last executing test programs: 1m1.55442564s ago: executing program 4 (id=776): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) chdir(&(0x7f0000000000)='./cgroup\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000340)={0x0, 0xfbcd, 0x30, 0x10000000bb3, 0x10006}, &(0x7f0000000240)=0xffffff11) 1m1.046071683s ago: executing program 4 (id=780): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./cgroup\x00', 0x18418, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES32, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000001000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x60000000, 0xe, 0x0, &(0x7f00000001c0)="c1dfb08061a355915e7bc67515cd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (fail_nth: 2) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 59.933946322s ago: executing program 4 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000d4c000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%pK \x00') mremap(&(0x7f0000d4d000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 59.567992806s ago: executing program 4 (id=789): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f0000000280)={[{@acl}, {@cache_strategy_readaround}, {@dax}, {@cache_strategy_disabled}, {@dax_always}, {@dax}]}, 0x3, 0x1b1, &(0x7f00000000c0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x111509e, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(r4, r4, 0x0) mount$binderfs(&(0x7f0000000480), &(0x7f00000004c0)='./binderfs2\x00', &(0x7f0000000500), 0x31, &(0x7f0000000540)={[{@stats}, {@stats}], [{@appraise}, {@fowner_gt={'fowner>', r4}}]}) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x40, r2, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xf7}]}, 0x40}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000000)={'custom1\x00'}) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdd) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x200, 0x1, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x54) 58.673972199s ago: executing program 4 (id=791): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x0, 0xfffff034}, {0x1d, 0x0, 0x0, 0xfffff010}, {0x6, 0x43, 0xff}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x6000000000000000, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 57.714846789s ago: executing program 4 (id=795): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4010000, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x7, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) close(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001bc0)}}], 0x1, 0x10) r3 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f00000001000070000000000000000007f0000060000000077ccd92a6c57fe0000001000000000fe88000000020000000000ffec000000008963d88259b79b508da6813f000000000200dded19f4cf4ec62833353b3dd313f34e182235d973b1e818b7c21d5425cbd124291d2ccfcafa2bfe7ea1dd5d91940f5fce7148db49a0cc3c7ea44c62f4802304fded401d5a780cc414904c10eb4631ecaee99bf46636b8050ffe3adaa9e4a909c240ab6cff37f8c96804a9d18addbcc3ad8d6d90157dbee5f61bdb3ec99ce2c2620c0863813f4106c4dcc1ee473e5f499edd70482caa644ede4df47450fbdfb341", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc02000000000000000000000000000000000000000000001d010000000000000200000000000000feffffffffffffffff7f000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000bd9200000000000000080400feffffffe80a000025bd700000000000020002007000000000000000"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes256, 0x0, @desc3}) 55.75135773s ago: executing program 32 (id=795): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4010000, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x7, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) close(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001bc0)}}], 0x1, 0x10) r3 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f00000001000070000000000000000007f0000060000000077ccd92a6c57fe0000001000000000fe88000000020000000000ffec000000008963d88259b79b508da6813f000000000200dded19f4cf4ec62833353b3dd313f34e182235d973b1e818b7c21d5425cbd124291d2ccfcafa2bfe7ea1dd5d91940f5fce7148db49a0cc3c7ea44c62f4802304fded401d5a780cc414904c10eb4631ecaee99bf46636b8050ffe3adaa9e4a909c240ab6cff37f8c96804a9d18addbcc3ad8d6d90157dbee5f61bdb3ec99ce2c2620c0863813f4106c4dcc1ee473e5f499edd70482caa644ede4df47450fbdfb341", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc02000000000000000000000000000000000000000000001d010000000000000200000000000000feffffffffffffffff7f000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000bd9200000000000000080400feffffffe80a000025bd700000000000020002007000000000000000"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes256, 0x0, @desc3}) 14.485308914s ago: executing program 5 (id=940): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) socket$inet6(0xa, 0x4, 0xe571) mount$afs(0x0, 0x0, 0x0, 0x1026, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@gquota}, {@nolargeio}, {@swalloc}]}, 0x1, 0x9820, &(0x7f000001c700)="$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") openat$kvm(0xffffffffffffff9c, 0x0, 0x40100, 0x0) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x0, 0x1) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x110a048, &(0x7f0000000000)=ANY=[], 0x1, 0x6ee, &(0x7f0000000680)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendto$packet(r1, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) mknod(&(0x7f0000000240)='./bus\x00', 0x1000, 0x0) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a2) mount$bind(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file2\x00', &(0x7f0000000480), 0x2000406, 0x0) 12.065045244s ago: executing program 5 (id=945): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1f5802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) unshare(0x2a020400) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010204, 0x0, 0x5}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x7, 0x0, 0x5, 0x3ff, 0xfffeffff, 0x2}]}) r7 = socket$rds(0x15, 0x5, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000140)={0x14, &(0x7f0000000200)={0x20, 0x23, 0x96, {0x96, 0xb, "f028218572cc0d5bbd42a03faafc4bb16dff3391478f34f66312b8cb119a87133f9bd55f042fee233daa210140bc1b3cb57dca91168776c063ea630d317b63eca32a0e17a7a70153b69029038dd2d1321678bf1b937a594fe034201f68a923ff3d43050a371ab77b994bb69cda82c082b5744f2633bdeb4c15da147dfac3eb1fe1920cbba5cd14b19b0619da286399da871b0bd0"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "832cfe331ce2e0b450c7d1fcd079b7cf985b95a234bad60b2dc9cd673220f309dde9743acc78fe3aefdf49ca93ff0392dd9827e1b0c625f027dae421c35ae1a41b277926f94f76cfd66b0d"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000340)={0x20, 0xb, 0x5e, "75d413174b30befa5b563ebe745a66c267dd62afcb41d35ae4d06adb8a6bcc78f21b0a06b956a3492baa5f662e8febf0d989f15cb508bbe5adca390866fbd422f58889aaea32760f5c08a8349440b62cff04dca478e5f5b8525f18387cc7"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0x7}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "04ff4143a726a1ef5c028cf126f6a540907206cf04ed137ffc282992fd75b930bb3b0bb07ef54699e8ce940004abf1"}}) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000000)={&(0x7f00000001c0)=[{0x4, 0x0, 0x0, 0x0}, {0x5a2, 0x1200, 0x0, 0x0}], 0x2}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0x7) 11.742737028s ago: executing program 2 (id=946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r5 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000580)={0x229, 0x2, 0x0, {{0x500, 0xe8, 0x0, 0x0, {0x1, 0xfffffffe}, 0x95100000, 0xfffffffe, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x28, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x229) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf) pwrite64(r8, &(0x7f0000000bc0)="cfac", 0x2, 0x7ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r9, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4004011) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r10, 0x545c, 0x200000000000000) ioctl$TIOCVHANGUP(r10, 0x5437, 0x300) 11.239363267s ago: executing program 1 (id=947): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000048601, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f00000000c0)={0x1, 0x0, 0x1fb, 0x10001, 0xfffffffffffffffe, 0x6, 0x4, 0x1fc, 0x9, 0x102002c, 0x49200000, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000600)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x0) ioctl$EVIOCGKEYCODE(r4, 0x80084504, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x140, 0x7800, 0x9, 0x7f, {{0x8, 0x4, 0x3, 0x37, 0x20, 0x65, 0x0, 0x7f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote, {[@generic={0x9b, 0x9, '==a}Y\"O'}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x0, 0x1, 0x2, 0x1, 0x20}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0xd}, 0x94) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000640)={0x0, 0x0, r6, r7, 0x8, 0xa, 0xca, 0x7, {0x4, 0x0, 0xfff7, 0x0, 0x9, 0x40, 0x9, 0x3, 0x9, 0x3, 0x484a, 0xa000, 0xd, 0xe2, "1e64968a81db30de4db7450f8df96cc829694b9a95fb89559d9226a6c16ede0e"}}) 11.110036938s ago: executing program 0 (id=949): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x315, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x81, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x28, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0xa, 0x11}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0x8, '\x00\x00'}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x0, 0x2, 0x5}]}}, 0x0}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x5, 0x10, 0xfa00, {0x0, r3}}, 0x18) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="980000000002010400000000000000000a00fffc04000180440003800c000280050001008900000006000140000200002c00018014000300fc01000000000000000000000000000114000400fe8000000000000000000000000000313c0002802c0001801400030000000000000000000000ffffe00000011400040000000000000000000000ffffe00000010c000280050001"], 0x98}, 0x1, 0x0, 0x0, 0x20040015}, 0x20008090) 9.783976369s ago: executing program 2 (id=951): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x0, 0xfffff034}, {0x6, 0x43, 0xff}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, &(0x7f00000023c0), 0x0, 0x0, 0x0, 0x0) 9.338517999s ago: executing program 1 (id=953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1254408, &(0x7f0000000080)={[{@clear_cache}, {@treelog}, {@datacow}, {@compress_algo={'compress', 0x3d, 'zlib'}}], [{@dont_appraise}, {@dont_appraise}, {@measure}, {@obj_type={'obj_type', 0x3d, ':(.:'}}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000240)={0x0, 0x8f6, 0x9, 0x3f}) 8.460387701s ago: executing program 5 (id=955): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) socket$inet6(0xa, 0x4, 0xe571) mount$afs(0x0, 0x0, 0x0, 0x1026, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@gquota}, {@nolargeio}, {@swalloc}]}, 0x1, 0x9820, &(0x7f000001c700)="$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") openat$kvm(0xffffffffffffff9c, 0x0, 0x40100, 0x0) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x0, 0x1) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x110a048, &(0x7f0000000000)=ANY=[], 0x1, 0x6ee, &(0x7f0000000680)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendto$packet(r1, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) mknod(&(0x7f0000000240)='./bus\x00', 0x1000, 0x0) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a2) mount$bind(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file2\x00', &(0x7f0000000480), 0x2000406, 0x0) 8.097805126s ago: executing program 0 (id=956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000040000000000000000000000850000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r1, 0x8, 0x0, 0xd300, 0x10, 0x0, 0x0, 0x13b02, r1, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 7.291665523s ago: executing program 2 (id=957): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1803000000000000000000000000000071120f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 7.189710562s ago: executing program 1 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 6.802064131s ago: executing program 3 (id=959): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r0) creat(&(0x7f0000000080)='./file0\x00', 0x2a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000080)={0x0, [0xdff, 0x80, 0x4c, 0x3, 0xd, 0x9, 0x0, 0x7, 0xc, 0x7ff, 0x3, 0xfff1, 0x892, 0x4, 0x5, 0x167c, 0x1, 0x401, 0xfffe, 0x2, 0x800, 0xffff, 0x7, 0x6, 0xff, 0x4, 0x4f19, 0xfffc, 0x0, 0x2, 0x7ff, 0x6, 0x3, 0x800, 0x2, 0xfffd, 0x40, 0x93, 0x6, 0x9, 0x2, 0x7fff, 0x761f, 0x81, 0x5, 0x92e, 0x100, 0x7], 0x4}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6b}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4a97a, 0xa}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c881}, 0x4000000) 6.33607061s ago: executing program 5 (id=960): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) unshare(0x2a020400) ioctl$PPPIOCSMRRU(r0, 0x4004743c, 0x0) 6.228050485s ago: executing program 0 (id=961): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x8000c6, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x54f4, &(0x7f0000005600)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='./file1\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x191000, 0x101) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) fsetxattr$trusted_overlay_redirect(r3, &(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x8, 0x1) r5 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r5}}, './file1\x00'}) 5.446520531s ago: executing program 2 (id=962): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) kexec_load(0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@cgroup, 0xffffffffffffffff, 0x18, 0x8}, 0x20) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r4, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x1}], 0x1) 4.624135607s ago: executing program 3 (id=963): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x0, 0xfffff034}, {0x1d, 0x0, 0x0, 0xfffff010}, {0x6, 0x43, 0xff}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) setuid(0xee00) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) unshare(0x20000800) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 4.353715714s ago: executing program 1 (id=964): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0xee01) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) 3.546546182s ago: executing program 5 (id=965): r0 = socket$inet6(0xa, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) socket(0x11, 0x3, 0xffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') preadv(r1, &(0x7f0000001e80)=[{&(0x7f0000000040)=""/90, 0x5a}], 0x1, 0x232, 0xb) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@loopback, 0x3, 0x5, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000080)={0x97e, {{0xa, 0x4e20, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}}, 0x88) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0xffffffffffffffc9, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x20004049}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7ad, &(0x7f0000000f80)="$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") kcmp(r4, r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = openat$procfs(0xffffff9c, &(0x7f0000000c40)='/proc/crypto\x00', 0x0, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r7, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000940)=""/180, 0xb4, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/185, 0xfffffff0, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f00000005c0)=""/238, 0xee, 0x0, 0x3, 0x3}}, 0x48) sendfile(r5, r6, 0x0, 0x5d80) close(r0) 3.417296891s ago: executing program 0 (id=966): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x0, 0x4, 0x2, 0x0, 0x7fffffffffffffff, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@noload}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x1, 0xfd, 0x2, 0x0}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r3, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x8, 0x0, 0xfffffffffffffffc}}, 0x10) io_submit(r5, 0x0, &(0x7f0000000540)=[&(0x7f00000005c0)={0x25, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000580)="d00225", 0x3, 0x9ff}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1, r4, &(0x7f0000000dc0)="4979dc147fc893cc46520f6d6446962e3507ab9842154011c4ace1457833c697330784e5840a8886c2b4332254ba918121f6f6ca100013e5f78d573b3c69e29e0068e20c7aed3c1c7038906b2c2d03c325dc77fa53071ea8dec0f304ab41d04bde934b9084ed81b6d7767fbf598ae54cb32bfe85b1938c35ebda2d06263428f6d734e7a56000"/148, 0x94, 0x7, 0x0, 0x3, r3}]) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) r7 = socket(0xa, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) setsockopt$inet6_int(r7, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=""/32, 0x23}, 0xd6}], 0x9, 0x10002, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) read$char_usb(r9, &(0x7f0000000080)=""/139, 0xfdef) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@noextend}, {@version_L}, {@debug={'debug', 0x3d, 0x7}}, {@msize={'msize', 0x3d, 0x100}}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@privport}, {@version_9p2000}, {@version_9p2000}, {@cache_mmap}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, '[:}[\xcc'}}, {@fsname={'fsname', 0x3d, 'jqfmt=vfsv1'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@subj_user={'subj_user', 0x3d, '!'