last executing test programs: 11m3.216644851s ago: executing program 32 (id=100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}]}) 8m54.144204626s ago: executing program 33 (id=756): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}]}, 0x3c}}, 0x2000400c) 6m4.249466164s ago: executing program 34 (id=1373): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x200a0204) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX], 0x1c}}, 0x8800) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@updpolicy={0xf0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@loopback, 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x80, 0x80}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}, {}, 0x0, 0x0, 0x1}, [@etimer_thresh={0x8, 0xc, 0x5}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd2d, 0x70bd2c, 0x70bd28, 0x5, [0x669]}}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd2d, 0xffff7fff}}]}, 0xf0}}, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40}) setpriority(0x0, 0x0, 0x2a14b58) 2m47.454445955s ago: executing program 4 (id=2501): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000000}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz0\x00', 0x4b}) ioctl$UI_DEV_CREATE(r2, 0x5501) 2m47.019348033s ago: executing program 4 (id=2508): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000340)={0xe939, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r3}) mmap(&(0x7f0000ffb000/0x1000)=nil, 0xf000, 0x2000001, 0x12, r0, 0x100000000) 2m46.829508267s ago: executing program 4 (id=2512): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x134) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) memfd_secret(0x80000) 2m46.594281843s ago: executing program 4 (id=2514): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000080)={0xdb, 0xffffffffffffffff, 0x7fff, 0x5, 0x0, 0x2}) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYRES16=r1, @ANYRES16=r2, @ANYRESHEX=r2, @ANYRES8, @ANYRES8=r1], 0x5, 0x1537, &(0x7f0000001140)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r8, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) 2m43.46689142s ago: executing program 4 (id=2530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000001"], 0x4a) 2m43.110693771s ago: executing program 5 (id=2536): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='bridge_slave_0\x00', 0x10) bind$l2tp(r1, &(0x7f0000000180)={0x2, 0x0, @multicast2, 0x4}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac14141a}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 2m42.969060472s ago: executing program 4 (id=2539): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000020)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/4096, 0x1000) 2m42.840708055s ago: executing program 5 (id=2540): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x1, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8, 0x17, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3}}, 0x1c}}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x70) inotify_init() r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0xa) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r5) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x880, 0x0) 2m41.506330677s ago: executing program 5 (id=2543): getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f00000002c0)=0x4b) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004}, 0x4040000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x7ff, 0x1, 'queue1\x00', 0x7f}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x5}, 0x0, {}, 0x67, 0x2}) 2m41.109624197s ago: executing program 5 (id=2546): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r0, &(0x7f00000000c0)=0x58, 0x5) 2m39.878799158s ago: executing program 5 (id=2554): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, r4, 0x25, 0x8, @val=@tcx={@void, @value=r2}}, 0x1c) 2m39.799983999s ago: executing program 5 (id=2555): ftruncate(0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 2m29.04503319s ago: executing program 35 (id=2598): r0 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x26) write(r1, &(0x7f0000000000)='7', 0x1) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) 2m27.860719719s ago: executing program 36 (id=2539): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000020)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/4096, 0x1000) 2m24.520118368s ago: executing program 37 (id=2555): ftruncate(0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 2m2.192784254s ago: executing program 9 (id=2700): io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x2, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfffffffe}, {0x4, 0x0, 0x400000}}, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x30000008}) 1m58.014505972s ago: executing program 9 (id=2713): socket$nl_xfrm(0x10, 0x3, 0x6) mount(&(0x7f0000000580)=@rnullb, &(0x7f00000005c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000640)='\xff\xff') syz_usb_connect$cdc_ecm(0x0, 0x150, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023e010101000000092c16d3b2251dc60ab8040000050206"], 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) 1m55.306260287s ago: executing program 9 (id=2721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1m54.962191862s ago: executing program 9 (id=2726): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4020744f, 0x0) 1m54.634309609s ago: executing program 9 (id=2729): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1m53.612333023s ago: executing program 9 (id=2734): mkdir(&(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='tcp 2049\n', 0x9) pread64(r0, &(0x7f0000000200)=""/64, 0x40, 0x0) close(r0) 1m38.342107834s ago: executing program 38 (id=2734): mkdir(&(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='tcp 2049\n', 0x9) pread64(r0, &(0x7f0000000200)=""/64, 0x40, 0x0) close(r0) 1m13.454187359s ago: executing program 2 (id=2909): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989b0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002a00)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xf, {0x100000000, 0x1, 0x0, {0xffffffffffffffff, 0x3, 0x3ff, 0x80000001, 0x0, 0x8001ffffffffffe, 0x9e9, 0x0, 0x3, 0x8000, 0x3, 0xffffffffffffffff, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) 1m11.534190733s ago: executing program 2 (id=2918): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r0, &(0x7f00000012c0)="a5", 0x1) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = dup2(r1, r1) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r2, &(0x7f00000004c0)={0x2020}, 0x2020) 1m10.542993343s ago: executing program 2 (id=2926): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2a6d2000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000901000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1m8.314538072s ago: executing program 2 (id=2935): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f00000003c0)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000800, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 1m7.296006966s ago: executing program 2 (id=2938): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYRES16=r1, @ANYRES16=r2, @ANYRESHEX=r2, @ANYRES8, @ANYRES8=r1], 0x5, 0x1537, &(0x7f0000001140)="$eJzs3AuYTlXbOPD7XmvtMaTxNMlhsta6N09yWCZJcgjJIUkqSZJTQtIkryQkhpCkIQnJYUhiCMlhYpLz+XxKSJImSUJyStb/mpi/t6/e8/u9vuud+3ddz2Xdz9pr7Xs/93NYe19mf9d1aO0mdWo0IiL4l+DFf5IBIBYABgJAPgAIAKB8fPn4rP7cEpP/tZ2wf6+H0q50BuxK4vrnbFz/nI3rn7Nx/XM2rn/OxvXP2bj+ORvXn7GcbPO0wtfwI+c++Pp/Tsa///9FMsuM/Wptmeu6AcT8vUO4/jkb1/+/VpDdiP0rG3H9czauf071174VWE7Bn/+cINdf7OH652xcf8Zysit9/flKPyDyf+w1OJr7YmH+U8fPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9B5zxlykAyG5f6bwYY4wxxhhjjDH27+NzXekMGGOMMcYYY4wx9r8PQYAEBQHEQC6IhdyQBwQAXA1xkA8icA3Ew7WQH66DAlAQCkFhSIDroQhoMGCBIISiUAyicAMUhxuhBJSEUlAaHJSBRLgJysLNUA5ugfJwK1SA26AiVILKUAVuh6pQDarDHVAD7oSaUAtqQx24C+rC3VAP7oH6cC80gPvgfngAGsKD0AgegsbwMDSBR6ApPArNoDm0gJbQ6p8a/wL0hBehF/SGZOgDfeEl6Af9YQC8DAPhFRgEr8JgeA1SYAgMhddhGLwBw+FNGAEjYRS8BaPhbRgDY2EcjIdUmAAT4R2YBO/CZHgPpsBUSINpMB3ehxkwE2bBBzAbPoQ5MBfmwXxIh49gASyEDPgYFsEnsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EH7IRPYRd8BrthD+yFz2EffPEPjj/9P8Z3Q0BAgQIVKozBGIzFWMyDeTAv5sU4jMMIRjAe4zE/5scCWAALYSFMwAQsgkXQoEFCwqJYFKMYxeJYHEtgCSyFpdChw0RMxLJ4M5bDclgey2MFrIAVsRJWwipYBatiVayO1bEG1sCaWBNrY228C+/CPlgP62F9rI8NsEH25SlshI2wMTbGJtgEm2JTbIbNsAW2wFbYCltja2yDbbAdtsP22B47YAdMwiTsiB2xE3bCztgZu2AX7IpdsRt2x+6ZL+QCfBFfxN5YU/TBvtgX+2FKrgH4Mr6Mr+AgfBVfxdcwBYfgUHwdX8c3cDiewhE4EkfhKKwq3sYxOBZJjMdUTMWJOBEn4STMSvQ9nIppOA2n43ScgTNxJn6As/FD/BDn4lycj+mYjgtwIWZgBi7C07gYl+BSXIbLcQUux1W4GgCScR2uxQ24ATfhJtyCW3AbbsMduAM/RQWAn+Ee3IMpuA/34X7cjwfwAB7Eg5iJmXgID+FhPIxH8AgexaN4DI/jCTyOJ/EknsLTeAbP4Dk8h+fxuYRvGn9ack0KiCxKKBEjYkSsiBV5RB6RV+QVcSJORERExIt4kV/kFwVEAVFIFBIJIkEUEUWEEUaQCGMAQERFVBQXxUUJUUKUEqWEE04kikRRVpQV5UQ5UV7cKiqI20RFUUm0dVVEFVFVtHPVxR2ihqghaopaoraoI+qIuqKuqCfqifqivmggGoj7xQOioeiDA/AhkVWZJmIINhVDsZloLuSlb7DWYji2EW1FO/GEGIkjsINo7ZLE06KjGIOdxJ/EWHxWdBHjsat4XnQT3UUP8YLoKdq4XqK3mIx9RF8xFfuJ/mKAeFnMwFriA5ydu7Z4TaSIIWKoeF3MxzfEcPGmGCFGilHiLTFavC3GiLFinBgvUsUEMVG8IyaJd8Vk8Z6YIqaKNDFNTBfvixlippglPhCzxYdijpgr5on5Il18JBaIhSJDfCwWiU/EYrFELBXLxHKxQqwUq8RqsUasFevEerFBbBSbxGaxRWwVsbBd7BA7xadil/hM7BZ7xF7xudgnvhD7xZfigPhKHBRfi0zxjTgkvhWHxXfiiPheHBU/iGPiuDghfhQnxU/ilDgtzoiz4pz4WZwXv4gLwguQKIWUUslAxshcMlbmlnnkVTKvDC69utfIeHmtzC+vkwVkQVlIFpYJ8npZRGpppJUkQ1lUFpNReYMsLm+UJWRJWUqWlk6WkYnyJllW3izLyVtkeXmrrCBvkxVlJVlZVpG3y6qymoTIxX3UlLVkbVlH3iWT4W5ZT94j68t7ZQN5n7xfPiAbygdlI/mQbCwflk3kI7KpfFQ2k81lC9lStpKPydbycdlGtpXt5BOyvXxSdpBPyST5tOwo/aW3yLOyi3xOdpXPy26yu+whf5EXpJe9ZG8JfUD2lS/JfrK/HBALAPIVOUi+KgfL12SKHCKHytflMPmGHC7flCPkSDlKviVHy7flGDlWjpPjZaqcICfKd+Qk+a6cLN+TU+RUmSanyQFy4K8zzZLyr4+3zwD8wfjBv+59k9wst8itcpvcLnfInfJTuUvukrvlbrlX7pX75D65X+6XB+QBeVAelJkyUx6Sh+RheVgekUfkUXlUHpPH5Vn5ozwpf5Kn5Gl5Wp6V5+Q5ef7SawAKlVBSKRWoGJVLxarcKo+6SuVVV6s4lU9F1DUqXl2r8qvrVAFVUBVShVWCul4VUVoZZRWpUBVVxVRU3YCX3jCqlCqtnCqjEtVN/8h4VVzdqEqokr8Zn51f8l/Ir5VqpVqr1qqNaqPaqXaqvWqvOqgOKkklqY6qo+qkOqnOqrPqorqorqpr1vtB9VA9VE/VU/VSvVSySlZ91Uuqn+qvBqiX1UD1ihqkBqnBarBKUSlqqBqqhqlhargarkbkAjVKjVKj1Wg1Ro1R49Q4lapS1UQ1UU1Sk9RkNVlNUVNUmkpT09V0NUPNULPULDVbzVZz1Bw1T81T6SpdLVALVIbKUIvUIrVYLVFL1DK1TK1QK9QqtUqtUWvUOrVObVAbVG7YrDarrWqr2q62q51qp9qldqndYrfaq/aqfWqf2q/2qwPqgDqoDqpMlakOqUPqsDqsjqgj6qg6qo6pY+qEOqFOqpPqlDqlzqgz6pw6p86r8+qCupC17AtEIAIVqCAmiAlig9ggT5AnyBvkDeKCuCASRIL4ID7IH0yLKxAUDAoFhYOE4PqgSKADE9hAXCp6NLghKB7cGJQISgalgtKBC8oEicFNQdng5qBccEtQPrg1qBDcFlQMKgWVgyrB7UHVoFpQPbgjqBHcGdQMagW1gzrBXUHd4O6gXnBPUD+4N2gQ3BfcHzwQNAweDBoFDwWNg4eDJsEjQdPg0aBZ0DxoEbQMWv1b5/f+VMHHXS/dWyfrPrqvfkn30/31AP2yHqhf0YP0q3qwfk2n6CF6qH5dD9Nv6OH6TT1Cj9Sj9Ft6tH5bj9Fj9Tg9XqfqCXqifkdP0u/qyfo9PUVP1Wl6mp6u39cz9Ew9S3+gZ+sP9Rw9V8/T83W6/kgv0At1hv5YL9Kf6MV6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1bv0Z3q33qP36s/1Pv2F3q+/1Af0V/qg/lpn6m/0If2tPqy/00f09/qo/kEf08f1Cf2jPql/0qf0aX1Gn9Xn9M/6vP5FX9A+a3Gf9fNulFEmxsSYWBNr8pg8Jq/Ja+JMnImYiIk38Sa/yW8KmAKmkClkEkyCKWKKmCxkyBQ1RU3URE1xU9yUMCVMKVPKOONMokk0ZU1ZU86UM+VNeVPBVDAVTUVT2VQ2t5vbTTVTzdxh7jB3mjtNLVPL1DF1TF1T19Qz9Ux9U980MA3M/eZ+09A0NI1MI9PYNDZNTBPT1DQ1zUwz08K0MK1MK9PatDZtTBvTzrQz7U1708F0MEkmyXQ0HU0n08l0Np1NF9PFdDVdTTfTzfQwPUxP09P0Mr1Mskk2fU1f08/0MwPMADPQDDSDzCAz2Aw2KSbFDDVDzTAzzAw3w80IM9KMylqomrfNGDPWjDPjTapJNRPNRDPJTDKTzWQzxUwxaSbNTDfTzQwzw8wys8xsM9vMMXPMPDPPpJt0s8AsMBkmwywyi8xis9gsNUvNcrPcrDQrzWqz2qw1a816WG82mo1ms9lstpqtZrvZbnaanWaX2WV2m91mr9lr9pl9Zr/Zbw6YA+agOWgyTaY5ZA6Zw+awOWKOmKPmqDlmjpkT5oQ5aU6aU+aUOWPOmHOm4KXfS29ibW6bx15l89qrbZzNZ/9nXMgWtgn2elvEalvAFvxNbKy1JWxJW8qWts6WsYn2pt/FFW0lW9lWsbfbqraarf67uK6929az99j69l5bx971m7iBvc9mrU4aIgLY5raxbWmb2EdsU/uobWab2xa2pW1vn7Qd7FM2yT5tO9pnfhcvsAvtarvGrrXr7G67x56xZ+1h+509Z3+2vWxvO9C+YgfZV+1g+5pNsUN+F4+yb9nR9m07xo614+z438VT7FSbZqfZ6fZ9O8PO/F2cbj+ys22GnWPn2nl2/q9xVk4Z9mO7yH5iF9sAltpldrldYVfaVdm5+nx2g91oN9ld9jO71W6z2+0OuzN7IWz32L32c7vPfmEP2W/tAfuVPWiP2Ez7za9x1vEdsd/bo/YHe8wetyfsj/ak/Ullj8469h/tL/aC9RYICUiSooBiKBfFUm7KQ1dRXrqa4igfRegaiqdrKT9dRwWoIBWiwpRA11MR0mTIElFIRakYRekGyk6vFJUmR2UokW6isnQzlaNbqDzdShXoNqpIlagyVaHbqSpVo+p0B9WgO6km1aLaVIfuorp0N9Wje6g+3UsN6D66nx6ghvQgNaKHqDE9TE3oEWpKj1Izak4tqCW1oseoNT1ObagttaMnqD09SR3oKUqip6kjPUOd6E/UmZ6lLvQcdaXnqRt1px70AvWkF6kX9aZk6kN96SXqR/1pAL1MA+kVGkSv0mB6jVJoCA2l12kYvUHD6U0aQSNpFL1Fo+ltGkNjaRyNp1SaQBPpHZpE79Jkeo+m0FRKo2k0nd6nGTSTZtEHNJs+pDk0l+bRfEqnj2gBLaQM+pgW0Se0mJbQUlpGy2kFraRVtJrW0FpaR+tpA22kTbSZttBW2kbbaQftpE9pF31Gu2kP7aXPaR99QUhf0gH6ig7S15RJ39Ah+pYO03d0hL73vekHOkbH6QT9SCfpJzpFp+kMnaVz9DOdp1/oAnmCEEMRylCFQRgT5gpjw9xhnvCqMG94dRgX5gsj4TVhfHhtmD+8LiwQFgwLhYXDhPD6sEioQxPakMIwLBoWC6PhDWHx8MawRFgyLBWWDl1YJkwMbwrLhjeH5cJbwvLhrWGF8LawYlgpfOTeKuHtYdWwWlg9vCOsEd4Z1gxrhbXDOuFdYd3w7rBeeE9YP7w3LBfeF94fPhA2DB8MG4UPhY3Dh8Mm4SNh0/DRsFnYPGwRtgxbhY+FrcPHwzZh27Bd+ETYPnwy7BA+FSaFT4cdw2d+7b9v4V/uTw77hH3Dl8KXQu/vkfOi86Pp0Y+iC6ILoxnRj6OLop9EF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0W9r5MLHDrhpFMucDEul4t1uV0ed5XL6652cS6fi7hrXLy71uV317kCrqAr5Aq7hGq5XBGnnXHWkQtdUVfMRd0Nrri70ZVwJV0pV9o5V8YlupaulWvlWrvHXRvX1rVzT7gn3JPuSfeUe8o97Tq6Z1wn9yfX2T3rurjn3HPuedfNdXc93Auup5sQd/Ezmez6ur6un+vnBrgBbqAb6Aa5QW6wG+xSXIob6oa6YW6YG+6GuxFuhBvlRrnRbrQb48a4cW6cS3WpbqKb6Ca5SW6ym+ymuCkuzaW56W66m+FmuKozL+5ljpvj5rl5Lt2luwUua82Y4Ra5RW6xW+yWuqVuuVvuVrqVbrVb7da6tW69W+82uo1us9vstrqtbrvb7na6nW6X2+V2+3wXJ3X73H633x1wB9xB97XLdN+4Q+5bd9h95464791R94M75o67E+5Hd9L95E650+6MO+vOuZ/defeLu+C8S41MiEyMvBOZFHk3MjnyXtaskbTItMj0yPuRGZGZkVmRDyKzIx9G5kTmRuZF5kfSIx9FFkQWRjIiH0cWRT6JLI4siSyNLIssj6yIeH/91tAX9cV81N/gi/sbfQlf0pfypb3zZXyiv8mX9Tf7cv4WX97f6iv423xFX8lX9o/6Zr65b+Fb+lb+Md/aP+7b+La+nX/Ct/dP+g7+KZ/kn/Yd/TO+k/+T7+yf9V38c76rf9538919D/+C7+lf9L18b5/s+/i+/iXfz/f3A/zLfqB/xQ/yr/rB/jWf4of4of51P8y/4Yf7N/0IP9KPinnLj84+RYbxPtVP8BP9O36Sf9dP9u/5KX6qT/PT/HT/vp/hZ/pZ/gM/23/o5/i5fp6f79P9R36BX+gz/Md+kf/EL/ZLsi8q+5V+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/id/lO/y3/md/s9fq//3O/zX/j9/kt/wH/lD/qvfab/xh/y3/rD/jt/xH/vj/of/DF/3J/wP/qT/id/yp/2Z/xZf87/7M/7X/wF/ps1xhhjjLG/y4TLTfHbnouX8/v8wRjxZxv3BYCrtxXO/PP+rBXl+gIX2/1FQvsIADzdu+tD2Y+aNZOTky9tu1hCUGxu1robLt19ACAGsmOAJdAOnoQkaAtl/zD//qL7Ofob80dvBcjzZ2Ni4XJ8ef4vATD5D+Z/7IlRCyqEZ+L/yvxzAUoUuzwmN1yOl0C7X6+vtIVyfyH/gq3/Rv65v0oFaPNnY/LC5fhy/onwODwDSb/ZkjHGGGOMMcYYu6i/qNw5+/wz+398/tH5eYK6PCYXXI7/1vk5Y4wxxhhjjDHGrrxnu/d46rGkpLad//FG9b+9jfr7Joz5o66m8M8mxo1/quE9wP8vHAD8ixMCZDXkf/IotvxH9pVy6aOT/Uz2HTSXn/UB/N8o5b+jcQW/lBhjjDHGGGP/Ky4v+n/7vLpSCTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYznQv3qPN/g77tJ3pY+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9L+XwAAAP//iNb1Mw==") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) write$binfmt_script(r8, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r8) execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r9, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) 1m6.647171951s ago: executing program 2 (id=2942): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) unshare(0x6a040000) 1m5.155491991s ago: executing program 39 (id=2942): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) unshare(0x6a040000) 42.180538087s ago: executing program 8 (id=2997): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x3, "fa00050001000000000000000000000000000100000000000000ffff00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000240)={0x10000, "ccc4a7b8c9011f4c5c7bb0464d4d3b8cd0aab3850a1afbc9e37ab2c30676744f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000280)={"6739629f274d13b691ebe45b0006f500", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000300)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', r3}) 42.081911259s ago: executing program 8 (id=2998): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@bsdgroups}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(0x0, 0x8001) r1 = syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d"], 0x0) syz_usb_ep_read(r1, 0x3, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000100)={0x17c04, 0xffffffffffffffff, 0x2, 0x8100000002}) 40.267615109s ago: executing program 8 (id=3011): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180)=r1) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360"], 0xffdd) 38.270779662s ago: executing program 8 (id=3015): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) 37.861574322s ago: executing program 8 (id=3019): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0x1, 0x200, 0x4a, 0x1, 0x80000005}) 35.680716622s ago: executing program 8 (id=3029): syz_emit_ethernet(0x6e, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 20.421583778s ago: executing program 40 (id=3029): syz_emit_ethernet(0x6e, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 6.544639412s ago: executing program 3 (id=3165): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) syz_usb_disconnect(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6.219664303s ago: executing program 6 (id=3167): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x1214080, &(0x7f0000000140)={[{@dir_umask}, {@codepage={'codepage', 0x3d, 'cp949'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {}, {@gid}]}, 0x1, 0x32e, &(0x7f0000000b00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) openat$nullb(0xffffffffffffff9c, 0x0, 0x6200, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x88000, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 6.094301664s ago: executing program 1 (id=3168): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x1) accept(r1, 0x0, 0x0) 5.38305462s ago: executing program 6 (id=3170): pipe2$9p(&(0x7f0000000140), 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x8000000000001, 0xfffffffffffffffd, 0x0, 0x800, 0x201000000000000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 5.002004962s ago: executing program 7 (id=3171): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffff9}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x8b8, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000c40)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) removexattr(0x0, 0x0) 4.795114429s ago: executing program 1 (id=3173): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) shutdown(r0, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 4.783119834s ago: executing program 6 (id=3174): lsm_set_self_attr(0x65, 0x0, 0x20, 0x7000000) munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xcbfba000) memfd_create(&(0x7f0000000700)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nRp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xa0\xc3\x1d\x19\xf5\x00'/439, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x20000) 4.587658952s ago: executing program 0 (id=3175): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x20048001}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r2, 0x0, 0xffffffff, 0xfffffffc}, 0x10) 4.579400437s ago: executing program 1 (id=3176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000f"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x19, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) 4.314099363s ago: executing program 3 (id=3177): r0 = syz_clone(0x81006800, &(0x7f0000000080)="58d6492be7bf3c0ab54eb33449b8b4bc12a6c8c87d71854adb1eb3d21f8d4c156661f909812ba546a767cf82c7fb2013f5fa9c4c13f7568e74a8b684e34333cb803407191ac708f80fa521b28d52b922209aacdf44919fb4ce53698820934f7ded960f202a9604ccdb40945aac32cb3ebae14c800999b18fa9429f95b953968e3b294124f124fa3a74c02a2d18abb7f715c4bca4752cdf13", 0x98, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="f46222c62b8ef236a3ba2ab2d08cec7b17cc633406a76c5493f6813c3538b3403c97a20e3479f7896ff2e0887633aa4896eccbee4ea86a735f8295e46e89d403dd14acea3a4b237d0e771b61e51e492ea5d1c6a63603a2232a7035891d450d3f2e0bcb4026011e012c77024f67d93ea1e15d13fb95d83e50a3728073fa47e48dad766e43068b36f01ad29858ada9f5ee84e338ecbc50d4d80000746d414c579231042c0601cce8390093cd2177fc2c01f7697989e5e66df3cffb329c7a61807e688e75e964d18cddcdffbe537713b77ba09654382a6b89d8cd0402f697fb9e1669b409e0f164a106df919242bef3cfe3924c35a96e5d66") socket$kcm(0x2b, 0x1, 0x0) setns(0xc9, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0x6, 0x1, @dev={0xac, 0x14, 0x14, 0x39}, 0x9}]}}}}}}}}, 0x0) prlimit64(r0, 0x0, &(0x7f0000000380)={0x9, 0xfffffffffffffffe}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x102, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(0x0, r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) writev(r3, &(0x7f0000001bc0)=[{&(0x7f0000000000)='3', 0x1}, {&(0x7f0000000b80)="bd3fcafd842c3b13046569", 0xb}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.311583624s ago: executing program 1 (id=3178): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x9, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.275459189s ago: executing program 0 (id=3179): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40000032, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000000, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r2, 0x0, r0, 0x0, 0x7ffff000, 0x1) 4.176619808s ago: executing program 0 (id=3180): r0 = syz_clone(0x81006800, &(0x7f0000000080)="58d6492be7bf3c0ab54eb33449b8b4bc12a6c8c87d71854adb1eb3d21f8d4c156661f909812ba546a767cf82c7fb2013f5fa9c4c13f7568e74a8b684e34333cb803407191ac708f80fa521b28d52b922209aacdf44919fb4ce53698820934f7ded960f202a9604ccdb40945aac32cb3ebae14c800999b18fa9429f95b953968e3b294124f124fa3a74c02a2d18abb7f715c4bca4752cdf13", 0x98, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="f46222c62b8ef236a3ba2ab2d08cec7b17cc633406a76c5493f6813c3538b3403c97a20e3479f7896ff2e0887633aa4896eccbee4ea86a735f8295e46e89d403dd14acea3a4b237d0e771b61e51e492ea5d1c6a63603a2232a7035891d450d3f2e0bcb4026011e012c77024f67d93ea1e15d13fb95d83e50a3728073fa47e48dad766e43068b36f01ad29858ada9f5ee84e338ecbc50d4d80000746d414c579231042c0601cce8390093cd2177fc2c01f7697989e5e66df3cffb329c7a61807e688e75e964d18cddcdffbe537713b77ba09654382a6b89d8cd0402f697fb9e1669b409e0f164a106df919242bef3cfe3924c35a9") socket$kcm(0x2b, 0x1, 0x0) setns(0xc9, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0x6, 0x1, @dev={0xac, 0x14, 0x14, 0x39}, 0x9}]}}}}}}}}, 0x0) prlimit64(r0, 0x0, &(0x7f0000000380)={0x9, 0xfffffffffffffffe}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x102, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(0x0, r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) writev(r3, &(0x7f0000001bc0)=[{&(0x7f0000000000)='3', 0x1}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.147663851s ago: executing program 7 (id=3181): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x275a, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000002740)={0x2020}, 0x2020) 4.090863923s ago: executing program 0 (id=3182): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x169a82, 0x10) sendfile(r0, r0, 0x0, 0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x4000) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) 3.885799554s ago: executing program 1 (id=3183): r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 3.708370278s ago: executing program 3 (id=3184): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 3.610189971s ago: executing program 7 (id=3185): sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000080)={0xdb, 0xffffffffffffffff, 0x7fff, 0x5, 0x0, 0x2}) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESHEX=r2, @ANYRES16=r0, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES8, @ANYRES8=r0], 0x5, 0x1537, &(0x7f0000001140)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r8, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) 3.509288811s ago: executing program 6 (id=3186): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x260, 0x328, 0x0, 0x98, 0x130, 0x1c8, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f00000000c0)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="17", 0x1}], 0x1}, 0x48c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 3.373729548s ago: executing program 3 (id=3187): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f0000000280)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa) fallocate(r0, 0x0, 0x0, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 3.339190181s ago: executing program 1 (id=3188): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.241397441s ago: executing program 0 (id=3189): syz_read_part_table(0x1060, &(0x7f0000001080)="$eJzsz7FxwjAYBeCns53YVbJBMkY2SJE6EzCIgXFYgYKeEZiFO3G2gRGA4vuKX3dPT9IpPNVQkjTtT0nqOAWf78tGm828NvPssj+2ZZ18ZUytc6dfioe/rk/9aPqk5PQ7bIfr1W/TONfV7amyJN/lfjT/u0f9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABe2SUAAP//QVgOmw==") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x1a}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x6) 2.240549423s ago: executing program 6 (id=3190): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x40106183, &(0x7f0000000000)) 2.164972777s ago: executing program 7 (id=3191): prlimit64(0x0, 0xe, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 1.640968353s ago: executing program 3 (id=3192): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x2, 0x0, [{0xeeee8000, 0xa1, &(0x7f0000000140)=""/161}, {0x8080000, 0xcb, &(0x7f0000000500)=""/203}]}) 1.561985852s ago: executing program 7 (id=3193): r0 = syz_clone(0x81006800, &(0x7f0000000080)="58d6492be7bf3c0ab54eb33449b8b4bc12a6c8c87d71854adb1eb3d21f8d4c156661f909812ba546a767cf82c7fb2013f5fa9c4c13f7568e74a8b684e34333cb803407191ac708f80fa521b28d52b922209aacdf44919fb4ce53698820934f7ded960f202a9604ccdb40945aac32cb3ebae14c800999b18fa9429f95b953968e3b294124f124fa3a74c02a2d18abb7f715c4bca4752cdf13", 0x98, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="f46222c62b8ef236a3ba2ab2d08cec7b17cc633406a76c5493f6813c3538b3403c97a20e3479f7896ff2e0887633aa4896eccbee4ea86a735f8295e46e89d403dd14acea3a4b237d0e771b61e51e492ea5d1c6a63603a2232a7035891d450d3f2e0bcb4026011e012c77024f67d93ea1e15d13fb95d83e50a3728073fa47e48dad766e43068b36f01ad29858ada9f5ee84e338ecbc50d4d80000746d414c579231042c0601cce8390093cd2177fc2c01f7697989e5e66df3cffb329c7a61807e688e75e964d18cddcdffbe537713b77ba09654382a6b89d8cd0402f697fb9e1669b409e0f164a106df919242bef3cfe3924c35a9") socket$kcm(0x2b, 0x1, 0x0) setns(0xc9, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0x6, 0x1, @dev={0xac, 0x14, 0x14, 0x39}, 0x9}]}}}}}}}}, 0x0) prlimit64(r0, 0x0, &(0x7f0000000380)={0x9, 0xfffffffffffffffe}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x102, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(0x0, r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) writev(r3, &(0x7f0000001bc0)=[{&(0x7f0000000000)='3', 0x1}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 846.065366ms ago: executing program 7 (id=3194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c4}, 0x8000) fchdir(0xffffffffffffffff) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x88102, 0x0) write$cgroup_int(r4, &(0x7f00000001c0)=0x720, 0x12) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40810}, 0x4084) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) recvmmsg(r6, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {0x0}, {&(0x7f00000000c0)=""/64, 0x40}], 0x3}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}], 0x5, 0x0, 0x0) 746.51136ms ago: executing program 0 (id=3195): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4}, &(0x7f0000000300), &(0x7f00000006c0)=r2}, 0x20) 235.422482ms ago: executing program 3 (id=3196): syz_emit_ethernet(0x66, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='hfsplus\x00', &(0x7f00000003c0)='hfsplus\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) listen(r2, 0x0) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x30000000}) madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) mount$9p_fd(0x0, 0x0, 0x0, 0x210002, 0x0) pwrite64(r0, 0x0, 0x0, 0xe7c) timer_create(0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000280)={0x0}}, 0x804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) openat$sndseq(0xffffffffffffff9c, 0x0, 0x202) 0s ago: executing program 6 (id=3197): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000ae1000/0x3000)=nil, 0x3000, 0x1ff}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f0000000440)="c5", 0x1, 0xaf1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000780)={0x28, 0x2, r1, 0x0, &(0x7f0000000040)='%', 0x1, 0x33e2}) kernel console output (not intermixed with test programs): m="udevd" name="idVendor" dev="sysfs" ino=223685 res=0 errno=0 [ 681.289558][ T31] audit: type=1800 audit(1791169453.017:1316): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=223686 res=0 errno=0 [ 681.322698][ T5753] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.88/input/input172 [ 681.326756][ T31] audit: type=1800 audit(1791169453.057:1317): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=223687 res=0 errno=0 [ 681.329748][T15051] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.2835: bg 0: block 465: padding at end of block bitmap is not set [ 681.345893][T15051] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 681.345933][T15051] EXT4-fs (loop6): This should not happen!! Data will be lost [ 681.345933][T15051] [ 681.345951][T15051] EXT4-fs (loop6): Total free blocks count 0 [ 681.345968][T15051] EXT4-fs (loop6): Free/Dirty block details [ 681.346018][T15051] EXT4-fs (loop6): free_blocks=0 [ 681.350746][T15051] EXT4-fs (loop6): dirty_blocks=16384 [ 681.350770][T15051] EXT4-fs (loop6): Block reservation details [ 681.350790][T15051] EXT4-fs (loop6): i_reserved_data_blocks=16384 [ 681.413335][ T5770] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 681.414512][ T5770] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 681.414539][ T5770] usb 4-1: config 1 has no interface number 0 [ 681.416736][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.416763][ T5770] usb 4-1: Product: syz [ 681.416780][ T5770] usb 4-1: Manufacturer: syz [ 681.416798][ T5770] usb 4-1: SerialNumber: syz [ 681.437942][ T31] audit: type=1800 audit(1791169453.167:1318): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223727 res=0 errno=0 [ 681.441070][ T30] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 681.448870][ T30] usb 1-1: config 0 has no interfaces? [ 681.448908][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.461642][ T31] audit: type=1800 audit(1791169453.187:1319): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223746 res=0 errno=0 [ 681.467900][ T30] usb 1-1: config 0 descriptor?? [ 681.468200][ T31] audit: type=1800 audit(1791169453.197:1320): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223791 res=0 errno=0 [ 681.480209][ T5770] usb 4-1: skipping empty audio interface (v1) [ 681.486235][ T31] audit: type=1800 audit(1791169453.217:1321): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=223823 res=0 errno=0 [ 681.499157][T15056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.514935][T15056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.605046][T15051] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 681.698671][T15045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.699219][T15045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.707918][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.883139][ T52] Bluetooth: hci8: command tx timeout [ 681.924208][ T30] usb 1-1: USB disconnect, device number 17 [ 682.112733][ T5770] snd-usb-audio 4-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 682.172666][ T5770] usb 4-1: USB disconnect, device number 4 [ 682.249554][ T8492] udevd[8492]: Error opening device "/dev/input/event3": Input/output error [ 682.249612][ T8492] udevd[8492]: Unable to EVIOCGABS device "/dev/input/event3" [ 682.249757][ T8492] udevd[8492]: Unable to EVIOCGABS device "/dev/input/event3" [ 682.249806][ T8492] udevd[8492]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 682.262631][ T30] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 682.277494][ T6116] EXT4-fs warning (device loop6): ext4_evict_inode:196: inode #18: comm syz-executor: data will be lost [ 682.285776][T10086] udevd[10086]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 682.397029][ T4976] udevd[4976]: worker [8492] terminated by signal 6 (Aborted) [ 682.397087][ T4976] udevd[4976]: worker [8492] failed while handling '/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.88/input/input172/event3' [ 682.429232][ T30] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 682.449064][ T30] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.449109][ T30] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 682.449141][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 682.449178][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.497103][ T30] usb 1-1: config 0 descriptor?? [ 682.595297][ T1570] usb 9-1: USB disconnect, device number 20 [ 682.850247][T15079] loop3: detected capacity change from 0 to 512 [ 683.008503][ T30] logitech 0003:046D:C50C.0043: ignoring exceeding usage max [ 683.070406][ T30] logitech 0003:046D:C50C.0043: hidraw0: USB HID v0.00 Joystick [HID 046d:c50c] on usb-dummy_hcd.0-1/input0 [ 683.195502][ T5753] usb 1-1: USB disconnect, device number 18 [ 683.516023][T15087] fido_id[15087]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 683.742112][T15092] evm: overlay not supported [ 684.133943][T15095] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 684.280716][T14904] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 684.752593][ T30] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 684.807690][T14904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 684.821086][T14904] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 684.929078][T14904] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 684.943884][T14904] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 684.963518][T14904] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 684.966666][T14904] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 684.994446][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 684.994758][T14904] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 684.995851][ T30] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 684.999020][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.999054][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.999104][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.016734][ T30] usb 4-1: config 0 descriptor?? [ 685.037445][ T30] hub 4-1:0.0: USB hub found [ 685.088097][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.088199][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.413591][ T30] hub 4-1:0.0: 1 port detected [ 685.444555][ T31] kauditd_printk_skb: 39 callbacks suppressed [ 685.444607][ T31] audit: type=1800 audit(1791169457.177:1361): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=224650 res=0 errno=0 [ 686.348755][ T5770] hub 4-1:0.0: activate --> -90 [ 686.558982][T14904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.588276][T15141] loop8: detected capacity change from 0 to 256 [ 686.598927][ T5770] usb 4-1: USB disconnect, device number 5 [ 686.644714][T14904] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.662290][ T5872] usb 4-1: Failed to suspend device, error -71 [ 686.678088][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.678197][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.691002][T15141] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 686.712360][ T31] audit: type=1800 audit(1791169458.437:1362): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15839 res=0 errno=0 [ 686.724752][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.724860][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.076263][ T31] audit: type=1800 audit(1791169458.807:1363): pid=15146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2855" name="mode" dev="sysfs" ino=63838 res=0 errno=0 [ 687.304922][T15150] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 687.463259][T15159] netlink: 'syz.3.2858': attribute type 15 has an invalid length. [ 687.564932][T15164] ip_tables: iptables: counters copy to user failed while replacing table [ 687.606358][T15157] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 688.206393][T15182] loop6: detected capacity change from 0 to 4096 [ 688.211727][T15182] EXT4-fs: Ignoring removed bh option [ 688.230118][T15182] EXT4-fs (loop6): Test dummy encryption mode enabled [ 688.279937][T15182] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.283417][ T5770] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 688.313465][ T31] audit: type=1800 audit(1791169460.037:1364): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 688.434820][ T5770] usb 4-1: Using ep0 maxpacket: 8 [ 688.436712][ T5770] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 688.460649][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.460682][ T5770] usb 4-1: Product: syz [ 688.460699][ T5770] usb 4-1: Manufacturer: syz [ 688.460716][ T5770] usb 4-1: SerialNumber: syz [ 688.489106][ T5770] usb 4-1: config 0 descriptor?? [ 688.490520][ T31] audit: type=1800 audit(1791169460.217:1365): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=224785 res=0 errno=0 [ 688.519231][ T31] audit: type=1800 audit(1791169460.247:1366): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=224817 res=0 errno=0 [ 688.532303][ T31] audit: type=1800 audit(1791169460.257:1367): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=224792 res=0 errno=0 [ 688.545501][ T31] audit: type=1800 audit(1791169460.277:1368): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=224793 res=0 errno=0 [ 688.621645][ T6116] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.750144][ T5770] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 689.028328][ T5770] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 689.037182][ T31] audit: type=1800 audit(1791169460.767:1369): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=224814 res=0 errno=0 [ 689.037273][ T31] audit: type=1800 audit(1791169460.767:1370): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=224815 res=0 errno=0 [ 689.037781][ T5770] usb 4-1: USB disconnect, device number 6 [ 689.352771][T14904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.630554][T15217] loop1: detected capacity change from 0 to 256 [ 689.977312][T15225] loop3: detected capacity change from 0 to 256 [ 689.997808][T15225] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 690.036034][T14904] veth0_vlan: entered promiscuous mode [ 690.058758][T15220] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 690.125874][T14904] veth1_vlan: entered promiscuous mode [ 690.140333][T15225] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2048) [ 690.140360][T15225] FAT-fs (loop3): Filesystem has been set read-only [ 690.213576][T15205] syz.6.2865 (15205): drop_caches: 2 [ 690.251045][T15225] FAT-fs (loop3): error, invalid FAT chain (i_pos 196, last_block 8200) [ 690.385740][T14904] veth0_macvtap: entered promiscuous mode [ 690.448131][T14904] veth1_macvtap: entered promiscuous mode [ 690.559946][T14904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.588005][T14904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.669089][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.670123][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.670266][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.670311][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.784453][T15242] loop3: detected capacity change from 0 to 256 [ 690.832698][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 690.832723][ T31] audit: type=1800 audit(1791169462.547:1383): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 691.103844][T15242] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 691.781862][ T31] audit: type=1800 audit(1791169463.507:1384): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34606 res=0 errno=0 [ 692.035760][ T30] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 692.095392][ T31] audit: type=1800 audit(1791169463.817:1385): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=225092 res=0 errno=0 [ 692.234958][ T30] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 692.258310][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 692.258341][ T30] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 692.258369][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 692.258395][ T30] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 692.258438][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.334101][ T30] usb 1-1: config 0 descriptor?? [ 692.343443][ T31] audit: type=1800 audit(1791169464.067:1386): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=225104 res=0 errno=0 [ 692.378087][ T31] audit: type=1800 audit(1791169464.107:1387): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=225133 res=0 errno=0 [ 692.420031][ T31] audit: type=1800 audit(1791169464.147:1388): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=225111 res=0 errno=0 [ 692.470816][ T31] audit: type=1800 audit(1791169464.197:1389): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=225112 res=0 errno=0 [ 692.500012][ T31] audit: type=1800 audit(1791169464.227:1390): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=225113 res=0 errno=0 [ 692.515692][T15250] loop8: detected capacity change from 0 to 32768 [ 692.572055][T15252] syz_tun: entered allmulticast mode [ 692.574918][T15248] syz_tun: left allmulticast mode [ 692.578591][ T31] audit: type=1800 audit(1791169464.307:1391): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=225153 res=0 errno=0 [ 692.581783][T15250] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 692.581803][T15250] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 692.628173][ T30] hdpvr 1-1:0.0: unexpected answer of status request, len -71 [ 692.628197][ T30] hdpvr 1-1:0.0: device init failed [ 692.628277][ T30] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 692.663463][ T30] usb 1-1: USB disconnect, device number 19 [ 692.679798][ T31] audit: type=1800 audit(1791169464.407:1392): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15839 res=0 errno=0 [ 692.722136][T15250] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 692.725999][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 692.726017][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 692.774174][ T5872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.774200][ T5872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.018458][ T5872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.018483][ T5872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.264223][T15273] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 693.305669][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 579ms [ 693.338527][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 693.338581][T15250] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 693.863528][T15282] loop3: detected capacity change from 0 to 32768 [ 693.917232][T15293] FAULT_INJECTION: forcing a failure. [ 693.917232][T15293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.917273][T15293] CPU: 1 UID: 0 PID: 15293 Comm: syz.2.2798 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.917307][T15293] Tainted: [L]=SOFTLOCKUP [ 693.917317][T15293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 693.917333][T15293] Call Trace: [ 693.917344][T15293] [ 693.917356][T15293] dump_stack_lvl+0xe8/0x150 [ 693.917400][T15293] should_fail_ex+0x410/0x560 [ 693.917439][T15293] _copy_to_user+0x31/0xb0 [ 693.917481][T15293] bpf_verifier_vlog+0x606/0x900 [ 693.917523][T15293] __btf_verifier_log_type+0x4d1/0x6a0 [ 693.917577][T15293] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 693.917640][T15293] btf_datasec_check_meta+0x3d8/0xad0 [ 693.917668][T15293] ? sort+0xb0/0x100 [ 693.917707][T15293] ? __pfx_sort+0x10/0x10 [ 693.917740][T15293] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 693.917781][T15293] btf_parse_type_sec+0x3cf/0x2360 [ 693.917820][T15293] ? __pfx_btf_check_sec_info+0x10/0x10 [ 693.917857][T15293] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.917888][T15293] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.917918][T15293] ? btf_parse_str_sec+0x244/0x2f0 [ 693.917947][T15293] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.917983][T15293] btf_new_fd+0x4ad/0xc20 [ 693.918024][T15293] __sys_bpf+0xd2e/0xd90 [ 693.918066][T15293] ? __pfx___sys_bpf+0x10/0x10 [ 693.918101][T15293] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.918131][T15293] ? do_futex+0x3e7/0x4e0 [ 693.918200][T15293] ? rcu_is_watching+0x16/0xb0 [ 693.918234][T15293] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.918271][T15293] __x64_sys_bpf+0xba/0xd0 [ 693.918307][T15293] do_syscall_64+0x166/0x520 [ 693.918346][T15293] ? trace_irq_disable+0x3b/0x140 [ 693.918373][T15293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.918406][T15293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.918433][T15293] RIP: 0033:0x7f9c7b39e159 [ 693.918456][T15293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.918478][T15293] RSP: 002b:00007f9c7c24e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 693.918506][T15293] RAX: ffffffffffffffda RBX: 00007f9c7b625fa0 RCX: 00007f9c7b39e159 [ 693.918526][T15293] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 693.918544][T15293] RBP: 00007f9c7b43506b R08: 0000000000000000 R09: 0000000000000000 [ 693.918564][T15293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.918580][T15293] R13: 00007f9c7b626038 R14: 00007f9c7b625fa0 R15: 00007ffcf1692098 [ 693.918626][T15293] [ 693.994788][T15279] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 694.106009][T15282] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 694.277795][T15282] XFS (loop3): Ending clean mount [ 694.610929][T15313] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 695.378189][T15330] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 695.574719][T13892] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 695.741284][T15340] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 696.607116][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 696.607139][ T31] audit: type=1800 audit(1791169468.337:1398): pid=15357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2906" name="compressor" dev="sysfs" ino=55411 res=0 errno=0 [ 696.947302][ T31] audit: type=1800 audit(1791169468.667:1399): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=225551 res=0 errno=0 [ 697.151048][T15369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2911'. [ 697.151083][T15369] netlink: 'syz.0.2911': attribute type 1 has an invalid length. [ 697.671228][T15381] loop1: detected capacity change from 0 to 512 [ 698.436682][T15388] loop3: detected capacity change from 0 to 256 [ 698.509021][T15388] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 698.552563][ T31] audit: type=1800 audit(1791169470.277:1400): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 698.565292][T15386] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 700.743197][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 701.521072][T15453] loop6: detected capacity change from 0 to 131072 [ 701.551602][T15453] F2FS-fs (loop6): invalid crc value [ 701.595490][ T9] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 701.612911][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.612968][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 701.613000][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 701.613047][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.760874][T15453] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 701.772203][T15453] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 701.805029][ T31] audit: type=1800 audit(1791169473.537:1401): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15593 res=0 errno=0 [ 701.811633][ T31] audit: type=1800 audit(1791169473.537:1402): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=225677 res=0 errno=0 [ 701.858219][ T31] audit: type=1800 audit(1791169473.587:1403): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=225780 res=0 errno=0 [ 701.860393][ T31] audit: type=1800 audit(1791169473.587:1404): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=225758 res=0 errno=0 [ 701.860443][ T31] audit: type=1800 audit(1791169473.587:1405): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=225759 res=0 errno=0 [ 701.862860][ T31] audit: type=1800 audit(1791169473.587:1406): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=225760 res=0 errno=0 [ 701.961808][ T31] audit: type=1800 audit(1791169473.687:1407): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=225862 res=0 errno=0 [ 702.027993][ T31] audit: type=1800 audit(1791169473.757:1408): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=225881 res=0 errno=0 [ 702.210139][ T9] cxacru 9-1:1.0: send of cm 0x91 failed (-71) [ 702.210175][ T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 702.210193][ T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 702.263324][ T9] cxacru 9-1:1.0: probe with driver cxacru failed with error -71 [ 702.301947][ T9] usb 9-1: USB disconnect, device number 21 [ 703.126420][T15414] syz.0.2921 (15414): drop_caches: 2 [ 703.458919][ T1570] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 703.613717][ T1570] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 703.630397][ T1570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.630434][ T1570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.630480][ T1570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.638187][ T31] audit: type=1800 audit(1791169475.367:1409): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226048 res=0 errno=0 [ 703.694050][ T1570] usb 4-1: config 0 descriptor?? [ 704.184273][ T1570] arvo 0003:1E7D:30D4.0044: unknown main item tag 0x0 [ 704.184311][ T1570] arvo 0003:1E7D:30D4.0044: unknown main item tag 0x0 [ 704.184338][ T1570] arvo 0003:1E7D:30D4.0044: unknown main item tag 0x0 [ 704.184365][ T1570] arvo 0003:1E7D:30D4.0044: unknown main item tag 0x0 [ 704.184392][ T1570] arvo 0003:1E7D:30D4.0044: unknown main item tag 0x0 [ 704.184417][ T1570] arvo 0003:1E7D:30D4.0044: unknown main item tag 0x0 [ 704.184443][ T1570] arvo 0003:1E7D:30D4.0044: unknown main item tag 0x0 [ 704.227306][ T1570] arvo 0003:1E7D:30D4.0044: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 704.296486][ T5872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.356842][ T1570] arvo 0003:1E7D:30D4.0044: couldn't init struct arvo_device [ 704.356900][ T1570] arvo 0003:1E7D:30D4.0044: couldn't install keyboard [ 704.359413][ T1570] arvo 0003:1E7D:30D4.0044: probe with driver arvo failed with error -32 [ 704.510546][ T10] usb 4-1: USB disconnect, device number 7 [ 704.561999][ T5872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.747904][T15494] fido_id[15494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 705.043241][ T5872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.357493][T15508] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 705.456396][T15515] loop3: detected capacity change from 0 to 256 [ 705.534752][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 705.551917][ T5872] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.685944][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 705.689957][ T10] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 705.706777][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.706809][ T10] usb 1-1: Product: syz [ 705.706826][ T10] usb 1-1: Manufacturer: syz [ 705.706844][ T10] usb 1-1: SerialNumber: syz [ 705.911917][ T4925] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 705.936830][ T4925] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 705.955206][ T4925] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 705.966159][ T4925] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 705.967819][ T4925] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 706.105740][ T10] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 706.148650][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 706.151005][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 706.151056][ T10] usb 1-1: media controller created [ 707.160883][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 707.160906][ T31] audit: type=1800 audit(1791169478.887:1426): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226442 res=0 errno=0 [ 707.312639][ T31] audit: type=1800 audit(1791169479.037:1427): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=226447 res=0 errno=0 [ 707.322576][ T31] audit: type=1800 audit(1791169479.047:1428): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=226451 res=0 errno=0 [ 707.380064][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 707.392324][ T31] audit: type=1800 audit(1791169479.117:1429): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=226450 res=0 errno=0 [ 707.407540][ T31] audit: type=1800 audit(1791169479.127:1430): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=226453 res=0 errno=0 [ 707.461817][ T31] audit: type=1800 audit(1791169479.187:1431): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226528 res=0 errno=0 [ 707.490954][ T31] audit: type=1800 audit(1791169479.217:1432): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=226533 res=0 errno=0 [ 707.504060][ T31] audit: type=1800 audit(1791169479.227:1433): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=226537 res=0 errno=0 [ 707.504124][ T31] audit: type=1800 audit(1791169479.227:1434): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=226536 res=0 errno=0 [ 707.525004][ T31] audit: type=1800 audit(1791169479.247:1435): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=226539 res=0 errno=0 [ 707.537064][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 707.833120][T15542] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 708.005061][ T10] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 708.055526][ T52] Bluetooth: hci8: command tx timeout [ 708.889706][ T10] usb 1-1: USB disconnect, device number 20 [ 708.943873][ T5872] bridge_slave_1: left allmulticast mode [ 708.943908][ T5872] bridge_slave_1: left promiscuous mode [ 708.944144][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.017623][ T5872] bridge_slave_0: left allmulticast mode [ 709.017657][ T5872] bridge_slave_0: left promiscuous mode [ 709.017887][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.278672][T15565] loop1: detected capacity change from 0 to 256 [ 709.322738][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 709.548890][T15566] loop8: detected capacity change from 0 to 256 [ 710.132575][ T52] Bluetooth: hci8: command tx timeout [ 710.276068][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 710.298806][ T10] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 710.320284][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 710.320315][ T10] usb 1-1: config 0 has no interface number 0 [ 710.339583][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.339614][ T10] usb 1-1: Product: syz [ 710.339632][ T10] usb 1-1: Manufacturer: syz [ 710.339650][ T10] usb 1-1: SerialNumber: syz [ 710.360022][T15566] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 710.608194][ T10] usb 1-1: config 0 descriptor?? [ 710.998047][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 711.263769][T15575] loop6: detected capacity change from 0 to 256 [ 711.341890][T15575] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 712.064159][ T5770] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 712.213157][ T52] Bluetooth: hci8: command tx timeout [ 712.218112][ T5770] usb 2-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 712.222159][ T5872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.239396][ T5770] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 712.239448][ T5770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 712.239480][ T5770] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 712.239528][ T5770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.274342][ T5770] usb 2-1: config 0 descriptor?? [ 712.284226][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 712.284245][ T31] audit: type=1800 audit(1791169484.007:1458): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226957 res=0 errno=0 [ 712.302665][ T31] audit: type=1800 audit(1791169484.027:1459): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=226986 res=0 errno=0 [ 712.305571][ T31] audit: type=1800 audit(1791169484.037:1460): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=226964 res=0 errno=0 [ 712.316410][ T31] audit: type=1800 audit(1791169484.047:1461): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=226965 res=0 errno=0 [ 712.321883][ T31] audit: type=1800 audit(1791169484.047:1462): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=226966 res=0 errno=0 [ 712.407737][ T31] audit: type=1800 audit(1791169484.137:1463): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227015 res=0 errno=0 [ 712.502028][ T10] gspca_spca1528: reg_w err -71 [ 712.502117][ T10] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 712.519225][ T10] usb 1-1: USB disconnect, device number 21 [ 712.519312][ T31] audit: type=1800 audit(1791169484.247:1464): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=226901 res=0 errno=0 [ 712.537375][ T31] audit: type=1800 audit(1791169484.267:1465): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=226902 res=0 errno=0 [ 712.551308][ T31] audit: type=1800 audit(1791169484.277:1466): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=226881 res=0 errno=0 [ 712.569963][ T31] audit: type=1800 audit(1791169484.297:1467): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=226903 res=0 errno=0 [ 712.624481][T15587] loop1: detected capacity change from 0 to 512 [ 712.627845][ T5872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.685710][ T5872] bond0 (unregistering): Released all slaves [ 712.768971][T15587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.769077][T15587] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 712.865542][T15580] syzkaller1: entered promiscuous mode [ 712.865570][T15580] syzkaller1: entered allmulticast mode [ 713.080606][ T5770] wacom 0003:056A:00B3.0045: item fetching failed at offset 0/6 [ 713.096809][ T5770] wacom 0003:056A:00B3.0045: parse failed [ 713.096943][ T5770] wacom 0003:056A:00B3.0045: probe with driver wacom failed with error -22 [ 714.285073][ T52] Bluetooth: hci8: command tx timeout [ 714.309970][T15614] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5619] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[15614] [ 714.881471][ T5872] hsr_slave_0: left promiscuous mode [ 714.900943][ T5872] hsr_slave_1: left promiscuous mode [ 714.951592][T15622] loop3: detected capacity change from 0 to 512 [ 714.952810][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.952834][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.977307][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.977334][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.999382][ T1570] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 715.080160][T15622] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 715.080191][T15622] loop3: lost filesystem error report for type 5 error -12 [ 715.082873][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 715.082896][ C0] EXT4-fs (loop3): initial error at time 1791169486: ext4_process_orphan:346 [ 715.082924][ C0] EXT4-fs (loop3): last error at time 1791169486: ext4_process_orphan:346 [ 715.093686][ T5770] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 715.152134][T15622] EXT4-fs (loop3): 2 truncates cleaned up [ 715.152564][ T1570] usb 1-1: Using ep0 maxpacket: 32 [ 715.158406][ T5872] veth1_macvtap: left promiscuous mode [ 715.158474][ T5872] veth0_macvtap: left promiscuous mode [ 715.158590][ T5872] veth1_vlan: left promiscuous mode [ 715.158670][ T5872] veth0_vlan: left promiscuous mode [ 715.162135][T15622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.173247][ T1570] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 715.187256][ T1570] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.187284][ T1570] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 715.187345][ T1570] usb 1-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 715.187388][ T1570] usb 1-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 715.187420][ T1570] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 715.187444][ T1570] usb 1-1: config 1 interface 1 has no altsetting 0 [ 715.239422][ T1570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.239459][ T1570] usb 1-1: Product: syz [ 715.239480][ T1570] usb 1-1: Manufacturer: syz [ 715.239497][ T1570] usb 1-1: SerialNumber: syz [ 715.254985][ T5770] usb 9-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 715.269501][ T5770] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 715.269576][ T5770] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 715.269629][ T5770] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 715.269713][ T5770] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.395728][ T5770] usb 9-1: config 0 descriptor?? [ 715.584391][T15625] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.2966: bg 0: block 5: invalid block bitmap [ 715.636818][ T1570] usb 1-1: selecting invalid altsetting 0 [ 715.655277][ T43] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 232 with error 28 [ 715.655313][ T43] EXT4-fs (loop3): This should not happen!! Data will be lost [ 715.655313][ T43] [ 715.655331][ T43] EXT4-fs (loop3): Total free blocks count 0 [ 715.655348][ T43] EXT4-fs (loop3): Free/Dirty block details [ 715.655365][ T43] EXT4-fs (loop3): free_blocks=0 [ 715.655382][ T43] EXT4-fs (loop3): dirty_blocks=232 [ 715.655399][ T43] EXT4-fs (loop3): Block reservation details [ 715.655414][ T43] EXT4-fs (loop3): i_reserved_data_blocks=232 [ 715.663399][T15620] loop8: detected capacity change from 0 to 512 [ 715.766185][T15620] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.766322][T15620] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 715.826451][ T1570] usb 1-1: 1:1: cannot get freq (v2/v3): err -32 [ 716.032360][ T1570] usb 1-1: 1:1: cannot set freq 44100 (v2/v3): err -2049495671 [ 716.047244][ T5770] wacom 0003:056A:00B3.0046: item fetching failed at offset 0/6 [ 716.052417][ T5770] wacom 0003:056A:00B3.0046: parse failed [ 716.070420][ T5770] wacom 0003:056A:00B3.0046: probe with driver wacom failed with error -22 [ 716.106316][T13892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.498585][T15632] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[10258] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[15632] [ 717.111353][T15630] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 717.137401][ T1570] usb 1-1: USB disconnect, device number 22 [ 717.391450][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 717.391477][ T31] audit: type=1800 audit(1791169489.117:1488): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=228168 res=0 errno=0 [ 717.482155][ T31] audit: type=1800 audit(1791169489.207:1489): pid=8582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26170 res=0 errno=0 [ 717.508199][ T8582] udevd[8582]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.881304][ T5872] team0 (unregistering): Port device team_slave_1 removed [ 717.937786][ T5872] team0 (unregistering): Port device team_slave_0 removed [ 718.197518][ T5770] usb 9-1: USB disconnect, device number 22 [ 718.251272][T10258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.582668][ T1570] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 718.734660][ T31] audit: type=1800 audit(1791169490.467:1490): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=228542 res=0 errno=0 [ 718.736426][ T5770] usb 2-1: USB disconnect, device number 40 [ 718.746707][ T1570] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 718.757171][ T1570] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 718.757215][ T1570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.757244][ T1570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.757270][ T1570] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 718.766607][ T1570] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 718.766635][ T1570] usb 4-1: Manufacturer: syz [ 718.825974][ T31] audit: type=1800 audit(1791169490.557:1491): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=228566 res=0 errno=0 [ 718.832864][ T31] audit: type=1800 audit(1791169490.567:1492): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=228554 res=0 errno=0 [ 718.846120][ T1570] usb 4-1: config 0 descriptor?? [ 718.861087][ T31] audit: type=1800 audit(1791169490.587:1493): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=228615 res=0 errno=0 [ 718.866009][ T31] audit: type=1800 audit(1791169490.597:1494): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=228596 res=0 errno=0 [ 718.886528][ T31] audit: type=1800 audit(1791169490.597:1495): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=228573 res=0 errno=0 [ 718.887117][ T31] audit: type=1800 audit(1791169490.617:1496): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=228574 res=0 errno=0 [ 718.900437][ T31] audit: type=1800 audit(1791169490.627:1497): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=228628 res=0 errno=0 [ 719.951290][ T1570] appleir 0003:05AC:8243.0047: unknown main item tag 0x0 [ 719.984278][ T1570] appleir 0003:05AC:8243.0047: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 720.159322][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.206395][ T9] usb 4-1: USB disconnect, device number 8 [ 720.516529][T15661] fido_id[15661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 720.780638][T15666] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 721.481039][T15677] loop3: detected capacity change from 0 to 256 [ 721.573877][T15677] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 722.195785][T15524] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.195965][T15524] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.196164][T15524] bridge_slave_0: entered allmulticast mode [ 722.232962][T15524] bridge_slave_0: entered promiscuous mode [ 722.266235][T15524] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.266362][T15524] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.266584][T15524] bridge_slave_1: entered allmulticast mode [ 722.387584][T15524] bridge_slave_1: entered promiscuous mode [ 722.839515][T15524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.895196][T15524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.087644][T15697] loop1: detected capacity change from 0 to 512 [ 723.088594][T15697] EXT4-fs: Ignoring removed nobh option [ 723.145702][T15697] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 723.161007][ T31] kauditd_printk_skb: 66 callbacks suppressed [ 723.161025][ T31] audit: type=1800 audit(1791169494.887:1564): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14978 res=0 errno=0 [ 723.177257][T15697] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2984: attempt to clear invalid blocks 1 len 1 [ 723.177292][T15697] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 723.182626][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 723.182653][ C1] EXT4-fs (loop1): initial error at time 1791169494: ext4_clear_blocks:876: inode 13 [ 723.182688][ C1] EXT4-fs (loop1): last error at time 1791169494: ext4_clear_blocks:876: inode 13 [ 723.226671][ T1570] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 723.253086][T15697] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 723.290365][T15697] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2984: invalid indirect mapped block 1819239214 (level 0) [ 723.290398][T15697] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 723.341255][T15697] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2984: invalid indirect mapped block 1819239214 (level 1) [ 723.341291][T15697] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 723.375241][ T1570] usb 7-1: Using ep0 maxpacket: 16 [ 723.378032][ T1570] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 723.397022][ T1570] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.397054][ T1570] usb 7-1: Product: syz [ 723.397072][ T1570] usb 7-1: Manufacturer: syz [ 723.397090][ T1570] usb 7-1: SerialNumber: syz [ 723.432571][ T5753] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 723.435201][ T31] audit: type=1800 audit(1791169495.167:1565): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=231983 res=0 errno=0 [ 723.460308][ T31] audit: type=1800 audit(1791169495.187:1566): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=232015 res=0 errno=0 [ 723.476639][ T31] audit: type=1800 audit(1791169495.207:1567): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=231990 res=0 errno=0 [ 723.505818][ T31] audit: type=1800 audit(1791169495.237:1568): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=231991 res=0 errno=0 [ 723.534346][T15524] team0: Port device team_slave_0 added [ 723.571078][T15524] team0: Port device team_slave_1 added [ 723.594531][ T5753] usb 4-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 723.657523][ T5753] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 723.657583][ T5753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 723.657616][ T5753] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 723.657665][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.658575][T15697] EXT4-fs (loop1): 1 truncate cleaned up [ 723.749533][ T5753] usb 4-1: config 0 descriptor?? [ 723.837489][ T31] audit: type=1800 audit(1791169495.567:1569): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232231 res=0 errno=0 [ 723.838157][T15697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.867062][ T31] audit: type=1800 audit(1791169495.597:1570): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=232260 res=0 errno=0 [ 723.888389][ T31] audit: type=1800 audit(1791169495.617:1571): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=232238 res=0 errno=0 [ 723.916591][ T31] audit: type=1800 audit(1791169495.647:1572): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=232239 res=0 errno=0 [ 723.917516][T15524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.917555][T15524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.917582][T15524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.971715][T15524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.971735][T15524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.971795][T15524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.986151][ T31] audit: type=1800 audit(1791169495.687:1573): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=232240 res=0 errno=0 [ 724.107497][T15699] loop3: detected capacity change from 0 to 512 [ 724.225941][T15699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.226064][T15699] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.272322][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.519396][T15524] hsr_slave_0: entered promiscuous mode [ 724.529138][T15524] hsr_slave_1: entered promiscuous mode [ 724.533610][ T5753] wacom 0003:056A:00B3.0048: item fetching failed at offset 0/6 [ 724.534329][ T5753] wacom 0003:056A:00B3.0048: parse failed [ 724.534461][ T5753] wacom 0003:056A:00B3.0048: probe with driver wacom failed with error -22 [ 724.570775][T15524] debugfs: 'hsr0' already exists in 'hsr' [ 724.570799][T15524] Cannot create hsr debugfs directory [ 725.090009][T15716] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[13892] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[15716] [ 725.554716][ T1570] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 725.751503][ T1570] usb 7-1: USB disconnect, device number 52 [ 726.660224][ T5753] usb 4-1: USB disconnect, device number 9 [ 726.746396][T13892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.962769][T14140] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 727.113126][T14140] usb 2-1: Using ep0 maxpacket: 8 [ 727.114138][T14140] usb 2-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40 [ 727.117892][T14140] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.117918][T14140] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 727.121948][T14140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.121976][T14140] usb 2-1: Product: syz [ 727.121995][T14140] usb 2-1: Manufacturer: syz [ 