626bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="715a0300231a05002c00128009000100626f6e64000000001c000280050001000500000005001b"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 4.562445176s ago: executing program 1 (id=211): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@canfd={{0x2, 0x0, 0x1}, 0x40, 0x2, 0x0, 0x0, "559c4157df5c5fc0a343bdfd992c89ec7c178d3d401a0657e948c1e50e9f29438946924347e8c9a7f1d228cf082056214904d6e39350c2d1bf5443d0ef0296b0"}, 0x48}, 0x1, 0x0, 0x0, 0x4000051}, 0x811) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2040, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.562094789s ago: executing program 0 (id=212): prctl$PR_SCHED_CORE(0x59616d61, 0x1, 0x0, 0x7ffffffe, 0x0) 4.527181436s ago: executing program 5 (id=213): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x1000000, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x1, 0x0, &(0x7f0000000300), 0x0, 0x0}) 4.297207398s ago: executing program 0 (id=214): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$tipc(0x1e, 0x2, 0x0) getpeername(r1, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x34) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x80, 0x0) chdir(&(0x7f0000000940)='./file1\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20402, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x60700, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x60, r4}, './file0\x00'}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi5\x00', 0x400, 0x0) ioctl$COMEDI_CMD(r6, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x10, 0x302820, 0x10, 0x3028b8, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 4.248160964s ago: executing program 1 (id=215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4, &(0x7f0000005c00)=ANY=[], 0x1, 0x166, &(0x7f0000000380)="$eJzs2j9Lw0AYBvA3KCgdHZ0KlSpokzTRuuoobu4Opeba4MWWRJB20U2cBIVz8EsIfgI/gWR006WDXyJyzaFpVAj+aRp4fksfeNvrm7v2prfmd706C2pEa72rveGC3/XKDXuzxeqsSbEdIirLEEbRjU6fPL/Xw4j0L96Qr6XX+LWy0ha7F8zljpV3SwAAAAAAAAAAAAAAAAAAAAAAkFG1pEKpI7xz5nKnnqgG/cFhk3PHD4jmc+owX9WymuEiJvit3B97bCtWZd6SyRXbvqyb45+/VmG5I/hLen+NY69nBP1BzfWabaftHFmW3TDXTXPDMkZrGekVq3eqJwqjezMxTqY/7tuynpg3e8oyb6bOf3bRFZcn6W/7OP+ihtPpaOOPgkb/sLJGdCYPe+KPo03JrhYvaES/+yVEM/Ef/MdtZLs9C2B0/w2JaM6uPMj7T291+YEqTuIw8318APjOWwAAAP//14QzQA==") (async) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xd280, 0x0, 0x1, 0x0, &(0x7f00000007c0)) (async) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000080)={{0x89e, 0x5}, {0x89e, 0x2}, 0xfffffe2d, 0x6}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c00028008000240000056a7080003400000030008000140000000110900010073797a30000000000900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 4.198342196s ago: executing program 5 (id=216): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0xc844) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_add_watch(0xffffffffffffffff, 0x0, 0x850003d1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x1, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xff}]}, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010003", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 4.185706398s ago: executing program 4 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') 3.912375722s ago: executing program 0 (id=218): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0xffe0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24"], 0xd8}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8020002, 0x3d3644a612588b7d, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r5) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x28, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x28}}, 0x40080) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040), 0x1, 0x4d6, &(0x7f0000000b40)="$eJzs3c9vVFsdAPDv3P6kFFqUxB9RQQTREGbaARrCwuBGYwiJkbhyAbUdmqYznaYzRVpZlP/BRBJX+ie4MHFhwsq9O90ZE1yYoBINfclbzMuduYVSZub18coM6Xw+yc3cc8/c+z2Hcs+5fIfOCWBgnY2I7YgYjYh7ETGVHc9lW9xsben7Xr54tLDz4tFCLkbjzn9yzfr0WOw5J3U8u+Z4RPzkhxE/z70dt7a5tTJfLpfWs3KhXlkr1Da3/rFcmV8qLZVWi8W52bmZ61euFQ+tr2cqv3/+g+VbP/3TH7/+7C/b3/1l2qzJrG5vP/aaPtilhzpVtLo+8ipOajgibn2Whn/AhrL+jPa7IbyTJCK+EBHn0vu/0e/WAAC90GhMRWNqbxkAOOqSZg4sl+SzXMBkJEk+38rhnY6JpFyt1S/dr26sLrZyZdMxktxfLpdmslzhdIzk0vJslivbLRf3la9ExKmI+NXYsWY5v1AtL/bzwQcABtjxffP//8da8z8AcMSN97sBAEDPmf8BYPCY/wFg8Jj/AWDwmP8BYPCY/wFg8Jj/AWCg/Pj27XRr7GTff734YHNjpfrg8mKptpKvbCzkF6rra/mlanWp+Z09lU+7XrlaXZu9GhsPC/VSrV6obW7drVQ3Vut3m9/rfbc00pNeAQDdnDrz9G+5iNi+cay5xZ61HMzVcLQl/W4A0DcdF64CjrzhfjcA6Bv/xgfaLNH7yki3/yL0pOtpwAfs4lfk/2FQyf/D4JL/h8El/w+Dq9HIWfMfAAaMHD/Q7fP/eLfP/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODIm2xuuSSfrQU+GUmSz0eciIjpGMndXy6XZiLiZET8dWxkLC3PpieO9rvlAMC7S/6Vy9b/ujh1fnJ/7Wjuo7HIpvtf/ObOrx/O1+vrs+nx/44dy95Tf5IdL3YNZKlBAOiT3Xl6dx7f9fLFo4XdrZftef791uKiadydbGvVDMdw83W8+eAw8b9cVm5Jn1eGDiH+9uOI+HK7/ueauZHpbOXT/fHT2Cd6Gj95I37SrGu9pn8WXzyEtsCgeZqOPzfb3X9JnG2+tr//x5sj1Oe3O/7tvDX+Ja/Gv6EO49/Zg8a4+ucfdax7HPHV4Xbxc9nwOn7hex3inz9g/L9/7Rvn3jzztcZvIy5G2/hvnFGoV9YKtc2ty8uV+aXSUmm1WJybnZu5fuVasdDMURd2M9Vv+/eNSye79X+iQ/zWT368Gb9d/y8csP+/+/jez77ZJf53vtX+53+6S/x0Tvz2AePPT/yh4/LdafzF9v3Pzunc/0sHjP/sn1uLB3wrANADtc2tlflyubRup2c76bPbB9AMO33bSf8GHMZ1vvQem9rvkQl4317f9P1uCQAAAAAAAAAAAAAA0EkvfuGp330EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6PokAAD//zpy1fY=") pipe(&(0x7f0000000240)={0xffffffffffffffff}) fadvise64(r8, 0x6, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0) 3.134378533s ago: executing program 5 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0x3, 0x0) getdents(r3, 0x0, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000a77000/0x2000)=nil, 0x2000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000180), 0x6e, 0x0}, 0x102) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@RTM_GETMDB={0x18, 0x56, 0x800, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000022c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_mount_image$romfs(&(0x7f0000000200), &(0x7f0000000480)='./file0\x00', 0x4, &(0x7f0000000000)=ANY=[], 0x1, 0x162, &(0x7f0000000780)="$eJzs2rFKw0AYB/Bv0LZ2EkenQiUK2iRNtK46ipu7Q6m5NnixJRGkXRzFSVA4B19C8Al8AunopksHXyJyzVGTqEWXJuj/t+QPX5J+vYPL8tX8rldnQY1oo3d9MFryu16lYW+3WJ01KbJHRBUZhmF4q9MnL5P6MCT9ixuytfIWXatrbbF/yVzuWFm3BAAAAAAAAAAAAAAAAAAAAAAAP6SVVSh3hHfBXO7UY9WgPzhucu74AVEp+WBpll1mR6uoGS5igt/J9bET9fUSFWlHJlfs+rJuJp+/UWG1I/hren2NU69nBP1BzfWabaftnFiW3TA3TXPLMsbvMtJv1O5VTzQMH8zYOJn+dCg702LzZs/T5s16C9FV7n+BaG7ZFVdn6V/72P+/Hhbz0UbmoaB2Pi/9/KtwPvWe+Rx0OAm/OELzbfz9GxFR0a4+yvNPb3X5kSrOYjmz/fsA8J33AAAA///CvDfq") statfs(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=""/201) 3.128496542s ago: executing program 1 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0x3, 0x0) getdents(r3, 0x0, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000a77000/0x2000)=nil, 0x2000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000180), 0x6e, 0x0}, 0x102) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@RTM_GETMDB={0x18, 0x56, 0x800, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000022c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_mount_image$romfs(&(0x7f0000000200), &(0x7f0000000480)='./file0\x00', 0x4, &(0x7f0000000000)=ANY=[], 0x1, 0x162, &(0x7f0000000780)="$eJzs2rFKw0AYB/Bv0LZ2EkenQiUK2iRNtK46ipu7Q6m5NnixJRGkXRzFSVA4B19C8Al8AunopksHXyJyzVGTqEWXJuj/t+QPX5J+vYPL8tX8rldnQY1oo3d9MFryu16lYW+3WJ01KbJHRBUZhmF4q9MnL5P6MCT9ixuytfIWXatrbbF/yVzuWFm3BAAAAAAAAAAAAAAAAAAAAAAAP6SVVSh3hHfBXO7UY9WgPzhucu74AVEp+WBpll1mR6uoGS5igt/J9bET9fUSFWlHJlfs+rJuJp+/UWG1I/hren2NU69nBP1BzfWabaftnFiW3TA3TXPLMsbvMtJv1O5VTzQMH8zYOJn+dCg702LzZs/T5s16C9FV7n+BaG7ZFVdn6V/72P+/Hhbz0UbmoaB2Pi/9/KtwPvWe+Rx0OAm/OELzbfz9GxFR0a4+yvNPb3X5kSrOYjmz/fsA8J33AAAA///CvDfq") statfs(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=""/201) 2.888164563s ago: executing program 2 (id=221): syz_usb_connect(0x0, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1f7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x2d0, 0xffffff7a, 0xffffffff, 0x2d0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @multicast1, 0xffffffff, 0xffffffff, 'dvmrp1\x00', 'ip6gretap0\x00', {}, {0xff}, 0x84, 0x1, 0x10}, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x6, 'kmp\x00', "00000100cbd047da9ca965f96ad5801f051443cbdd7424e1b316d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e00005a000000000000ffffff7f00", 0x71, 0x0, {0x4}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@loopback, [0xffffffff, 0xffffffff, 0xff000000, 0xff], @ipv6=@loopback, [0xff000000, 0xffffff00, 0xff, 0xffffffff], @ipv6=@loopback, [0xffffff00, 0xffffff00, 0xffffffff], @ipv4=@private=0xa010102, [0xffffffff, 0xff000000, 0xff000000, 0xff], 0x5, 0x10, 0x5c, 0x4e20, 0x4e24, 0x4e22, 0x4e21, 0x2800}, 0x80, 0x1008}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x500, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='usbip-vudc.0', 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x11, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16, 0x0, 0x2, 0x7fff7ffc}]}) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47f0"], 0x0) syz_usb_ep_read(r7, 0xf, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000200)) write(r6, &(0x7f00000004c0)='\n', 0x1) 2.851944903s ago: executing program 4 (id=222): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f00000002c0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x4d, 0x0, 0x0, 0x20008011}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x1f8, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@remote, @private=0xa010101, 0xff000000, 0x0, 0x5, 0x8, {@mac=@random="6c5e8bff31c3", {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x4, 0x2001, 0x8, 0x8001, 0x3, 0xac4, 'macsec0\x00', 'gretap0\x00', {}, {}, 0x0, 0x92}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @local, @multicast2, 0x8a279becf6a6c124, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x22}, @remote, 0xffffffff, 0x0, 0xa, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00', {0x917fdb7189989ed6}}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x7, 0x12, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./dev/sda1\x00', 0x22) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0xd7406c5a70f5d689) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x81, @mcast1, 0xc}, {0xa, 0x4e20, 0x0, @mcast1, 0x10000}, r3, 0x7ff}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='./file0\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x2240, 0x0) ioctl(r4, 0x4e9ad4c1, &(0x7f0000000480)="dbcaf2d1b8af4a2d771d15d1c47d8b497c143cdad02d70f58f4dff747eafe04dcbd47a60c2333e2ab99ecad6ac739a58200061bc858cc7b123c36d943b4ce047e0e5eb273b7eb94943ff1f4e4c5c2e04a18e894a1f3fc4f4c552d48784a66dcf43226e0a17154cc8aabfacad846b71251d28214b081d54a92224855b4380372343e44403a76cc6e5106ea315423a4d2d29ef91f64c0972fe636cbf30fe218e") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mprotect(&(0x7f000059a000/0x1000)=nil, 0x1000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mremap(&(0x7f00002f4000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00006d5000/0x1000)=nil) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) 2.020090472s ago: executing program 1 (id=223): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904"], 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xf3e\t\x9fi\xa0\x83d\x918\xc0y\x01c\x1fnux\x00\x7fV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\xf9\xd1\xd2[P\x84=\xfa\x81\f\x1et\x10\x0e\x0f\x06\xd1\xbb\xcc\xbf\x99\x9b\xc7St!\xa1E\xcf', 0x6) pwrite64(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f00000001c0)=0xed4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x305) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) 31.403189ms ago: executing program 5 (id=224): prctl$PR_SCHED_CORE(0x59616d61, 0x1, 0x0, 0x7ffffffe, 0x0) 0s ago: executing program 0 (id=225): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@canfd={{0x2, 0x0, 0x1}, 0x40, 0x2, 0x0, 0x0, "559c4157df5c5fc0a343bdfd992c89ec7c178d3d401a0657e948c1e50e9f29438946924347e8c9a7f1d228cf082056214904d6e39350c2d1bf5443d0ef0296b0"}, 0x48}, 0x1, 0x0, 0x0, 0x4000051}, 0x811) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2040, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): problem. [ 71.734270][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.740687][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.756674][ T5614] team0: Port device team_slave_1 added [ 71.868917][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.868930][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.868943][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.877911][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.932994][ T5610] team0: Port device team_slave_0 added [ 71.952184][ T5611] hsr_slave_0: entered promiscuous mode [ 71.952884][ T5611] hsr_slave_1: entered promiscuous mode [ 71.968948][ T5610] team0: Port device team_slave_1 added [ 71.969535][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.969547][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.969568][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.010292][ T5603] team0: Port device team_slave_0 added [ 72.012065][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.012079][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.012107][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.055235][ T5604] hsr_slave_0: entered promiscuous mode [ 72.056489][ T5604] hsr_slave_1: entered promiscuous mode [ 72.057199][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 72.057291][ T5604] Cannot create hsr debugfs directory [ 72.098086][ T5603] team0: Port device team_slave_1 added [ 72.105070][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.105080][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.105094][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.155137][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.155153][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.155174][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.159749][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.159764][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.159787][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.189690][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.189706][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.189729][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.301302][ T5614] hsr_slave_0: entered promiscuous mode [ 72.301908][ T5614] hsr_slave_1: entered promiscuous mode [ 72.302327][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 72.302344][ T5614] Cannot create hsr debugfs directory [ 72.415472][ T5610] hsr_slave_0: entered promiscuous mode [ 72.416392][ T5610] hsr_slave_1: entered promiscuous mode [ 72.417210][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 72.417228][ T5610] Cannot create hsr debugfs directory [ 72.438725][ T5603] hsr_slave_0: entered promiscuous mode [ 72.439776][ T5603] hsr_slave_1: entered promiscuous mode [ 72.440454][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 72.440472][ T5603] Cannot create hsr debugfs directory [ 72.743144][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.752203][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.753079][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.764396][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.767386][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.778188][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.798626][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.803506][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.890971][ T5604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.894912][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.896712][ T5604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.907357][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.918544][ T5604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.930308][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.931098][ T5604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.942202][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.028674][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.033220][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.034815][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.048061][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.069054][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.074105][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.076919][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.087328][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.168976][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.171739][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.172819][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.180145][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.184802][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.198065][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.217221][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.222646][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.276747][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.322105][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.349260][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.358983][ T5603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.367990][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.368719][ T5603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.371964][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.392531][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.392723][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.394685][ T5603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.399980][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.413405][ T5603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.426367][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.439099][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.439183][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.441494][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.468776][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.468831][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.508920][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.509015][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.545833][ T4925] Bluetooth: hci3: command tx timeout [ 73.563342][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.609793][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.614317][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.629025][ T4925] Bluetooth: hci2: command tx timeout [ 73.636426][ T54] Bluetooth: hci1: command tx timeout [ 73.636454][ T54] Bluetooth: hci4: command tx timeout [ 73.636524][ T4925] Bluetooth: hci0: command tx timeout [ 73.672991][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.685075][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.685176][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.718371][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.718476][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.751458][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.759574][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.759670][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.768428][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.768522][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.869168][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.884266][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.884351][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.944004][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.944119][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.804452][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.908139][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.944986][ T5611] veth0_vlan: entered promiscuous mode [ 74.962183][ T5611] veth1_vlan: entered promiscuous mode [ 75.014477][ T5611] veth0_macvtap: entered promiscuous mode [ 75.044686][ T5611] veth1_macvtap: entered promiscuous mode [ 75.120996][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.197464][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.237493][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.247557][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.311615][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.334204][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.346312][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.346357][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.438680][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.504895][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.504925][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.537732][ T5610] veth0_vlan: entered promiscuous mode [ 75.568446][ T5614] veth0_vlan: entered promiscuous mode [ 75.581918][ T5610] veth1_vlan: entered promiscuous mode [ 75.591342][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.591361][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.626958][ T4925] Bluetooth: hci3: command tx timeout [ 75.644312][ T5614] veth1_vlan: entered promiscuous mode [ 75.706093][ T54] Bluetooth: hci1: command tx timeout [ 75.706125][ T54] Bluetooth: hci2: command tx timeout [ 75.706239][ T5612] Bluetooth: hci0: command tx timeout [ 75.706301][ T4925] Bluetooth: hci4: command tx timeout [ 75.723161][ T5604] veth0_vlan: entered promiscuous mode [ 75.743697][ T5610] veth0_macvtap: entered promiscuous mode [ 75.760379][ T5610] veth1_macvtap: entered promiscuous mode [ 75.763002][ T5603] veth0_vlan: entered promiscuous mode [ 75.767806][ T5604] veth1_vlan: entered promiscuous mode [ 75.811268][ T5614] veth0_macvtap: entered promiscuous mode [ 75.813352][ T5611] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.814999][ T5603] veth1_vlan: entered promiscuous mode [ 75.827273][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.831516][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.846793][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.851753][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.854342][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.854630][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.916044][ T5614] veth1_macvtap: entered promiscuous mode [ 75.994809][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.041516][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.046642][ T5604] veth0_macvtap: entered promiscuous mode [ 76.070103][ T5603] veth0_macvtap: entered promiscuous mode [ 76.104118][ T5604] veth1_macvtap: entered promiscuous mode [ 76.129084][ T5603] veth1_macvtap: entered promiscuous mode [ 76.132056][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.132074][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.199929][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.219771][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.219791][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.223183][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.235002][ T5725] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.276637][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.280887][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.311268][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.336572][ T62] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.336617][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.370309][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.370329][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.407275][ T5725] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 76.413189][ T5725] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.413224][ T5725] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 76.427231][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.427277][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.427310][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.427344][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.427376][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.427409][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.427449][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.427482][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.427515][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.486921][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.486953][ T5725] usb 4-1: Product: syz [ 76.486967][ T5725] usb 4-1: Manufacturer: syz [ 76.486980][ T5725] usb 4-1: SerialNumber: syz [ 76.627198][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.627219][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.703250][ T5803] Zero length message leads to an empty skb [ 76.713348][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 76.726831][ T5795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.731370][ T5795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.759203][ T5725] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 76.764250][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.764269][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.794276][ T5725] usb 4-1: USB disconnect, device number 2 [ 76.901691][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.901712][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.990544][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.990564][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.044090][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.044110][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.101045][ T5813] capability: warning: `syz.2.7' uses deprecated v2 capabilities in a way that may be insecure [ 77.122508][ T5799] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 77.275420][ T5725] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.377351][ T5696] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 77.426005][ T5725] usb 4-1: Using ep0 maxpacket: 8 [ 77.429304][ T5725] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.430712][ T5725] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 77.430736][ T5725] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 77.430779][ T5725] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.430800][ T5725] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.430822][ T5725] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 77.430845][ T5725] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.430881][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.532606][ T5823] loop4: detected capacity change from 0 to 64 [ 77.689169][ T5725] usb 4-1: GET_CAPABILITIES returned 0 [ 77.689218][ T5725] usbtmc 4-1:16.0: can't read capabilities [ 77.705815][ T4925] Bluetooth: hci3: command tx timeout [ 77.791915][ T5824] loop0: detected capacity change from 0 to 32768 [ 77.792802][ T5824] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 77.796166][ T5612] Bluetooth: hci0: command tx timeout [ 77.796195][ T5612] Bluetooth: hci2: command tx timeout [ 77.796216][ T5612] Bluetooth: hci1: command tx timeout [ 77.796271][ T4925] Bluetooth: hci4: command tx timeout [ 77.803298][ T5824] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (5824) [ 77.862767][ T5810] ceph: No mds server is up or the cluster is laggy [ 77.893482][ T27] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 77.923243][ T5824] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 77.923285][ T5824] BTRFS info (device loop0): using sha256 checksum algorithm [ 77.923461][ T5824] BTRFS error (device loop0): superblock checksum mismatch [ 77.924144][ T5824] BTRFS error (device loop0): open_ctree failed: -EINVAL [ 77.929818][ T27] usb 4-1: USB disconnect, device number 3 [ 78.008289][ T5826] loop4: detected capacity change from 0 to 512 [ 78.011293][ T5826] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.011318][ T5826] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.053016][ T5827] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.084110][ T5621] udevd[5621]: incorrect btrfs checksum on /dev/loop0 [ 78.087466][ T5826] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.8: corrupted in-inode xattr: invalid ea_ino [ 78.087605][ T5826] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.115419][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 78.115441][ C1] EXT4-fs (loop4): initial error at time 1791353291: ext4_iget_extra_inode:5210: inode 15 [ 78.115477][ C1] EXT4-fs (loop4): last error at time 1791353291: ext4_iget_extra_inode:5210: inode 15 [ 78.225693][ T5826] EXT4-fs (loop4): Remounting filesystem read-only [ 78.269846][ T5832] fuse: Bad value for 'fd' [ 78.270556][ T5828] TCP: TCP_TX_DELAY enabled [ 78.353311][ T5835] loop2: detected capacity change from 0 to 256 [ 78.401235][ T5826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.799647][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 78.855414][ T5837] netlink: 452 bytes leftover after parsing attributes in process `syz.1.10'. [ 79.063740][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.224419][ T5846] netlink: 'syz.4.12': attribute type 1 has an invalid length. [ 79.224440][ T5846] netlink: 'syz.4.12': attribute type 2 has an invalid length. [ 79.243162][ T5846] netlink: 'syz.4.12': attribute type 1 has an invalid length. [ 79.243179][ T5846] netlink: 'syz.4.12': attribute type 2 has an invalid length. [ 79.279255][ T5824] loop0: detected capacity change from 0 to 32768 [ 79.312653][ T5824] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (5824) [ 79.334493][ T5835] FAULT_INJECTION: forcing a failure. [ 79.334493][ T5835] name fail_futex, interval 1, probability 0, space 0, times 1 [ 79.334543][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz.2.9 Not tainted syzkaller #0 PREEMPT(full) [ 79.334565][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 79.334580][ T5835] Call Trace: [ 79.334586][ T5835] [ 79.334593][ T5835] dump_stack_lvl+0xe8/0x150 [ 79.334621][ T5835] should_fail_ex+0x3eb/0x540 [ 79.334641][ T5835] get_futex_key+0x8e2/0x1580 [ 79.334665][ T5835] ? __pfx_get_futex_key+0x10/0x10 [ 79.334689][ T5835] futex_wake+0x119/0x5f0 [ 79.334707][ T5835] ? __pfx_futex_wake+0x10/0x10 [ 79.334729][ T5835] ? mm_exit_exec_release+0x20/0x290 [ 79.334747][ T5835] do_futex+0x458/0x4e0 [ 79.334765][ T5835] ? __pfx_do_futex+0x10/0x10 [ 79.334783][ T5835] ? __might_fault+0xaf/0x130 [ 79.334800][ T5835] mm_exit_exec_release+0x10d/0x290 [ 79.334817][ T5835] exit_mm+0x50/0x240 [ 79.334833][ T5835] do_exit+0x6a8/0x2380 [ 79.334856][ T5835] ? __pfx_do_exit+0x10/0x10 [ 79.334876][ T5835] ? do_raw_spin_lock+0x12b/0x2f0 [ 79.334900][ T5835] do_group_exit+0x22d/0x2f0 [ 79.334917][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.334938][ T5835] get_signal+0x1216/0x12c0 [ 79.334972][ T5835] arch_do_signal_or_restart+0xbb/0x860 [ 79.334994][ T5835] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 79.335031][ T5835] exit_to_user_mode_loop+0x10e/0x770 [ 79.335050][ T5835] ? rcu_is_watching+0x16/0xb0 [ 79.335072][ T5835] do_syscall_64+0x328/0x520 [ 79.335089][ T5835] ? trace_irq_disable+0x3b/0x140 [ 79.335106][ T5835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.335126][ T5835] ? clear_bhb_loop+0x70/0xc0 [ 79.335146][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.335165][ T5835] RIP: 0033:0x7f8115f9e199 [ 79.335188][ T5835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.335203][ T5835] RSP: 002b:00007f81141f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 79.335229][ T5835] RAX: 000000000000000b RBX: 00007f8116225fa0 RCX: 00007f8115f9e199 [ 79.335243][ T5835] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000008 [ 79.335255][ T5835] RBP: 00007f81160358e0 R08: 0000000000000000 R09: 0000000000000000 [ 79.335270][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.335279][ T5835] R13: 00007f8116226038 R14: 00007f8116225fa0 R15: 00007ffec8cf9778 [ 79.335306][ T5835] [ 79.514101][ T5824] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 79.514133][ T5824] BTRFS info (device loop0): using blake2b checksum algorithm [ 80.052590][ T5848] loop1: detected capacity change from 0 to 128 [ 80.060971][ T5848] ======================================================= [ 80.060971][ T5848] WARNING: The mand mount option has been deprecated and [ 80.060971][ T5848] and is ignored by this kernel. Remove the mand [ 80.060971][ T5848] option from the mount to silence this warning. [ 80.060971][ T5848] ======================================================= [ 80.065328][ T5848] EXT4-fs (loop1): Test dummy encryption mode enabled [ 80.158366][ T5848] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.163618][ T5848] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.186145][ T5848] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib" [ 80.291409][ T5824] BTRFS info (device loop0): enabling ssd optimizations [ 80.291435][ T5824] BTRFS info (device loop0): using spread ssd allocation scheme [ 80.291457][ T5824] BTRFS info (device loop0): enabling free space tree [ 80.291474][ T5824] BTRFS info (device loop0): enabling auto defrag [ 80.291502][ T5824] BTRFS info (device loop0): force zlib compression, level 3 [ 80.857649][ T5865] fscrypt: AES-256-XTS using blk-crypto-fallback [ 81.093138][ T5603] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 81.154194][ T5614] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.355952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 83.694910][ T5884] fuse: Unknown parameter 'fd0x0000000000000003' [ 83.855211][ T5886] FAULT_INJECTION: forcing a failure. [ 83.855211][ T5886] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.855248][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(full) [ 83.855271][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 83.855281][ T5886] Call Trace: [ 83.855288][ T5886] [ 83.855295][ T5886] dump_stack_lvl+0xe8/0x150 [ 83.855320][ T5886] should_fail_ex+0x3eb/0x540 [ 83.855344][ T5886] _copy_from_user+0x2d/0xb0 [ 83.855364][ T5886] __sys_bind+0x1c6/0x410 [ 83.855386][ T5886] ? __pfx___sys_bind+0x10/0x10 [ 83.855416][ T5886] ? __pfx_ksys_write+0x10/0x10 [ 83.855442][ T5886] __x64_sys_bind+0x7a/0x90 [ 83.855461][ T5886] do_syscall_64+0x166/0x520 [ 83.855479][ T5886] ? trace_irq_disable+0x3b/0x140 [ 83.855496][ T5886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.855515][ T5886] ? clear_bhb_loop+0x70/0xc0 [ 83.855535][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.855554][ T5886] RIP: 0033:0x7f8115f9e199 [ 83.855571][ T5886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.855586][ T5886] RSP: 002b:00007f81141f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 83.855606][ T5886] RAX: ffffffffffffffda RBX: 00007f8116225fa0 RCX: 00007f8115f9e199 [ 83.855620][ T5886] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000003 [ 83.855632][ T5886] RBP: 00007f81141f6090 R08: 0000000000000000 R09: 0000000000000000 [ 83.855644][ T5886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.855655][ T5886] R13: 00007f8116226038 R14: 00007f8116225fa0 R15: 00007ffec8cf9778 [ 83.855685][ T5886] [ 84.147779][ T5890] loop2: detected capacity change from 0 to 512 [ 84.162683][ T5890] msdos: Bad value for 'nfs' [ 84.267141][ T5893] loop0: detected capacity change from 0 to 128 [ 84.278445][ T5893] EXT4-fs (loop0): Test dummy encryption mode enabled [ 84.341188][ T5893] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.341566][ T5893] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.705754][ T5899] loop1: detected capacity change from 0 to 24 [ 84.706714][ T5899] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 85.625325][ T5899] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 86.046270][ T5903] netlink: 'syz.2.27': attribute type 1 has an invalid length. [ 86.046292][ T5903] netlink: 'syz.2.27': attribute type 2 has an invalid length. [ 86.048714][ T5903] netlink: 'syz.2.27': attribute type 1 has an invalid length. [ 86.048732][ T5903] netlink: 'syz.2.27': attribute type 2 has an invalid length. [ 86.137560][ T5603] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.179221][ T5905] ip_tables: iptables: counters copy to user failed while replacing table [ 86.232275][ T5906] syz.1.28 uses obsolete (PF_INET,SOCK_PACKET) [ 86.263123][ T5906] warning: `syz.1.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.432196][ T33] audit: type=1326 audit(1791353299.590:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.4.18" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9d39e199 code=0x7ffc0000 [ 86.434757][ T33] audit: type=1326 audit(1791353299.590:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.4.18" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9d39e199 code=0x7ffc0000 [ 86.439028][ T33] audit: type=1326 audit(1791353299.600:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.4.18" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd9d39e199 code=0x7ffc0000 [ 86.439071][ T33] audit: type=1326 audit(1791353299.600:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.4.18" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9d39e199 code=0x7ffc0000 [ 86.439107][ T33] audit: type=1326 audit(1791353299.600:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.4.18" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9d39e199 code=0x7ffc0000 [ 86.439141][ T33] audit: type=1326 audit(1791353299.600:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.4.18" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fdd9d39e199 code=0x7ffc0000 [ 86.450359][ T33] audit: type=1326 audit(1791353299.610:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.4.18" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9d39e199 code=0x7ffc0000 [ 86.450750][ T33] audit: type=1326 audit(1791353299.610:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.4.18" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdd9d39e199 code=0x7ffc0000 [ 86.460595][ T33] audit: type=1326 audit(1791353299.620:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.4.18" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9d39e199 code=0x7ffc0000 [ 86.460641][ T33] audit: type=1326 audit(1791353299.620:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.4.18" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9d39e199 code=0x7ffc0000 [ 86.766769][ T3105] cfg80211: failed to load regulatory.db [ 87.491646][ T5932] netlink: 'syz.2.32': attribute type 8 has an invalid length. [ 87.956550][ T5946] FAULT_INJECTION: forcing a failure. [ 87.956550][ T5946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.956599][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz.1.35 Not tainted syzkaller #0 PREEMPT(full) [ 87.956621][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 87.956632][ T5946] Call Trace: [ 87.956640][ T5946] [ 87.956649][ T5946] dump_stack_lvl+0xe8/0x150 [ 87.956676][ T5946] should_fail_ex+0x3eb/0x540 [ 87.956701][ T5946] _copy_to_user+0x31/0xb0 [ 87.956723][ T5946] simple_read_from_buffer+0xe1/0x170 [ 87.956749][ T5946] proc_fail_nth_read+0x1bb/0x230 [ 87.956772][ T5946] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.956795][ T5946] ? rw_verify_area+0x24a/0x4c0 [ 87.956816][ T5946] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.956834][ T5946] vfs_read+0x213/0xa80 [ 87.956858][ T5946] ? __pfx___mutex_lock+0x10/0x10 [ 87.956877][ T5946] ? __pfx_vfs_read+0x10/0x10 [ 87.956897][ T5946] ? __fget_files+0x2a/0x420 [ 87.956914][ T5946] ? __fget_files+0x3a2/0x420 [ 87.956931][ T5946] ? __fget_files+0x2a/0x420 [ 87.956953][ T5946] ? fdget+0x1ac/0x250 [ 87.956977][ T5946] ksys_read+0x150/0x270 [ 87.956998][ T5946] ? __pfx_ksys_read+0x10/0x10 [ 87.957027][ T5946] do_syscall_64+0x166/0x520 [ 87.957046][ T5946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.957066][ T5946] ? clear_bhb_loop+0x70/0xc0 [ 87.957087][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.957107][ T5946] RIP: 0033:0x7fa3c2b5e9ce [ 87.957124][ T5946] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.957140][ T5946] RSP: 002b:00007fa3c3afcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.957160][ T5946] RAX: ffffffffffffffda RBX: 00007fa3c3afd6c0 RCX: 00007fa3c2b5e9ce [ 87.957174][ T5946] RDX: 000000000000000f RSI: 00007fa3c3afd0a0 RDI: 0000000000000007 [ 87.957187][ T5946] RBP: 00007fa3c3afd090 R08: 0000000000000000 R09: 0000000000000000 [ 87.957199][ T5946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.957210][ T5946] R13: 00007fa3c2e26218 R14: 00007fa3c2e26180 R15: 00007fff9cf740d8 [ 87.957241][ T5946] [ 88.231426][ T5945] loop0: detected capacity change from 0 to 256 [ 88.794123][ T5947] loop2: detected capacity change from 0 to 8 [ 88.900880][ T5957] loop1: detected capacity change from 0 to 24 [ 88.907896][ T5957] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 89.313076][ T5947] squashfs: Unknown parameter 'ª' [ 89.326829][ T5957] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 90.035547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 90.644610][ T5963] loop2: detected capacity change from 0 to 128 [ 90.680945][ T5963] EXT4-fs (loop2): Test dummy encryption mode enabled [ 90.722637][ T5963] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.724998][ T5963] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.498911][ T5610] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.543145][ T5968] fuse: fd is not a fuse device [ 91.617876][ T5972] FAULT_INJECTION: forcing a failure. [ 91.617876][ T5972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.617907][ T5972] CPU: 0 UID: 0 PID: 5972 Comm: syz.0.42 Not tainted syzkaller #0 PREEMPT(full) [ 91.617927][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.618004][ T5972] Call Trace: [ 91.618013][ T5972] [ 91.618022][ T5972] dump_stack_lvl+0xe8/0x150 [ 91.618046][ T5972] should_fail_ex+0x3eb/0x540 [ 91.618069][ T5972] _copy_from_user+0x2d/0xb0 [ 91.618089][ T5972] __x64_sys_sched_setaffinity+0xea/0x170 [ 91.618112][ T5972] ? __pfx___x64_sys_sched_setaffinity+0x10/0x10 [ 91.618137][ T5972] do_syscall_64+0x166/0x520 [ 91.618148][ T5972] ? trace_irq_disable+0x3b/0x140 [ 91.618158][ T5972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.618169][ T5972] ? clear_bhb_loop+0x70/0xc0 [ 91.618181][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.618192][ T5972] RIP: 0033:0x7f8f1c79e199 [ 91.618203][ T5972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.618212][ T5972] RSP: 002b:00007f8f1d5c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000cb [ 91.618225][ T5972] RAX: ffffffffffffffda RBX: 00007f8f1ca25fa0 RCX: 00007f8f1c79e199 [ 91.618233][ T5972] RDX: 0000200000000040 RSI: 0000000000000008 RDI: 000000000000001d [ 91.618239][ T5972] RBP: 00007f8f1c8358e0 R08: 0000000000000000 R09: 0000000000000000 [ 91.618246][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.618253][ T5972] R13: 00007f8f1ca26038 R14: 00007f8f1ca25fa0 R15: 00007ffebdcbfe78 [ 91.618269][ T5972] [ 91.755996][ T5971] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 91.890230][ T5974] loop2: detected capacity change from 0 to 256 [ 91.891201][ T5974] exfat: Unknown parameter 'id' [ 95.205734][ T5993] loop2: detected capacity change from 0 to 8 [ 95.776130][ T6002] loop2: detected capacity change from 0 to 128 [ 96.546924][ T6002] loop2: detected capacity change from 0 to 1024 [ 97.033310][ T5996] loop4: detected capacity change from 0 to 8 [ 98.544716][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.548605][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.549256][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.550077][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.550686][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.664302][ T6002] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 98.677987][ T6002] EXT4-fs: error -4 creating inode table initialization thread [ 98.678797][ T6002] EXT4-fs (loop2): mount failed [ 99.146060][ T33] kauditd_printk_skb: 62 callbacks suppressed [ 99.146079][ T33] audit: type=1326 audit(1791353312.300:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.2.52" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8115f9e199 code=0x0 [ 99.228014][ T6011] loop4: detected capacity change from 0 to 4096 [ 99.262127][ T6012] loop0: detected capacity change from 0 to 8192 [ 99.315111][ T6011] ntfs3(loop4): ino=0, mi_enum_attr [ 99.403365][ T6011] ntfs3(loop4): ino=0, mi_enum_attr [ 99.413140][ T6011] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 99.440469][ T6011] ntfs3(loop4): ino=0, mi_enum_attr [ 99.705127][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.840685][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.062631][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.275446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.685521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.737905][ T4925] Bluetooth: hci5: command tx timeout [ 100.797227][ T6011] bridge: RTM_NEWNEIGH with invalid state 0x1c [ 100.937286][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.616340][ T6034] trusted_key: encrypted_key: insufficient parameters specified [ 102.415819][ T5717] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.543948][ T12] bridge_slave_1: left allmulticast mode [ 102.543988][ T12] bridge_slave_1: left promiscuous mode [ 102.545220][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.601204][ T6022] loop1: detected capacity change from 0 to 32768 [ 102.628035][ T12] bridge_slave_0: left allmulticast mode [ 102.629703][ T12] bridge_slave_0: left promiscuous mode [ 102.629929][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.737914][ T6022] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 102.746811][ T4925] Bluetooth: hci5: command tx timeout [ 102.902517][ T5614] ocfs2: Unmounting device (7,1) on (node local) [ 103.272575][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.291059][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.293323][ T12] bond0 (unregistering): Released all slaves [ 103.310105][ T6048] loop1: detected capacity change from 0 to 512 [ 103.793425][ T6061] FAULT_INJECTION: forcing a failure. [ 103.793425][ T6061] name failslab, interval 1, probability 0, space 0, times 1 [ 103.793456][ T6061] CPU: 1 UID: 0 PID: 6061 Comm: syz.2.56 Not tainted syzkaller #0 PREEMPT(full) [ 103.793480][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.793492][ T6061] Call Trace: [ 103.793499][ T6061] [ 103.793508][ T6061] dump_stack_lvl+0xe8/0x150 [ 103.793536][ T6061] should_fail_ex+0x3eb/0x540 [ 103.793563][ T6061] should_failslab+0xa8/0x100 [ 103.793586][ T6061] __kmalloc_cache_noprof+0x9e/0x600 [ 103.793608][ T6061] ? open_substream+0xb4/0x780 [ 103.793627][ T6061] ? open_substream+0xb4/0x780 [ 103.793646][ T6061] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.793670][ T6061] open_substream+0xb4/0x780 [ 103.793696][ T6061] rawmidi_open_priv+0xc4/0x630 [ 103.793723][ T6061] snd_rawmidi_open+0x43b/0xb40 [ 103.793764][ T6061] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 103.793785][ T6061] ? __pfx_default_wake_function+0x10/0x10 [ 103.793814][ T6061] ? snd_open+0x31b/0x3c0 [ 103.793837][ T6061] chrdev_open+0x4d9/0x600 [ 103.793860][ T6061] ? __pfx_chrdev_open+0x10/0x10 [ 103.793883][ T6061] ? devcgroup_check_permission+0x31/0x8f0 [ 103.793909][ T6061] ? __pfx_chrdev_open+0x10/0x10 [ 103.793928][ T6061] do_dentry_open+0x80e/0x1360 [ 103.793960][ T6061] vfs_open_consume+0x4a/0x350 [ 103.793978][ T6061] ? path_openat+0x148a/0x1da0 [ 103.794001][ T6061] path_openat+0x14a6/0x1da0 [ 103.794041][ T6061] do_file_open+0x23e/0x4a0 [ 103.794067][ T6061] ? __pfx_do_file_open+0x10/0x10 [ 103.794105][ T6061] ? _raw_spin_unlock+0x28/0x50 [ 103.794123][ T6061] ? alloc_fd+0x6af/0x760 [ 103.794152][ T6061] do_sys_openat2+0x115/0x200 [ 103.794174][ T6061] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.794198][ T6061] ? do_user_addr_fault+0xd3f/0x1480 [ 103.794221][ T6061] __x64_sys_openat+0x138/0x170 [ 103.794245][ T6061] do_syscall_64+0x166/0x520 [ 103.794263][ T6061] ? trace_irq_disable+0x3b/0x140 [ 103.794284][ T6061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.794305][ T6061] ? clear_bhb_loop+0x70/0xc0 [ 103.794327][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.794348][ T6061] RIP: 0033:0x7f8115f5e9ce [ 103.794367][ T6061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.794385][ T6061] RSP: 002b:00007f81141f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.794408][ T6061] RAX: ffffffffffffffda RBX: 00007f81141f66c0 RCX: 00007f8115f5e9ce [ 103.794423][ T6061] RDX: 0000000000141102 RSI: 00007f81141f5c00 RDI: ffffffffffffff9c [ 103.794437][ T6061] RBP: 00007f81141f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 103.794450][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 103.794464][ T6061] R13: 00007f8116226038 R14: 00007f8116225fa0 R15: 00007ffec8cf9778 [ 103.794498][ T6061] [ 103.834084][ T6063] loop4: detected capacity change from 0 to 512 [ 103.891304][ T6063] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 103.905630][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 103.905652][ C0] EXT4-fs (loop4): initial error at time 1791353317: mb_free_blocks:2049: inode 11: block 64 [ 103.905685][ C0] EXT4-fs (loop4): last error at time 1791353317: mb_free_blocks:2049: inode 11: block 64 [ 103.914139][ T6063] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #11: comm syz.4.54: corrupted inode contents [ 103.914168][ T6063] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 103.929522][ T6063] EXT4-fs error (device loop4): ext4_dirty_inode:6733: inode #11: comm syz.4.54: mark_inode_dirty error [ 103.929552][ T6063] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 103.937348][ T6063] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.54: invalid indirect mapped block 1 (level 1) [ 103.937381][ T6063] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 103.949733][ T6063] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #11: comm syz.4.54: corrupted inode contents [ 103.949766][ T6063] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 103.974696][ T6063] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem [ 103.985065][ T6063] loop4: lost filesystem error report for type 5 error -117 [ 103.989632][ T6063] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #11: comm syz.4.54: corrupted inode contents [ 103.989660][ T6063] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 103.990619][ T6063] EXT4-fs error (device loop4): ext4_truncate:4721: inode #11: comm syz.4.54: mark_inode_dirty error [ 103.990767][ T6063] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 103.993984][ T6063] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem [ 103.994005][ T6063] loop4: lost filesystem error report for type 5 error -117 [ 103.994429][ T6063] EXT4-fs (loop4): 1 truncate cleaned up [ 104.001042][ T6063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.094777][ T6063] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.54: iget: bogus i_mode (3355) [ 104.200162][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.210955][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.211112][ T5999] bridge_slave_0: entered allmulticast mode [ 104.223142][ T5999] bridge_slave_0: entered promiscuous mode [ 104.359693][ T6073] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.54: iget: bogus i_mode (3355) [ 104.399407][ T6073] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.54: iget: bogus i_mode (3355) [ 104.531146][ T6074] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.54: iget: bogus i_mode (3355) [ 104.825361][ T4925] Bluetooth: hci5: command tx timeout [ 105.805725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.362342][ T6087] loop0: detected capacity change from 0 to 256 [ 106.380956][ T6087] exfat: Bad value for 'gid' [ 106.380975][ T6087] exfat: Bad value for 'gid' [ 106.402794][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.402891][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.403047][ T5999] bridge_slave_1: entered allmulticast mode [ 106.442514][ T5999] bridge_slave_1: entered promiscuous mode [ 106.553203][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.779132][ T5999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.820519][ T33] audit: type=1400 audit(1791353319.980:75): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":proc/thread-self/attr/current" pid=6094 comm="syz.4.65" [ 106.863160][ T12] hsr_slave_0: left promiscuous mode [ 106.863894][ T12] hsr_slave_1: left promiscuous mode [ 106.864671][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.864722][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.870100][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.870119][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.906983][ T4925] Bluetooth: hci5: command tx timeout [ 106.931761][ T12] veth1_macvtap: left promiscuous mode [ 106.931815][ T12] veth0_macvtap: left promiscuous mode [ 106.931916][ T12] veth1_vlan: left promiscuous mode [ 106.931995][ T12] veth0_vlan: left promiscuous mode [ 106.978698][ T6099] loop1: detected capacity change from 0 to 512 [ 107.032464][ T6099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.032562][ T6099] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.102722][ T33] audit: type=1400 audit(1791353320.260:76): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6106 comm="syz.4.68" name="p" offset=48 [ 107.375532][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.434495][ T12] team0 (unregistering): Port device team_slave_1 removed [ 107.464934][ T12] team0 (unregistering): Port device team_slave_0 removed [ 107.527870][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 107.540886][ T9] usb 5-1: New USB device found: idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 107.554439][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 107.571806][ T9] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 107.571833][ T9] usb 5-1: Product: syz [ 107.571847][ T9] usb 5-1: Manufacturer: syz [ 107.571861][ T9] usb 5-1: SerialNumber: syz [ 108.791933][ T9] usb 5-1: palm_os_3_probe - error -110 getting connection information [ 108.792034][ T9] visor 5-1:1.0: probe with driver visor failed with error -110 [ 108.925096][ T275] IPVS: starting estimator thread 0... [ 109.003353][ T5999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.007294][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 109.016153][ T6114] IPVS: using max 29 ests per chain, 69600 per kthread [ 109.055080][ T3105] usb 5-1: USB disconnect, device number 2 [ 109.153000][ T6121] loop0: detected capacity change from 0 to 128 [ 109.168788][ T6121] EXT4-fs (loop0): Test dummy encryption mode enabled [ 109.207404][ T6121] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.214129][ T6121] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.220912][ T5999] team0: Port device team_slave_0 added [ 109.223806][ T5999] team0: Port device team_slave_1 added [ 109.443058][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.443075][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.443099][ T5999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.448483][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.448499][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.448522][ T5999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.547548][ T5999] hsr_slave_0: entered promiscuous mode [ 109.552356][ T6124] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 109.561623][ T5999] hsr_slave_1: entered promiscuous mode [ 110.041096][ T5603] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.098703][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.682415][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'. [ 111.711231][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 111.815388][ T3105] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.944630][ T5999] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.960695][ T5999] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.965058][ T5999] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.965717][ T3105] usb 3-1: Using ep0 maxpacket: 32 [ 111.966562][ T3105] usb 3-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 111.972539][ T3105] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.979208][ T3105] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.979231][ T3105] usb 3-1: Product: syz [ 111.979245][ T3105] usb 3-1: Manufacturer: syz [ 111.979258][ T3105] usb 3-1: SerialNumber: syz [ 111.994482][ T3105] usb 3-1: config 0 descriptor?? [ 112.047319][ T5999] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.048099][ T5999] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.060624][ T3105] gs_usb 3-1:0.0: Required endpoints not found [ 112.099125][ T5999] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.103112][ T5999] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.116370][ T5999] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.206721][ T6146] netlink: 'syz.2.69': attribute type 1 has an invalid length. [ 112.206738][ T6146] netlink: 348 bytes leftover after parsing attributes in process `syz.2.69'. [ 112.293590][ T6151] loop1: detected capacity change from 0 to 32768 [ 112.309675][ T6151] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.73 (6151) [ 112.326328][ T6151] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.326359][ T6151] BTRFS info (device loop1): using sha256 checksum algorithm [ 112.457422][ T75] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0x26b3563aac28e1d88fd2d5c20558af4e1eb1c34d4d68f08651459bc4aa16d465 level 0 [ 112.464178][ T6151] BTRFS warning (device loop1): couldn't read tree root [ 112.626342][ T5999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.639935][ T6151] BTRFS error (device loop1): open_ctree failed: -EIO [ 112.740788][ T5999] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.784507][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.784616][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.825115][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.825237][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.586055][ T6197] bond0: (slave bond_slave_0): Releasing backup interface [ 114.723316][ T6196] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.762268][ T5725] usb 3-1: USB disconnect, device number 2 [ 114.825819][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 114.940263][ T6215] loop2: detected capacity change from 0 to 256 [ 114.953799][ T6215] exfat: Unknown parameter 'subj_role' [ 115.003758][ T6215] FAULT_INJECTION: forcing a failure. [ 115.003758][ T6215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.003798][ T6215] CPU: 1 UID: 0 PID: 6215 Comm: syz.2.79 Not tainted syzkaller #0 PREEMPT(full) [ 115.003823][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.003835][ T6215] Call Trace: [ 115.003843][ T6215] [ 115.003853][ T6215] dump_stack_lvl+0xe8/0x150 [ 115.003892][ T6215] should_fail_ex+0x3eb/0x540 [ 115.003919][ T6215] _copy_to_user+0x31/0xb0 [ 115.003942][ T6215] bpf_verifier_vlog+0x606/0x900 [ 115.003975][ T6215] __btf_verifier_log+0xe2/0x140 [ 115.004001][ T6215] ? __pfx___btf_verifier_log+0x10/0x10 [ 115.004030][ T6215] ? btf_parse_hdr+0x1da/0x810 [ 115.004054][ T6215] btf_parse_hdr+0x3c1/0x810 [ 115.004079][ T6215] btf_new_fd+0x337/0xc20 [ 115.004101][ T6215] ? __sys_sendmmsg+0x290/0x4d0 [ 115.004120][ T6215] __sys_bpf+0xda7/0xe00 [ 115.004154][ T6215] ? __sys_sendmmsg+0x290/0x4d0 [ 115.004172][ T6215] ? __pfx___sys_bpf+0x10/0x10 [ 115.004195][ T6215] ? do_futex+0x3e7/0x4e0 [ 115.004215][ T6215] ? __sys_sendmmsg+0x290/0x4d0 [ 115.004253][ T6215] ? rcu_is_watching+0x16/0xb0 [ 115.004279][ T6215] __x64_sys_bpf+0xba/0xd0 [ 115.004309][ T6215] do_syscall_64+0x166/0x520 [ 115.004328][ T6215] ? trace_irq_disable+0x3b/0x140 [ 115.004347][ T6215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.004368][ T6215] ? clear_bhb_loop+0x70/0xc0 [ 115.004390][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.004410][ T6215] RIP: 0033:0x7f8115f9e199 [ 115.004436][ T6215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.004453][ T6215] RSP: 002b:00007f81141f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.004479][ T6215] RAX: ffffffffffffffda RBX: 00007f8116225fa0 RCX: 00007f8115f9e199 [ 115.004494][ T6215] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 115.004508][ T6215] RBP: 00007f81160358e0 R08: 0000000000000000 R09: 0000000000000000 [ 115.004521][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.004533][ T6215] R13: 00007f8116226038 R14: 00007f8116225fa0 R15: 00007ffec8cf9778 [ 115.004565][ T6215] [ 116.484067][ T6212] loop1: detected capacity change from 0 to 4096 [ 116.489902][ T6212] nilfs2: Unknown parameter 'norecvery' [ 116.742418][ T6230] loop2: detected capacity change from 0 to 128 [ 116.926308][ T6231] loop2: detected capacity change from 0 to 1024 [ 119.106817][ T6231] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 119.428977][ T6231] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 119.460396][ T6231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.941704][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.280569][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 121.521297][ T5999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.862862][ T6265] loop1: detected capacity change from 0 to 128 [ 122.278617][ T6266] loop1: detected capacity change from 0 to 1024 [ 123.780851][ T6266] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 124.611407][ T6266] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 124.637033][ T6266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.790655][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 124.874493][ T6271] FAULT_INJECTION: forcing a failure. [ 124.874493][ T6271] name fail_futex, interval 1, probability 0, space 0, times 0 [ 124.874525][ T6271] CPU: 0 UID: 0 PID: 6271 Comm: syz.0.77 Not tainted syzkaller #0 PREEMPT(full) [ 124.874548][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.874560][ T6271] Call Trace: [ 124.874568][ T6271] [ 124.874577][ T6271] dump_stack_lvl+0xe8/0x150 [ 124.874594][ T6271] should_fail_ex+0x3eb/0x540 [ 124.874609][ T6271] get_futex_key+0x1b4/0x1580 [ 124.874626][ T6271] ? __pfx_get_futex_key+0x10/0x10 [ 124.874644][ T6271] futex_wake+0x119/0x5f0 [ 124.874655][ T6271] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 124.874669][ T6271] ? __pfx_futex_wake+0x10/0x10 [ 124.874678][ T6271] ? __sched_core_set+0x27e/0x430 [ 124.874689][ T6271] ? preempt_schedule_common+0x7f/0xd0 [ 124.874700][ T6271] ? preempt_schedule_thunk+0x16/0x40 [ 124.874714][ T6271] do_futex+0x458/0x4e0 [ 124.874728][ T6271] ? __pfx_do_futex+0x10/0x10 [ 124.874737][ T6271] ? __pfx_sched_core_share_pid+0x10/0x10 [ 124.874751][ T6271] __se_sys_futex+0x3a8/0x450 [ 124.874765][ T6271] ? __pfx___se_sys_futex+0x10/0x10 [ 124.874775][ T6271] ? __pfx___se_sys_prctl+0x10/0x10 [ 124.874795][ T6271] ? __x64_sys_futex+0x21/0xf0 [ 124.874807][ T6271] do_syscall_64+0x166/0x520 [ 124.874818][ T6271] ? trace_irq_disable+0x3b/0x140 [ 124.874827][ T6271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.874839][ T6271] ? clear_bhb_loop+0x70/0xc0 [ 124.874850][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.874861][ T6271] RIP: 0033:0x7f8f1c79e199 [ 124.874872][ T6271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.874882][ T6271] RSP: 002b:00007f8f1d5c90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.874895][ T6271] RAX: ffffffffffffffda RBX: 00007f8f1ca25fa8 RCX: 00007f8f1c79e199 [ 124.874903][ T6271] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8f1ca25fac [ 124.874910][ T6271] RBP: 00007f8f1ca25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 