}}]}}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) 3.287374125s ago: executing program 3 (id=967): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x0, 0xfffff034}, {0x6, 0x43, 0xff}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, &(0x7f00000023c0), 0x0, 0x0, 0x0, 0x0) 2.717245656s ago: executing program 3 (id=968): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000280)={0x0, 0x334e, 0x10, 0x2004, 0x1000030e}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) (fail_nth: 1) 2.611092782s ago: executing program 2 (id=969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f7475"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x2, 0x3, 0x3, 0x0, 0x5, 0x7, 0xff, 0xf, 0x1, 0x3, 0x6, 0x7, 0x0, 0x3, 0xda, 0x9, 0x61, 0x1, 0x0, '\x00', 0x9, 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.562229941s ago: executing program 1 (id=970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x178, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4, 0xc1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="ac"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = msgget$private(0x0, 0xfffffffffffffffd) fcntl$setpipe(r3, 0x407, 0x6) msgrcv(r4, 0x0, 0x0, 0x0, 0x3000) syz_mount_image$udf(&(0x7f0000000040), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000f00)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRESDEC], 0x11, 0x489, &(0x7f0000000a40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) msgsnd(r4, &(0x7f0000000180)={0x2}, 0x8, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = msgget$private(0x0, 0x400) msgsnd(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="03000000000000001680a9893ebd3bff1b66bead51314c283d2ef781e3f52cfe8133b69085da0079c2e07bed9c7b0bfed5e4330bc88b483c5f63bb5da4c6ed4856b55c6566f6859db500e51770fcede8e7fcd947af6241063e32c9ef7e174eb3c1b52744896576c3a4252186345737ad1522155dec1656821a9323dec618c3861d21985c1fa51c7d9f5234f303225532"], 0x90, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @remote}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0xe4, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xbc, 0x4, 0x0, 0x1, [{0xb8, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xa8, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_INFO={0x66, 0x3, "7802f48438cadad31b9c56feb006a420efbd12ff21b88c9824e7b9e9e90c06cad93dd1de79ce623ec83b88bd6776d21b1e9698857b3ad5fb12db9bf41fd13a26796350ae1831f23599c42485b37e8ad8705c401f41f6b2529e7fcc15a4f9b12bd978"}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x10c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 1.929612253s ago: executing program 3 (id=971): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x2000, 0x10003, 0x0, 0x0, r0}, &(0x7f0000000140), 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) getresgid(&(0x7f0000004780), &(0x7f00000047c0)=0x0, &(0x7f0000004800)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f000000a400)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000c2af885a00000000000000000000000000000000000000000080f0deb847249572dfe302ba1684acae5245fdd7a3ef3802000000000000003fda305d5a01001f0a6bd3ca879dfe63c9bb6eec78d96a695b1bcd4d0292fb542970cbbfbc884af7b9f1a5dbd64d0bc5f37b1ee9f385429d54164934f2cb7ced44a1e1bd636951026925e83967ef8425c5fda433768b9a74f5934acf0cb4cb4fdfc05bda3d98"], 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) fstat(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x200000, &(0x7f00000005c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}}, 0x1, 0x0, &(0x7f00000007c0)="584f617a76e0827ddfd215cf0cafc9bc7cf03420386328f4ea4b208b4581d7a3a17bc8a672d41c46ce161302a368c2100451f07ed411bca8783b0352a1cd220971b7302eb9a3333bd21f1f51232c02282b8387143bb9e0cf1b4af1ddd2b47faba0b037535b7244475a4c4d16bcb17826bdde645b7b44578b61710b8eb02dee4454106a8b79d3f91a46b0fa83743589dfc41f48c572f2dfe78fc09513c396e6af5645a303727278d60e983cf4fd3303139caf66d16ac55ee7572fe8188e134e061fd5e208af81453a7b3cec3cf264d6c2c585e3e356c5466458f2f1310e5e98225532b11d13993e49b4e43409") getgroups(0x6, &(0x7f0000004840)=[0xee01, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r11, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r11, &(0x7f0000003740)={0xb8, 0x0, r12, [{{0x7, 0x2, 0x2, 0x7, 0x3, 0x9, {0x2, 0xfffffffffffff430, 0x5, 0x7, 0x1, 0x66c, 0x4, 0x10000, 0x5, 0x4000, 0x8, 0x0, r13, 0xfffffffb, 0x4}}, {0x6, 0x1, 0xc, 0x9, '/dev/video#\x00'}}]}, 0xb8) lstat(&(0x7f0000004c80)='./file0\x00', &(0x7f0000004cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r15, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r15, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r15, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0xff98, {0x3, 0x0, 0x1, 0xfffffffffffffffe, 0x3, 0x14, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, r16, 0x800, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000004e40)='./file0\x00', &(0x7f0000004e80)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000004c0)="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", 0x2000, &(0x7f0000005040)={&(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x2b, 0x5, 0x20000, 0x4, 0x6, 0x980, 0x3, 0x0, 0x0, 0x80, 0xf}}, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, 0xb4}, &(0x7f0000000100)={0x18, 0x0, 0x7, {0xfffffffffffffffe}}, &(0x7f0000000180)={0x18, 0x0, 0x5, {0x1}}, &(0x7f00000001c0)={0x18, 0x0, 0x2d, {0x9}}, &(0x7f0000000200)={0x28, 0x0, 0x77f6, {{0x401, 0x200}}}, &(0x7f0000000340)={0x60, 0x0, 0x2, {{0xb, 0x8000000000000001, 0xed, 0x2, 0x45185961, 0x4, 0x4, 0x4}}}, &(0x7f00000003c0)={0x18, 0x0, 0xd, {0x5ac}}, &(0x7f0000000400)={0x19, 0x0, 0xf, {'trans=fd,'}}, &(0x7f0000000440)={0x20, 0x0, 0x9, {0x0, 0x1e}}, &(0x7f00000024c0)={0x78, 0x0, 0x0, {0x80000000, 0xfffff012, 0x0, {0x0, 0x1, 0x10000, 0x80, 0x2, 0x5, 0x1ff, 0x9697, 0x3, 0xc000, 0x5, 0x0, 0x0, 0x7}}}, &(0x7f0000004580)={0x90, 0xb, 0x1, {0x5, 0x0, 0x7, 0x40, 0x1, 0x9, {0x5, 0x6, 0x10, 0x40, 0x5f, 0x80000000, 0xa6, 0xc74, 0xee000, 0x1000, 0x0, 0x0, 0x0, 0x200, 0x8}}}, &(0x7f0000004640)={0x138, 0x0, 0xfffffffffffffffd, [{0x1, 0x7ff, 0x2, 0x3ff, '.,'}, {0x2, 0x8, 0x2, 0x1ff, '/)'}, {0x1, 0x80000001, 0x1, 0x0, '\x06'}, {0x0, 0xb, 0x3, 0x1, '9p\x00'}, {0x4, 0x5, 0x9, 0x4, 'trans=fd,'}, {0x1, 0x1000000000, 0x5, 0x10, 'rfdno'}, {0x0, 0x48e2, 0x5, 0x8, 'wfdno'}, {0x6, 0x0, 0x5, 0x6, '-.*@-'}, {0x3, 0x3, 0x1, 0x8, ']'}]}, &(0x7f00000049c0)={0x288, 0x0, 0x2, [{{0x1, 0x7, 0x40, 0x65, 0x3, 0x3, {0x4, 0x3, 0x7, 0x7, 0x100, 0xee50, 0x6, 0x7, 0x10001, 0x4000, 0xf, 0x0, r2, 0x8, 0x8}}, {0x6, 0x4, 0x2, 0x4, '@\x19'}}, {{0x1, 0x0, 0x4fa159f0, 0x80000000, 0x5, 0x7, {0x6, 0x0, 0x54, 0x69, 0xa, 0x7da, 0x2, 0x4, 0x7, 0x1000, 0x0, 0x0, r5, 0x10000, 0x3}}, {0x6, 0x5}}, {{0x2, 0x0, 0x80000001, 0x6, 0x9, 0x7, {0x6, 0x100000001, 0xd55, 0xb3, 0x2271, 0x6, 0x3, 0x4, 0xffffffff, 0x1000, 0x10, r8, r10, 0x5a9a2def, 0x9}}, {0x4, 0x5, 0x1, 0x8c28, '('}}, {{0x6, 0x0, 0x5, 0x2, 0x7, 0x10, {0x0, 0x9, 0x9, 0xfff, 0x0, 0x5, 0x0, 0x8, 0x6, 0x4000, 0x3, 0x0, r13, 0x3, 0xc}}, {0x3, 0x2800, 0x3, 0x200, '+{\''}}]}, &(0x7f0000004d40)={0xa0, 0x0, 0x6, {{0x6, 0x0, 0xc00000000000000, 0x1, 0x10001, 0x2, {0x1, 0x10000, 0x5, 0x7, 0x8, 0x1, 0x20000, 0x3, 0x40, 0xa000, 0x4, r14, r16, 0x7, 0x7}}, {0x0, 0xa}}}, &(0x7f0000004e00)={0x20, 0x0, 0xbe, {0xd74, 0x4, 0x3, 0x9}}, &(0x7f0000004f00)={0x130, 0x0, 0x0, {0x3d82fd27, 0x0, 0x0, '\x00', {0x7ff, 0x3, 0x1, 0x7fff, r17, 0xee00, 0x4000, '\x00', 0x2, 0xffff, 0x5, 0x0, {0x400, 0xea5b}, {0x137, 0x7fffffff}, {0x101, 0x3}, {0x3}, 0x2, 0x1, 0x6, 0x9eac}}}}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.814620605s ago: executing program 0 (id=972): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00I', @ANYRES16=r1, @ANYBLOB="01000000000000000000390000000c009900000000000000000004000d80"], 0x24}}, 0x0) setrlimit(0x3, &(0x7f00000000c0)={0x3ff, 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r2, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) pipe2(&(0x7f0000000080), 0x4800) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1.66437259s ago: executing program 1 (id=973): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) sendto$inet6(r0, &(0x7f0000000340)="94", 0x1, 0x402d001, &(0x7f0000000480)={0xa, 0x4e25, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x9}, 0x1c) r1 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000001000/0x2000)=nil, 0x2000}) r2 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, r2, 0x554d8000) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="600000000000000008000300", @ANYRES32=r6, @ANYBLOB="280012800b000100ee8d9215716aab61246987228d6970366772650000180002801400060000000000000000000000000000000001"], 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000001c0)) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x70) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="080029bd7000ffffff69a5fa6bdb5abc880000000000"], 0x1c}}, 0x20000000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000070a05002de8efc2b677588715f830ff3df5de0000000000000000"], 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000020000100000000000000002002008063f70d7a00000000000c000c40000000000001"], 0x28}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[], 0x0) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000000)={0xf020000, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000640)={0x0, @reserved}) 1.41425292s ago: executing program 5 (id=974): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="008500000020000031aa008000000000009cd4fc4180ec6338eec1e63a48544b9b5db97b618c43e1ff44a553732e2027a490566a92b0e92221267a14af3c0aef655880207d3e46393c96333762bee00f567ada322b8edc5ef3ab40a2a6742d1e523660bfc548f00b61c3ce14018512ce34455ba5752348398dc38b2b010e318dcea310a5b69d0022a4c453a19ef5065e8fb75c9faaa655010836db2e862d05ed8fc493ce091c4dfb8dd360cba96f4de8c6"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x66c6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000440)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000100), 0xff, 0x40081) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000340)={&(0x7f0000000200)=[{0x2, 0x1000, 0xac, &(0x7f0000000280)="90927014af54cc8d9ab6fd049654d3777699b1be577670925d3f7318cf7f0724b58008e33a0faae0a94a6fa7b1fcc1a31766a206b1f2a2d830d68c3ac6249e8b2d306061b647f8d323d4a8054f98f8854036e63407e6e624fb4041e73c3a0ced9ab9f9fc85f5977dd4ee624446b0a4d370e57cbe57343cec6d5b2cd47947fcabd09ed817940da43ae756015e81c459e7cabb6c093e9c410f64746fa903a12cfa95fc667df4ed82cf1d327fe3"}, {0x400, 0x4801, 0x25, &(0x7f00000001c0)="bcba10f3a282c556a5e6feffcdd69069f176d18be3d660dd81d43fa6d9ff64ab528a694186"}], 0x2}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x5a}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x4, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.2909448s ago: executing program 0 (id=975): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000a40)=ANY=[@ANYBLOB="003006"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r1, &(0x7f0000000600)=[{0x0, 0x5f}, {&(0x7f0000000040)="8c5b72e4ba32", 0x6}], 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="480e020000009a71"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.2513202s ago: executing program 2 (id=976): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x12d7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f3, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x100, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast2}}}}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r7 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) writev(r7, &(0x7f0000000240)=[{0x0}, {&(0x7f0000002700)="b8", 0x1}], 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2008c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x4447, &(0x7f000000cd00)="$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") close_range(r6, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=977): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x44, 0x7, 0x2, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, {0x4, 0x11, ',T'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xaa24, 0x6, 0x6, 0xa, 0x3, 0x1}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$inet6_int(r2, 0x29, 0x1d, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, r11, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000640)={0x0, 0x0, r12, r13, 0x8, 0xa, 0xca, 0x7, {0x4, 0x0, 0xfff7, 0x0, 0x9, 0x40, 0x9, 0x3, 0x9, 0x3, 0x484a, 0xa000, 0xd, 0xe2, "1e64968a81db30de4db7450f8df96cc829694b9a95fb89559d9226a6c16ede0e"}}) kernel console output (not intermixed with test programs): : USB disconnect, device number 16 [ 329.594354][ T1878] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 329.669065][ T1878] usb 1-1: device descriptor read/8, error -71 [ 329.799952][ T1878] usb usb1-port1: unable to enumerate USB device [ 329.894534][ T7070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.332'. [ 329.950271][ T7070] fuse: Unknown parameter 'ÿdîÔÌìçfbw}œ30 >Â9˜ì/x¬BÔfWëìhð^ºf«•\<‹„ÛnÒ¥°ÔÔ!9µùRÙq3?T³Ø*£µ/(´ìKÀMж“XÊf Ïµ›ÚêCE3&ü§íÐ+]ÈMH‹ž7rÔ½c\Ëc€„S–—±' [ 330.049619][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.332'. [ 330.061815][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.332'. [ 330.372720][ T7050] loop3: detected capacity change from 0 to 32768 [ 330.428777][ T7050] btrfs: Deprecated parameter 'usebackuproot' [ 330.435102][ T7050] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 330.484186][ T7050] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.325 (7050) [ 330.546228][ T7050] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.560456][ T7050] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 330.599289][ T7074] fuse: Bad value for 'fd' [ 330.866248][ T7050] BTRFS info (device loop3): rebuilding free space tree [ 330.960694][ T7050] BTRFS info (device loop3): enabling ssd optimizations [ 330.968650][ T7050] BTRFS info (device loop3): turning on flush-on-commit [ 330.976012][ T7050] BTRFS info (device loop3): turning on async discard [ 330.983032][ T7050] BTRFS info (device loop3): enabling free space tree [ 330.993012][ T7050] BTRFS info (device loop3): force clearing of disk cache [ 331.001543][ T7050] BTRFS info (device loop3): trying to use backup root at mount time [ 331.010119][ T7050] BTRFS info (device loop3): force zlib compression, level 3 [ 331.239696][ T7099] fuse: Unknown parameter '0x0000000000000004' [ 331.273765][ T7103] fuse: Bad value for 'group_id' [ 331.282941][ T7103] fuse: Bad value for 'group_id' [ 331.308493][ T7099] fuse: Unknown parameter 'user_i00000000000000000000' [ 331.319848][ T7099] 9pnet_fd: Insufficient options for proto=fd [ 331.438798][ T5786] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 331.989485][ T7100] 9pnet_fd: p9_fd_create_tcp (7100): problem connecting socket to 127.0.0.1 [ 332.671667][ T7110] loop3: detected capacity change from 0 to 4096 [ 332.718822][ T7110] ntfs3: Unknown parameter '' [ 333.227235][ T7126] bond1: option xmit_hash_policy: invalid value (13) [ 333.422659][ T7126] bond1 (unregistering): Released all slaves [ 333.720308][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 334.002961][ T9] usb 4-1: string descriptor 0 read error: -71 [ 334.010168][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 334.019730][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.116188][ T9] usb 4-1: can't set config #1, error -71 [ 334.169462][ T9] usb 4-1: USB disconnect, device number 13 [ 334.534255][ T7142] fuse: Unknown parameter '0x0000000000000004' [ 334.615210][ T7142] fuse: Unknown parameter 'user_i00000000000000000000' [ 334.690435][ T7142] 9pnet_fd: Insufficient options for proto=fd [ 334.805701][ T7146] /dev/loop2: Can't open blockdev [ 334.825216][ T7147] /dev/loop2: Can't open blockdev [ 335.634859][ T7154] loop3: detected capacity change from 0 to 128 [ 335.703473][ T7154] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 335.716539][ T5965] udevd[5965]: incorrect ext4 checksum on /dev/loop3 [ 335.726210][ T7152] capability: warning: `syz.1.352' uses 32-bit capabilities (legacy support in use) [ 335.929797][ T7154] 9pnet_fd: p9_fd_create_tcp (7154): problem connecting socket to 127.0.0.1 [ 336.149003][ T5841] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 336.418069][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.430980][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.441231][ T5841] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.454889][ T5841] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.466597][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.908579][ T5841] usb 1-1: config 0 descriptor?? [ 337.201934][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.212470][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.379881][ T7164] loop3: detected capacity change from 0 to 256 [ 337.405110][ T7164] exfat: Bad value for 'uid' [ 337.411207][ T7164] exfat: Bad value for 'uid' [ 337.513248][ T5841] usbhid 1-1:0.0: can't add hid device: -71 [ 337.520508][ T5841] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 337.617462][ T5841] usb 1-1: USB disconnect, device number 15 [ 337.853760][ T7167] fuse: Bad value for 'group_id' [ 337.859340][ T7167] fuse: Bad value for 'group_id' [ 339.395738][ T5841] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 339.581736][ T5841] usb 1-1: Using ep0 maxpacket: 16 [ 339.607440][ T5841] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 339.616437][ T5841] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.627489][ T5841] usb 1-1: config 0 has no interface number 0 [ 339.633844][ T5841] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 339.646248][ T5841] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 339.658208][ T5841] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 339.669886][ T5841] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 127 [ 339.680465][ T5841] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 339.696572][ T5841] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 339.707187][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.729376][ T5841] usb 1-1: config 0 descriptor?? [ 339.738239][ T7197] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 339.748158][ T7197] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 339.808347][ T7194] 9pnet_fd: p9_fd_create_tcp (7194): problem connecting socket to 127.0.0.1 [ 339.842934][ T5841] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 340.131544][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.133201][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.230953][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.232386][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.234668][ T7203] fuse: Bad value for 'group_id' [ 340.234761][ T7203] fuse: Bad value for 'group_id' [ 340.260905][ T7208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.262349][ T7208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.331372][ T5841] usb 1-1: USB disconnect, device number 16 [ 340.553147][ T7212] netlink: 'syz.1.373': attribute type 10 has an invalid length. [ 340.604295][ T6215] udevd[6215]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.638798][ T7212] team0: Port device dummy0 added [ 340.676023][ T7212] netlink: 'syz.1.373': attribute type 10 has an invalid length. [ 340.680338][ T7212] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 340.763210][ T7212] team0: Failed to send options change via netlink (err -105) [ 340.764362][ T7212] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 340.766492][ T7212] team0: Port device dummy0 removed [ 340.782605][ T7212] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 340.805621][ T1878] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 341.272670][ T1878] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 341.272832][ T1878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.279366][ T1878] usb 3-1: config 0 descriptor?? [ 341.767447][ T7218] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.375'. [ 341.846586][ T1878] usbhid 3-1:0.0: can't add hid device: -71 [ 341.853251][ T1878] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 341.942535][ T1878] usb 3-1: USB disconnect, device number 10 [ 342.235823][ T5845] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 342.425835][ T5845] usb 1-1: Using ep0 maxpacket: 8 [ 342.448974][ T5845] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 342.463021][ T5845] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.473399][ T5845] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 342.540542][ T5845] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.550322][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.562187][ T5845] usb 1-1: Product: syz [ 342.567686][ T5845] usb 1-1: Manufacturer: syz [ 342.572594][ T5845] usb 1-1: SerialNumber: syz [ 342.876217][ T5845] usb 1-1: invalid UAC_HEADER (v1) [ 342.991290][ T5845] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 343.067928][ T5845] usb 1-1: USB disconnect, device number 17 [ 343.216307][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.324703][ T7242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.383'. [ 343.473202][ T7244] fuse: Bad value for 'group_id' [ 343.478742][ T7244] fuse: Bad value for 'group_id' [ 343.929163][ T7251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.385'. [ 345.539302][ T30] audit: type=1800 audit(1759508142.871:48): pid=7266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.390" name="file1" dev="overlay" ino=485 res=0 errno=0 [ 345.587318][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 345.640946][ T7261] tipc: Started in network mode [ 345.646432][ T7261] tipc: Node identity a6fe54ef9277, cluster identity 4711 [ 345.654859][ T7261] tipc: Enabled bearer , priority 0 [ 345.982360][ T7261] tipc: Disabling bearer [ 346.150760][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.395'. [ 346.436043][ T7282] fuse: Bad value for 'group_id' [ 346.441750][ T7282] fuse: Bad value for 'group_id' [ 346.970572][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 347.081637][ T7296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.402'. [ 348.167964][ T7316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.409'. [ 348.284694][ T7318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.410'. [ 348.298549][ T7318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.410'. [ 348.519906][ T7324] fuse: Bad value for 'group_id' [ 348.525412][ T7324] fuse: Bad value for 'group_id' [ 348.825692][ T1878] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 349.016751][ T1878] usb 2-1: Using ep0 maxpacket: 8 [ 349.059502][ T1878] usb 2-1: config index 0 descriptor too short (expected 178, got 18) [ 349.093529][ T1878] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 349.103268][ T1878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.111857][ T1878] usb 2-1: Product: syz [ 349.120322][ T1878] usb 2-1: Manufacturer: syz [ 349.125149][ T1878] usb 2-1: SerialNumber: syz [ 349.222582][ T1878] usb 2-1: config 0 descriptor?? [ 349.449987][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.460284][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.547336][ T1878] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 349.563678][ T1878] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 349.600515][ T1878] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 349.610220][ T1878] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 349.662313][ T1878] usb 2-1: USB disconnect, device number 5 [ 350.304148][ T7353] @: renamed from vlan0 (while UP) [ 350.665176][ T1878] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 350.905834][ T1878] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 350.914445][ T1878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.928217][ T1878] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 351.109366][ T1878] usb 1-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=79.1f [ 351.119344][ T1878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.128064][ T1878] usb 1-1: Product: syz [ 351.132432][ T1878] usb 1-1: Manufacturer: syz [ 351.137446][ T1878] usb 1-1: SerialNumber: syz [ 351.319233][ T1878] usb 1-1: config 0 descriptor?? [ 351.397727][ T1878] HFC-S_USB 1-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 351.567552][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 351.677413][ T5845] usb 1-1: USB disconnect, device number 18 [ 352.057769][ T7368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.423'. [ 352.621243][ T7372] loop3: detected capacity change from 0 to 512 [ 352.883407][ T7372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.897601][ T7372] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.952089][ T7382] 9pnet_fd: p9_fd_create_tcp (7382): problem connecting socket to 127.0.0.1 [ 353.527523][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.083197][ T7408] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 354.153696][ T7409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.438'. [ 354.220832][ T7409] bond1: option resend_igmp: invalid value (511) [ 354.227681][ T7409] bond1: option resend_igmp: allowed values 0 - 255 [ 354.258881][ T7409] bond1 (unregistering): Released all slaves [ 355.599434][ T7427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.444'. [ 356.425604][ T5841] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 356.626047][ T5841] usb 2-1: Using ep0 maxpacket: 32 [ 356.658106][ T7435] loop3: detected capacity change from 0 to 512 [ 356.667403][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.679238][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.692158][ T5841] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 356.702651][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.786781][ T7435] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 356.832470][ T7435] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 356.869271][ T5841] usb 2-1: config 0 descriptor?? [ 356.908686][ T7435] System zones: 0-2, 18-18, 34-35 [ 356.919674][ T7435] EXT4-fs (loop3): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.006021][ T1878] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 357.241915][ T1878] usb 1-1: device descriptor read/64, error -71 [ 357.343856][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.354662][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.395150][ T7435] could not allocate digest TFM handle sha224-avx2 [ 357.571184][ T1878] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 357.631469][ T5841] usbhid 2-1:0.0: can't add hid device: -32 [ 357.638509][ T5841] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 357.720988][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.729977][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 357.836280][ T1878] usb 1-1: device descriptor read/64, error -71 [ 357.946474][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 357.958498][ T1878] usb usb1-port1: attempt power cycle [ 358.010188][ T5841] usb 2-1: USB disconnect, device number 6 [ 358.378509][ T1878] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 358.388940][ T7455] loop3: detected capacity change from 0 to 1024 [ 358.440674][ T1878] usb 1-1: device descriptor read/8, error -71 [ 358.451462][ T7455] EXT4-fs (loop3): unable to read superblock [ 358.618536][ T7460] FAULT_INJECTION: forcing a failure. [ 358.618536][ T7460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.632682][ T7460] CPU: 1 UID: 0 PID: 7460 Comm: syz.2.452 Not tainted syzkaller #0 PREEMPT(none) [ 358.632827][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 358.632911][ T7460] Call Trace: [ 358.632961][ T7460] [ 358.633012][ T7460] __dump_stack+0x26/0x30 [ 358.633191][ T7460] dump_stack_lvl+0x1df/0x270 [ 358.633372][ T7460] dump_stack+0x1e/0x25 [ 358.633530][ T7460] should_fail_ex+0x7dc/0x8a0 [ 358.633714][ T7460] should_fail+0x2a/0x40 [ 358.633855][ T7460] should_fail_usercopy+0x2e/0x40 [ 358.634021][ T7460] _copy_to_user+0x35/0x120 [ 358.634211][ T7460] simple_read_from_buffer+0x1b2/0x340 [ 358.634404][ T7460] proc_fail_nth_read+0x1e0/0x2d0 [ 358.634575][ T7460] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 358.634748][ T7460] vfs_read+0x279/0xf90 [ 358.634905][ T7460] ? stack_depot_save_flags+0x35/0x7b0 [ 358.635056][ T7460] ? kmsan_get_metadata+0xfb/0x160 [ 358.635227][ T7460] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 358.635400][ T7460] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 358.635585][ T7460] __x64_sys_read+0x1fb/0x4d0 [ 358.635792][ T7460] x64_sys_call+0x2f9c/0x3e30 [ 358.635982][ T7460] do_syscall_64+0xd9/0x210 [ 358.636123][ T7460] ? irqentry_exit+0x16/0x60 [ 358.636315][ T7460] ? clear_bhb_loop+0x40/0x90 [ 358.636473][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.636625][ T7460] RIP: 0033:0x7f18bb98d8dc [ 358.636740][ T7460] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 358.636864][ T7460] RSP: 002b:00007f18bc8a9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 358.636998][ T7460] RAX: ffffffffffffffda RBX: 00007f18bbbe6090 RCX: 00007f18bb98d8dc [ 358.637102][ T7460] RDX: 000000000000000f RSI: 