727.122012][T14140] usb 2-1: SerialNumber: syz [ 727.577430][T14140] usb 2-1: unit 3 not found! [ 727.834003][T14140] usb 2-1: selecting invalid altsetting 1 [ 727.834032][T14140] snd-usb-caiaq 2-1:1.1: can't set alt interface. [ 727.834049][T14140] usb 2-1: unable to init card! (ret=-5) [ 727.834394][T14140] snd-usb-caiaq 2-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 727.879707][T14140] usb 2-1: USB disconnect, device number 41 [ 728.021654][T10086] udevd[10086]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.114381][T15751] batman_adv: batadv0: Adding interface: syzkaller0 [ 728.114403][T15751] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.114463][T15751] batman_adv: batadv0: Interface activated: syzkaller0 [ 728.191638][T15749] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 728.251362][T15761] loop8: detected capacity change from 0 to 512 [ 728.274377][T15761] EXT4-fs: Ignoring removed bh option [ 728.276829][T15761] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 728.299889][T15749] batman_adv: batadv0: Removing interface: syzkaller0 [ 728.314496][T15761] EXT4-fs (loop8): 1 truncate cleaned up [ 728.329981][T15761] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.346229][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 728.346249][ T31] audit: type=1800 audit(1791169500.077:1588): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15839 res=0 errno=0 [ 728.651522][T15781] FAULT_INJECTION: forcing a failure. [ 728.651522][T15781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.651565][T15781] CPU: 0 UID: 0 PID: 15781 Comm: syz.0.3003 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.651600][T15781] Tainted: [L]=SOFTLOCKUP [ 728.651610][T15781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 728.651625][T15781] Call Trace: [ 728.651636][T15781] [ 728.651655][T15781] dump_stack_lvl+0xe8/0x150 [ 728.651700][T15781] should_fail_ex+0x410/0x560 [ 728.651739][T15781] _copy_from_user+0x2d/0xb0 [ 728.651778][T15781] memdup_user+0x5e/0xd0 [ 728.651810][T15781] strndup_user+0x68/0xd0 [ 728.651841][T15781] __se_sys_keyctl+0x186/0x9d0 [ 728.651877][T15781] ? __pfx___se_sys_keyctl+0x10/0x10 [ 728.651913][T15781] ? __pfx_do_futex+0x10/0x10 [ 728.651958][T15781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 728.651988][T15781] ? __se_sys_futex+0x3a8/0x450 [ 728.652033][T15781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 728.652063][T15781] ? rcu_is_watching+0x16/0xb0 [ 728.652095][T15781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 728.652132][T15781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 728.652161][T15781] ? __x64_sys_keyctl+0x20/0xc0 [ 728.652196][T15781] do_syscall_64+0x166/0x520 [ 728.652234][T15781] ? trace_irq_disable+0x3b/0x140 [ 728.652262][T15781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.652299][T15781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.652325][T15781] RIP: 0033:0x7ff9bc79e159 [ 728.652348][T15781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.652371][T15781] RSP: 002b:00007ff9bd61b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 728.652400][T15781] RAX: ffffffffffffffda RBX: 00007ff9bca25fa0 RCX: 00007ff9bc79e159 [ 728.652420][T15781] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000001 [ 728.652437][T15781] RBP: 00007ff9bc83506b R08: 0000000000000000 R09: 0000000000000000 [ 728.652454][T15781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.652470][T15781] R13: 00007ff9bca26038 R14: 00007ff9bca25fa0 R15: 00007ffff1f14b18 [ 728.652510][T15781] [ 728.694982][T14140] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 728.875305][T14140] usb 9-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 728.884743][T14140] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.884770][T14140] usb 9-1: config 0 has no interfaces? [ 728.884805][T14140] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.933281][T14140] usb 9-1: config 0 descriptor?? [ 728.939582][ T31] audit: type=1800 audit(1791169500.667:1589): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235039 res=0 errno=0 [ 728.969849][ T31] audit: type=1800 audit(1791169500.677:1590): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=235068 res=0 errno=0 [ 728.972714][ T31] audit: type=1800 audit(1791169500.707:1591): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=235046 res=0 errno=0 [ 728.995789][ T31] audit: type=1800 audit(1791169500.727:1592): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=235047 res=0 errno=0 [ 729.004965][ T31] audit: type=1800 audit(1791169500.727:1593): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=235048 res=0 errno=0 [ 729.061674][ T31] audit: type=1800 audit(1791169500.787:1594): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235106 res=0 errno=0 [ 729.196086][T15790] loop3: detected capacity change from 0 to 2048 [ 729.197386][T15790] ext4: Unknown parameter 'nouser_xattr' [ 729.279036][ T31] audit: type=1800 audit(1791169501.007:1595): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15224 res=0 errno=0 [ 729.289360][ T5753] usb 9-1: USB disconnect, device number 23 [ 729.591853][ T31] audit: type=1800 audit(1791169501.317:1596): pid=15524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24492 res=0 errno=0 [ 729.621700][ T31] audit: type=1800 audit(1791169501.347:1597): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235132 res=0 errno=0 [ 730.598364][T10258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.084660][T15524] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 731.186803][T15524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 731.205764][T15524] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 731.215377][T15799] loop1: detected capacity change from 0 to 32768 [ 731.231281][T15784] syz.6.3002 (15784): drop_caches: 2 [ 731.248848][T15524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 731.256755][T15524] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 731.291502][T15799] JBD2: Ignoring recovery information on journal [ 731.300359][T15524] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 731.346704][T15524] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 731.380199][T15524] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 731.483060][T15799] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 731.690241][ T5753] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 731.843461][ T5753] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 731.845211][ T5753] usb 7-1: config 0 has an invalid interface number: 106 but max is 0 [ 731.845238][ T5753] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.845261][ T5753] usb 7-1: config 0 has no interface number 0 [ 731.845308][ T5753] usb 7-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 731.846970][ T5753] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.882807][ T5753] usb 7-1: config 0 descriptor?? [ 731.942212][ T5753] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 732.174051][ T1570] usb 7-1: USB disconnect, device number 53 [ 732.175958][ T9899] usb 7-1: Failed to submit usb control message: -71 [ 732.175994][ T9899] usb 7-1: unable to send the bmi data to the device: -71 [ 732.176016][ T9899] usb 7-1: unable to get target info from device [ 732.176035][ T9899] usb 7-1: could not get target info (-71) [ 732.176056][ T9899] usb 7-1: could not probe fw (-71) [ 732.255080][T15524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.299377][T15524] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.345008][ T5619] ocfs2: Unmounting device (7,1) on (node local) [ 732.347689][ T9899] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.347799][ T9899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.373367][ T9899] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.373493][ T9899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.870484][T15869] loop1: detected capacity change from 0 to 128 [ 732.927372][T15873] sctp: [Deprecated]: syz.3.3021 (pid 15873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 732.927372][T15873] Use struct sctp_sack_info instead [ 733.225719][ T10] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 733.394561][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 733.399185][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 733.399220][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 733.399264][ T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 733.399295][ T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 733.458494][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.458528][ T10] usb 7-1: Product: syz [ 733.458546][ T10] usb 7-1: Manufacturer: syz [ 733.458565][ T10] usb 7-1: SerialNumber: syz [ 733.549905][T15875] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 733.617578][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 733.617603][ T31] audit: type=1800 audit(1791169505.337:1608): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235789 res=0 errno=0 [ 733.624921][ T31] audit: type=1800 audit(1791169505.357:1609): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=235821 res=0 errno=0 [ 733.634037][ T31] audit: type=1800 audit(1791169505.367:1610): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=235796 res=0 errno=0 [ 733.634591][ T31] audit: type=1800 audit(1791169505.367:1611): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=235797 res=0 errno=0 [ 734.331611][T15875] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 734.331740][T15875] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 735.030267][T15875] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 735.030902][T15875] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 735.350207][ T10] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 735.350239][ T10] cdc_ncm 7-1:1.0: dwNtbInMaxSize=17 is too small. Using 2048 [ 735.350263][ T10] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 735.516374][ T10] cdc_ncm 7-1:1.0: setting tx_max = 184 [ 737.325432][T15915] loop1: detected capacity change from 0 to 32768 [ 737.741740][ T10] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 737.748087][ T10] usb 7-1: USB disconnect, device number 54 [ 737.750041][ T10] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 737.835734][ T31] audit: type=1800 audit(1791169509.567:1612): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14978 res=0 errno=0 [ 737.929802][T15920] FAULT_INJECTION: forcing a failure. [ 737.929802][T15920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 737.929847][T15920] CPU: 0 UID: 0 PID: 15920 Comm: syz.0.3030 Tainted: G L syzkaller #0 PREEMPT(full) [ 737.929882][T15920] Tainted: [L]=SOFTLOCKUP [ 737.929892][T15920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 737.929909][T15920] Call Trace: [ 737.929921][T15920] [ 737.929932][T15920] dump_stack_lvl+0xe8/0x150 [ 737.929976][T15920] should_fail_ex+0x410/0x560 [ 737.930016][T15920] _copy_to_user+0x31/0xb0 [ 737.930056][T15920] rng_dev_read+0x3f0/0x7c0 [ 737.930102][T15920] ? __pfx_rng_dev_read+0x10/0x10 [ 737.930136][T15920] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.930181][T15920] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.930210][T15920] ? security_file_permission+0x75/0x260 [ 737.930242][T15920] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.930272][T15920] ? rw_verify_area+0x24a/0x4c0 [ 737.930318][T15920] vfs_readv+0x57c/0x850 [ 737.930354][T15920] ? __pfx_rng_dev_read+0x10/0x10 [ 737.930395][T15920] ? __pfx_vfs_readv+0x10/0x10 [ 737.930445][T15920] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.930479][T15920] ? __fget_files+0x2a/0x420 [ 737.930523][T15920] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.930553][T15920] ? __fget_files+0x3a2/0x420 [ 737.930590][T15920] ? __fget_files+0x2a/0x420 [ 737.930634][T15920] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.930669][T15920] __x64_sys_preadv+0x19c/0x2b0 [ 737.930702][T15920] ? __pfx___x64_sys_preadv+0x10/0x10 [ 737.930745][T15920] do_syscall_64+0x166/0x520 [ 737.930781][T15920] ? trace_irq_disable+0x3b/0x140 [ 737.930810][T15920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.930842][T15920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.930867][T15920] RIP: 0033:0x7ff9bc79e159 [ 737.930892][T15920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.930913][T15920] RSP: 002b:00007ff9bd61b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 737.930942][T15920] RAX: ffffffffffffffda RBX: 00007ff9bca25fa0 RCX: 00007ff9bc79e159 [ 737.930962][T15920] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 737.930979][T15920] RBP: 00007ff9bc83506b R08: 0000000000000000 R09: 0000000000000000 [ 737.930995][T15920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.931012][T15920] R13: 00007ff9bca26038 R14: 00007ff9bca25fa0 R15: 00007ffff1f14b18 [ 737.931051][T15920] [ 738.061607][T15915] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 738.208409][T15524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.249723][ T31] audit: type=1800 audit(1791169509.977:1613): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=235818 res=0 errno=0 [ 738.249786][ T31] audit: type=1800 audit(1791169509.977:1614): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=235819 res=0 errno=0 [ 738.255422][ T31] audit: type=1800 audit(1791169509.987:1615): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=235798 res=0 errno=0 [ 738.294046][ T31] audit: type=1800 audit(1791169510.007:1616): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=235820 res=0 errno=0 [ 738.478992][T15933] 9pnet_fd: p9_fd_create_tcp (15933): problem creating socket [ 738.652808][ T5619] ocfs2: Unmounting device (7,1) on (node local) [ 738.693409][T15937] FAULT_INJECTION: forcing a failure. [ 738.693409][T15937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.693450][T15937] CPU: 1 UID: 0 PID: 15937 Comm: syz.3.3036 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.693484][T15937] Tainted: [L]=SOFTLOCKUP [ 738.693494][T15937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 738.693510][T15937] Call Trace: [ 738.693520][T15937] [ 738.693530][T15937] dump_stack_lvl+0xe8/0x150 [ 738.693574][T15937] should_fail_ex+0x410/0x560 [ 738.693613][T15937] _copy_to_user+0x31/0xb0 [ 738.693653][T15937] bpf_verifier_vlog+0x52a/0x900 [ 738.693701][T15937] __btf_verifier_log+0xe2/0x140 [ 738.693739][T15937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 738.693769][T15937] ? __sort_r+0x2c44/0x3530 [ 738.693806][T15937] ? __pfx___btf_verifier_log+0x10/0x10 [ 738.693855][ T31] audit: type=1804 audit(1791169510.427:1617): pid=15940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3033" name="/newroot/77/file0" dev="tmpfs" ino=461 res=1 errno=0 [ 738.693859][T15937] __btf_verifier_log_type+0x4fd/0x6a0 [ 738.693912][T15937] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 738.693968][T15937] btf_datasec_check_meta+0x40e/0xad0 [ 738.694003][T15937] ? __pfx_sort+0x10/0x10 [ 738.694035][T15937] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 738.694077][T15937] btf_parse_type_sec+0x3cf/0x2360 [ 738.694115][T15937] ? __pfx_btf_check_sec_info+0x10/0x10 [ 738.694151][T15937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 738.694182][T15937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 738.694211][T15937] ? btf_parse_str_sec+0x244/0x2f0 [ 738.694239][T15937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 738.694275][T15937] btf_new_fd+0x4ad/0xc20 [ 738.694316][T15937] __sys_bpf+0xd2e/0xd90 [ 738.694358][T15937] ? __pfx___sys_bpf+0x10/0x10 [ 738.694392][T15937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 738.694422][T15937] ? do_futex+0x3e7/0x4e0 [ 738.694487][T15937] ? rcu_is_watching+0x16/0xb0 [ 738.694519][T15937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 738.694560][T15937] __x64_sys_bpf+0xba/0xd0 [ 738.694595][T15937] do_syscall_64+0x166/0x520 [ 738.694633][T15937] ? trace_irq_disable+0x3b/0x140 [ 738.694661][T15937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.694701][T15937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.694730][T15937] RIP: 0033:0x7fbb28f9e159 [ 738.694753][T15937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.694774][T15937] RSP: 002b:00007fbb29df5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 738.694802][T15937] RAX: ffffffffffffffda RBX: 00007fbb29225fa0 RCX: 00007fbb28f9e159 [ 738.694821][T15937] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 738.694839][T15937] RBP: 00007fbb2903506b R08: 0000000000000000 R09: 0000000000000000 [ 738.694856][T15937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.694872][T15937] R13: 00007fbb29226038 R14: 00007fbb29225fa0 R15: 00007ffc96137038 [ 738.694912][T15937] [ 739.534982][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 739.698959][ T9] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 739.704012][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 739.704062][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.704089][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 739.704118][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 740.370650][T15524] veth0_vlan: entered promiscuous mode [ 740.407448][T15524] veth1_vlan: entered promiscuous mode [ 740.554337][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.554372][ T9] usb 4-1: Product: syz [ 740.554391][ T9] usb 4-1: Manufacturer: syz [ 740.554409][ T9] usb 4-1: SerialNumber: syz [ 740.564408][ T31] audit: type=1800 audit(1791169512.287:1618): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=236137 res=0 errno=0 [ 740.607664][T15524] veth0_macvtap: entered promiscuous mode [ 740.619729][ T9] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 740.619753][ T9] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 740.619797][ T9] usbserial_generic 4-1:1.0: generic converter detected [ 740.621596][ T31] audit: type=1800 audit(1791169512.347:1619): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=236169 res=0 errno=0 [ 740.640474][T15969] netlink: 'syz.0.3042': attribute