124.874917][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.874923][ T6271] R13: 00007f8f1ca26038 R14: 00007ffebdcbfd90 R15: 00007ffebdcbfe78 [ 124.874939][ T6271] [ 125.875401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.258084][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.481370][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 126.751951][ T5999] veth0_vlan: entered promiscuous mode [ 126.791161][ T5999] veth1_vlan: entered promiscuous mode [ 126.922606][ T6285] ipip0: entered allmulticast mode [ 126.982152][ T5999] veth0_macvtap: entered promiscuous mode [ 127.003856][ T5999] veth1_macvtap: entered promiscuous mode [ 128.188457][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.210445][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.325631][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.326072][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.326108][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.326137][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.334464][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.334483][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.424758][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.424778][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.864366][ T6308] loop5: detected capacity change from 0 to 256 [ 128.876139][ T6308] exfat: Unknown parameter 'subj_role' [ 128.914985][ T6308] FAULT_INJECTION: forcing a failure. [ 128.914985][ T6308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.915015][ T6308] CPU: 1 UID: 0 PID: 6308 Comm: syz.5.49 Not tainted syzkaller #0 PREEMPT(full) [ 128.915039][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.915052][ T6308] Call Trace: [ 128.915060][ T6308] [ 128.915069][ T6308] dump_stack_lvl+0xe8/0x150 [ 128.915098][ T6308] should_fail_ex+0x3eb/0x540 [ 128.915125][ T6308] _copy_to_user+0x31/0xb0 [ 128.915148][ T6308] bpf_verifier_vlog+0x606/0x900 [ 128.915181][ T6308] __btf_verifier_log+0xe2/0x140 [ 128.915208][ T6308] ? __pfx___btf_verifier_log+0x10/0x10 [ 128.915236][ T6308] ? btf_parse_hdr+0x1da/0x810 [ 128.915264][ T6308] btf_parse_hdr+0x3c1/0x810 [ 128.915287][ T6308] btf_new_fd+0x337/0xc20 [ 128.915307][ T6308] ? __sys_sendmmsg+0x290/0x4d0 [ 128.915328][ T6308] __sys_bpf+0xda7/0xe00 [ 128.915354][ T6308] ? __sys_sendmmsg+0x290/0x4d0 [ 128.915372][ T6308] ? __pfx___sys_bpf+0x10/0x10 [ 128.915395][ T6308] ? do_futex+0x3e7/0x4e0 [ 128.915416][ T6308] ? __sys_sendmmsg+0x290/0x4d0 [ 128.915458][ T6308] ? rcu_is_watching+0x16/0xb0 [ 128.915484][ T6308] __x64_sys_bpf+0xba/0xd0 [ 128.915506][ T6308] do_syscall_64+0x166/0x520 [ 128.915524][ T6308] ? trace_irq_disable+0x3b/0x140 [ 128.915543][ T6308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.915564][ T6308] ? clear_bhb_loop+0x70/0xc0 [ 128.915591][ T6308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.915611][ T6308] RIP: 0033:0x7efca659e199 [ 128.915629][ T6308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.915646][ T6308] RSP: 002b:00007efca73d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.915669][ T6308] RAX: ffffffffffffffda RBX: 00007efca6825fa0 RCX: 00007efca659e199 [ 128.915684][ T6308] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 128.915695][ T6308] RBP: 00007efca66358e0 R08: 0000000000000000 R09: 0000000000000000 [ 128.915708][ T6308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.915737][ T6308] R13: 00007efca6826038 R14: 00007efca6825fa0 R15: 00007ffe756cf058 [ 128.915769][ T6308] [ 129.271843][ T6318] loop5: detected capacity change from 0 to 128 [ 129.281872][ T6318] EXT4-fs (loop5): Test dummy encryption mode enabled [ 129.308559][ T6318] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.311149][ T6318] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.995457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 131.406891][ T5999] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.827858][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.828607][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.867077][ T6350] loop4: detected capacity change from 0 to 512 [ 132.884344][ T6339] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 132.908780][ T6350] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.952794][ T6350] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 132.991821][ T6350] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.104: bg 0: block 248: padding at end of block bitmap is not set [ 132.991871][ T6350] loop4: lost filesystem error report for type 5 error -117 [ 133.007329][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 133.007351][ C1] EXT4-fs (loop4): last error at time 1791353346: ext4_validate_block_bitmap:445 [ 133.038627][ T6350] Quota error (device loop4): write_blk: dquota write failed [ 133.038723][ T6350] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 133.038771][ T6350] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.104: Failed to acquire dquot type 1 [ 133.038792][ T6350] loop4: lost filesystem error report for type 5 error -28 [ 133.133806][ T6350] EXT4-fs (loop4): 1 truncate cleaned up [ 133.142391][ T6350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 133.173055][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 133.309831][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 133.541972][ T6366] netlink: 40 bytes leftover after parsing attributes in process `syz.2.109'. [ 133.593613][ T6366] rnbd_client L203: map_device: Unknown parameter or missing value 'ses' [ 135.043013][ T6366] loop2: detected capacity change from 0 to 4096 [ 135.293835][ T6376] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.408083][ T6380] loop1: detected capacity change from 0 to 4096 [ 135.410027][ T6380] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.433042][ T6380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.481116][ T6381] loop4: detected capacity change from 0 to 128 [ 135.500139][ T6381] EXT4-fs (loop4): Test dummy encryption mode enabled [ 135.531402][ T6381] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.566727][ T6381] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.765475][ T6393] loop5: detected capacity change from 0 to 256 [ 135.766304][ T6393] exfat: Unknown parameter 'subj_role' [ 135.775239][ T6393] FAULT_INJECTION: forcing a failure. [ 135.775239][ T6393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.775655][ T6393] CPU: 0 UID: 0 PID: 6393 Comm: syz.5.106 Not tainted syzkaller #0 PREEMPT(full) [ 135.775678][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.775690][ T6393] Call Trace: [ 135.775698][ T6393] [ 135.775706][ T6393] dump_stack_lvl+0xe8/0x150 [ 135.775733][ T6393] should_fail_ex+0x3eb/0x540 [ 135.775758][ T6393] _copy_to_user+0x31/0xb0 [ 135.775780][ T6393] bpf_verifier_vlog+0x606/0x900 [ 135.775811][ T6393] __btf_verifier_log+0xe2/0x140 [ 135.775836][ T6393] ? __pfx___btf_verifier_log+0x10/0x10 [ 135.775862][ T6393] ? btf_parse_hdr+0x1da/0x810 [ 135.775885][ T6393] btf_parse_hdr+0x3c1/0x810 [ 135.775909][ T6393] btf_new_fd+0x337/0xc20 [ 135.775930][ T6393] ? __sys_sendmmsg+0x290/0x4d0 [ 135.775951][ T6393] __sys_bpf+0xda7/0xe00 [ 135.775976][ T6393] ? __sys_sendmmsg+0x290/0x4d0 [ 135.775994][ T6393] ? __pfx___sys_bpf+0x10/0x10 [ 135.776017][ T6393] ? do_futex+0x3e7/0x4e0 [ 135.776036][ T6393] ? __sys_sendmmsg+0x290/0x4d0 [ 135.776075][ T6393] ? rcu_is_watching+0x16/0xb0 [ 135.776098][ T6393] __x64_sys_bpf+0xba/0xd0 [ 135.776119][ T6393] do_syscall_64+0x166/0x520 [ 135.776137][ T6393] ? trace_irq_disable+0x3b/0x140 [ 135.776155][ T6393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.776175][ T6393] ? clear_bhb_loop+0x70/0xc0 [ 135.776195][ T6393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.776214][ T6393] RIP: 0033:0x7efca659e199 [ 135.776233][ T6393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.776249][ T6393] RSP: 002b:00007efca73d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.776271][ T6393] RAX: ffffffffffffffda RBX: 00007efca6825fa0 RCX: 00007efca659e199 [ 135.776286][ T6393] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 135.776298][ T6393] RBP: 00007efca66358e0 R08: 0000000000000000 R09: 0000000000000000 [ 135.776312][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.776324][ T6393] R13: 00007efca6826038 R14: 00007efca6825fa0 R15: 00007ffe756cf058 [ 135.776353][ T6393] [ 136.617348][ T3105] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 136.629259][ T5604] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.776840][ T3105] usb 2-1: Using ep0 maxpacket: 8 [ 136.777551][ T3105] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.795496][ T3105] usb 2-1: config index 0 descriptor too short (expected 31622, got 45) [ 136.795522][ T3105] usb 2-1: config 74 has too many interfaces: 40, using maximum allowed: 32 [ 136.795541][ T3105] usb 2-1: config 74 has an invalid descriptor of length 37, skipping remainder of the config [ 136.795559][ T3105] usb 2-1: config 74 has 0 interfaces, different from the descriptor's value: 40 [ 136.795594][ T3105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.869036][ T6398] loop4: detected capacity change from 0 to 764 [ 136.977497][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 138.378176][ T6400] loop5: detected capacity change from 0 to 1024 [ 138.472082][ T6380] IPv6: Can't replace route, no match found [ 138.496938][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.513706][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.529769][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.530212][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.900758][ T6412] loop4: detected capacity change from 0 to 4096 [ 138.927559][ T6412] ntfs3(loop4): ino=0, mi_enum_attr [ 138.966058][ T6412] ntfs3(loop4): ino=0, mi_enum_attr [ 138.966092][ T6412] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 138.970745][ T6412] ntfs3(loop4): ino=0, mi_enum_attr [ 139.141576][ T3105] usb 2-1: string descriptor 0 read error: -71 [ 139.154412][ T3105] usb 2-1: USB disconnect, device number 2 [ 139.235882][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.376591][ T6421] FAULT_INJECTION: forcing a failure. [ 139.376591][ T6421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.376611][ T6421] CPU: 1 UID: 0 PID: 6421 Comm: syz.5.122 Not tainted syzkaller #0 PREEMPT(full) [ 139.376623][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 139.376629][ T6421] Call Trace: [ 139.376634][ T6421] [ 139.376639][ T6421] dump_stack_lvl+0xe8/0x150 [ 139.376655][ T6421] should_fail_ex+0x3eb/0x540 [ 139.376669][ T6421] _copy_from_user+0x2d/0xb0 [ 139.376681][ T6421] get_user_ifreq+0x6b/0x180 [ 139.376694][ T6421] sock_ioctl+0x6f8/0x7e0 [ 139.376705][ T6421] ? __pfx_sock_ioctl+0x10/0x10 [ 139.376717][ T6421] ? __fget_files+0x2a/0x420 [ 139.376731][ T6421] ? bpf_lsm_file_ioctl+0x9/0x20 [ 139.376742][ T6421] ? __pfx_sock_ioctl+0x10/0x10 [ 139.376752][ T6421] __se_sys_ioctl+0xfc/0x170 [ 139.376763][ T6421] do_syscall_64+0x166/0x520 [ 139.376773][ T6421] ? trace_irq_disable+0x3b/0x140 [ 139.376790][ T6421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.376802][ T6421] ? clear_bhb_loop+0x70/0xc0 [ 139.376813][ T6421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.376824][ T6421] RIP: 0033:0x7efca659e199 [ 139.376835][ T6421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.376844][ T6421] RSP: 002b:00007efca73b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.376856][ T6421] RAX: ffffffffffffffda RBX: 00007efca6826090 RCX: 00007efca659e199 [ 139.376864][ T6421] RDX: 00002000000001c0 RSI: 00000000000089f6 RDI: 0000000000000003 [ 139.376871][ T6421] RBP: 00007efca66358e0 R08: 0000000000000000 R09: 0000000000000000 [ 139.376877][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.376883][ T6421] R13: 00007efca6826128 R14: 00007efca6826090 R15: 00007ffe756cf058 [ 139.376899][ T6421] [ 140.547356][ T6428] loop5: detected capacity change from 0 to 256 [ 140.578145][ T6428] exfat: Unknown parameter 'subj_role' [ 140.679441][ T6428] FAULT_INJECTION: forcing a failure. [ 140.679441][ T6428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.679494][ T6428] CPU: 0 UID: 0 PID: 6428 Comm: syz.5.124 Not tainted syzkaller #0 PREEMPT(full) [ 140.679538][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.679552][ T6428] Call Trace: [ 140.679559][ T6428] [ 140.679568][ T6428] dump_stack_lvl+0xe8/0x150 [ 140.679604][ T6428] should_fail_ex+0x3eb/0x540 [ 140.679654][ T6428] _copy_to_user+0x31/0xb0 [ 140.679705][ T6428] bpf_verifier_vlog+0x52a/0x900 [ 140.679780][ T6428] __btf_verifier_log+0xe2/0x140 [ 140.679818][ T6428] ? __pfx___btf_verifier_log+0x10/0x10 [ 140.679843][ T6428] ? btf_parse_hdr+0x1da/0x810 [ 140.679867][ T6428] btf_parse_hdr+0x3c1/0x810 [ 140.679907][ T6428] btf_new_fd+0x337/0xc20 [ 140.679946][ T6428] ? __sys_sendmmsg+0x290/0x4d0 [ 140.679973][ T6428] __sys_bpf+0xda7/0xe00 [ 140.680022][ T6428] ? __sys_sendmmsg+0x290/0x4d0 [ 140.680048][ T6428] ? __pfx___sys_bpf+0x10/0x10 [ 140.680072][ T6428] ? do_futex+0x3e7/0x4e0 [ 140.680093][ T6428] ? __sys_sendmmsg+0x290/0x4d0 [ 140.680144][ T6428] ? rcu_is_watching+0x16/0xb0 [ 140.680170][ T6428] __x64_sys_bpf+0xba/0xd0 [ 140.680201][ T6428] do_syscall_64+0x166/0x520 [ 140.680221][ T6428] ? trace_irq_disable+0x3b/0x140 [ 140.680240][ T6428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.680272][ T6428] ? clear_bhb_loop+0x70/0xc0 [ 140.680311][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.680340][ T6428] RIP: 0033:0x7efca659e199 [ 140.680369][ T6428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.680400][ T6428] RSP: 002b:00007efca73d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.680430][ T6428] RAX: ffffffffffffffda RBX: 00007efca6825fa0 RCX: 00007efca659e199 [ 140.680467][ T6428] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 140.680482][ T6428] RBP: 00007efca66358e0 R08: 0000000000000000 R09: 0000000000000000 [ 140.680501][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.680529][ T6428] R13: 00007efca6826038 R14: 00007efca6825fa0 R15: 00007ffe756cf058 [ 140.680576][ T6428] [ 141.235556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 141.480515][ T6429] bridge: RTM_NEWNEIGH with invalid state 0x1c [ 141.949569][ T6435] loop5: detected capacity change from 0 to 24 [ 141.952948][ T6435] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 142.368929][ T6435] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 143.321671][ T6446] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 143.322064][ T6446] overlayfs: overlapping lowerdir path [ 143.795505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 144.190749][ T6450] FAULT_INJECTION: forcing a failure. [ 144.190749][ T6450] name fail_futex, interval 1, probability 0, space 0, times 0 [ 144.190779][ T6450] CPU: 0 UID: 0 PID: 6450 Comm: syz.5.129 Not tainted syzkaller #0 PREEMPT(full) [ 144.190794][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 144.190802][ T6450] Call Trace: [ 144.190813][ T6450] [ 144.190818][ T6450] dump_stack_lvl+0xe8/0x150 [ 144.190837][ T6450] should_fail_ex+0x3eb/0x540 [ 144.190851][ T6450] get_futex_key+0x1b4/0x1580 [ 144.190868][ T6450] ? __pfx_get_futex_key+0x10/0x10 [ 144.190886][ T6450] futex_wake+0x119/0x5f0 [ 144.190896][ T6450] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 144.190910][ T6450] ? __pfx_futex_wake+0x10/0x10 [ 144.190919][ T6450] ? __sched_core_set+0x27e/0x430 [ 144.190931][ T6450] ? preempt_schedule_common+0x7f/0xd0 [ 144.190943][ T6450] ? preempt_schedule_thunk+0x16/0x40 [ 144.190957][ T6450] do_futex+0x458/0x4e0 [ 144.190970][ T6450] ? __pfx_do_futex+0x10/0x10 [ 144.190980][ T6450] ? __pfx_sched_core_share_pid+0x10/0x10 [ 144.190994][ T6450] __se_sys_futex+0x3a8/0x450 [ 144.191007][ T6450] ? __pfx___se_sys_futex+0x10/0x10 [ 144.191017][ T6450] ? __pfx___se_sys_prctl+0x10/0x10 [ 144.191031][ T6450] ? __x64_sys_futex+0x21/0xf0 [ 144.191042][ T6450] do_syscall_64+0x166/0x520 [ 144.191052][ T6450] ? trace_irq_disable+0x3b/0x140 [ 144.191062][ T6450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.191073][ T6450] ? clear_bhb_loop+0x70/0xc0 [ 144.191084][ T6450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.191094][ T6450] RIP: 0033:0x7efca659e199 [ 144.191106][ T6450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.191115][ T6450] RSP: 002b:00007efca73d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 144.191126][ T6450] RAX: ffffffffffffffda RBX: 00007efca6825fa8 RCX: 00007efca659e199 [ 144.191134][ T6450] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efca6825fac [ 144.191141][ T6450] RBP: 00007efca6825fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 144.191148][ T6450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.191154][ T6450] R13: 00007efca6826038 R14: 00007ffe756cef70 R15: 00007ffe756cf058 [ 144.191170][ T6450] [ 148.235125][ T27] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 148.477566][ T6478] loop4: detected capacity change from 0 to 256 [ 148.480554][ T6478] exfat: Unknown parameter 'subj_role' [ 148.546534][ T6478] FAULT_INJECTION: forcing a failure. [ 148.546534][ T6478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.546565][ T6478] CPU: 0 UID: 0 PID: 6478 Comm: syz.4.125 Not tainted syzkaller #0 PREEMPT(full) [ 148.546589][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 148.546601][ T6478] Call Trace: [ 148.546609][ T6478] [ 148.546618][ T6478] dump_stack_lvl+0xe8/0x150 [ 148.546646][ T6478] should_fail_ex+0x3eb/0x540 [ 148.546673][ T6478] _copy_to_user+0x31/0xb0 [ 148.546695][ T6478] bpf_verifier_vlog+0x52a/0x900 [ 148.546727][ T6478] btf_verifier_log+0x11d/0x1a0 [ 148.546746][ T6478] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 148.546771][ T6478] ? __pfx_btf_verifier_log+0x10/0x10 [ 148.546791][ T6478] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 148.546810][ T6478] ? __btf_verifier_log+0xe2/0x140 [ 148.546835][ T6478] btf_check_sec_info+0x346/0x5b0 [ 148.546861][ T6478] ? __pfx_btf_check_sec_info+0x10/0x10 [ 148.546894][ T6478] btf_new_fd+0x337/0xc20 [ 148.546920][ T6478] __sys_bpf+0xda7/0xe00 [ 148.546947][ T6478] ? __pfx___sys_bpf+0x10/0x10 [ 148.546970][ T6478] ? do_futex+0x458/0x4e0 [ 148.547017][ T6478] ? rcu_is_watching+0x16/0xb0 [ 148.547046][ T6478] __x64_sys_bpf+0xba/0xd0 [ 148.547068][ T6478] do_syscall_64+0x166/0x520 [ 148.547089][ T6478] ? trace_irq_disable+0x3b/0x140 [ 148.547107][ T6478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.547127][ T6478] ? clear_bhb_loop+0x70/0xc0 [ 148.547149][ T6478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.547170][ T6478] RIP: 0033:0x7fdd9d39e199 [ 148.547188][ T6478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.547206][ T6478] RSP: 002b:00007fdd9e289028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.547228][ T6478] RAX: ffffffffffffffda RBX: 00007fdd9d625fa0 RCX: 00007fdd9d39e199 [ 148.547243][ T6478] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 148.547257][ T6478] RBP: 00007fdd9d4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 148.547270][ T6478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.547282][ T6478] R13: 00007fdd9d626038 R14: 00007fdd9d625fa0 R15: 00007ffd4bcd6848 [ 148.547315][ T6478] [ 150.710063][ T6513] FAULT_INJECTION: forcing a failure. [ 150.710063][ T6513] name failslab, interval 1, probability 0, space 0, times 0 [ 150.710098][ T6513] CPU: 0 UID: 0 PID: 6513 Comm: syz.5.133 Not tainted syzkaller #0 PREEMPT(full) [ 150.710120][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.710132][ T6513] Call Trace: [ 150.710140][ T6513] [ 150.710148][ T6513] dump_stack_lvl+0xe8/0x150 [ 150.710177][ T6513] should_fail_ex+0x3eb/0x540 [ 150.710204][ T6513] should_failslab+0xa8/0x100 [ 150.710227][ T6513] __kmalloc_cache_noprof+0x9e/0x600 [ 150.710247][ T6513] ? __kasan_kmalloc+0x93/0xb0 [ 150.710267][ T6513] ? append_filter_err+0xa6/0x460 [ 150.710284][ T6513] ? append_filter_err+0xa6/0x460 [ 150.710304][ T6513] ? __kmalloc_cache_noprof+0x148/0x600 [ 150.710327][ T6513] append_filter_err+0xa6/0x460 [ 150.710351][ T6513] ? create_filter_start+0x15c/0x1e0 [ 150.710374][ T6513] create_filter+0x110/0x180 [ 150.710400][ T6513] apply_event_filter+0x154/0x510 [ 150.710432][ T6513] event_filter_write+0x16f/0x220 [ 150.710454][ T6513] ? __pfx_event_filter_write+0x10/0x10 [ 150.710474][ T6513] vfs_write+0x296/0xba0 [ 150.710502][ T6513] ? __pfx_vfs_write+0x10/0x10 [ 150.710524][ T6513] ? __fget_files+0x2a/0x420 [ 150.710541][ T6513] ? __fget_files+0x3a2/0x420 [ 150.710558][ T6513] ? __fget_files+0x2a/0x420 [ 150.710581][ T6513] ? fdget+0x1ac/0x250 [ 150.710615][ T6513] ksys_write+0x150/0x270 [ 150.710637][ T6513] ? __pfx_ksys_write+0x10/0x10 [ 150.710670][ T6513] do_syscall_64+0x166/0x520 [ 150.710690][ T6513] ? trace_irq_disable+0x3b/0x140 [ 150.710708][ T6513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.710730][ T6513] ? clear_bhb_loop+0x70/0xc0 [ 150.710752][ T6513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.710772][ T6513] RIP: 0033:0x7efca659e199 [ 150.710792][ T6513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.710808][ T6513] RSP: 002b:00007efca73d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.710830][ T6513] RAX: ffffffffffffffda RBX: 00007efca6825fa0 RCX: 00007efca659e199 [ 150.710845][ T6513] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000003 [ 150.710858][ T6513] RBP: 00007efca66358e0 R08: 0000000000000000 R09: 0000000000000000 [ 150.710871][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.710884][ T6513] R13: 00007efca6826038 R14: 00007efca6825fa0 R15: 00007ffe756cf058 [ 150.710917][ T6513] [ 150.966351][ T6523] loop2: detected capacity change from 0 to 24 [ 150.972830][ T6523] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 151.019532][ T6523] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 151.898441][ T6528] FAULT_INJECTION: forcing a failure. [ 151.898441][ T6528] name fail_futex, interval 1, probability 0, space 0, times 0 [ 151.898478][ T6528] CPU: 0 UID: 0 PID: 6528 Comm: syz.2.141 Not tainted syzkaller #0 PREEMPT(full) [ 151.898501][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.898513][ T6528] Call Trace: [ 151.898521][ T6528] [ 151.898529][ T6528] dump_stack_lvl+0xe8/0x150 [ 151.898556][ T6528] should_fail_ex+0x3eb/0x540 [ 151.898582][ T6528] get_futex_key+0x1b4/0x1580 [ 151.898607][ T6528] ? __pfx_futex_wake_mark+0x10/0x10 [ 151.898633][ T6528] ? __pfx_get_futex_key+0x10/0x10 [ 151.898666][ T6528] futex_wake+0x119/0x5f0 [ 151.898688][ T6528] ? __pfx_futex_wait+0x10/0x10 [ 151.898708][ T6528] ? __pfx_futex_wake+0x10/0x10 [ 151.898742][ T6528] do_futex+0x458/0x4e0 [ 151.898765][ T6528] ? __pfx_do_futex+0x10/0x10 [ 151.898793][ T6528] __se_sys_futex+0x3a8/0x450 [ 151.898819][ T6528] ? __pfx___se_sys_futex+0x10/0x10 [ 151.898838][ T6528] ? rcu_is_watching+0x16/0xb0 [ 151.898864][ T6528] ? __x64_sys_futex+0x21/0xf0 [ 151.898886][ T6528] do_syscall_64+0x166/0x520 [ 151.898905][ T6528] ? trace_irq_disable+0x3b/0x140 [ 151.898923][ T6528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.898944][ T6528] ? clear_bhb_loop+0x70/0xc0 [ 151.898962][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.898977][ T6528] RIP: 0033:0x7f8115f9e199 [ 151.898996][ T6528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.899012][ T6528] RSP: 002b:00007f81141f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 151.899034][ T6528] RAX: ffffffffffffffda RBX: 00007f8116225fa8 RCX: 00007f8115f9e199 [ 151.899049][ T6528] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8116225fac [ 151.899062][ T6528] RBP: 00007f8116225fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 151.899077][ T6528] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.899090][ T6528] R13: 00007f8116226038 R14: 00007ffec8cf9690 R15: 00007ffec8cf9778 [ 151.899122][ T6528] [ 152.441791][ T6538] loop0: detected capacity change from 0 to 256 [ 152.456288][ T6538] exfat: Unknown parameter 'subj_role' [ 152.505502][ T6538] FAULT_INJECTION: forcing a failure. [ 152.505502][ T6538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.505532][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: syz.0.146 Not tainted syzkaller #0 PREEMPT(full) [ 152.505556][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.505568][ T6538] Call Trace: [ 152.505576][ T6538] [ 152.505585][ T6538] dump_stack_lvl+0xe8/0x150 [ 152.505613][ T6538] should_fail_ex+0x3eb/0x540 [ 152.505640][ T6538] _copy_to_user+0x31/0xb0 [ 152.505662][ T6538] bpf_verifier_vlog+0x52a/0x900 [ 152.505695][ T6538] __btf_verifier_log+0xe2/0x140 [ 152.505722][ T6538] ? __pfx___btf_verifier_log+0x10/0x10 [ 152.505749][ T6538] ? btf_parse_hdr+0x1da/0x810 [ 152.505773][ T6538] btf_parse_hdr+0x48f/0x810 [ 152.505801][ T6538] btf_new_fd+0x337/0xc20 [ 152.505828][ T6538] __sys_bpf+0xda7/0xe00 [ 152.505856][ T6538] ? __pfx___sys_bpf+0x10/0x10 [ 152.505878][ T6538] ? do_futex+0x3e7/0x4e0 [ 152.505924][ T6538] ? rcu_is_watching+0x16/0xb0 [ 152.505951][ T6538] __x64_sys_bpf+0xba/0xd0 [ 152.505974][ T6538] do_syscall_64+0x166/0x520 [ 152.505994][ T6538] ? trace_irq_disable+0x3b/0x140 [ 152.506011][ T6538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.506032][ T6538] ? clear_bhb_loop+0x70/0xc0 [ 152.506055][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.506075][ T6538] RIP: 0033:0x7f8f1c79e199 [ 152.506094][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.506112][ T6538] RSP: 002b:00007f8f1d5c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.506133][ T6538] RAX: ffffffffffffffda RBX: 00007f8f1ca25fa0 RCX: 00007f8f1c79e199 [ 152.506149][ T6538] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 152.506162][ T6538] RBP: 00007f8f1c8358e0 R08: 0000000000000000 R09: 0000000000000000 [ 152.506175][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.506187][ T6538] R13: 00007f8f1ca26038 R14: 00007f8f1ca25fa0 R15: 00007ffebdcbfe78 [ 152.506219][ T6538] [ 152.666149][ T5799] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 153.517017][ T5799] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 153.519693][ T5799] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.519715][ T5799] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 153.581057][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.581075][ T5799] usb 6-1: Product: syz [ 153.581083][ T5799] usb 6-1: Manufacturer: syz [ 153.581090][ T5799] usb 6-1: SerialNumber: syz [ 153.903101][ T6548] loop2: detected capacity change from 0 to 512 [ 153.926057][ T6548] msdos: Unknown parameter 'Lêñ›xfloppy' [ 154.087958][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.123654][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.211174][ T5799] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 154.236801][ T6553] loop2: detected capacity change from 0 to 1024 [ 154.280305][ T5799] usb 6-1: USB disconnect, device number 2 [ 154.358774][ T6553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.601771][ T6553] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.748348][ T5799] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 154.834756][ T6546] loop1: detected capacity change from 0 to 32768 [ 154.844447][ T6546] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 154.850154][ T6546] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.134 (6546) [ 154.882791][ T6546] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 154.882823][ T6546] BTRFS info (device loop1): using crc32c checksum algorithm [ 154.915846][ T5799] usb 6-1: Using ep0 maxpacket: 8 [ 154.918100][ T5799] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.979489][ T5799] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 154.979535][ T5799] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 154.979731][ T5799] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.979785][ T5799] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.979841][ T5799] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 154.979896][ T5799] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.979991][ T5799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.188096][ T6546] BTRFS info (device loop1): rebuilding free space tree [ 155.339230][ T5799] usb 6-1: GET_CAPABILITIES returned 0 [ 155.339277][ T5799] usbtmc 6-1:16.0: can't read capabilities [ 155.456380][ T6546] BTRFS info (device loop1): disabling free space tree [ 155.456455][ T6546] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.456468][ T6546] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.551486][ T6546] BTRFS info (device loop1): enabling ssd optimizations [ 155.551512][ T6546] BTRFS info (device loop1): turning on async discard [ 155.551528][ T6546] BTRFS info (device loop1): force clearing of disk cache [ 155.551543][ T6546] BTRFS info (device loop1): use zstd compression, level 3 [ 155.594306][ T5799] usb 6-1: USB disconnect, device number 3 [ 155.784344][ T5614] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 156.324224][ T6591] loop1: detected capacity change from 0 to 24 [ 156.330456][ T6591] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 156.359845][ T6591] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 158.313732][ T33] audit: type=1326 audit(1791353371.460:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.1.156" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3c2b9e199 code=0x0 [ 158.936259][ T6593] loop2: detected capacity change from 0 to 40427 [ 159.205696][ T5725] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 159.376045][ T5725] usb 3-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 159.379586][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.379613][ T5725] usb 3-1: Product: syz [ 159.379628][ T5725] usb 3-1: Manufacturer: syz [ 159.379642][ T5725] usb 3-1: SerialNumber: syz [ 159.419469][ T5725] usb 3-1: config 0 descriptor?? [ 159.443814][ T5725] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 160.612426][ T5725] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.638595][ T5725] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 160.638659][ T5725] usb 3-1: media controller created [ 160.681540][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.812385][ T5725] DVB: Unable to find symbol mt352_attach() [ 160.880747][ T5725] DVB: Unable to find symbol nxt6000_attach() [ 160.880762][ T5725] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 160.914458][ T5725] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 160.937178][ T6624] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 160.937200][ T6624] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 160.937216][ T6624] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 160.937227][ T6624] One or more global auth toks could not properly register; rc = [-22] [ 160.937278][ T6624] Error validating options; rc = [-22] [ 160.996776][ T5725] dvb-usb: schedule remote query interval to 1000 msecs. [ 160.996800][ T5725] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 160.997054][ T5725] dvb-usb: bulk message failed: -22 (7/0) [ 160.997071][ T5725] dvb-usb: bulk message failed: -22 (7/0) [ 161.001965][ T5725] usb 3-1: USB disconnect, device number 3 [ 161.158287][ T5725] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 161.176627][ T6628] loop2: detected capacity change from 0 to 256 [ 161.475841][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 161.626960][ T9] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 161.630970][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.631014][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 161.636929][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.636953][ T9] usb 5-1: Product: syz [ 161.636968][ T9] usb 5-1: Manufacturer: syz [ 161.636982][ T9] usb 5-1: SerialNumber: syz [ 161.800565][ T6641] loop5: detected capacity