00007f18bc8a90a0 RDI: 0000000000000004 [ 358.637192][ T7460] RBP: 00007f18bc8a9090 R08: 0000000000000000 R09: 0000000000000000 [ 358.637283][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.637367][ T7460] R13: 00007f18bbbe6128 R14: 00007f18bbbe6090 R15: 00007ffd1b4b42f8 [ 358.637505][ T7460] [ 359.066124][ T1878] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 359.088044][ T1878] usb 1-1: device descriptor read/8, error -71 [ 359.197111][ T1878] usb usb1-port1: unable to enumerate USB device [ 359.491041][ T7469] loop3: detected capacity change from 0 to 256 [ 359.615977][ T7469] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 359.703465][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 359.712800][ T7471] nbd: must specify a size in bytes for the device [ 359.957440][ T30] audit: type=1800 audit(1759508157.151:49): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.456" name="memory.events" dev="loop3" ino=1048603 res=0 errno=0 [ 359.982133][ T30] audit: type=1804 audit(1759508157.151:50): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.456" name="/newroot/79/file0/memory.events" dev="loop3" ino=1048603 res=1 errno=0 [ 363.342946][ T7500] overlayfs: missing 'lowerdir' [ 365.547658][ T1878] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 365.609039][ T7529] overlayfs: missing 'lowerdir' [ 365.751965][ T1878] usb 2-1: config 112 has too many interfaces: 213, using maximum allowed: 32 [ 365.761505][ T1878] usb 2-1: config 112 has an invalid descriptor of length 51, skipping remainder of the config [ 365.772386][ T1878] usb 2-1: config 112 has 0 interfaces, different from the descriptor's value: 213 [ 365.782363][ T1878] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 365.792299][ T1878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.212289][ T7525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.226460][ T7525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.602409][ T7537] random: crng reseeded on system resumption [ 368.142973][ T7562] overlayfs: missing 'workdir' [ 368.593620][ T7571] dummy0: entered promiscuous mode [ 368.601870][ T7571] vlan3: entered promiscuous mode [ 368.646142][ T1878] usb 2-1: string descriptor 0 read error: -71 [ 368.690590][ T1878] usb 2-1: USB disconnect, device number 7 [ 369.070103][ T7577] netlink: 60 bytes leftover after parsing attributes in process `syz.1.496'. [ 369.433759][ T7583] loop3: detected capacity change from 0 to 256 [ 369.670831][ T7583] exfat: Bad value for 'uid' [ 369.676043][ T7583] exfat: Bad value for 'uid' [ 371.041938][ T7598] overlayfs: missing 'workdir' [ 372.497885][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 373.738399][ T7639] overlayfs: missing 'workdir' [ 374.934531][ T7656] netlink: 44 bytes leftover after parsing attributes in process `syz.3.523'. [ 375.003266][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.524'. [ 375.012512][ T7655] netlink: 16 bytes leftover after parsing attributes in process `syz.4.524'. [ 375.026940][ T30] audit: type=1326 audit(1759508172.381:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8a4ef8eec9 code=0x7ffc0000 [ 375.147907][ T30] audit: type=1326 audit(1759508172.511:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8a4ef8eec9 code=0x7ffc0000 [ 375.221374][ T30] audit: type=1326 audit(1759508172.581:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8a4ef8eec9 code=0x7ffc0000 [ 375.246987][ T30] audit: type=1326 audit(1759508172.581:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8a4ef8eec9 code=0x7ffc0000 [ 375.325078][ T30] audit: type=1326 audit(1759508172.681:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8a4ef8eec9 code=0x7ffc0000 [ 375.352055][ T30] audit: type=1326 audit(1759508172.681:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8a4ef8eec9 code=0x7ffc0000 [ 375.382502][ T30] audit: type=1326 audit(1759508172.681:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8a4ef8eec9 code=0x7ffc0000 [ 375.405915][ T30] audit: type=1326 audit(1759508172.691:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8a4ef8eec9 code=0x7ffc0000 [ 375.432856][ T30] audit: type=1326 audit(1759508172.741:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8a4ef8eec9 code=0x7ffc0000 [ 375.457065][ T30] audit: type=1326 audit(1759508172.741:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8a4ef8eec9 code=0x7ffc0000 [ 377.457330][ T7681] FAULT_INJECTION: forcing a failure. [ 377.457330][ T7681] name failslab, interval 1, probability 0, space 0, times 0 [ 377.470780][ T7681] CPU: 0 UID: 0 PID: 7681 Comm: syz.1.535 Not tainted syzkaller #0 PREEMPT(none) [ 377.470927][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 377.471017][ T7681] Call Trace: [ 377.471073][ T7681] [ 377.471125][ T7681] __dump_stack+0x26/0x30 [ 377.471314][ T7681] dump_stack_lvl+0x1df/0x270 [ 377.471494][ T7681] dump_stack+0x1e/0x25 [ 377.471652][ T7681] should_fail_ex+0x7dc/0x8a0 [ 377.471831][ T7681] should_failslab+0x15b/0x200 [ 377.472011][ T7681] kmem_cache_alloc_noprof+0xed/0x1640 [ 377.472178][ T7681] ? dst_alloc+0x1aa/0x250 [ 377.472367][ T7681] ? __ip_dev_find+0x505/0x5e0 [ 377.472531][ T7681] ? kmsan_get_metadata+0xfb/0x160 [ 377.472700][ T7681] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 377.472913][ T7681] dst_alloc+0x1aa/0x250 [ 377.473094][ T7681] ip_route_output_key_hash_rcu+0x2abe/0x3b10 [ 377.473322][ T7681] ip_route_output_flow+0x8f/0x270 [ 377.473473][ T7681] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 377.473652][ T7681] raw_sendmsg+0x1d67/0x27a0 [ 377.473927][ T7681] ? __pfx_raw_sendmsg+0x10/0x10 [ 377.474114][ T7681] inet_sendmsg+0x269/0x2a0 [ 377.474331][ T7681] __sock_sendmsg+0x278/0x3d0 [ 377.474504][ T7681] __sys_sendto+0x593/0x720 [ 377.474684][ T7681] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 377.474864][ T7681] ? vfs_write+0x13e2/0x15d0 [ 377.475035][ T7681] ? kmsan_get_metadata+0xfb/0x160 [ 377.475266][ T7681] __x64_sys_sendto+0x130/0x200 [ 377.475471][ T7681] x64_sys_call+0x3924/0x3e30 [ 377.475652][ T7681] do_syscall_64+0xd9/0x210 [ 377.475790][ T7681] ? irqentry_exit+0x16/0x60 [ 377.475979][ T7681] ? clear_bhb_loop+0x40/0x90 [ 377.476138][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.476314][ T7681] RIP: 0033:0x7f9820b8eec9 [ 377.476416][ T7681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.476542][ T7681] RSP: 002b:00007f9821a22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 377.476676][ T7681] RAX: ffffffffffffffda RBX: 00007f9820de5fa0 RCX: 00007f9820b8eec9 [ 377.476784][ T7681] RDX: 0000000000000014 RSI: 00002000000023c0 RDI: 0000000000000004 [ 377.476876][ T7681] RBP: 00007f9821a22090 R08: 0000200000002400 R09: 0000000000000010 [ 377.476978][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.477063][ T7681] R13: 00007f9820de6038 R14: 00007f9820de5fa0 R15: 00007ffff9e4b258 [ 377.477205][ T7681] [ 378.279794][ T7694] netlink: 44 bytes leftover after parsing attributes in process `syz.1.539'. [ 379.165807][ T7703] netlink: 76 bytes leftover after parsing attributes in process `syz.4.542'. [ 379.201037][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.542'. [ 379.267383][ T6579] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.276957][ T6579] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.305920][ T5845] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 379.315918][ T5841] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.476168][ T5845] usb 2-1: Using ep0 maxpacket: 8 [ 379.510579][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.521642][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 379.536887][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 379.549145][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 379.559251][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 379.674510][ T5845] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 379.684178][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 379.692805][ T5845] usb 2-1: Product: syz [ 379.697296][ T5845] usb 2-1: Manufacturer: syz [ 379.702100][ T5845] usb 2-1: SerialNumber: syz [ 379.740665][ T5845] usb 2-1: config 0 descriptor?? [ 379.875940][ T5841] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.961951][ T5845] radio-si470x 2-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 380.060496][ T5841] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 380.163937][ T5845] radio-si470x 2-1:0.0: software version 100, hardware version 101 [ 380.334659][ T7719] sctp: [Deprecated]: syz.4.548 (pid 7719) Use of int in max_burst socket option. [ 380.334659][ T7719] Use struct sctp_assoc_value instead [ 380.368011][ T5845] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 380.916335][ T5845] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 380.926620][ T5845] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 383.209748][ T7719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.548'. [ 383.335911][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 388.280996][ T5841] usb 2-1: USB disconnect, device number 8 [ 388.531941][ T7733] fuse: Unknown parameter '0x0000000000000004' [ 388.787722][ T7733] fuse: Unknown parameter 'user_i00000000000000000000' [ 388.879046][ T7733] 9pnet_fd: Insufficient options for proto=fd [ 389.958956][ T7748] loop3: detected capacity change from 0 to 512 [ 389.991321][ T5845] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 390.012948][ T5846] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 390.025808][ T7748] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 390.104923][ T7748] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 390.127519][ T7748] EXT4-fs (loop3): 1 truncate cleaned up [ 390.136619][ T7748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.225909][ T5845] usb 2-1: Using ep0 maxpacket: 16 [ 390.244132][ T5846] usb 3-1: unable to get BOS descriptor or descriptor too short [ 390.306571][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.318025][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.328225][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 390.332863][ T7754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.560'. [ 390.341585][ T5845] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 390.341745][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.371065][ T5846] usb 3-1: not running at top speed; connect to a high speed hub [ 390.398093][ T5846] usb 3-1: config 1 has an invalid interface number: 182 but max is 0 [ 390.406804][ T5846] usb 3-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 390.417565][ T5846] usb 3-1: config 1 has no interface number 0 [ 390.423968][ T5846] usb 3-1: config 1 interface 182 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 390.437788][ T5846] usb 3-1: config 1 interface 182 has no altsetting 0 [ 390.490091][ T5845] usb 2-1: config 0 descriptor?? [ 390.554265][ T5846] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c00, bcdDevice= 8.ce [ 390.563874][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.572793][ T5846] usb 3-1: Product: syz [ 390.577497][ T5846] usb 3-1: Manufacturer: syz [ 390.582648][ T5846] usb 3-1: SerialNumber: syz [ 390.926288][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.016236][ T5845] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input9 [ 391.064980][ T7763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.076564][ T7763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.162718][ T5846] rndis_host 3-1:1.182: skipping garbage [ 391.169394][ T5846] usb 3-1: bad CDC descriptors [ 391.178136][ T5846] cp210x 3-1:1.182: cp210x converter detected [ 391.216885][ T5845] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 391.258438][ T5846] cp210x 3-1:1.182: failed to get vendor val 0x370b size 1: -71 [ 391.266770][ T5846] cp210x 3-1:1.182: querying part number failed [ 391.326545][ T5845] usb 2-1: USB disconnect, device number 9 [ 391.358165][ T5846] usb 3-1: cp210x converter now attached to ttyUSB0 [ 391.435476][ T5846] usb 3-1: USB disconnect, device number 11 [ 391.513123][ T5846] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 391.524601][ T5846] cp210x 3-1:1.182: device disconnected [ 391.576185][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.810258][ T7769] loop3: detected capacity change from 0 to 128 [ 391.900720][ T7769] qnx6: wrong signature (magic) in superblock #1. [ 392.204119][ T7770] fido_id[7770]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 392.744799][ T7781] FAULT_INJECTION: forcing a failure. [ 392.744799][ T7781] name failslab, interval 1, probability 0, space 0, times 0 [ 392.758818][ T7781] CPU: 1 UID: 0 PID: 7781 Comm: syz.3.569 Not tainted syzkaller #0 PREEMPT(none) [ 392.758974][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.759059][ T7781] Call Trace: [ 392.759112][ T7781] [ 392.759167][ T7781] __dump_stack+0x26/0x30 [ 392.759345][ T7781] dump_stack_lvl+0x1df/0x270 [ 392.759524][ T7781] dump_stack+0x1e/0x25 [ 392.759682][ T7781] should_fail_ex+0x7dc/0x8a0 [ 392.759859][ T7781] should_failslab+0x15b/0x200 [ 392.760047][ T7781] kmem_cache_alloc_noprof+0xed/0x1640 [ 392.760222][ T7781] ? skb_clone+0x3ca/0x580 [ 392.760422][ T7781] ? kmsan_get_metadata+0xfb/0x160 [ 392.760590][ T7781] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 392.760775][ T7781] skb_clone+0x3ca/0x580 [ 392.760984][ T7781] dev_queue_xmit_nit+0x709/0x15a0 [ 392.761174][ T7781] ? validate_xmit_skb+0x183b/0x1d50 [ 392.761374][ T7781] dev_hard_start_xmit+0x16b/0xa30 [ 392.761600][ T7781] sch_direct_xmit+0x3b2/0xcf0 [ 392.761765][ T7781] ? kmsan_get_metadata+0x150/0x160 [ 392.761946][ T7781] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 392.762139][ T7781] __dev_queue_xmit+0x3588/0x5e60 [ 392.762344][ T7781] ? stack_depot_save_flags+0x35/0x7b0 [ 392.762496][ T7781] ? kmsan_get_metadata+0xfb/0x160 [ 392.762669][ T7781] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 392.762838][ T7781] ? __dev_queue_xmit+0x30c/0x5e60 [ 392.763032][ T7781] ? kmsan_get_metadata+0xfb/0x160 [ 392.763238][ T7781] ip_finish_output2+0x19a1/0x1d50 [ 392.763442][ T7781] ip_finish_output+0x292/0x8e0 [ 392.763590][ T7781] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 392.763790][ T7781] ip_output+0x14f/0x3e0 [ 392.763940][ T7781] ? __pfx_ip_finish_output+0x10/0x10 [ 392.764094][ T7781] ? __pfx_ip_output+0x10/0x10 [ 392.764230][ T7781] ip_send_skb+0x344/0x420 [ 392.764392][ T7781] ip_push_pending_frames+0xad/0x110 [ 392.764559][ T7781] raw_sendmsg+0x250f/0x27a0 [ 392.764844][ T7781] ? __pfx_raw_sendmsg+0x10/0x10 [ 392.765057][ T7781] inet_sendmsg+0x269/0x2a0 [ 392.765270][ T7781] __sock_sendmsg+0x278/0x3d0 [ 392.765424][ T7781] __sys_sendto+0x593/0x720 [ 392.765594][ T7781] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 392.765754][ T7781] ? vfs_write+0x13e2/0x15d0 [ 392.765920][ T7781] ? kmsan_get_metadata+0xfb/0x160 [ 392.766146][ T7781] __x64_sys_sendto+0x130/0x200 [ 392.766358][ T7781] x64_sys_call+0x3924/0x3e30 [ 392.766547][ T7781] do_syscall_64+0xd9/0x210 [ 392.766695][ T7781] ? irqentry_exit+0x16/0x60 [ 392.766892][ T7781] ? clear_bhb_loop+0x40/0x90 [ 392.767068][ T7781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.767352][ T7781] RIP: 0033:0x7fa545d8eec9 [ 392.767480][ T7781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.767622][ T7781] RSP: 002b:00007fa543fee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 392.767774][ T7781] RAX: ffffffffffffffda RBX: 00007fa545fe5fa0 