type 1 has an invalid length. [ 740.673908][ T31] audit: type=1800 audit(1791169512.407:1620): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=236144 res=0 errno=0 [ 740.706152][ T31] audit: type=1800 audit(1791169512.437:1621): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=236145 res=0 errno=0 [ 740.706555][ T9] usb 4-1: generic converter now attached to ttyUSB0 [ 740.732808][ T31] audit: type=1800 audit(1791169512.457:1622): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=236166 res=0 errno=0 [ 740.732873][ T31] audit: type=1800 audit(1791169512.457:1623): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=236167 res=0 errno=0 [ 740.732923][ T31] audit: type=1800 audit(1791169512.457:1624): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=236146 res=0 errno=0 [ 740.780776][ T31] audit: type=1800 audit(1791169512.497:1625): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=236168 res=0 errno=0 [ 740.803992][ T31] audit: type=1800 audit(1791169512.527:1626): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=236189 res=0 errno=0 [ 740.846865][ T30] usb 4-1: USB disconnect, device number 10 [ 740.889128][ T30] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 740.904310][ T30] usbserial_generic 4-1:1.0: device disconnected [ 740.966961][T15524] veth1_macvtap: entered promiscuous mode [ 741.123330][T15971] bond1: (slave geneve2): making interface the new active one [ 741.125012][T15971] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 741.153729][ T144] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 741.154121][ T144] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 741.154163][ T144] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 741.154202][ T144] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 741.165568][T15524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.238649][T15524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.414844][ T144] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.414927][ T144] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.415607][ T144] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.415887][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.611066][T15989] loop6: detected capacity change from 0 to 256 [ 741.700591][T15989] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 741.714754][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.714773][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.056249][ T5888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.056275][ T5888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.917819][T16030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3057'. [ 744.857949][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 744.857975][ T31] audit: type=1800 audit(1791169516.587:1634): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237113 res=0 errno=0 [ 744.926958][T16071] loop1: detected capacity change from 0 to 256 [ 744.957831][ T31] audit: type=1800 audit(1791169516.687:1635): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14978 res=0 errno=0 [ 744.988840][T16071] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 745.328092][T16072] loop7: detected capacity change from 0 to 4096 [ 745.331117][ T31] audit: type=1800 audit(1791169517.057:1636): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15716 res=0 errno=0 [ 746.461968][ T31] audit: type=1800 audit(1791169518.187:1637): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15716 res=0 errno=0 [ 746.498185][ T31] audit: type=1800 audit(1791169518.227:1638): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237146 res=0 errno=0 [ 746.527257][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.527320][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.668488][T16072] ntfs3(loop7): Failed to load $Extend (-22). [ 746.668519][T16072] ntfs3(loop7): Failed to initialize $Extend. [ 746.892352][ T31] audit: type=1800 audit(1791169518.617:1639): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237160 res=0 errno=0 [ 746.919304][T16096] loop1: detected capacity change from 0 to 256 [ 747.008156][T16096] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 747.049851][ T31] audit: type=1800 audit(1791169518.777:1640): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14978 res=0 errno=0 [ 747.079897][ T31] audit: type=1800 audit(1791169518.807:1641): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237186 res=0 errno=0 [ 747.649063][ T31] audit: type=1800 audit(1791169519.377:1642): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237205 res=0 errno=0 [ 747.712684][ T31] audit: type=1800 audit(1791169519.427:1643): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237215 res=0 errno=0 [ 748.092659][ T10] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 748.093944][ T5860] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 748.245547][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 748.246659][ T10] usb 7-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40 [ 748.246893][ T5860] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 748.249240][ T5860] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 748.249299][ T5860] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 748.251188][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 748.251212][ T10] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 748.256991][ T5860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.257018][ T5860] usb 8-1: Product: syz [ 748.257035][ T5860] usb 8-1: Manufacturer: syz [ 748.257053][ T5860] usb 8-1: SerialNumber: syz [ 748.261772][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.261798][ T10] usb 7-1: Product: syz [ 748.261816][ T10] usb 7-1: Manufacturer: syz [ 748.261833][ T10] usb 7-1: SerialNumber: syz [ 748.287770][T16117] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 748.602529][T16090] Bluetooth: hci1: command 0x0406 tx timeout [ 748.602671][T16090] Bluetooth: hci6: command 0x0406 tx timeout [ 748.602748][T16090] Bluetooth: hci7: command 0x0406 tx timeout [ 748.864602][ T10] usb 7-1: unit 3 not found! [ 748.927216][T16117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.927764][T16117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.066582][ T10] usb 7-1: selecting invalid altsetting 1 [ 749.066636][ T10] snd-usb-caiaq 7-1:1.1: can't set alt interface. [ 749.066654][ T10] usb 7-1: unable to init card! (ret=-5) [ 749.067083][ T10] snd-usb-caiaq 7-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 749.109635][ T10] usb 7-1: USB disconnect, device number 55 [ 749.277080][ T8556] udevd[8556]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 749.575559][ T5860] cdc_ncm 8-1:1.0: bind() failure [ 749.606130][ T5860] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 749.606194][ T5860] cdc_ncm 8-1:1.1: bind() failure [ 749.642245][ T5860] usb 8-1: USB disconnect, device number 27 [ 750.021066][T16150] Set syz1 is full, maxelem 2 reached [ 750.250218][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 750.250241][ T31] audit: type=1800 audit(1791169521.977:1663): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237652 res=0 errno=0 [ 750.260173][ T4925] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 750.279753][ T31] audit: type=1800 audit(1791169521.997:1664): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237663 res=0 errno=0 [ 750.287059][ T4925] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 750.290295][ T4925] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 750.302538][ T5770] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 750.320795][ T4925] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 750.336114][ T4925] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 750.382141][ T31] audit: type=1800 audit(1791169522.107:1665): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237682 res=0 errno=0 [ 750.405244][ T31] audit: type=1800 audit(1791169522.137:1666): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237693 res=0 errno=0 [ 750.503404][ T5770] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 750.505907][ T5770] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 750.505957][ T5770] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 750.505984][ T5770] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 750.506011][ T5770] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 750.506057][ T5770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.579792][ T31] audit: type=1800 audit(1791169522.307:1667): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237704 res=0 errno=0 [ 750.621083][ T31] audit: type=1800 audit(1791169522.347:1668): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=237733 res=0 errno=0 [ 750.621140][ T31] audit: type=1800 audit(1791169522.347:1669): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=237711 res=0 errno=0 [ 750.640524][ T31] audit: type=1800 audit(1791169522.357:1670): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=237712 res=0 errno=0 [ 750.654612][ T31] audit: type=1800 audit(1791169522.377:1671): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=237713 res=0 errno=0 [ 750.696341][ T31] audit: type=1800 audit(1791169522.417:1672): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237753 res=0 errno=0 [ 751.070650][ T30] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 751.117428][ T30] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 751.915885][T16186] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3099'. [ 751.982416][ T5770] gud 2-1:1.0: USB-1: Failed to add TV modes (ret=-71) [ 751.982522][ T5770] gud 2-1:1.0: USB-1: Failed to add properties (ret=-71) [ 751.982573][ T5770] gud 2-1:1.0: Failed to get connectors (error=-71) [ 751.982601][ T5770] gud 2-1:1.0: probe with driver gud failed with error -71 [ 752.448894][T12880] Bluetooth: hci9: command tx timeout [ 752.754474][ T5770] usb 2-1: USB disconnect, device number 42 [ 752.885461][T16157] loop6: detected capacity change from 0 to 32768 [ 752.970718][T16157] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 753.002248][T16157] JBD2: Ignoring recovery information on journal [ 753.039617][T16192] loop7: detected capacity change from 0 to 4096 [ 753.086069][T16192] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 753.151144][T16157] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 753.245359][T16200] cramfs: checking physical address 0x00000001442c0000 for linear cramfs image [ 753.245389][T16200] cramfs: wrong magic [ 753.332412][T16204] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 753.332412][T16204] [ 753.344703][T16204] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 753.344839][T16204] CIFS: Attempting to mount //172.20.20.170/share [ 753.383719][T16192] ntfs3(loop7): Failed to initialize $Extend/$ObjId. [ 753.422896][T16200] cramfs: wrong magic [ 753.487858][ T6116] ocfs2: Unmounting device (7,6) on (node local) [ 753.992621][ T1570] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 754.054862][T16204] CIFS: VFS: cifs_mount failed w/return code = -112 [ 754.142667][ T1570] usb 7-1: Using ep0 maxpacket: 16 [ 754.144860][ T1570] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 754.146080][ T1570] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 754.146114][ T1570] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 754.148290][ T1570] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.148317][ T1570] usb 7-1: Product: syz [ 754.148334][ T1570] usb 7-1: Manufacturer: syz [ 754.148352][ T1570] usb 7-1: SerialNumber: syz [ 754.151763][ T1570] usb 7-1: config 0 descriptor?? [ 754.286662][ T1570] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 754.286703][ T1570] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 754.297321][T16222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 754.522687][T12880] Bluetooth: hci9: command tx timeout [ 754.639825][T16231] cgroup: noprefix used incorrectly [ 754.694334][T16231] FAULT_INJECTION: forcing a failure. [ 754.694334][T16231] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 754.694380][T16231] CPU: 0 UID: 0 PID: 16231 Comm: syz.3.3109 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.694415][T16231] Tainted: [L]=SOFTLOCKUP [ 754.694429][T16231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 754.694446][T16231] Call Trace: [ 754.694456][T16231] [ 754.694469][T16231] dump_stack_lvl+0xe8/0x150 [ 754.694514][T16231] should_fail_ex+0x410/0x560 [ 754.694554][T16231] prepare_alloc_pages+0x223/0x600 [ 754.694594][T16231] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 754.694631][T16231] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 754.694668][T16231] ? __pfx_policy_nodemask+0x10/0x10 [ 754.694710][T16231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 754.694741][T16231] ? do_raw_spin_lock+0x12b/0x2f0 [ 754.694787][T16231] alloc_pages_mpol+0x21e/0x390 [ 754.694830][T16231] alloc_pages_noprof+0xb1/0x2b0 [ 754.694869][T16231] pte_alloc_one+0x22/0x370 [ 754.694903][T16231] __pte_alloc+0x25/0x1a0 [ 754.694937][T16231] copy_pmd_range+0x539a/0x5c10 [ 754.694985][T16231] ? stack_depot_save_flags+0x33/0x7f0 [ 754.695025][T16231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 754.695069][T16231] ? __pfx_copy_pmd_range+0x10/0x10 [ 754.695091][T16231] ? do_syscall_64+0x166/0x520 [ 754.695137][T16231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 754.695166][T16231] ? __lock_acquire+0x747/0x2de0 [ 754.695203][T16231] ? mas_wr_store_type+0xf80/0x1980 [ 754.695249][T16231] copy_page_range+0xc82/0x1290 [ 754.695306][T16231] ? __pfx_copy_page_range+0x10/0x10 [ 754.695345][T16231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 754.695376][T16231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 754.695405][T16231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 754.695435][T16231] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 754.695471][T16231] dup_mmap+0xf17/0x1dc0 [ 754.695520][T16231] ? __pfx_dup_mmap+0x10/0x10 [ 754.695546][T16231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 754.695575][T16231] ? do_raw_spin_lock+0x12b/0x2f0 [ 754.695629][T16231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 754.695660][T16231] ? lock_acquire+0x115/0x350 [ 754.695690][T16231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 754.695745][T16231] copy_mm+0x115/0x480 [ 754.695784][T16231] copy_process+0x1e79/0x4400 [ 754.695833][T16231] ? copy_process+0xd16/0x4400 [ 754.695888][T16231] ? __pfx_copy_process+0x10/0x10 [ 754.695938][T16231] kernel_clone+0x2d7/0x940 [ 754.695981][T16231] ? __pfx_kernel_clone+0x10/0x10 [ 754.696015][T16231] ? futex_wait+0x2a2/0x390 [ 754.696064][T16231] __se_sys_clone3+0x33c/0x360 [ 754.696105][T16231] ? __pfx___se_sys_clone3+0x10/0x10 [ 754.696141][T16231] ? do_futex+0x3e7/0x4e0 [ 754.696196][T16231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 754.696243][T16231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 754.696288][T16231] do_syscall_64+0x166/0x520 [ 754.696333][T16231] ? trace_irq_disable+0x3b/0x140 [ 754.696361][T16231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.696395][T16231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.696421][T16231] RIP: 0033:0x7fbb28f9e159 [ 754.696445][T16231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.696468][T16231] RSP: 002b:00007fbb29df4ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 754.696496][T16231] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fbb28f9e159 [ 754.696515][T16231] RDX: 00007fbb29df4f10 RSI: 0000000000000058 RDI: 00007fbb29df4f10 [ 754.696534][T16231] RBP: 00007fbb2903506b R08: 0000000000000000 R09: 0000000000000058 [ 754.696551][T16231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.696567][T16231] R13: 00007fbb29226038 R14: 00007fbb29225fa0 R15: 00007ffc96137038 [ 754.696608][T16231] [ 754.871559][ T1570] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 754.887480][ T1570] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 755.316595][ T1570] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 755.316626][ T1570] em28xx 7-1:0.0: No AC97 audio processor [ 755.351525][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 755.351551][ T31] audit: type=1800 audit(1791169527.077:1681): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=239393 res=0 errno=0 [ 755.356890][ T1570] usb 7-1: USB disconnect, device number 56 [ 755.407205][ T1570] em28xx 7-1:0.0: Disconnecting em28xx [ 755.440475][T16158] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.440596][T16158] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.440818][T16158] bridge_slave_0: entered allmulticast mode [ 755.466783][T16158] bridge_slave_0: entered promiscuous mode [ 755.488426][T16158] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.495136][T16158] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.495359][T16158] bridge_slave_1: entered allmulticast mode [ 755.511626][T16158] bridge_slave_1: entered promiscuous mode [ 755.582016][T16246] loop1: detected capacity change from 0 to 512 [ 755.672991][T16246] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 755.699417][T16246] EXT4-fs (loop1): 1 truncate cleaned up [ 755.786428][T16246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.039072][ T1570] em28xx: Freeing device [ 756.074782][ T31] audit: type=1800 audit(1791169527.807:1682): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=239394 res=0 errno=0 [ 756.075804][ T31] audit: type=1800 audit(1791169527.807:1683): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=239373 res=0 errno=0 [ 756.111187][T16158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.185637][T16158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.409020][T16261] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 756.440651][T16158] team0: Port device team_slave_0 added [ 756.458334][T16269] 9p: Bad value for 'wfdno' [ 756.528507][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.602542][T12880] Bluetooth: hci9: command tx timeout [ 