change from 0 to 32768 [ 161.850620][ T6626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.851031][ T6626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.862655][ T6636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.864596][ T6636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.865436][ T5725] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 161.920842][ T6641] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 161.954651][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 161.976867][ T9] usb 5-1: USB disconnect, device number 3 [ 161.995688][ T3105] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.059257][ T5725] usb 2-1: Using ep0 maxpacket: 32 [ 162.066007][ T5725] usb 2-1: New USB device found: idVendor=5543, idProduct=0045, bcdDevice=0.00 [ 162.077850][ T5725] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 162.077876][ T5725] usb 2-1: config 0 has no interface number 0 [ 162.077913][ T5725] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.077937][ T5725] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.077994][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.105840][ T5725] usb 2-1: config 0 descriptor?? [ 162.304645][ T5999] ocfs2: Unmounting device (7,5) on (node local) [ 162.440158][ T33] audit: type=1326 audit(1791353375.600:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.5.169" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efca659e199 code=0x0 [ 162.495612][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 162.645381][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 162.647069][ T9] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.648243][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 162.648267][ T9] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 162.648370][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.648392][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.648415][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 162.648438][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.648475][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.803153][ T6638] loop1: detected capacity change from 0 to 256 [ 162.811051][ T6638] vfat: Unknown parameter 'iocharutf8' [ 162.872999][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 162.873044][ T9] usbtmc 5-1:16.0: can't read capabilities [ 162.959916][ T5725] usbhid 2-1:0.3: can't add hid device: -71 [ 162.960014][ T5725] usbhid 2-1:0.3: probe with driver usbhid failed with error -71 [ 162.968859][ T5725] usb 2-1: USB disconnect, device number 3 [ 163.006705][ T6649] loop0: detected capacity change from 0 to 4096 [ 163.008847][ T6649] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.012346][ T6649] EXT4-fs (loop0): Test dummy encryption mode enabled [ 163.055651][ T6649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.130167][ T27] usb 5-1: USB disconnect, device number 4 [ 163.208989][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.361453][ T6653] loop0: detected capacity change from 0 to 128 [ 163.374078][ T6653] EXT4-fs (loop0): Test dummy encryption mode enabled [ 163.393175][ T6653] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.394493][ T6653] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.437378][ T6656] netlink: 'syz.5.171': attribute type 3 has an invalid length. [ 164.685478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 165.983608][ T5603] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.490628][ T6670] netlink: 5 bytes leftover after parsing attributes in process `syz.4.176'. [ 166.594834][ T6670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.154756][ T6677] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 167.965592][ T6685] loop5: detected capacity change from 0 to 512 [ 167.975863][ T6685] EXT4-fs warning (device loop5): read_mmp_block:110: Error -74 while reading MMP block 17 [ 168.015894][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 168.325174][ T9] usb 1-1: New USB device found: idVendor=0925, idProduct=8066, bcdDevice=0.00 [ 168.335326][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 168.335357][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.335392][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.337893][ T9] usb 1-1: config 0 descriptor?? [ 168.555244][ T6681] capability: warning: `syz.0.179' uses 32-bit capabilities (legacy support in use) [ 168.654797][ T33] audit: type=1326 audit(1791353381.810:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.2.181" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8115f9e199 code=0x0 [ 168.802290][ T9] hid-generic 0003:0925:8066.0001: unbalanced collection at end of report description [ 168.821160][ T9] hid-generic 0003:0925:8066.0001: probe with driver hid-generic failed with error -22 [ 168.980615][ T6681] loop0: detected capacity change from 0 to 512 [ 169.016014][ T9] usb 1-1: USB disconnect, device number 4 [ 169.523721][ T6705] loop4: detected capacity change from 0 to 8 [ 169.573532][ T6705] squashfs: Unknown parameter 'ª' [ 169.581536][ T6707] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 169.581552][ T6707] CIFS mount error: No usable UNC path provided in device string! [ 169.581552][ T6707] [ 169.581703][ T6707] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 170.167299][ T6708] FAULT_INJECTION: forcing a failure. [ 170.167299][ T6708] name failslab, interval 1, probability 0, space 0, times 0 [ 170.168157][ T6708] CPU: 0 UID: 0 PID: 6708 Comm: syz.1.184 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.168190][ T6708] Tainted: [L]=SOFTLOCKUP [ 170.168197][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 170.168209][ T6708] Call Trace: [ 170.168216][ T6708] [ 170.168225][ T6708] dump_stack_lvl+0xe8/0x150 [ 170.168254][ T6708] should_fail_ex+0x3eb/0x540 [ 170.168279][ T6708] ? __alloc_skb+0x1db/0x7a0 [ 170.168299][ T6708] should_failslab+0xa8/0x100 [ 170.168321][ T6708] ? __alloc_skb+0x1db/0x7a0 [ 170.168338][ T6708] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 170.168360][ T6708] ? trace_irq_disable+0x3b/0x140 [ 170.168382][ T6708] ? __alloc_skb+0x1db/0x7a0 [ 170.168407][ T6708] __alloc_skb+0x1db/0x7a0 [ 170.168432][ T6708] tcp_stream_alloc_skb+0x3f/0x580 [ 170.168452][ T6708] ? __asan_memset+0x22/0x50 [ 170.168475][ T6708] tcp_connect+0x1646/0x54e0 [ 170.168526][ T6708] ? __pfx_tcp_connect+0x10/0x10 [ 170.168562][ T6708] ? irqentry_exit+0x218/0x920 [ 170.168608][ T6708] tcp_v6_connect+0x15dc/0x1e60 [ 170.168652][ T6708] ? __pfx_tcp_v6_connect+0x10/0x10 [ 170.168674][ T6708] ? __pfx_tcp_v6_connect+0x10/0x10 [ 170.168704][ T6708] __inet_stream_connect+0x28c/0xf50 [ 170.168741][ T6708] ? __pfx___inet_stream_connect+0x10/0x10 [ 170.168762][ T6708] ? __kasan_kmalloc+0x93/0xb0 [ 170.168783][ T6708] ? __kmalloc_cache_noprof+0x31c/0x600 [ 170.168803][ T6708] ? __kmalloc_cache_noprof+0x148/0x600 [ 170.168821][ T6708] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 170.168849][ T6708] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 170.168876][ T6708] tcp_sendmsg_locked+0x4a3b/0x5320 [ 170.168897][ T6708] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 170.168928][ T6708] ? register_lock_class+0x31/0x2e0 [ 170.168948][ T6708] ? tcp_sendmsg_locked+0x391/0x5320 [ 170.168969][ T6708] ? __lock_acquire+0x747/0x2de0 [ 170.169003][ T6708] ? __pfx_futex_wake_mark+0x10/0x10 [ 170.169036][ T6708] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 170.169064][ T6708] ? tcp_sendmsg+0x21/0x50 [ 170.169085][ T6708] ? __local_bh_enable_ip+0xd6/0x140 [ 170.169110][ T6708] tcp_sendmsg+0x2f/0x50 [ 170.169129][ T6708] ? __pfx_inet6_sendmsg+0x10/0x10 [ 170.169145][ T6708] sock_sendmsg_nosec+0x90/0x190 [ 170.169168][ T6708] __sys_sendto+0x408/0x5a0 [ 170.169194][ T6708] ? __pfx___sys_sendto+0x10/0x10 [ 170.169241][ T6708] ? rcu_is_watching+0x16/0xb0 [ 170.169267][ T6708] __x64_sys_sendto+0xde/0x100 [ 170.169291][ T6708] do_syscall_64+0x166/0x520 [ 170.169311][ T6708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.169331][ T6708] ? clear_bhb_loop+0x70/0xc0 [ 170.169354][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.169374][ T6708] RIP: 0033:0x7fa3c2b9e199 [ 170.169394][ T6708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.169410][ T6708] RSP: 002b:00007fa3c3b1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 170.169432][ T6708] RAX: ffffffffffffffda RBX: 00007fa3c2e26090 RCX: 00007fa3c2b9e199 [ 170.169447][ T6708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 170.169459][ T6708] RBP: 00007fa3c2c358e0 R08: 00002000000001c0 R09: 000000000000001c [ 170.169473][ T6708] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000000 [ 170.169485][ T6708] R13: 00007fa3c2e26128 R14: 00007fa3c2e26090 R15: 00007fff9cf740d8 [ 170.169518][ T6708] [ 171.243133][ T6711] netlink: 'syz.2.185': attribute type 12 has an invalid length. [ 171.553141][ T6711] loop2: detected capacity change from 0 to 4096 [ 171.606080][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 171.760794][ T9] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 171.761927][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.761969][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 171.764838][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.764861][ T9] usb 1-1: Product: syz [ 171.764875][ T9] usb 1-1: Manufacturer: syz [ 171.764889][ T9] usb 1-1: SerialNumber: syz [ 172.063542][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.078159][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.102162][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 172.125593][ T9] usb 1-1: USB disconnect, device number 5 [ 172.158458][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.189'. [ 172.206506][ T6724] loop4: detected capacity change from 0 to 256 [ 172.211305][ T6724] vfat: Bad value for 'shortname' [ 172.313629][ T6726] overlayfs: statfs failed on './file0' [ 172.574621][ T6732] loop2: detected capacity change from 0 to 128 [ 172.608940][ T6732] EXT4-fs (loop2): Test dummy encryption mode enabled [ 172.637071][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 172.660066][ T6732] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.661554][ T6732] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.795436][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 172.796191][ T9] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.797691][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 172.797716][ T9] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 172.797760][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.797781][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.797806][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 172.797829][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.797869][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.647929][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 173.647977][ T9] usbtmc 1-1:16.0: can't read capabilities [ 173.784678][ T5725] usb 1-1: USB disconnect, device number 6 [ 173.863102][ T5610] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.960221][ T6743] loop4: detected capacity change from 0 to 24 [ 173.985561][ T6743] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 174.051190][ T6743] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 174.640175][ T33] audit: type=1326 audit(1791353387.800:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.5.195" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efca659e199 code=0x0 [ 176.790845][ T6750] netlink: 44 bytes leftover after parsing attributes in process `syz.4.196'. [ 176.790870][ T6750] netlink: 35 bytes leftover after parsing attributes in process `syz.4.196'. [ 176.790885][ T6750] netlink: 'syz.4.196': attribute type 5 has an invalid length. [ 176.790898][ T6750] netlink: 35 bytes leftover after parsing attributes in process `syz.4.196'. [ 176.837928][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.4.196'. [ 176.973655][ T6768] loop5: detected capacity change from 0 to 512 [ 177.036623][ T6768] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 177.045437][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 177.045459][ C1] EXT4-fs (loop5): initial error at time 1791353390: mb_free_blocks:2049: inode 11: block 64 [ 177.045493][ C1] EXT4-fs (loop5): last error at time 1791353390: mb_free_blocks:2049: inode 11: block 64 [ 177.046076][ T6768] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #11: comm syz.5.201: corrupted inode contents [ 177.046102][ T6768] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 177.046680][ T6768] EXT4-fs error (device loop5): ext4_dirty_inode:6733: inode #11: comm syz.5.201: mark_inode_dirty error [ 177.046704][ T6768] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 177.048068][ T6768] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.201: invalid indirect mapped block 1 (level 1) [ 177.048099][ T6768] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 177.060560][ T6768] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #11: comm syz.5.201: corrupted inode contents [ 177.060591][ T6768] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 177.064297][ T6768] EXT4-fs error (device loop5) in ext4_orphan_del:304: Corrupt filesystem [ 177.064319][ T6768] loop5: lost filesystem error report for type 5 error -117 [ 177.067572][ T6768] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #11: comm syz.5.201: corrupted inode contents [ 177.067598][ T6768] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 177.068180][ T6768] EXT4-fs error (device loop5): ext4_truncate:4721: inode #11: comm syz.5.201: mark_inode_dirty error [ 177.068206][ T6768] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 177.077732][ T6768] EXT4-fs error (device loop5) in ext4_process_orphan:346: Corrupt filesystem [ 177.077756][ T6768] loop5: lost filesystem error report for type 5 error -117 [ 177.080002][ T6768] EXT4-fs (loop5): 1 truncate cleaned up [ 177.090806][ T6768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.116204][ T6774] loop2: detected capacity change from 0 to 512 [ 177.186009][ T6768] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.201: iget: bogus i_mode (3355) [ 177.197802][ T6774] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 177.197899][ T6774] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.200: corrupted inode contents [ 177.197921][ T6774] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 177.205615][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 177.205635][ C1] EXT4-fs (loop2): initial error at time 1791353390: mb_free_blocks:2049: inode 11: block 64 [ 177.205666][ C1] EXT4-fs (loop2): last error at time 1791353390: ext4_do_update_inode:5801: inode 11 [ 177.271118][ T6774] EXT4-fs error (device loop2): ext4_dirty_inode:6733: inode #11: comm syz.2.200: mark_inode_dirty error [ 177.271150][ T6774] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 177.272702][ T6774] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.200: invalid indirect mapped block 1 (level 1) [ 177.272734][ T6774] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 177.281111][ T6774] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.200: corrupted inode contents [ 177.281141][ T6774] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 177.282617][ T6774] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 177.282639][ T6774] loop2: lost filesystem error report for type 5 error -117 [ 177.285938][ T6774] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.200: corrupted inode contents [ 177.288394][ T6774] EXT4-fs error (device loop2): ext4_truncate:4721: inode #11: comm syz.2.200: mark_inode_dirty error [ 177.291990][ T6774] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 177.292018][ T6774] loop2: lost filesystem error report for type 5 error -117 [ 177.293509][ T6774] EXT4-fs (loop2): 1 truncate cleaned up [ 177.311572][ T6774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.423450][ T6774] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.200: iget: bogus i_mode (3355) [ 177.434444][ T6776] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.201: iget: bogus i_mode (3355) [ 177.476913][ T6776] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.201: iget: bogus i_mode (3355) [ 177.538891][ T6777] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.200: iget: bogus i_mode (3355) [ 177.841322][ T6780] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.201: iget: bogus i_mode (3355) [ 178.222303][ T6778] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.200: iget: bogus i_mode (3355) [ 178.386247][ T6783] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.200: iget: bogus i_mode (3355) [ 179.292510][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.323820][ T5999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.768466][ T6794] jffs2: notice: (6794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 182.371516][ T6806] loop5: detected capacity change from 0 to 1024 [ 182.435918][ T980] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 182.890387][ T980] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 182.992939][ T980] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.992984][ T980] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 183.423543][ T6809] hfsplus: xattr search failed [ 183.516869][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.516900][ T980] usb 3-1: Product: syz [ 183.516914][ T980] usb 3-1: Manufacturer: syz [ 183.516928][ T980] usb 3-1: SerialNumber: syz [ 183.621160][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 183.738437][ T6815] bond1: option tlb_dynamic_lb: invalid value (11) [ 183.768137][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.778395][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.807771][ T980] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 183.822561][ T980] usb 3-1: USB disconnect, device number 5 [ 183.837959][ T6815] bond1 (unregistering): Released all slaves [ 184.272981][ T58] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 184.515432][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 184.548472][ T58] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.583858][ T58] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 184.583993][ T58] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 184.584600][ T58] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.584783][ T58] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.630564][ T58] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 184.631104][ T58] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.631861][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.393562][ T58] usb 3-1: usb_control_msg returned -71 [ 185.393618][ T58] usbtmc 3-1:16.0: can't read capabilities [ 185.439373][ T6844] loop0: detected capacity change from 0 to 128 [ 185.474846][ T6844] EXT4-fs (loop0): Test dummy encryption mode enabled [ 185.606688][ T6848] loop1: detected capacity change from 0 to 24 [ 185.613098][ T6848] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 185.668086][ T6844] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.728817][ T6848] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 185.849703][ T6844] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.989452][ T58] usb 3-1: USB disconnect, device number 6 [ 187.994924][ T6850] loop5: detected capacity change from 0 to 24 [ 187.996015][ T6850] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 188.027317][ T6850] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 188.343287][ T6857] FAULT_INJECTION: forcing a failure. [ 188.343287][ T6857] name failslab, interval 1, probability 0, space 0, times 0 [ 188.343324][ T6857] CPU: 1 UID: 0 PID: 6857 Comm: syz.2.221 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.343353][ T6857] Tainted: [L]=SOFTLOCKUP [ 188.343360][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.343373][ T6857] Call Trace: [ 188.343381][ T6857] [ 188.343391][ T6857] dump_stack_lvl+0xe8/0x150 [ 188.343420][ T6857] should_fail_ex+0x3eb/0x540 [ 188.343455][ T6857] should_failslab+0xa8/0x100 [ 188.343478][ T6857] __kvmalloc_node_noprof+0x171/0x820 [ 188.343500][ T6857] ? __nf_register_net_hook+0x1f1/0x940 [ 188.343523][ T6857] ? nf_hook_entries_grow+0x287/0x740 [ 188.343542][ T6857] ? nf_hook_entries_grow+0x287/0x740 [ 188.343572][ T6857] nf_hook_entries_grow+0x287/0x740 [ 188.343607][ T6857] __nf_register_net_hook+0x26f/0x940 [ 188.343639][ T6857] nf_register_net_hook+0xb2/0x190 [ 188.343663][ T6857] nf_register_net_hooks+0x44/0x1b0 [ 188.343686][ T6857] nf_ct_netns_do_get+0x3bf/0x5c0 [ 188.343711][ T6857] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 188.343731][ T6857] ? trace_contention_end+0x3d/0x140 [ 188.343759][ T6857] ? nf_ct_netns_get+0xe9/0x320 [ 188.343782][ T6857] conntrack_mt_check+0x53/0xf0 [ 188.343805][ T6857] xt_check_match+0x602/0xce0 [ 188.343832][ T6857] ? __pfx_xt_check_match+0x10/0x10 [ 188.343854][ T6857] ? pcpu_alloc_noprof+0x1036/0x1900 [ 188.343884][ T6857] ? xt_find_match+0x213/0x260 [ 188.343912][ T6857] translate_table+0x1498/0x1f80 [ 188.343956][ T6857] ? __pfx_translate_table+0x10/0x10 [ 188.343975][ T6857] ? lock_acquire+0x115/0x350 [ 188.344012][ T6857] ? __might_fault+0xaf/0x130 [ 188.344036][ T6857] ? _copy_from_user+0x94/0xb0 [ 188.344062][ T6857] do_ipt_set_ctl+0xa53/0xe20 [ 188.344092][ T6857] ? rcu_is_watching+0x16/0xb0 [ 188.344114][ T6857] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 188.344152][ T6857] ? __mutex_unlock_slowpath+0x731/0x900 [ 188.344180][ T6857] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.344216][ T6857] nf_setsockopt+0x26f/0x290 [ 188.344238][ T6857] ? __pfx_ ** replaying previous printk message ** [ 188.344238][ T6857] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 188.344262][ T6857] do_sock_setsockopt+0x17c/0x1b0 [ 188.344288][ T6857] __x64_sys_setsockopt+0x13d/0x1b0 [ 188.344314][ T6857] do_syscall_64+0x166/0x520 [ 188.344333][ T6857] ? trace_irq_disable+0x3b/0x140 [ 188.344352][ T6857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.344373][ T6857] ? clear_bhb_loop+0x70/0xc0 [ 188.344395][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.344416][ T6857] RIP: 0033:0x7f8115f9e199 [ 188.344441][ T6857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.344460][ T6857] RSP: 002b:00007f81141f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 188.344482][ T6857] RAX: ffffffffffffffda RBX: 00007f8116225fa0 RCX: 00007f8115f9e199 [ 188.344498][ T6857] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000008 [ 188.344511][ T6857] RBP: 00007f81160358e0 R08: 00000000000003c8 R09: 0000000000000000 [ 188.344525][ T6857] R10: 0000200000000a80 R11: 0000000000000246 R12: 0000000000000000 [ 188.344539][ T6857] R13: 00007f8116226038 R14: 00007f8116225fa0 R15: 00007ffec8cf9778 [ 188.344573][ T6857] [ 188.369077][ T5603] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.394625][ T6857] xt_conntrack: cannot load conntrack support for proto=2 [ 188.509255][ T58] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 188.511977][ T6857] ================================================================== [ 188.511991][ T6857] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x1b8/0x320 [ 188.512020][ T6857] Read of size 128 at addr ffffffff9ad87e20 by task syz.2.221/6857 [ 188.512037][ T6857] [ 188.512050][ T6857] CPU: 1 UID: 0 PID: 6857 Comm: syz.2.221 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.512080][ T6857] Tainted: [L]=SOFTLOCKUP [ 188.512088][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.512100][ T6857] Call Trace: [ 188.512107][ T6857] [ 188.512116][ T6857] dump_stack_lvl+0xe8/0x150 [ 188.512137][ T6857] print_address_description+0x55/0x1e0 [ 188.512158][ T6857] ? usb_copy_descriptors+0x1b8/0x320 [ 188.512176][ T6857] print_report+0x58/0x70 [ 188.512194][ T6857] kasan_report+0x117/0x150 [ 188.512213][ T6857] ? usb_copy_descriptors+0x1b8/0x320 [ 188.512235][ T6857] kasan_check_range+0x264/0x2c0 [ 188.512252][ T6857] ? usb_copy_descriptors+0x1b8/0x320 [ 188.512271][ T6857] __asan_memcpy+0x29/0x70 [ 188.512289][ T6857] usb_copy_descriptors+0x1b8/0x320 [ 188.512310][ T6857] usb_assign_descriptors+0xcf/0x290 [ 188.512329][ T6857] f_audio_bind+0x1b5e/0x34b0 [ 188.512356][ T6857] usb_add_function+0x2e1/0x9f0 [ 188.512374][ T6857] ? check_remote_wakeup_config+0x58/0x1c0 [ 188.512394][ T6857] configfs_composite_bind+0xde0/0x1410 [ 188.512425][ T6857] ? __pfx_configfs_composite_bind+0x10/0x10 [ 188.512445][ T6857] gadget_bind_driver+0x2ca/0x9e0 [ 188.512468][ T6857] ? __pfx_gadget_bind_driver+0x10/0x10 [ 188.512487][ T6857] really_probe+0x254/0xae0 [ 188.512507][ T6857] __driver_probe_device+0x1e8/0x360 [ 188.512526][ T6857] driver_probe_device+0x4f/0x240 [ 188.512545][ T6857] __driver_attach+0x339/0x600 [ 188.512564][ T6857] bus_for_each_dev+0x23b/0x2c0 [ 188.512583][ T6857] ? __pfx___driver_attach+0x10/0x10 [ 188.512601][ T6857] ? __pfx_bus_for_each_dev+0x10/0x10 [ 188.512621][ T6857] ? do_raw_spin_unlock+0xf5/0x200 [ 188.512640][ T6857] bus_add_driver+0x38f/0x6e0 [ 188.512662][ T6857] driver_register+0x23a/0x320 [ 188.512681][ T6857] usb_gadget_register_driver_owner+0xf9/0x270 [ 188.512702][ T6857] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 188.512722][ T6857] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 188.512741][ T6857] configfs_write_iter+0x337/0x430 [ 188.512762][ T6857] vfs_write+0x612/0xba0 [ 188.512784][ T6857] ? __pfx_vfs_write+0x10/0x10 [ 188.512803][ T6857] ? __fget_files+0x3a2/0x420 [ 188.512819][ T6857] ? __fget_files+0x2a/0x420 [ 188.512837][ T6857] ? fdget+0x1ac/0x250 [ 188.512856][ T6857] ksys_write+0x150/0x270 [ 188.512874][ T6857] ? __pfx_ksys_write+0x10/0x10 [ 188.512896][ T6857] do_syscall_64+0x166/0x520 [ 188.512913][ T6857] ? trace_irq_disable+0x3b/0x140 [ 188.512930][ T6857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.512950][ T6857] ? clear_bhb_loop+0x70/0xc0 [ 188.512968][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.512987][ T6857] RIP: 0033:0x7f8115f9e199 [ 188.513005][ T6857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.513021][ T6857] RSP: 002b:00007f81141f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.513041][ T6857] RAX: ffffffffffffffda RBX: 00007f8116225fa0 RCX: 00007f8115f9e199 [ 188.513056][ T6857] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000009 [ 188.513068][ T6857] RBP: 00007f81160358e0 R08: 0000000000000000 R09: 0000000000000000 [ 188.513080][ T6857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.513092][ T6857] R13: 00007f8116226038 R14: 00007f8116225fa0 R15: 00007ffec8cf9778 [ 188.513114][ T6857] [ 188.513121][ T6857] [ 188.513126][ T6857] The buggy address belongs to the variable: [ 188.513132][ T6857] ac_header_desc+0x0/0x20 [ 188.513148][ T6857] [ 188.513153][ T6857] The buggy address belongs to the physical page: [ 188.513168][ T6857] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ad87 [ 188.513189][ T6857] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 188.513216][ T6857] raw: 00fff00000002000 ffffea00006b61c8 ffffea00006b61c8 0000000000000000 [ 188.513233][ T6857] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 188.513243][ T6857] page dumped because: kasan: bad access detected [ 188.513256][ T6857] page_owner info is not present (never set?) [ 188.513264][ T6857] [ 188.513268][ T6857] Memory state around the buggy address: [ 188.513278][ T6857] ffffffff9ad87d00: 00 00 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.513291][ T6857] ffffffff9ad87d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.513303][ T6857] >ffffffff9ad87e00: f9 f9 f9 f9 00 f9 f9 f9 00 f9 f9 f9 00 f9 f9 f9 [ 188.513314][ T6857] ^ [ 188.513324][ T6857] ffffffff9ad87e80: 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 [ 188.513337][ T6857] ffffffff9ad87f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.513347][ T6857] ================================================================== [ 188.558402][ T6857] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 189.195227][ T6857] CPU: 1 UID: 0 PID: 6857 Comm: syz.2.221 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.206076][ T6857] Tainted: [L]=SOFTLOCKUP [ 189.210387][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 189.220431][ T6857] Call Trace: [ 189.223705][ T6857] [ 189.226628][ T6857] vpanic+0x26f/0x710 [ 189.230605][ T6857] panic+0xc5/0xd0 [ 189.234313][ T6857] ? __pfx_panic+0x10/0x10 [ 189.238728][ T6857] ? preempt_schedule_thunk+0x16/0x40 [ 189.244090][ T6857] ? usb_copy_descriptors+0x1b8/0x320 [ 189.249453][ T6857] ? preempt_schedule_thunk+0x16/0x40 [ 189.254813][ T6857] ? usb_copy_descriptors+0x1b8/0x320 [ 189.260174][ T6857] check_panic_on_warn+0x89/0xb0 [ 189.265105][ T6857] ? usb_copy_descriptors+0x1b8/0x320 [ 189.270473][ T6857] end_report+0x73/0x170 [ 189.274710][ T6857] ? usb_copy_descriptors+0x1b8/0x320 [ 189.280074][ T6857] kasan_report+0x128/0x150 [ 189.284574][ T6857] ? usb_copy_descriptors+0x1b8/0x320 [ 189.289941][ T6857] kasan_check_range+0x264/0x2c0 [ 189.294874][ T6857] ? usb_copy_descriptors+0x1b8/0x320 [ 189.300234][ T6857] __asan_memcpy+0x29/0x70 [ 189.304640][ T6857] usb_copy_descriptors+0x1b8/0x320 [ 189.309831][ T6857] usb_assign_descriptors+0xcf/0x290 [ 189.315118][ T6857] f_audio_bind+0x1b5e/0x34b0 [ 189.319791][ T6857] usb_add_function+0x2e1/0x9f0 [ 189.324637][ T6857] ? check_remote_wakeup_config+0x58/0x1c0 [ 189.330434][ T6857] configfs_composite_bind+0xde0/0x1410 [ 189.335976][ T6857] ? __pfx_configfs_composite_bind+0x10/0x10 [ 189.341948][ T6857] gadget_bind_driver+0x2ca/0x9e0 [ 189.346967][ T6857] ? __pfx_gadget_bind_driver+0x10/0x10 [ 189.352504][ T6857] really_probe+0x254/0xae0 [ 189.357000][ T6857] __driver_probe_device+0x1e8/0x360 [ 189.362275][ T6857] driver_probe_device+0x4f/0x240 [ 189.367296][ T6857] __driver_attach+0x339/0x600 [ 189.372060][ T6857] bus_for_each_dev+0x23b/0x2c0 [ 189.376905][ T6857] ? __pfx___driver_attach+0x10/0x10 [ 189.382183][ T6857] ? __pfx_bus_for_each_dev+0x10/0x10 [ 189.387546][ T6857] ? do_raw_spin_unlock+0xf5/0x200 [ 189.392654][ T6857] bus_add_driver+0x38f/0x6e0 [ 189.397327][ T6857] driver_register+0x23a/0x320 [ 189.402088][ T6857] usb_gadget_register_driver_owner+0xf9/0x270 [ 189.408238][ T6857] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 189.413863][ T6857] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 189.420006][ T6857] configfs_write_iter+0x337/0x430 [ 189.425112][ T6857] vfs_write+0x612/0xba0 [ 189.429347][ T6857] ? __pfx_vfs_write+0x10/0x10 [ 189.434101][ T6857] ? __fget_files+0x3a2/0x420 [ 189.438766][ T6857] ? __fget_files+0x2a/0x420 [ 189.443357][ T6857] ? fdget+0x1ac/0x250 [ 189.447435][ T6857] ksys_write+0x150/0x270 [ 189.451773][ T6857] ? __pfx_ksys_write+0x10/0x10 [ 189.456638][ T6857] do_syscall_64+0x166/0x520 [ 189.461239][ T6857] ? trace_irq_disable+0x3b/0x140 [ 189.466261][ T6857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.472330][ T6857] ? clear_bhb_loop+0x70/0xc0 [ 189.477007][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.482904][ T6857] RIP: 0033:0x7f8115f9e199 [ 189.487314][ T6857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.506912][ T6857] RSP: 002b:00007f81141f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 189.515322][ T6857] RAX: ffffffffffffffda RBX: 00007f8116225fa0 RCX: 00007f8115f9e199 [ 189.523286][ T6857] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000009 [ 189.531247][ T6857] RBP: 00007f81160358e0 R08: 0000000000000000 R09: 0000000000000000 [ 189.539214][ T6857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.547176][ T6857] R13: 00007f8116226038 R14: 00007f8116225fa0 R15: 00007ffec8cf9778 [ 189.555147][ T6857] [ 189.558472][ T6857] Kernel Offset: disabled [ 189.562790][ T6857] Rebooting in 86400 seconds..