RCX: 00007fa545d8eec9 [ 392.769189][ T7781] RDX: 0000000000000014 RSI: 00002000000023c0 RDI: 0000000000000004 [ 392.769315][ T7781] RBP: 00007fa543fee090 R08: 0000200000002400 R09: 0000000000000010 [ 392.769415][ T7781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.769502][ T7781] R13: 00007fa545fe6038 R14: 00007fa545fe5fa0 R15: 00007ffda46b68e8 [ 392.769642][ T7781] [ 393.536199][ T5846] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 393.545788][ T5841] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 393.617989][ T7792] loop3: detected capacity change from 0 to 128 [ 393.686386][ T5841] usb 2-1: device descriptor read/64, error -71 [ 393.741404][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 393.772559][ T5846] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 393.781448][ T5846] usb 3-1: config 0 has no interface number 0 [ 393.787979][ T5846] usb 3-1: config 0 interface 12 has no altsetting 0 [ 393.879282][ T5846] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 393.890575][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.900403][ T5846] usb 3-1: Product: syz [ 393.905048][ T5846] usb 3-1: Manufacturer: syz [ 393.910355][ T5846] usb 3-1: SerialNumber: syz [ 393.967071][ T5841] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 394.012296][ T5846] usb 3-1: config 0 descriptor?? [ 394.136082][ T5841] usb 2-1: device descriptor read/64, error -71 [ 394.247621][ T5841] usb usb2-port1: attempt power cycle [ 394.441145][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 394.441237][ T30] audit: type=1326 audit(1759508191.801:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7798 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf2d8eec9 code=0x7ffc0000 [ 394.582265][ T30] audit: type=1326 audit(1759508191.851:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7798 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbaf2d8eec9 code=0x7ffc0000 [ 394.606076][ T30] audit: type=1326 audit(1759508191.851:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7798 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf2d8eec9 code=0x7ffc0000 [ 394.628484][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.636300][ T30] audit: type=1326 audit(1759508191.851:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7798 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fbaf2d8eec9 code=0x7ffc0000 [ 394.658771][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.665660][ T30] audit: type=1326 audit(1759508191.851:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7798 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf2d8eec9 code=0x7ffc0000 [ 394.690809][ T30] audit: type=1326 audit(1759508191.851:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7798 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbaf2d8d710 code=0x7ffc0000 [ 394.714432][ T30] audit: type=1326 audit(1759508191.851:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7798 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbaf2d906f7 code=0x7ffc0000 [ 394.737718][ T30] audit: type=1326 audit(1759508191.851:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7798 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbaf2d8eec9 code=0x7ffc0000 [ 394.760275][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.767059][ T30] audit: type=1326 audit(1759508191.851:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7798 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbaf2d906f7 code=0x7ffc0000 [ 394.792770][ T30] audit: type=1326 audit(1759508191.871:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7798 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbaf2d8db2a code=0x7ffc0000 [ 394.819795][ T5841] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 394.859986][ T5846] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 394.868563][ T5846] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 394.877172][ T5846] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 394.889981][ T5846] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 394.944102][ T7803] netlink: 104 bytes leftover after parsing attributes in process `syz.3.579'. [ 394.977265][ T5841] usb 2-1: device descriptor read/8, error -71 [ 395.068105][ T5846] usb 3-1: USB disconnect, device number 12 [ 395.215883][ T5841] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 395.248099][ T5841] usb 2-1: device descriptor read/8, error -71 [ 395.381306][ T5841] usb usb2-port1: unable to enumerate USB device [ 396.757732][ T7818] loop3: detected capacity change from 0 to 4096 [ 397.075627][ T5841] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 397.236284][ T7839] 9pnet_fd: Insufficient options for proto=fd [ 397.295765][ T5841] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 397.304527][ T5841] usb 3-1: config 0 has no interface number 0 [ 397.311209][ T5841] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 397.323350][ T5841] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 397.338328][ T5841] usb 3-1: config 0 interface 113 has no altsetting 0 [ 397.476550][ T5841] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 397.486670][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.495005][ T5841] usb 3-1: Product: syz [ 397.499716][ T5841] usb 3-1: Manufacturer: syz [ 397.504640][ T5841] usb 3-1: SerialNumber: syz [ 397.559960][ T5841] usb 3-1: config 0 descriptor?? [ 397.579031][ T7833] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 397.631150][ C1] usb 3-1: NFC: Urb failure (status -71) [ 397.646214][ C1] usb 3-1: NFC: Urb failure (status -71) [ 397.661427][ T5841] usb 3-1: NFC: Unable to get FW version [ 397.696890][ T5841] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -71 [ 397.847302][ T5841] usb 3-1: USB disconnect, device number 13 [ 398.152619][ T7847] loop3: detected capacity change from 0 to 2048 [ 398.742176][ T7855] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 398.753518][ T7855] netlink: 40 bytes leftover after parsing attributes in process `syz.4.599'. [ 398.762893][ T7855] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 399.565781][ T7864] FAULT_INJECTION: forcing a failure. [ 399.565781][ T7864] name failslab, interval 1, probability 0, space 0, times 0 [ 399.579052][ T7864] CPU: 1 UID: 0 PID: 7864 Comm: syz.3.602 Not tainted syzkaller #0 PREEMPT(none) [ 399.579207][ T7864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 399.579299][ T7864] Call Trace: [ 399.579352][ T7864] [ 399.579405][ T7864] __dump_stack+0x26/0x30 [ 399.579585][ T7864] dump_stack_lvl+0x1df/0x270 [ 399.579774][ T7864] dump_stack+0x1e/0x25 [ 399.579938][ T7864] should_fail_ex+0x7dc/0x8a0 [ 399.580118][ T7864] should_failslab+0x15b/0x200 [ 399.580302][ T7864] kmem_cache_alloc_noprof+0xed/0x1640 [ 399.580480][ T7864] ? skb_clone+0x3ca/0x580 [ 399.580677][ T7864] ? kmsan_get_metadata+0xfb/0x160 [ 399.580850][ T7864] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.581028][ T7864] ? kmsan_get_metadata+0xfb/0x160 [ 399.581200][ T7864] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.581387][ T7864] skb_clone+0x3ca/0x580 [ 399.581588][ T7864] __netlink_deliver_tap+0x695/0xdd0 [ 399.581814][ T7864] ? kmsan_get_metadata+0xfb/0x160 [ 399.581997][ T7864] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.582186][ T7864] netlink_sendskb+0x224/0x270 [ 399.582372][ T7864] netlink_unicast+0x768/0x12b0 [ 399.582578][ T7864] netlink_ack+0xacc/0xf80 [ 399.582819][ T7864] netlink_rcv_skb+0x3f9/0x680 [ 399.583030][ T7864] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.583204][ T7864] genl_rcv+0x41/0x60 [ 399.583339][ T7864] ? __pfx_genl_rcv+0x10/0x10 [ 399.583475][ T7864] netlink_unicast+0xf01/0x12b0 [ 399.583693][ T7864] netlink_sendmsg+0x10b3/0x1250 [ 399.583918][ T7864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.584111][ T7864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.584303][ T7864] __sock_sendmsg+0x333/0x3d0 [ 399.584469][ T7864] ____sys_sendmsg+0x7e0/0xd80 [ 399.584711][ T7864] ___sys_sendmsg+0x271/0x3b0 [ 399.584939][ T7864] ? __rcu_read_unlock+0x6d/0xd0 [ 399.585104][ T7864] ? __fget_files+0x3b4/0x4a0 [ 399.585282][ T7864] ? __fget_files+0x3b9/0x4a0 [ 399.585465][ T7864] ? kmsan_get_metadata+0xfb/0x160 [ 399.585648][ T7864] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.585838][ T7864] __x64_sys_sendmsg+0x211/0x3e0 [ 399.586055][ T7864] ? kmsan_get_metadata+0xfb/0x160 [ 399.586240][ T7864] x64_sys_call+0x1dfd/0x3e30 [ 399.586431][ T7864] do_syscall_64+0xd9/0x210 [ 399.586572][ T7864] ? irqentry_exit+0x16/0x60 [ 399.586774][ T7864] ? clear_bhb_loop+0x40/0x90 [ 399.586931][ T7864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.587090][ T7864] RIP: 0033:0x7fa545d8eec9 [ 399.587201][ T7864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.587327][ T7864] RSP: 002b:00007fa543fee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.587467][ T7864] RAX: ffffffffffffffda RBX: 00007fa545fe5fa0 RCX: 00007fa545d8eec9 [ 399.587572][ T7864] RDX: 0000000000000800 RSI: 00002000000003c0 RDI: 0000000000000003 [ 399.587676][ T7864] RBP: 00007fa543fee090 R08: 0000000000000000 R09: 0000000000000000 [ 399.587768][ T7864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.587857][ T7864] R13: 00007fa545fe6038 R14: 00007fa545fe5fa0 R15: 00007ffda46b68e8 [ 399.587993][ T7864] [ 400.385932][ T5841] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 400.483133][ T7872] loop3: detected capacity change from 0 to 2048 [ 400.546199][ T7872] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 400.576165][ T5841] usb 2-1: Using ep0 maxpacket: 8 [ 400.590907][ T7872] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 400.599595][ T7872] UDF-fs: Scanning with blocksize 512 failed [ 400.625850][ T5841] usb 2-1: config index 0 descriptor too short (expected 30482, got 18) [ 400.634497][ T5841] usb 2-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 400.643916][ T5841] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 400.708401][ T5841] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 400.718094][ T5841] usb 2-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 400.729635][ T5841] usb 2-1: Product: syz [ 400.734048][ T5841] usb 2-1: Manufacturer: syz [ 400.738636][ T7872] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.808838][ T7877] 9pnet_fd: Insufficient options for proto=fd [ 400.850152][ T5841] usb 2-1: config 0 descriptor?? [ 400.880838][ T5841] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 400.920176][ T5841] usb 2-1: Detected FT2232C/D [ 401.083936][ T5841] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 401.106757][ T5841] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 401.130023][ T5841] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 401.250007][ T5841] usb 2-1: USB disconnect, device number 14 [ 401.299858][ T5841] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 401.312270][ T5841] ftdi_sio 2-1:0.0: device disconnected [ 402.288208][ T7898] netlink: 100 bytes leftover after parsing attributes in process `syz.1.615'. [ 402.489570][ T7906] loop3: detected capacity change from 0 to 128 [ 402.749420][ T7908] 9pnet_fd: Insufficient options for proto=fd [ 403.209451][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 403.209536][ T30] audit: type=1326 audit(1759508200.571:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bb98eec9 code=0x7ffc0000 [ 403.238608][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.245672][ T30] audit: type=1326 audit(1759508200.571:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bb98eec9 code=0x7ffc0000 [ 403.268759][ T30] audit: type=1326 audit(1759508200.571:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f18bb98eec9 code=0x7ffc0000 [ 403.291160][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.301522][ T30] audit: type=1326 audit(1759508200.571:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bb98eec9 code=0x7ffc0000 [ 403.324287][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.331330][ T30] audit: type=1326 audit(1759508200.581:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f18bb98eec9 code=0x7ffc0000 [ 403.353779][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.360659][ T30] audit: type=1326 audit(1759508200.581:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.2.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18bb98eec9 code=0x7ffc0000 [ 403.928806][ T7929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.627'. [ 404.566579][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.632'. [ 404.594411][ T7948] netlink: 'syz.1.630': attribute type 4 has an invalid length. [ 404.630681][ T7948] netlink: 'syz.1.630': attribute type 4 has an invalid length. [ 404.728489][ T5841] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 404.971027][ T5841] usb 4-1: Using ep0 maxpacket: 32 [ 404.985663][ T5841] usb 4-1: config 204 has 0 interfaces, different from the descriptor's value: 21 [ 405.006010][ T5841] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 405.015901][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.027261][ T5841] usb 4-1: Product: syz [ 405.031672][ T5841] usb 4-1: Manufacturer: syz [ 405.038197][ T5841] usb 4-1: SerialNumber: syz [ 405.499514][ T7966] netlink: 56 bytes leftover after parsing attributes in process `syz.3.633'. [ 405.509698][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'. [ 405.582017][ T7968] Bluetooth: MGMT ver 1.23 [ 405.815864][ T5788] Bluetooth: hci4: command 0x0406 tx timeout [ 405.860907][ T7966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.871300][ T7966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.798228][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.643'. [ 407.765734][ T5841] usb 4-1: USB disconnect, device number 14 [ 407.843092][ T7989] raw_sendmsg: syz.1.645 forgot to set AF_INET. Fix it! [ 408.211432][ T7998] fuse: Unknown parameter '0x0000000000000004' [ 408.215981][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 408.348489][ T7998] fuse: Bad value for 'fd' [ 408.410826][ T7998] 9pnet_fd: Insufficient options for proto=fd [ 409.246170][ T5846] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 409.484847][ T5846] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 409.499633][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 409.511180][ T5846] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 409.524630][ T5846] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 409.537381][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.635742][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.655'. [ 409.739337][ T5846] usb 2-1: config 0 descriptor?? [ 409.757620][ T8013] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 410.010720][ T8013] netlink: 256 bytes leftover after parsing attributes in process `syz.1.652'. [ 410.546561][ T5846] uclogic 0003:5543:0005.0003: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.1-1/input0 [ 410.743806][ T5837] usb 2-1: USB disconnect, device number 15 [ 411.043833][ T8041] pim6reg: entered allmulticast mode [ 411.232936][ T8038] fido_id[8038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 411.300378][ T8043] loop3: detected capacity change from 0 to 1024 [ 411.560388][ T8041] syz.3.659: attempt to access beyond end of device [ 411.560388][ T8041] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 411.574775][ T8041] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 411.589046][ T8041] hfsplus: unable to