756.605505][T16158] team0: Port device team_slave_1 added [ 757.053348][T16275] loop1: detected capacity change from 0 to 32768 [ 757.099569][T16158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.099595][T16158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.099628][T16158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.143029][ T31] audit: type=1800 audit(1791169528.857:1684): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14978 res=0 errno=0 [ 757.192121][T16275] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 757.202721][T16275] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 757.254786][ T31] audit: type=1800 audit(1791169528.987:1685): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=241836 res=0 errno=0 [ 757.285056][T16158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.285079][T16158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.285112][T16158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.299716][T16275] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 757.402309][T16275] XFS (loop1): Tail block (0x10) overwrite detected. Updated to 0x30 [ 757.516595][T16275] XFS (loop1): Ending clean mount [ 757.904902][ T31] audit: type=1800 audit(1791169529.637:1686): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=242306 res=0 errno=0 [ 757.913211][T16158] hsr_slave_0: entered promiscuous mode [ 757.920374][T16158] hsr_slave_1: entered promiscuous mode [ 757.924731][T16158] debugfs: 'hsr0' already exists in 'hsr' [ 757.924754][T16158] Cannot create hsr debugfs directory [ 758.465566][ T31] audit: type=1800 audit(1791169530.197:1687): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=242985 res=0 errno=0 [ 758.684926][T12880] Bluetooth: hci9: command tx timeout [ 758.813779][ T31] audit: type=1800 audit(1791169530.537:1688): pid=16158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24493 res=0 errno=0 [ 758.944792][ T5619] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 758.979194][T16326] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 759.709860][T16348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.711607][ T31] audit: type=1800 audit(1791169531.437:1689): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244020 res=0 errno=0 [ 760.447697][T16344] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 760.941389][ T31] audit: type=1800 audit(1791169532.667:1690): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244193 res=0 errno=0 [ 761.051156][ C1] Unknown status report in ack skb [ 761.139995][T16391] erspan1: entered promiscuous mode [ 761.269945][ T31] audit: type=1800 audit(1791169532.997:1691): pid=16158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24492 res=0 errno=0 [ 761.299964][ T31] audit: type=1800 audit(1791169533.027:1692): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244295 res=0 errno=0 [ 761.415313][T16397] loop1: detected capacity change from 0 to 512 [ 761.416394][T16397] EXT4-fs: Ignoring removed nobh option [ 761.500202][T16393] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 761.532716][T16397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.532840][T16397] ext4 filesystem being mounted at /585/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.595585][ T31] audit: type=1800 audit(1791169533.327:1693): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14978 res=0 errno=0 [ 761.733778][T16158] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 761.776379][T16397] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.3148: corrupted inode contents [ 761.780773][T16158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 761.804939][T16158] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 761.822857][T16158] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 761.824387][T16158] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 761.853880][T16158] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 761.854856][T16158] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 761.871733][T16397] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #2: comm syz.1.3148: mark_inode_dirty error [ 761.879506][T16397] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.3148: corrupted inode contents [ 761.904515][T16397] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.3148: mark_inode_dirty error [ 761.924808][T16158] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 761.938103][T16404] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.3148: corrupted inode contents [ 761.975813][T16404] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #2: comm syz.1.3148: mark_inode_dirty error [ 761.978621][T16404] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.3148: corrupted inode contents [ 762.028641][T16407] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.3148: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 762.028641][T16407] [ 762.035168][T16407] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.3148: corrupted inode contents [ 762.049204][T16407] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.3148: mark_inode_dirty error [ 762.051882][T16407] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem [ 762.237189][T16387] syz.3.3143 (16387): drop_caches: 2 [ 762.396172][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.526154][T16158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.579386][T16425] ALSA: mixer_oss: invalid OSS volume '3' [ 762.649437][T16158] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.744165][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.744287][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.776412][T16435] netlink: 'syz.1.3154': attribute type 12 has an invalid length. [ 762.780169][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.780286][ T5872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.886593][ T9847] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.887044][ T9847] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.887451][ T9847] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.906775][ T9847] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.116065][T16444] FAULT_INJECTION: forcing a failure. [ 763.116065][T16444] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 763.116111][T16444] CPU: 0 UID: 0 PID: 16444 Comm: syz.3.3159 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.116146][T16444] Tainted: [L]=SOFTLOCKUP [ 763.116157][T16444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 763.116172][T16444] Call Trace: [ 763.116183][T16444] [ 763.116195][T16444] dump_stack_lvl+0xe8/0x150 [ 763.116247][T16444] should_fail_ex+0x410/0x560 [ 763.116287][T16444] prepare_alloc_pages+0x223/0x600 [ 763.116327][T16444] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 763.116364][T16444] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 763.116402][T16444] ? __pfx_policy_nodemask+0x10/0x10 [ 763.116454][T16444] alloc_pages_mpol+0x21e/0x390 [ 763.116497][T16444] alloc_pages_noprof+0xb1/0x2b0 [ 763.116537][T16444] pte_alloc_one+0x22/0x370 [ 763.116573][T16444] __pte_alloc+0x25/0x1a0 [ 763.116607][T16444] copy_pmd_range+0x539a/0x5c10 [ 763.116632][T16444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.116663][T16444] ? register_lock_class+0x31/0x2e0 [ 763.116691][T16444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.116726][T16444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.116789][T16444] ? __pfx_copy_pmd_range+0x10/0x10 [ 763.116812][T16444] ? do_raw_spin_lock+0x12b/0x2f0 [ 763.116853][T16444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.116885][T16444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.116919][T16444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.116955][T16444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.116985][T16444] ? _raw_spin_unlock+0x28/0x50 [ 763.117018][T16444] ? __pud_alloc+0x348/0x460 [ 763.117064][T16444] copy_page_range+0xc82/0x1290 [ 763.117119][T16444] ? __pfx_copy_page_range+0x10/0x10 [ 763.117162][T16444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.117199][T16444] dup_mmap+0xf17/0x1dc0 [ 763.117253][T16444] ? __pfx_dup_mmap+0x10/0x10 [ 763.117278][T16444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.117307][T16444] ? do_raw_spin_lock+0x12b/0x2f0 [ 763.117360][T16444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.117389][T16444] ? lock_acquire+0x115/0x350 [ 763.117423][T16444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.117473][T16444] copy_mm+0x115/0x480 [ 763.117512][T16444] copy_process+0x1e79/0x4400 [ 763.117561][T16444] ? copy_process+0xd16/0x4400 [ 763.117627][T16444] ? __pfx_copy_process+0x10/0x10 [ 763.117665][T16444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.117694][T16444] ? futex_private_hash_put+0x132/0x160 [ 763.117736][T16444] kernel_clone+0x2d7/0x940 [ 763.117772][T16444] ? __pfx_futex_wake+0x10/0x10 [ 763.117817][T16444] ? __pfx_kernel_clone+0x10/0x10 [ 763.117865][T16444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.117895][T16444] ? do_futex+0x458/0x4e0 [ 763.117936][T16444] __x64_sys_clone+0x1b6/0x230 [ 763.117978][T16444] ? __pfx___x64_sys_clone+0x10/0x10 [ 763.118033][T16444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.118063][T16444] ? rcu_is_watching+0x16/0xb0 [ 763.118095][T16444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.118138][T16444] do_syscall_64+0x166/0x520 [ 763.118173][T16444] ? trace_irq_disable+0x3b/0x140 [ 763.118202][T16444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.118242][T16444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.118269][T16444] RIP: 0033:0x7fbb28f9e159 [ 763.118294][T16444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.118316][T16444] RSP: 002b:00007fbb29df4fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 763.118344][T16444] RAX: ffffffffffffffda RBX: 00007fbb29225fa0 RCX: 00007fbb28f9e159 [ 763.118363][T16444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 763.118379][T16444] RBP: 00007fbb2903506b R08: 0000000000000000 R09: 0000000000000000 [ 763.118396][T16444] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 763.118412][T16444] R13: 00007fbb29226038 R14: 00007fbb29225fa0 R15: 00007ffc96137038 [ 763.118453][T16444] [ 763.523351][ T30] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 763.686973][ T30] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 763.697726][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.697754][ T30] usb 1-1: Product: syz [ 763.697772][ T30] usb 1-1: Manufacturer: syz [ 763.697789][ T30] usb 1-1: SerialNumber: syz [ 763.737580][ T30] ums-karma 1-1:1.0: USB Mass Storage device detected [ 763.740163][ T31] audit: type=1800 audit(1791169535.467:1694): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244796 res=0 errno=0 [ 763.760204][ T30] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 763.760204][ T30] Please send a copy of this message to and [ 763.781870][T16456] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 763.796563][ T31] audit: type=1800 audit(1791169535.487:1695): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244867 res=0 errno=0 [ 763.796624][ T31] audit: type=1800 audit(1791169535.487:1696): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=244828 res=0 errno=0 [ 763.796673][ T31] audit: type=1800 audit(1791169535.497:1697): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=244803 res=0 errno=0 [ 763.796721][ T31] audit: type=1800 audit(1791169535.507:1698): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=244804 res=0 errno=0 [ 763.807065][T16464] ip_tables: iptables: counters copy to user failed while replacing table [ 763.982572][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 764.138170][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 764.139279][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.175081][ T9] usb 4-1: config 0 descriptor?? [ 764.175838][ T31] audit: type=1800 audit(1791169535.907:1699): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244883 res=0 errno=0 [ 764.178725][T16469] ALSA: mixer_oss: invalid OSS volume '3' [ 764.264089][ T30] scsi host1: usb-storage 1-1:1.0 [ 764.308030][T16475] loop6: detected capacity change from 0 to 64 [ 764.386933][ T9] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 764.516155][ T5770] usb 1-1: USB disconnect, device number 23 [ 764.601511][T16484] loop7: detected capacity change from 0 to 512 [ 764.652136][T16484] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 764.678563][T16484] EXT4-fs error (device loop7): ext4_init_orphan_info:619: comm syz.7.3169: orphan file block 0: bad magic [ 764.678605][T16484] loop7: lost filesystem error report for type 5 error -117 [ 764.681728][T16484] EXT4-fs (loop7): Remounting filesystem read-only [ 764.684082][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 764.684103][ C1] EXT4-fs (loop7): initial error at time 1791169536: ext4_init_orphan_info:619 [ 764.684131][ C1] EXT4-fs (loop7): last error at time 1791169536: ext4_init_orphan_info:619 [ 764.701787][T16484] EXT4-fs (loop7): mount failed [ 764.819337][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 764.819367][ T9] [drm] Initialized udl on minor 1 [ 764.822128][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 764.822294][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 764.871947][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 764.885632][ T9] usb 4-1: USB disconnect, device number 11 [ 765.027727][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 765.532006][T16503] FAULT_INJECTION: forcing a failure. [ 765.532006][T16503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.532051][T16503] CPU: 1 UID: 0 PID: 16503 Comm: syz.0.3172 Tainted: G L syzkaller #0 PREEMPT(full) [ 765.532086][T16503] Tainted: [L]=SOFTLOCKUP [ 765.532096][T16503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 765.532113][T16503] Call Trace: [ 765.532123][T16503] [ 765.532135][T16503] dump_stack_lvl+0xe8/0x150 [ 765.532178][T16503] should_fail_ex+0x410/0x560 [ 765.532218][T16503] _copy_to_user+0x31/0xb0 [ 765.532259][T16503] bpf_verifier_vlog+0x496/0x900 [ 765.532301][T16503] __btf_verifier_log+0xe2/0x140 [ 765.532340][T16503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 765.532372][T16503] ? __sort_r+0x2c44/0x3530 [ 765.532411][T16503] ? __pfx___btf_verifier_log+0x10/0x10 [ 765.532467][T16503] __btf_verifier_log_type+0x4a0/0x6a0 [ 765.532524][T16503] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 765.532581][T16503] btf_datasec_check_meta+0x3d8/0xad0 [ 765.532610][T16503] ? sort+0xb0/0x100 [ 765.532646][T16503] ? __pfx_sort+0x10/0x10 [ 765.532683][T16503] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 765.532729][T16503] btf_parse_type_sec+0x3cf/0x2360 [ 765.532768][T16503] ? __pfx_btf_check_sec_info+0x10/0x10 [ 765.532805][T16503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 765.532835][T16503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 765.532868][T16503] ? btf_parse_str_sec+0x244/0x2f0 [ 765.532896][T16503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 765.532932][T16503] btf_new_fd+0x4ad/0xc20 [ 765.532973][T16503] __sys_bpf+0xd2e/0xd90 [ 765.533014][T16503] ? __pfx___sys_bpf+0x10/0x10 [ 765.533048][T16503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 765.533078][T16503] ? do_futex+0x458/0x4e0 [ 765.533146][T16503] ? rcu_is_watching+0x16/0xb0 [ 765.533179][T16503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 765.533214][T16503] __x64_sys_bpf+0xba/0xd0 [ 765.533246][T16503] do_syscall_64+0x166/0x520 [ 765.533284][T16503] ? trace_irq_disable+0x3b/0x140 [ 765.533312][T16503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.533345][T16503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.533370][T16503] RIP: 0033:0x7ff9bc79e159 [ 765.533393][T16503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.533415][T16503] RSP: 002b:00007ff9bd61b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 765.533443][T16503] RAX: ffffffffffffffda RBX: 00007ff9bca25fa0 RCX: 00007ff9bc79e159 [ 765.533464][T16503] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 765.533481][T16503] RBP: 00007ff9bc83506b R08: 0000000000000000 R09: 0000000000000000 [ 765.533499][T16503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.533515][T16503] R13: 00007ff9bca26038 R14: 00007ff9bca25fa0 R15: 00007ffff1f14b18 [ 765.533554][T16503] [ 765.966756][T16505] ubi0: attaching mtd0 [ 765.981204][T16505] ubi0: scanning is finished [ 765.981270][T16505] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 766.074684][T16515] ALSA: mixer_oss: invalid OSS volume '3' [ 766.155733][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 766.155758][ T31] audit: type=1800 audit(1791169537.887:1717): pid=16522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3182" name="pm_async" dev="sysfs" ino=1411 res=0 errno=0 [ 766.209882][T16158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.325912][T16517] ALSA: mixer_oss: invalid OSS volume '3½?