mark blocks free: error -5 [ 411.596731][ T8041] hfsplus: can't free extent: start 0, count 1 [ 411.757170][ T8044] syz.3.659: attempt to access beyond end of device [ 411.757170][ T8044] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 411.773813][ T8044] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 411.788336][ T8044] syz.3.659: attempt to access beyond end of device [ 411.788336][ T8044] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 411.805066][ T8044] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 411.922913][ T8046] fuse: Unknown parameter '0x0000000000000004' [ 411.998239][ T8046] 9pnet_fd: Insufficient options for proto=fd [ 412.184750][ T8052] netlink: 'syz.2.660': attribute type 1 has an invalid length. [ 412.721842][ T8040] pim6reg: left allmulticast mode [ 412.867982][ T8064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.666'. [ 414.462386][ T8085] fuse: Unknown parameter '0x0000000000000004' [ 414.567398][ T8085] 9pnet_fd: Insufficient options for proto=fd [ 416.183358][ T8113] loop3: detected capacity change from 0 to 4096 [ 416.310843][ T8113] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 416.319385][ T8113] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 416.328004][ T8113] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 416.336435][ T8113] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 416.344629][ T8113] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00 [ 416.353076][ T8113] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00 [ 416.361512][ T8113] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00 [ 416.370187][ T8113] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00 [ 416.378678][ T8113] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00 [ 416.387042][ T8113] ntfs3(loop3): try to read out of volume at offset 0x3fffffe0c00 [ 416.994807][ T8127] loop3: detected capacity change from 0 to 64 [ 417.101638][ T8128] fuse: Unknown parameter '0x0000000000000004' [ 417.158803][ T8128] 9pnet_fd: Insufficient options for proto=fd [ 418.842544][ T8147] loop3: detected capacity change from 0 to 256 [ 418.905789][ T8147] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 418.917149][ T8147] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 419.128424][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.135111][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.188217][ T8147] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 420.509391][ T8163] fuse: Unknown parameter '0x0000000000000004' [ 420.726308][ T8168] 9pnet_fd: Insufficient options for proto=fd [ 420.838433][ T8157] loop3: detected capacity change from 0 to 32768 [ 420.912404][ T8157] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 421.146472][ T8157] XFS (loop3): Ending clean mount [ 421.170313][ T8157] XFS (loop3): Quotacheck needed: Please wait. [ 421.248552][ T8157] XFS (loop3): Quotacheck: Done. [ 421.663404][ T5786] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 421.831365][ T8180] FAULT_INJECTION: forcing a failure. [ 421.831365][ T8180] name failslab, interval 1, probability 0, space 0, times 0 [ 421.846066][ T8180] CPU: 0 UID: 0 PID: 8180 Comm: syz.0.709 Not tainted syzkaller #0 PREEMPT(none) [ 421.846220][ T8180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 421.846307][ T8180] Call Trace: [ 421.846362][ T8180] [ 421.846415][ T8180] __dump_stack+0x26/0x30 [ 421.846593][ T8180] dump_stack_lvl+0x1df/0x270 [ 421.846797][ T8180] dump_stack+0x1e/0x25 [ 421.846959][ T8180] should_fail_ex+0x7dc/0x8a0 [ 421.847146][ T8180] should_failslab+0x15b/0x200 [ 421.847336][ T8180] __kmalloc_cache_noprof+0xc8/0x16b0 [ 421.847522][ T8180] ? ovl_init_fs_context+0xd8/0x940 [ 421.847692][ T8180] ? kmsan_get_metadata+0xfb/0x160 [ 421.847862][ T8180] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 421.848056][ T8180] ovl_init_fs_context+0xd8/0x940 [ 421.848213][ T8180] ? kmsan_get_metadata+0xfb/0x160 [ 421.848382][ T8180] ? __pfx_ovl_init_fs_context+0x10/0x10 [ 421.848533][ T8180] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 421.848726][ T8180] ? __pfx_ovl_init_fs_context+0x10/0x10 [ 421.848876][ T8180] alloc_fs_context+0xaee/0xda0 [ 421.849081][ T8180] fs_context_for_mount+0x3b/0x50 [ 421.849254][ T8180] do_new_mount+0x270/0x14b0 [ 421.849419][ T8180] ? apparmor_capable+0x32d/0x410 [ 421.849630][ T8180] ? kmsan_get_metadata+0xfb/0x160 [ 421.849837][ T8180] path_mount+0x6db/0x1ea0 [ 421.850014][ T8180] ? user_path_at+0x32d/0x3d0 [ 421.850180][ T8180] __se_sys_mount+0x6eb/0x7d0 [ 421.850354][ T8180] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 421.850544][ T8180] __x64_sys_mount+0xe4/0x150 [ 421.850743][ T8180] x64_sys_call+0x3604/0x3e30 [ 421.850933][ T8180] do_syscall_64+0xd9/0x210 [ 421.851080][ T8180] ? irqentry_exit+0x16/0x60 [ 421.851273][ T8180] ? clear_bhb_loop+0x40/0x90 [ 421.851436][ T8180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.851595][ T8180] RIP: 0033:0x7fbaf2d8eec9 [ 421.851714][ T8180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.851844][ T8180] RSP: 002b:00007fbaf3cf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 421.851989][ T8180] RAX: ffffffffffffffda RBX: 00007fbaf2fe5fa0 RCX: 00007fbaf2d8eec9 [ 421.852101][ T8180] RDX: 0000200000000b80 RSI: 0000200000000200 RDI: 0000000000000000 [ 421.852201][ T8180] RBP: 00007fbaf3cf7090 R08: 0000200000000240 R09: 0000000000000000 [ 421.852297][ T8180] R10: 0000000000200008 R11: 0000000000000246 R12: 0000000000000002 [ 421.852386][ T8180] R13: 00007fbaf2fe6038 R14: 00007fbaf2fe5fa0 R15: 00007ffcf9bd4618 [ 421.852524][ T8180] [ 422.259943][ T8181] team_slave_0: entered promiscuous mode [ 422.266197][ T8181] team_slave_1: entered promiscuous mode [ 422.272847][ T8181] vlan1: entered promiscuous mode [ 422.278354][ T8181] team0: entered promiscuous mode [ 422.415668][ T5846] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 422.577076][ T5846] usb 2-1: device descriptor read/64, error -71 [ 422.810476][ T8189] pimreg: entered allmulticast mode [ 422.849897][ T5846] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 422.868396][ T8194] pimreg: left allmulticast mode [ 422.941043][ T8196] loop3: detected capacity change from 0 to 8 [ 422.960096][ T8189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.711'. [ 422.971235][ T5845] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 422.986820][ T8196] squashfs: Unknown parameter 'd' [ 423.025855][ T5846] usb 2-1: device descriptor read/64, error -71 [ 423.147039][ T5845] usb 5-1: Using ep0 maxpacket: 8 [ 423.161700][ T5846] usb usb2-port1: attempt power cycle [ 423.183104][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.225956][ T5845] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 423.235646][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.243896][ T5845] usb 5-1: Product: syz [ 423.248599][ T5845] usb 5-1: Manufacturer: syz [ 423.256588][ T5845] usb 5-1: SerialNumber: syz [ 423.327380][ T5845] usb 5-1: config 0 descriptor?? [ 423.390319][ T5845] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 423.575773][ T5846] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 423.633823][ T5846] usb 2-1: device descriptor read/8, error -71 [ 423.653384][ T5845] usb 5-1: USB disconnect, device number 17 [ 423.903424][ T5846] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 423.948971][ T5846] usb 2-1: device descriptor read/8, error -71 [ 424.056471][ T8202] fuse: Unknown parameter '0x0000000000000004' [ 424.083232][ T5846] usb usb2-port1: unable to enumerate USB device [ 424.298564][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.720'. [ 424.327349][ T8209] 9pnet_fd: Insufficient options for proto=fd [ 424.343068][ T8206] warning: `syz.3.720' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 424.656174][ T5846] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 425.055843][ T5846] usb 4-1: Using ep0 maxpacket: 8 [ 425.072411][ T5846] usb 4-1: config 5 has an invalid interface number: 197 but max is 1 [ 425.081160][ T5846] usb 4-1: config 5 has an invalid interface number: 174 but max is 1 [ 425.089980][ T5846] usb 4-1: config 5 has no interface number 0 [ 425.099582][ T5846] usb 4-1: config 5 has no interface number 1 [ 425.107592][ T5846] usb 4-1: config 5 interface 197 has no altsetting 0 [ 425.114712][ T5846] usb 4-1: config 5 interface 174 has no altsetting 0 [ 425.135812][ T5845] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 425.208812][ T5846] usb 4-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=e5.59 [ 425.218882][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.227416][ T5846] usb 4-1: Product: syz [ 425.231846][ T5846] usb 4-1: Manufacturer: syz [ 425.236876][ T5846] usb 4-1: SerialNumber: syz [ 425.340803][ T5845] usb 5-1: Using ep0 maxpacket: 8 [ 425.436592][ T5845] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 425.446329][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.454724][ T5845] usb 5-1: Product: syz [ 425.460209][ T5845] usb 5-1: Manufacturer: syz [ 425.465036][ T5845] usb 5-1: SerialNumber: syz [ 425.540824][ T5845] usb 5-1: config 0 descriptor?? [ 425.584591][ T5846] usbhid 4-1:5.174: couldn't find an input interrupt endpoint [ 425.717562][ T8218] FAULT_INJECTION: forcing a failure. [ 425.717562][ T8218] name failslab, interval 1, probability 0, space 0, times 0 [ 425.731491][ T8218] CPU: 1 UID: 0 PID: 8218 Comm: syz.1.724 Not tainted syzkaller #0 PREEMPT(none) [ 425.731646][ T8218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 425.731736][ T8218] Call Trace: [ 425.731793][ T8218] [ 425.731847][ T8218] __dump_stack+0x26/0x30 [ 425.732034][ T8218] dump_stack_lvl+0x1df/0x270 [ 425.732218][ T8218] dump_stack+0x1e/0x25 [ 425.732379][ T8218] should_fail_ex+0x7dc/0x8a0 [ 425.732569][ T8218] should_failslab+0x15b/0x200 [ 425.732757][ T8218] __kmalloc_cache_noprof+0xc8/0x16b0 [ 425.732947][ T8218] ? ovl_init_fs_context+0x189/0x940 [ 425.733107][ T8218] ? kmsan_get_metadata+0xfb/0x160 [ 425.733281][ T8218] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 425.733478][ T8218] ovl_init_fs_context+0x189/0x940 [ 425.733649][ T8218] ? __pfx_ovl_init_fs_context+0x10/0x10 [ 425.733798][ T8218] alloc_fs_context+0xaee/0xda0 [ 425.734002][ T8218] fs_context_for_mount+0x3b/0x50 [ 425.734179][ T8218] do_new_mount+0x270/0x14b0 [ 425.734340][ T8218] ? apparmor_capable+0x32d/0x410 [ 425.734532][ T8218] ? kmsan_get_metadata+0xfb/0x160 [ 425.734738][ T8218] path_mount+0x6db/0x1ea0 [ 425.734912][ T8218] ? user_path_at+0x32d/0x3d0 [ 425.735077][ T8218] __se_sys_mount+0x6eb/0x7d0 [ 425.735258][ T8218] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 425.735439][ T8218] __x64_sys_mount+0xe4/0x150 [ 425.735633][ T8218] x64_sys_call+0x3604/0x3e30 [ 425.735825][ T8218] do_syscall_64+0xd9/0x210 [ 425.735972][ T8218] ? irqentry_exit+0x16/0x60 [ 425.736167][ T8218] ? clear_bhb_loop+0x40/0x90 [ 425.736333][ T8218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.736498][ T8218] RIP: 0033:0x7f9820b8eec9 [ 425.736611][ T8218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.736748][ T8218] RSP: 002b:00007f9821a22038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 425.736890][ T8218] RAX: ffffffffffffffda RBX: 00007f9820de5fa0 RCX: 00007f9820b8eec9 [ 425.736997][ T8218] RDX: 0000200000000b80 RSI: 0000200000000200 RDI: 0000000000000000 [ 425.737098][ T8218] RBP: 00007f9821a22090 R08: 0000200000000240 R09: 0000000000000000 [ 425.737197][ T8218] R10: 0000000000200008 R11: 0000000000000246 R12: 0000000000000002 [ 425.737288][ T8218] R13: 00007f9820de6038 R14: 00007f9820de5fa0 R15: 00007ffff9e4b258 [ 425.737427][ T8218] [ 426.563292][ T5846] usb 4-1: USB disconnect, device number 15 [ 428.489740][ T8224] loop3: detected capacity change from 0 to 32768 [ 428.615579][ T8224] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 428.624015][ T8224] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 428.769189][ T8224] gfs2: fsid=syz:syz.s: fatal: invalid metadata block - bh = 256 (type: exp=5, found=8), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499 [ 428.789997][ T8224] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 428.797847][ T8224] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 428.806977][ T8224] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 428.814912][ T8224] gfs2: fsid=syz:syz.s: File system withdrawn [ 428.821366][ T8224] CPU: 1 UID: 0 PID: 8224 Comm: syz.3.727 Not tainted syzkaller #0 PREEMPT(none) [ 428.821532][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 428.821622][ T8224] Call Trace: [ 428.821677][ T8224] [ 428.821731][ T8224] __dump_stack+0x26/0x30 [ 428.821909][ T8224] dump_stack_lvl+0x1df/0x270 [ 428.822097][ T8224] dump_stack+0x1e/0x25 [ 428.822257][ T8224] gfs2_withdraw+0x1ec1/0x2020 [ 428.822470][ T8224] gfs2_metatype_check_ii+0x113/0x140 [ 428.822649][ T8224] gfs2_meta_buffer+0x4b3/0x590 [ 428.822872][ T8224] __gfs2_iomap_get+0xf19/0x2210 [ 428.823089][ T8224] gfs2_block_map+0x281/0xce0 [ 428.823278][ T8224] ? kmsan_get_metadata+0xfb/0x160 [ 428.823480][ T8224] gfs2_write_alloc_required+0x4fc/0x6d0 [ 428.823724][ T8224] gfs2_jdesc_check+0x33b/0x440 [ 428.823931][ T8224] check_journal_clean+0x1b6/0x4c0 [ 428.824090][ T8224] ? init_journal+0x332e/0x3a30 [ 428.824245][ T8224] ? kmsan_get_metadata+0xfb/0x160 [ 428.824445][ T8224] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 428.824645][ T8224] init_journal+0x332e/0x3a30 [ 428.824852][ T8224] ? init_inodes+0x124/0x510 [ 428.825037][ T8224] ? init_inodes+0x124/0x510 [ 428.825183][ T8224] ? kmsan_get_metadata+0xfb/0x160 [ 428.825354][ T8224] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 428.825541][ T8224] init_inodes+0x124/0x510 [ 428.825719][ T8224] gfs2_fill_super+0x384d/0x3f50 [ 428.825879][ T8224] ? init_locking+0xed/0x500 [ 428.826069][ T8224] get_tree_bdev_flags+0x6e3/0x920 [ 428.826251][ T8224] ? __pfx_gfs2_fill_super+0x10/0x10 [ 428.826408][ T8224] ? __pfx_gfs2_fill_super+0x10/0x10 [ 428.826564][ T8224] ? __pfx_gfs2_get_tree+0x10/0x10 [ 428.826711][ T8224] get_tree_bdev+0x38/0x50 [ 428.826879][ T8224] gfs2_get_tree+0x57/0x350 [ 428.827030][ T8224] ? __pfx_gfs2_get_tree+0x10/0x10 [ 428.827183][ T8224] vfs_get_tree+0xb0/0x5c0 [ 428.827350][ T8224] ? mount_capable+0x99/0x100 [ 428.827508][ T8224] do_new_mount+0x733/0x14b0 [ 428.827666][ T8224] ? apparmor_capable+0x32d/0x410 [ 428.827842][ T8224] ? kmsan_get_metadata+0xfb/0x160 [ 428.828047][ T8224] path_mount+0x6db/0x1ea0 [ 428.828224][ T8224] ? user_path_at+0x32d/0x3d0 [ 428.828387][ T8224] __se_sys_mount+0x6eb/0x7d0 [ 428.828566][ T8224] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 428.828755][ T8224] __x64_sys_mount+0xe4/0x150 [ 428.828944][ T8224] x64_sys_call+0x3604/0x3e30 [ 428.829160][ T8224] do_syscall_64+0xd9/0x210 [ 428.829304][ T8224] ? irqentry_exit+0x16/0x60 [ 428.829501][ T8224] ? clear_bhb_loop+0x40/0x90 [ 428.829665][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.829821][ T8224] RIP: 0033:0x7fa545d9066a [ 428.829935][ T8224] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.830070][ T8224] RSP: 002b:00007fa543fede68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 428.830212][ T8224] RAX: ffffffffffffffda RBX: 00007fa543fedef0 RCX: 00007fa545d9066a [ 428.830314][ T8224] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007fa543fedeb0 [ 428.830418][ T8224] RBP: 0000200000000100 R08: 00007fa543fedef0 R09: 0000000000004004 [ 428.830525][ T8224] R10: 0000000000004004 R11: 0000000000000246 R12: 0000200000012500 [ 428.830621][ T8224] R13: 00007fa543fedeb0 R14: 00000000000125bb R15: 0000200000000600 [ 428.830757][ T8224] [ 429.018828][ T5845] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 429.025930][ T8224] gfs2: fsid=syz:syz.s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 429.179419][ T5845] gspca_sunplus: reg_w_riv err -71 [ 429.180811][ T8224] gfs2: fsid=syz:syz.s: H: s:SH f:eEcH e:0 p:8224 [syz.3.727] init_journal+0x332e/0x3a30 [ 429.186679][ T5845] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 429.202046][ T8224] gfs2: fsid=syz:syz.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 429.221222][ T8224] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 429.445854][ T5841] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 429.449448][ T5845] usb 5-1: USB disconnect, device number 18 [ 429.461613][ T5837] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 429.595804][ T5837] usb 1-1: device descriptor read/64, error -71 [ 429.625653][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 429.665153][ T5841] usb 2-1: config 129 has an invalid interface number: 96 but max is 2 [ 429.674187][ T5841] usb 2-1: config 129 has an invalid interface number: 107 but max is 2 [ 429.683957][ T5841] usb 2-1: config 129 has an invalid interface number: 165 but max is 2 [ 429.693451][ T5841] usb 2-1: config 129 contains an unexpected descriptor of type 0x2, skipping [ 429.707994][ T5841] usb 2-1: config 129 has an invalid descriptor of length 121, skipping remainder of the config [ 429.720673][ T5841] usb 2-1: config 129 has no interface number 0 [ 429.727692][ T5841] usb 2-1: config 129 has no interface number 1 [ 429.734362][ T5841] usb 2-1: config 129 has no interface number 2 [ 429.741789][ T5841] usb 2-1: config 129 interface 96 altsetting 143 has an invalid descriptor for endpoint zero, skipping [ 429.753470][ T5841] usb 2-1: config 129 interface 96 altsetting 143 bulk endpoint 0x1 has invalid maxpacket 4 [ 429.764029][ T5841] usb 2-1: config 129 interface 165 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 429.777772][ T5841] usb 2-1: config 129 interface 96 has no altsetting 0 [ 429.779781][ T8237] fuse: Unknown parameter '0x0000000000000004' [ 429.784842][ T5841] usb 2-1: config 129 interface 107 has no altsetting 0 [ 429.784974][ T5841] usb 2-1: config 129 interface 165 has no altsetting 0 [ 429.848758][ T8238] 9pnet_fd: Insufficient options for proto=fd [ 429.998439][ T8239] 9pnet_fd: Insufficient options for proto=fd [ 430.025799][ T5837] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 430.184785][ T5841] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=d1.f5 [ 430.194409][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.203401][ T5841] usb 2-1: Product: syz [ 430.207920][ T5841] usb 2-1: Manufacturer: syz [ 430.216581][ T5841] usb 2-1: SerialNumber: syz [ 430.298265][ T5837] usb 1-1: device descriptor read/64, error -71 [ 430.336090][ T8230] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 430.413828][ T5837] usb usb1-port1: attempt power cycle [ 430.805735][ T5837] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 430.912445][ T5837] usb 1-1: device descriptor read/8, error -71 [ 431.008526][ T5841] usb 2-1: USB disconnect, device number 20 [ 431.149228][ T8247] loop3: detected capacity change from 0 to 2048 [ 431.217597][ T5837] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 431.304423][ T5837] usb 1-1: device descriptor read/8, error -71 [ 431.393585][ T8247] loop3: detected capacity change from 0 to 256 [ 431.426591][ T5837] usb usb1-port1: unable to enumerate USB device [ 431.780141][ T8253] FAULT_INJECTION: forcing a failure. [ 431.780141][ T8253] name failslab, interval 1, probability 0, space 0, times 0 [ 431.793730][ T8253] CPU: 1 UID: 0 PID: 8253 Comm: syz.4.738 Not tainted syzkaller #0 PREEMPT(none) [ 431.793881][ T8253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 431.793989][ T8253] Call Trace: [ 431.794042][ T8253] [ 431.794096][ T8253] __dump_stack+0x26/0x30 [ 431.794273][ T8253] dump_stack_lvl+0x1df/0x270 [ 431.794458][ T8253] dump_stack+0x1e/0x25 [ 431.794614][ T8253] should_fail_ex+0x7dc/0x8a0 [ 431.794796][ T8253] should_failslab+0x15b/0x200 [ 431.794988][ T8253] __kmalloc_node_track_caller_noprof+0x18b/0x1ba0 [ 431.795190][ T8253] ? vfs_parse_monolithic_sep+0x3c4/0x6a0 [ 431.795373][ T8253] ? stack_depot_save_flags+0x35/0x7b0 [ 431.795528][ T8253] ? kmsan_get_metadata+0xfb/0x160 [ 431.795699][ T8253] ? kmsan_get_metadata+0xfb/0x160 [ 431.795869][ T8253] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 431.796046][ T8253] kmemdup_nul+0x58/0x1b0 [ 431.796206][ T8253] vfs_parse_monolithic_sep+0x3c4/0x6a0 [ 431.796383][ T8253] ? __pfx_ovl_next_opt+0x10/0x10 [ 431.796560][ T8253] ? __pfx_ovl_parse_monolithic+0x10/0x10 [ 431.796723][ T8253] ovl_parse_monolithic+0x3d/0x50 [ 431.796882][ T8253] parse_monolithic_mount_data+0x68/0x90 [ 431.797133][ T8253] do_new_mount+0x58b/0x14b0 [ 431.797291][ T8253] ? apparmor_capable+0x32d/0x410 [ 431.797474][ T8253] ? kmsan_get_metadata+0xfb/0x160 [ 431.797678][ T8253] path_mount+0x6db/0x1ea0 [ 431.797851][ T8253] ? user_path_at+0x32d/0x3d0 [ 431.798025][ T8253] __se_sys_mount+0x6eb/0x7d0 [ 431.798201][ T8253] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 431.798385][ T8253] __x64_sys_mount+0xe4/0x150 [ 431.798577][ T8253] x64_sys_call+0x3604/0x3e30 [ 431.798768][ T8253] do_syscall_64+0xd9/0x210 [ 431.798913][ T8253] ? irqentry_exit+0x16/0x60 [ 431.799121][ T8253] ? clear_bhb_loop+0x40/0x90 [ 431.799279][ T8253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.799437][ T8253] RIP: 0033:0x7f8a4ef8eec9 [ 431.799547][ T8253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.799679][ T8253] RSP: 002b:00007f8a4fe95038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 431.799818][ T8253] RAX: ffffffffffffffda RBX: 00007f8a4f1e5fa0 RCX: 00007f8a4ef8eec9 [ 431.799924][ T8253] RDX: 0000200000000b80 RSI: 0000200000000200 RDI: 0000000000000000 [ 431.800031][ T8253] RBP: 00007f8a4fe95090 R08: 0000200000000240 R09: 0000000000000000 [ 431.800130][ T8253] R10: 0000000000200008 R11: 0000000000000246 R12: 0000000000000002 [ 431.800219][ T8253] R13: 00007f8a4f1e6038 R14: 00007f8a4f1e5fa0 R15: 00007ffe4ba66348 [ 431.800358][ T8253] [ 433.377789][ T8247] FAT-fs (loop3): Directory bread(block 64) failed [ 433.384824][ T8247] FAT-fs (loop3): Directory bread(block 65) failed [ 433.395940][ T8247] FAT-fs (loop3): Directory bread(block 66) failed [ 433.402829][ T8247] FAT-fs (loop3): Directory bread(block 67) failed [ 433.411053][ T8247] FAT-fs (loop3): Directory bread(block 68) failed [ 433.418047][ T8247] FAT-fs (loop3): Directory bread(block 69) failed [ 433.424986][ T8247] FAT-fs (loop3): Directory bread(block 70) failed [ 433.431937][ T8247] FAT-fs (loop3): Directory bread(block 71) failed [ 433.439031][ T8247] FAT-fs (loop3): Directory bread(block 72) failed [ 433.445975][ T8247] FAT-fs (loop3): Directory bread(block 73) failed [ 434.190045][ T8261] netlink: 36 bytes leftover after parsing attributes in process `syz.4.742'. [ 434.437695][ T8263] FAULT_INJECTION: forcing a failure. [ 434.437695][ T8263] name failslab, interval 1, probability 0, space 0, times 0 [ 434.450933][ T8263] CPU: 0 UID: 0 PID: 8263 Comm: syz.0.743 Not tainted syzkaller #0 PREEMPT(none) [ 434.451094][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 434.451180][ T8263] Call Trace: [ 434.451234][ T8263] [ 434.451285][ T8263] __dump_stack+0x26/0x30 [ 434.451460][ T8263] dump_stack_lvl+0x1df/0x270 [ 434.451641][ T8263] dump_stack+0x1e/0x25 [ 434.451799][ T8263] should_fail_ex+0x7dc/0x8a0 [ 434.452018][ T8263] should_failslab+0x15b/0x200 [ 434.452203][ T8263] __kmalloc_noprof+0x18d/0x1b40 [ 434.452382][ T8263] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 434.452562][ T8263] ? tomoyo_path_number_perm+0x1/0x7d0 [ 434.452767][ T8263] ? filter_irq_stacks+0x49/0x190 [ 434.452918][ T8263] ? kmsan_get_metadata+0xfb/0x160 [ 434.453097][ T8263] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 434.453287][ T8263] tomoyo_realpath_from_path+0xeb/0x9f0 [ 434.453462][ T8263] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 434.453646][ T8263] ? __srcu_read_lock+0x5e/0xd0 [ 434.453833][ T8263] tomoyo_path_number_perm+0x1d0/0x7d0 [ 434.454045][ T8263] ? stack_depot_save_flags+0x35/0x7b0 [ 434.454215][ T8263] ? kmsan_get_metadata+0xfb/0x160 [ 434.454384][ T8263] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 434.454604][ T8263] tomoyo_file_ioctl+0x3d/0x50 [ 434.454868][ T8263] security_file_ioctl+0x141/0x590 [ 434.455082][ T8263] __se_sys_ioctl+0xbb/0x400 [ 434.455243][ T8263] __x64_sys_ioctl+0x97/0xe0 [ 434.455400][ T8263] x64_sys_call+0x1cbc/0x3e30 [ 434.455592][ T8263] do_syscall_64+0xd9/0x210 [ 434.455745][ T8263] ? irqentry_exit+0x16/0x60 [ 434.455950][ T8263] ? clear_bhb_loop+0x40/0x90 [ 434.456113][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.456273][ T8263] RIP: 0033:0x7fbaf2d8eec9 [ 434.456388][ T8263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.456519][ T8263] RSP: 002b:00007fbaf3cf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.456661][ T8263] RAX: ffffffffffffffda RBX: 00007fbaf2fe5fa0 RCX: 00007fbaf2d8eec9 [ 434.456771][ T8263] RDX: 0000200000000140 RSI: 00000000800c6613 RDI: 0000000000000006 [ 434.456879][ T8263] RBP: 00007fbaf3cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 434.456976][ T8263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.457062][ T8263] R13: 00007fbaf2fe6038 R14: 00007fbaf2fe5fa0 R15: 00007ffcf9bd4618 [ 434.457205][ T8263] [ 434.608302][ T8264] overlayfs: missing 'lowerdir' [ 434.616410][ T8263] ERROR: Out of memory at tomoyo_realpath_from_path. [ 434.916648][ T8257] geneve0: entered allmulticast mode [ 435.127197][ T8270] fuse: Unknown parameter '0x0000000000000004' [ 435.220410][ T8270] 9pnet_fd: Insufficient options for proto=fd [ 435.839991][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.749'. [ 436.976823][ T5841] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 437.405566][ T8289] loop3: detected capacity change from 0 to 32768 [ 437.434968][ T8289] [ 437.434968][ T8289] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 437.434968][ T8289] [ 437.986435][ T6592] [ 437.986435][ T6592] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 437.986435][ T6592] [ 438.000960][ T6592] [ 438.000960][ T6592] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 438.000960][ T6592] [ 438.012704][ T6592] [ 438.012704][ T6592] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 438.012704][ T6592] [ 438.118832][ T112] [ 438.118832][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 438.118832][ T112] [ 438.280846][ T5786] [ 438.280846][ T5786] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 438.280846][ T5786] [ 438.374136][ T5786] [ 438.374136][ T5786] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 438.374136][ T5786] [ 438.730963][ T5841] usb 1-1: Using ep0 maxpacket: 8 [ 438.745927][ T5841] usb 1-1: unable to get BOS descriptor or descriptor too short [ 438.760325][ T5841] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 438.769122][ T5841] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 438.778284][ T5841] usb 1-1: config 4 has no interface number 0 [ 439.305792][ T5841] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 439.315145][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.323768][ T5841] usb 1-1: Product: syz [ 439.331491][ T5841] usb 1-1: Manufacturer: syz [ 439.338656][ T5841] usb 1-1: SerialNumber: syz [ 439.578104][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 440.128637][ T8306] fuse: Unknown parameter '0x0000000000000004' [ 440.594759][ T8306] 9pnet_fd: Insufficient options for proto=fd [ 440.670634][ T5841] uvcvideo 1-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 440.679009][ T5841] uvcvideo 1-1:4.147: No valid video chain found. [ 440.830282][ T5841] usb 1-1: USB disconnect, device number 27 [ 441.316936][ T8310] tipc: Started in network mode [ 441.322359][ T8310] tipc: Node identity ac14142f, cluster identity 4711 [ 441.330663][ T8310] tipc: New replicast peer: 0.0.0.0 [ 441.337742][ T8310] tipc: Enabled bearer , priority 10 [ 441.504331][ T8315] tipc: New replicast peer: 255.255.255.255 [ 442.469429][ T5837] tipc: Node number set to 2886997039 [ 442.626779][ T5837] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 442.796110][ T5837] usb 1-1: device descriptor read/64, error -71 [ 443.036037][ T5837] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 443.198985][ T5837] usb 1-1: device descriptor read/64, error -71 [ 443.255898][ T5845] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 443.325007][ T5837] usb usb1-port1: attempt power cycle [ 443.444984][ T5845] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 443.458215][ T5845] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 443.469419][ T5845] usb 5-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 443.469534][ T5841] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 443.469755][ T5841] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 443.479075][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.503863][ T5841] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 443.511811][ T5841] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 443.519639][ T5841] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 443.530923][ T5841] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 443.540145][ T5841] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 443.548229][ T5841] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 443.556260][ T5841] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 443.563953][ T5841] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 443.604467][ T8331] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 443.659704][ T5845] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 443.696641][ T5837] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 443.737735][ T5841] hid-generic 00A0:0006:0003.0004: hidraw0: HID v0.05 Device [syz1] on syz0 [ 443.767517][ T5846] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 443.771458][ T5837] usb 1-1: device descriptor read/8, error -71 [ 443.887354][ T5845] usb 5-1: USB disconnect, device number 19 [ 443.992593][ T5846] usb 4-1: config 0 has no interfaces? [ 443.998701][ T5846] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 444.008430][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.015799][ T5837] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 444.047531][ T8340] fuse: Unknown parameter '0x0000000000000004' [ 444.075110][ T6215] udevd[6215]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.117462][ T5837] usb 1-1: device descriptor read/8, error -71 [ 444.133788][ T5846] usb 4-1: config 0 descriptor?? [ 444.227008][ T8340] 9pnet_fd: Insufficient options for proto=fd [ 444.255872][ T5837] usb usb1-port1: unable to enumerate USB device [ 444.417072][ T8336] loop3: detected capacity change from 0 to 128 [ 444.511673][ T5837] usb 4-1: USB disconnect, device number 16 [ 445.844464][ T8360] FAULT_INJECTION: forcing a failure. [ 445.844464][ T8360] name failslab, interval 1, probability 0, space 0, times 0 [ 445.857916][ T8360] CPU: 1 UID: 0 PID: 8360 Comm: syz.4.780 Not tainted syzkaller #0 PREEMPT(none) [ 445.858071][ T8360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 