Κύ„,;ei' [ 766.392557][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 766.440314][T16530] netlink: 'syz.1.3183': attribute type 8 has an invalid length. [ 766.440342][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3183'. [ 766.464394][T16505] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 766.469398][T16530] veth1_to_team: entered promiscuous mode [ 766.471951][T16530] gretap0: entered promiscuous mode [ 766.500669][T16530] veth1_to_team: left promiscuous mode [ 766.514809][T16530] gretap0: left promiscuous mode [ 766.573227][ T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 766.574462][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 766.574494][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 766.574524][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 766.577334][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.577361][ T9] usb 1-1: Product: syz [ 766.577378][ T9] usb 1-1: Manufacturer: syz [ 766.577394][ T9] usb 1-1: SerialNumber: syz [ 766.620804][ T31] audit: type=1800 audit(1791169538.347:1718): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245299 res=0 errno=0 [ 766.645346][ T31] audit: type=1800 audit(1791169538.377:1719): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=245331 res=0 errno=0 [ 766.674618][ T31] audit: type=1800 audit(1791169538.377:1720): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=245306 res=0 errno=0 [ 766.674671][ T31] audit: type=1800 audit(1791169538.387:1721): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=245307 res=0 errno=0 [ 766.695760][ T9] usb 1-1: config 0 descriptor?? [ 766.715537][T16522] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 766.715662][T16522] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 766.760220][ T9] usb 1-1: ucan: probing device on interface #0 [ 766.939703][ T9] usb 1-1: ucan: could not read protocol version, ret=-71 [ 766.939734][ T9] usb 1-1: ucan: probe failed; try to update the device firmware [ 766.955234][T16541] loop7: detected capacity change from 0 to 256 [ 766.976247][ T31] audit: type=1800 audit(1791169538.707:1722): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=245328 res=0 errno=0 [ 766.977713][ T9] usb 1-1: USB disconnect, device number 24 [ 767.036634][ T31] audit: type=1800 audit(1791169538.767:1723): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=245329 res=0 errno=0 [ 767.036694][ T31] audit: type=1800 audit(1791169538.767:1724): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=245308 res=0 errno=0 [ 767.042070][ T31] audit: type=1800 audit(1791169538.767:1725): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=245330 res=0 errno=0 [ 767.069785][T16541] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 767.085863][ T31] audit: type=1800 audit(1791169538.807:1726): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15716 res=0 errno=0 [ 767.368815][T16546] loop3: detected capacity change from 0 to 512 [ 767.370077][T16546] EXT4-fs: Ignoring removed bh option [ 768.045034][T16546] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 768.154893][T16546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.155018][T16546] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 768.297740][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 768.558183][ T5753] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 768.571174][T16563] sd 0:0:1:0: PR command failed: 1026 [ 768.571223][T16563] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 768.571359][T16563] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 768.711411][T13892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.723284][ T5753] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 768.724715][ T5753] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 768.724769][ T5753] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 768.724801][ T5753] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 768.724849][ T5753] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.045187][T16158] veth0_vlan: entered promiscuous mode [ 769.100407][T16158] veth1_vlan: entered promiscuous mode [ 769.112754][T16570] ALSA: mixer_oss: invalid OSS volume '3' [ 769.255836][ T5753] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 769.255862][ T5753] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 769.298691][ T5753] cxacru 7-1:1.0: probe with driver cxacru failed with error -71 [ 769.369620][T16158] veth0_macvtap: entered promiscuous mode [ 769.386686][T16158] veth1_macvtap: entered promiscuous mode [ 769.437931][T16158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.529139][ T5753] usb 7-1: USB disconnect, device number 57 [ 769.557723][T16158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.674750][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.934571][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.982859][ T5888] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.982914][ T5888] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.224373][ T32] INFO: task syz.5.2555:13689 blocked for more than 143 seconds. [ 770.224540][ T32] Tainted: G L syzkaller #0 [ 770.224584][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 770.224624][ T32] task:syz.5.2555 state:D stack:26888 pid:13689 tgid:13688 ppid:5620 task_flags:0x400140 flags:0x00080002 [ 770.225105][ T32] Call Trace: [ 770.225143][ T32] [ 770.225214][ T32] __schedule+0x17db/0x58f0 [ 770.225403][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.225495][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.225586][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.225648][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.225830][ T32] ? __pfx___schedule+0x10/0x10 [ 770.226018][ T32] ? schedule+0x90/0x2b0 [ 770.226139][ T32] schedule+0x164/0x2b0 [ 770.226233][ T32] schedule_preempt_disabled+0x13/0x30 [ 770.226315][ T32] __mutex_lock+0x7c1/0x1550 [ 770.226469][ T32] ? __mutex_lock+0x5d4/0x1550 [ 770.226575][ T32] ? write_versions+0x95/0xe30 [ 770.226675][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 770.226968][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.227075][ T32] write_versions+0x95/0xe30 [ 770.227232][ T32] ? __pfx_write_versions+0x10/0x10 [ 770.227299][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.227516][ T32] ? _copy_from_user+0x94/0xb0 [ 770.227583][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.227656][ T32] ? simple_transaction_get+0x12d/0x160 [ 770.227862][ T32] nfsctl_transaction_write+0x10f/0x160 [ 770.484838][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 770.484990][ T32] vfs_write+0x296/0xba0 [ 770.485621][ T32] ? __pfx_vfs_write+0x10/0x10 [ 770.485777][ T32] ? __fget_files+0x2a/0x420 [ 770.485943][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.486006][ T32] ? __fget_files+0x3a2/0x420 [ 770.486073][ T32] ? __fget_files+0x2a/0x420 [ 770.486173][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.486308][ T32] ksys_write+0x150/0x270 [ 770.486486][ T32] ? __pfx_ksys_write+0x10/0x10 [ 770.486948][ T32] do_syscall_64+0x166/0x520 [ 770.487026][ T32] ? trace_irq_disable+0x3b/0x140 [ 770.487091][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.487511][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.547403][ T32] RIP: 0033:0x7f56fe99e159 [ 770.547458][ T32] RSP: 002b:00007f56ff85e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 770.547486][ T32] RAX: ffffffffffffffda RBX: 00007f56fec25fa0 RCX: 00007f56fe99e159 [ 770.547506][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 770.547523][ T32] RBP: 00007f56fea3506b R08: 0000000000000000 R09: 0000000000000000 [ 770.547541][ T32] R10: 0000000000000000 R11 ** replaying previous printk message ** [ 770.547541][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.547557][ T32] R13: 00007f56fec26038 R14: 00007f56fec25fa0 R15: 00007ffdee4c0ed8 [ 770.547597][ T32] [ 770.547681][ T32] [ 770.547681][ T32] Showing all locks held in the system: [ 770.547695][ T32] locks held by kworker/0:0/9: 2, last CPU#0: [ 770.547714][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 770.547799][ T32] #1: ffffc900000e7c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 770.547869][ T32] locks held by kworker/u8:0/12: 3, last CPU#0: [ 770.547888][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 770.547959][ T32] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 770.548031][ T32] #2: ffff888066cd0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 770.548099][ T32] locks held by kworker/u8:1/13: 3, last CPU#0: [ 770.548117][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 770.548189][ T32] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 770.548260][ T32] #2: ffff8880432c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 770.642821][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 770.642841][ T32] #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 770.642914][ T32] #1: ffffffff9ad452f8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 770.642984][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 770.643002][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 770.643101][ T32] locks held by getty/5365: 2, on CPU#1: [ 770.643119][ T32] #0: ffff88807fc130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 770.643184][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 770.643264][ T32] locks held by kworker/0:4/5753: 4, last CPU#0: [ 770.643281][ T32] #0: ffff8880669de540 ((wq_completion)wg-kex-wg1#19){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 770.643361][ T32] #1: ffffc900049afc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 770.643451][ T32] #2: ffff888052bdc888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 770.643518][ T32] #3: ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x600 [ 770.643587][ T32] locks held by kworker/u8:9/5788: 3, on CPU#1: [ 770.643605][ T32] #0: ffff88802e43f940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 770.643695][ T32] #1: ffffc90004b6fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 770.643773][ T32] #2: ffffffff90254d40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 770.643845][ T32] locks held by kworker/u8:11/5887: 2, last CPU#0: [ 770.643863][ T32] #0: ffff888079fec940 ((wq_completion)wg-kex-wg0#27){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 770.643942][ T32] #1: ffffc90004f57c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 770.644017][ T32] locks held by syz-executor/6116: 4, last CPU#1: [ 770.644035][ T32] #0: ffffffff8ee36650 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 770.644106][ T32] #1: ffff888078d89bc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 770.644168][ T32] #2: ffff88802f7ad900 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 770.644237][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 770.644346][ T32] locks held by syz.4.2539/13644: 3, on CPU#1: [ 770.644365][ T32] #0: ffff888031d255f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 770.644441][ T32] #1: ffff888076458460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 770.644511][ T32] #2: ffffffff8f09f860 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 770.644587][ T32] locks held by syz.5.2555/13689: 3, on CPU#0: [ 770.644605][ T32] #0: ffff88802a0f55f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 770.644680][ T32] #1: ffff888045326460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 770.644751][ T32] #2: ffffffff8f09f860 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 770.644827][ T32] locks held by syz-executor/13892: 4, last CPU#0: [ 770.644845][ T32] #0: ffffffff8ee36650 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 770.644914][ T32] #1: ffff88801b093440 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 770.644973][ T32] #2: ffff8880764a9bc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 770.645039][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 770.645121][ T32] locks held by syz.9.2734/14616: 3, on CPU#0: [ 770.645140][ T32] #0: ffff88802a0f62b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 770.645216][ T32] #1: ffff8880260ec460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 770.645284][ T32] #2: ffffffff8f09f860 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 770.645361][ T32] locks held by syz.8.3029/15908: 1, last CPU#1: [ 770.645379][ T32] #0: ffff888079222060 (&ima_iint_mutex_key[depth]#2){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10 [ 770.645454][ T32] locks held by syz-executor/16158: 3, on CPU#1: [ 770.645472][ T32] #0: ffffffff90254d40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 770.645546][ T32] #1: ffff8880773f9610 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_open+0x227/0x420 [ 770.645610][ T32] #2: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 770.645686][ T32] locks held by syz.1.3188/16547: 2, on CPU#1: [ 770.645705][ T32] #0: ffffffff9aef48e0 (nfnl_subsys_ipset){+.+.}-{4:4}, at: call_ad+0x26c/0xb50 [ 770.645776][ T32] #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 770.645850][ T32] locks held by syz.0.3195/16581: 1, last CPU#1: [ 770.645868][ T32] #0: ffff88802f7a9bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 770.645929][ T32] locks held by syz.7.3194/16586: 1, on CPU#0: [ 770.645947][ T32] #0: ffffffff9aef48e0 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa69/0x12b0 [ 770.646012][ T32] locks held by sed/16585: 2, last CPU#1: [ 770.646030][ T32] #0: ffff88807e757180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 770.646090][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 770.646161][ T32] [ 770.646169][ T32] ============================================= [ 770.646169][ T32] [ 770.646180][ T32] NMI backtrace for cpu 1 [ 770.646200][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 770.646232][ T32] Tainted: [L]=SOFTLOCKUP [ 770.646241][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 770.646257][ T32] Call Trace: [ 770.646268][ T32] [ 770.646279][ T32] dump_stack_lvl+0xe8/0x150 [ 770.646318][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 770.646351][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 770.646394][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 770.646429][ T32] sys_info+0x135/0x170 [ 770.646456][ T32] watchdog+0xfd7/0x1030 [ 770.646493][ T32] ? watchdog+0x1c7/0x1030 [ 770.646528][ T32] kthread+0x38b/0x480 [ 770.646556][ T32] ? __pfx_watchdog+0x10/0x10 [ 770.646581][ T32] ? __pfx_kthread+0x10/0x10 [ 770.646609][ T32] ret_from_fork+0x514/0xb70 [ 770.646638][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 770.646663][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.646693][ T32] ? __switch_to+0xc89/0x1420 [ 770.646738][ T32] ? __pfx_kthread+0x10/0x10 [ 770.646765][ T32] ret_from_fork_asm+0x1a/0x30 [ 770.646822][ T32] [ 770.646832][ T32] Sending NMI from CPU 1 to CPUs 0: [ 770.646859][ C0] NMI backtrace for cpu 0 [ 770.646875][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.646906][ C0] Tainted: [L]=SOFTLOCKUP [ 770.646915][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 770.646929][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 770.646962][ C0] Code: e8 ee 5a 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef 6f c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 f5 8e 9c fb cc 44 89 f9 80 e1 07 [ 770.646982][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 770.647002][ C0] RAX: 1ffffffff35a8a00 RBX: 00000000000003fd RCX: 0000000000000000 [ 770.647019][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 770.647034][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 770.647050][ C0] R10: dffffc0000000000 R11: ffffffff8573b190 R12: dffffc0000000000 [ 770.647068][ C0] R13: 0000000000000000 R14: ffffffff9ad45320 R15: 0000000000000000 [ 770.647088][ C0] FS: 0000000000000000(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000 [ 770.647107][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 770.647124][ C0] CR2: 00007fbb29d556c8 CR3: 000000007ef2c000 CR4: 0000000000350ef0 [ 770.647144][ C0] Call Trace: [ 770.647153][ C0] [ 770.647164][ C0] wait_for_lsr+0x184/0x2f0 [ 770.647197][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 770.647245][ C0] serial8250_console_write+0xaa1/0x1200 [ 770.647274][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 770.647315][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 770.647344][ C0] ? __schedule+0x17f1/0x58f0 [ 770.647382][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.647415][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 770.647455][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 770.647487][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.647515][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 770.647553][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.647581][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 770.647665][ C0] nbcon_kthread_func+0x679/0x880 [ 770.647697][ C0] ? nbcon_kthread_func+0x163/0x880 [ 770.647723][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 770.647751][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.647783][ C0] ? __kthread_parkme+0x71/0x1f0 [ 770.647819][ C0] ? __kthread_parkme+0x199/0x1f0 [ 770.647857][ C0] kthread+0x38b/0x480 [ 770.647881][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 770.647906][ C0] ? __pfx_kthread+0x10/0x10 [ 770.647931][ C0] ret_from_fork+0x514/0xb70 [ 770.647956][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 770.647978][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.648005][ C0] ? __switch_to+0xc89/0x1420 [ 770.648041][ C0] ? __pfx_kthread+0x10/0x10 [ 770.648065][ C0] ret_from_fork_asm+0x1a/0x30 [ 770.648114][ C0] [ 770.648857][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 771.736115][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 771.746791][ T32] Tainted: [L]=SOFTLOCKUP [ 771.751102][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 771.761150][ T32] Call Trace: [ 771.764418][ T32] [ 771.767345][ T32] vpanic+0x56d/0xa60 [ 771.771338][ T32] ? __pfx_vpanic+0x10/0x10 [ 771.775929][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.781562][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 771.787113][ T32] panic+0xc5/0xd0 [ 771.790840][ T32] ? __pfx_panic+0x10/0x10 [ 771.795260][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.800892][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 771.805944][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 771.812103][ T32] watchdog+0x1030/0x1030 [ 771.816438][ T32] ? watchdog+0x1c7/0x1030 [ 771.820857][ T32] kthread+0x38b/0x480 [ 771.824918][ T32] ? __pfx_watchdog+0x10/0x10 [ 771.829588][ T32] ? __pfx_kthread+0x10/0x10 [ 771.834173][ T32] ret_from_fork+0x514/0xb70 [ 771.838795][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 771.843899][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.849531][ T32] ? __switch_to+0xc89/0x1420 [ 771.854244][ T32] ? __pfx_kthread+0x10/0x10 [ 771.858833][ T32] ret_from_fork_asm+0x1a/0x30 [ 771.863618][ T32] [ 771.866842][ T32] Kernel Offset: disabled [ 771.871150][ T32] Rebooting in 86400 seconds..