445.858166][ T8360] Call Trace: [ 445.858217][ T8360] [ 445.858267][ T8360] __dump_stack+0x26/0x30 [ 445.858438][ T8360] dump_stack_lvl+0x1df/0x270 [ 445.858621][ T8360] dump_stack+0x1e/0x25 [ 445.858781][ T8360] should_fail_ex+0x7dc/0x8a0 [ 445.858963][ T8360] should_failslab+0x15b/0x200 [ 445.859165][ T8360] __kmalloc_noprof+0x18d/0x1b40 [ 445.859343][ T8360] ? bpf_prog_test_run_skb+0x427/0x26a0 [ 445.859534][ T8360] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 445.859705][ T8360] ? kmsan_get_metadata+0xfb/0x160 [ 445.859874][ T8360] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 445.860063][ T8360] bpf_prog_test_run_skb+0x427/0x26a0 [ 445.860296][ T8360] ? kmsan_get_metadata+0xfb/0x160 [ 445.860482][ T8360] ? kmsan_get_metadata+0xfb/0x160 [ 445.860660][ T8360] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 445.860854][ T8360] bpf_prog_test_run+0x5c2/0xa40 [ 445.861055][ T8360] __sys_bpf+0x873/0xeb0 [ 445.861271][ T8360] __x64_sys_bpf+0xa4/0xf0 [ 445.861427][ T8360] x64_sys_call+0x3550/0x3e30 [ 445.861619][ T8360] do_syscall_64+0xd9/0x210 [ 445.861763][ T8360] ? irqentry_exit+0x16/0x60 [ 445.861955][ T8360] ? clear_bhb_loop+0x40/0x90 [ 445.862118][ T8360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.862285][ T8360] RIP: 0033:0x7f8a4ef8eec9 [ 445.862398][ T8360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.862529][ T8360] RSP: 002b:00007f8a4fe95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 445.862664][ T8360] RAX: ffffffffffffffda RBX: 00007f8a4f1e5fa0 RCX: 00007f8a4ef8eec9 [ 445.862768][ T8360] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 445.862860][ T8360] RBP: 00007f8a4fe95090 R08: 0000000000000000 R09: 0000000000000000 [ 445.862955][ T8360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.863045][ T8360] R13: 00007f8a4f1e6038 R14: 00007f8a4f1e5fa0 R15: 00007ffe4ba66348 [ 445.863192][ T8360] [ 446.276066][ T8362] overlayfs: upper fs does not support tmpfile. [ 446.323092][ T8365] fuse: Unknown parameter '0x0000000000000004' [ 446.404480][ T8362] overlayfs: upper fs does not support tmpfile. [ 446.474104][ T8365] 9pnet_fd: Insufficient options for proto=fd [ 446.588399][ T8369] overlayfs: missing 'lowerdir' [ 446.856626][ T8369] netlink: 'syz.0.785': attribute type 1 has an invalid length. [ 446.986775][ T8369] bond2: entered promiscuous mode [ 446.993528][ T8369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.171192][ T8378] 8021q: adding VLAN 0 to HW filter on device bond3 [ 447.188206][ T8378] bond2: (slave bond3): making interface the new active one [ 447.195939][ T8378] bond3: entered promiscuous mode [ 447.205127][ T8378] bond2: (slave bond3): Enslaving as an active interface with an up link [ 447.402707][ T8376] loop3: detected capacity change from 0 to 2364 [ 447.568095][ T8376] iso9660: Unknown parameter 'map 1 [ 452.292296][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 452.319859][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 452.399804][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 452.412032][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 452.907046][ T6584] team_slave_1 (unregistering): left promiscuous mode [ 453.001837][ T6584] team0 (unregistering): Port device team_slave_1 removed [ 453.026770][ T6584] team_slave_0 (unregistering): left promiscuous mode [ 453.040090][ T6584] team0 (unregistering): Port device team_slave_0 removed [ 453.337266][ T8423] loop3: detected capacity change from 0 to 2048 [ 453.454561][ T8423] loop3: p1 < > p3 [ 453.510892][ T8423] loop3: p3 start 8388352 is beyond EOD, truncated [ 454.309998][ T8444] loop3: detected capacity change from 0 to 128 [ 454.378563][ T8444] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 454.460751][ T5788] Bluetooth: hci4: command tx timeout [ 454.571576][ T30] audit: type=1804 audit(1759508251.931:126): pid=8449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.813" name="/newroot/syzcgroup/unified/syz3/bus" dev="loop3" ino=115 res=1 errno=0 [ 454.674437][ T8449] FAULT_INJECTION: forcing a failure. [ 454.674437][ T8449] name failslab, interval 1, probability 0, space 0, times 0 [ 454.692003][ T8449] CPU: 1 UID: 0 PID: 8449 Comm: syz.3.813 Not tainted syzkaller #0 PREEMPT(none) [ 454.692161][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 454.692250][ T8449] Call Trace: [ 454.692301][ T8449] [ 454.692385][ T8449] __dump_stack+0x26/0x30 [ 454.692567][ T8449] dump_stack_lvl+0x1df/0x270 [ 454.692752][ T8449] dump_stack+0x1e/0x25 [ 454.692919][ T8449] should_fail_ex+0x7dc/0x8a0 [ 454.693210][ T8449] should_failslab+0x15b/0x200 [ 454.693407][ T8449] __kmalloc_noprof+0x18d/0x1b40 [ 454.693593][ T8449] ? sk_prot_alloc+0x140/0x440 [ 454.693781][ T8449] ? kmsan_get_metadata+0xfb/0x160 [ 454.693961][ T8449] ? kmsan_get_metadata+0xfb/0x160 [ 454.694142][ T8449] ? kmsan_get_metadata+0xfb/0x160 [ 454.694329][ T8449] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 454.694527][ T8449] sk_prot_alloc+0x140/0x440 [ 454.694736][ T8449] sk_alloc+0x57/0x8a0 [ 454.694942][ T8449] bpf_prog_test_run_skb+0x78f/0x26a0 [ 454.695152][ T8449] ? kmsan_get_metadata+0xfb/0x160 [ 454.695349][ T8449] ? kmsan_get_metadata+0xfb/0x160 [ 454.695525][ T8449] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 454.695721][ T8449] bpf_prog_test_run+0x5c2/0xa40 [ 454.695920][ T8449] __sys_bpf+0x873/0xeb0 [ 454.696128][ T8449] __x64_sys_bpf+0xa4/0xf0 [ 454.696275][ T8449] x64_sys_call+0x3550/0x3e30 [ 454.696483][ T8449] do_syscall_64+0xd9/0x210 [ 454.696628][ T8449] ? irqentry_exit+0x16/0x60 [ 454.696819][ T8449] ? clear_bhb_loop+0x40/0x90 [ 454.696985][ T8449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.697141][ T8449] RIP: 0033:0x7fa545d8eec9 [ 454.697255][ T8449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.697394][ T8449] RSP: 002b:00007fa543fcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 454.697536][ T8449] RAX: ffffffffffffffda RBX: 00007fa545fe6090 RCX: 00007fa545d8eec9 [ 454.697642][ T8449] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 454.697738][ T8449] RBP: 00007fa543fcd090 R08: 0000000000000000 R09: 0000000000000000 [ 454.697830][ T8449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.697918][ T8449] R13: 00007fa545fe6128 R14: 00007fa545fe6090 R15: 00007ffda46b68e8 [ 454.698056][ T8449] [ 455.646565][ T8415] chnl_net:caif_netlink_parms(): no params data found [ 456.536695][ T5788] Bluetooth: hci4: command tx timeout [ 457.896476][ T5846] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 458.117972][ T5846] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 458.126749][ T5846] usb 2-1: config 0 has no interface number 0 [ 458.198876][ T5846] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 458.208710][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.217371][ T5846] usb 2-1: Product: syz [ 458.221868][ T5846] usb 2-1: Manufacturer: syz [ 458.227491][ T5846] usb 2-1: SerialNumber: syz [ 458.288659][ T8415] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.298227][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.307058][ T8415] bridge_slave_0: entered allmulticast mode [ 458.318736][ T8415] bridge_slave_0: entered promiscuous mode [ 458.367746][ T5846] usb 2-1: config 0 descriptor?? [ 458.448247][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.456606][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.464579][ T8415] bridge_slave_1: entered allmulticast mode [ 458.475091][ T8415] bridge_slave_1: entered promiscuous mode [ 458.587501][ T5846] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 458.615737][ T5788] Bluetooth: hci4: command tx timeout [ 458.639968][ T5846] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 458.642155][ T8501] netlink: 'syz.3.827': attribute type 10 has an invalid length. [ 458.652366][ T5846] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 458.667419][ T5846] usb 2-1: media controller created [ 458.726900][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.795469][ T8501] team0: Port device virt_wifi0 added [ 459.028542][ T8415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.151818][ T8415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.664187][ T8415] team0: Port device team_slave_0 added [ 459.742702][ T8415] team0: Port device team_slave_1 added [ 460.072298][ T5846] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 460.134658][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.142684][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.169458][ T8415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.351175][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.358556][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.385077][ T8415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.504967][ T5846] usb 2-1: USB disconnect, device number 21 [ 460.696442][ T5788] Bluetooth: hci4: command tx timeout [ 461.941107][ T8415] hsr_slave_0: entered promiscuous mode [ 461.951778][ T8415] hsr_slave_1: entered promiscuous mode [ 461.965928][ T8415] debugfs: 'hsr0' already exists in 'hsr' [ 461.971884][ T8415] Cannot create hsr debugfs directory [ 462.634389][ T8554] netlink: 'syz.1.841': attribute type 17 has an invalid length. [ 462.642755][ T8554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.841'. [ 463.303899][ T8415] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 463.394186][ T8415] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 463.473068][ T8415] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 463.547618][ T8415] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 464.120212][ T8583] FAULT_INJECTION: forcing a failure. [ 464.120212][ T8583] name failslab, interval 1, probability 0, space 0, times 0 [ 464.133461][ T8583] CPU: 0 UID: 0 PID: 8583 Comm: syz.0.850 Not tainted syzkaller #0 PREEMPT(none) [ 464.133620][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 464.133709][ T8583] Call Trace: [ 464.133762][ T8583] [ 464.133816][ T8583] __dump_stack+0x26/0x30 [ 464.133992][ T8583] dump_stack_lvl+0x1df/0x270 [ 464.134178][ T8583] dump_stack+0x1e/0x25 [ 464.134335][ T8583] should_fail_ex+0x7dc/0x8a0 [ 464.134515][ T8583] should_failslab+0x15b/0x200 [ 464.134706][ T8583] kmem_cache_alloc_noprof+0xed/0x1640 [ 464.134877][ T8583] ? ep_insert+0x751/0x28f0 [ 464.135023][ T8583] ? kmsan_get_metadata+0xfb/0x160 [ 464.135197][ T8583] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 464.135379][ T8583] ep_insert+0x751/0x28f0 [ 464.135520][ T8583] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 464.135717][ T8583] ? __rcu_read_unlock+0x6d/0xd0 [ 464.135878][ T8583] ? __fget_files+0x3b4/0x4a0 [ 464.136100][ T8583] do_epoll_ctl+0x178f/0x1930 [ 464.136284][ T8583] __x64_sys_epoll_ctl+0x1bc/0x250 [ 464.136460][ T8583] x64_sys_call+0x846/0x3e30 [ 464.136640][ T8583] do_syscall_64+0xd9/0x210 [ 464.136774][ T8583] ? irqentry_exit+0x16/0x60 [ 464.136958][ T8583] ? clear_bhb_loop+0x40/0x90 [ 464.137119][ T8583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.137270][ T8583] RIP: 0033:0x7fbaf2d8eec9 [ 464.137383][ T8583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.137509][ T8583] RSP: 002b:00007fbaf3cf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 464.137655][ T8583] RAX: ffffffffffffffda RBX: 00007fbaf2fe5fa0 RCX: 00007fbaf2d8eec9 [ 464.137762][ T8583] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 464.137848][ T8583] RBP: 00007fbaf3cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 464.137939][ T8583] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 464.138028][ T8583] R13: 00007fbaf2fe6038 R14: 00007fbaf2fe5fa0 R15: 00007ffcf9bd4618 [ 464.138155][ T8583] [ 464.629962][ T8415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.692573][ T8415] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.751273][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.759972][ T6580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.852356][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.860157][ T6580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.152053][ T8415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 465.291446][ T8593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.853'. [ 465.928345][ T8610] FAULT_INJECTION: forcing a failure. [ 465.928345][ T8610] name failslab, interval 1, probability 0, space 0, times 0 [ 465.941665][ T8610] CPU: 1 UID: 0 PID: 8610 Comm: syz.3.857 Not tainted syzkaller #0 PREEMPT(none) [ 465.941810][ T8610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 465.941894][ T8610] Call Trace: [ 465.941943][ T8610] [ 465.941994][ T8610] __dump_stack+0x26/0x30 [ 465.942173][ T8610] dump_stack_lvl+0x1df/0x270 [ 465.942346][ T8610] dump_stack+0x1e/0x25 [ 465.942510][ T8610] should_fail_ex+0x7dc/0x8a0 [ 465.942683][ T8610] should_failslab+0x15b/0x200 [ 465.942873][ T8610] __kmalloc_noprof+0x18d/0x1b40 [ 465.943045][ T8610] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 465.943224][ T8610] ? tomoyo_path_number_perm+0x1/0x7d0 [ 465.943429][ T8610] ? filter_irq_stacks+0x49/0x190 [ 465.943589][ T8610] ? kmsan_get_metadata+0xfb/0x160 [ 465.943760][ T8610] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 465.943952][ T8610] tomoyo_realpath_from_path+0xeb/0x9f0 [ 465.944132][ T8610] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 465.944322][ T8610] ? __srcu_read_lock+0x5e/0xd0 [ 465.944526][ T8610] tomoyo_path_number_perm+0x1d0/0x7d0 [ 465.944740][ T8610] ? stack_depot_save_flags+0x35/0x7b0 [ 465.944914][ T8610] ? kmsan_get_metadata+0xfb/0x160 [ 465.945079][ T8610] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 465.945300][ T8610] tomoyo_file_ioctl+0x3d/0x50 [ 465.945470][ T8610] security_file_ioctl+0x141/0x590 [ 465.945685][ T8610] __se_sys_ioctl+0xbb/0x400 [ 465.945852][ T8610] __x64_sys_ioctl+0x97/0xe0 [ 465.946003][ T8610] x64_sys_call+0x1cbc/0x3e30 [ 465.946192][ T8610] do_syscall_64+0xd9/0x210 [ 465.946356][ T8610] ? irqentry_exit+0x16/0x60 [ 465.946557][ T8610] ? clear_bhb_loop+0x40/0x90 [ 465.946720][ T8610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.946877][ T8610] RIP: 0033:0x7fa545d8eec9 [ 465.946989][ T8610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.947119][ T8610] RSP: 002b:00007fa543fee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.947257][ T8610] RAX: ffffffffffffffda RBX: 00007fa545fe5fa0 RCX: 00007fa545d8eec9 [ 465.947363][ T8610] RDX: 0000200000000640 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 465.947459][ T8610] RBP: 00007fa543fee090 R08: 0000000000000000 R09: 0000000000000000 [ 465.947562][ T8610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.947652][ T8610] R13: 00007fa545fe6038 R14: 00007fa545fe5fa0 R15: 00007ffda46b68e8 [ 465.947793][ T8610] [ 466.205380][ T8610] ERROR: Out of memory at tomoyo_realpath_from_path. [ 466.719287][ T8614] netlink: 'syz.1.858': attribute type 27 has an invalid length. [ 467.738333][ T8415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.780600][ T8630] netlink: 'syz.2.862': attribute type 8 has an invalid length. [ 468.789120][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 468.814976][ T8630] bond0: entered promiscuous mode [ 468.823763][ T8630] bond_slave_0: entered promiscuous mode [ 468.831994][ T8630] bond_slave_1: entered promiscuous mode [ 469.521593][ T8644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.862'. [ 469.676289][ T8630] bond0: left promiscuous mode [ 469.681630][ T8630] bond_slave_0: left promiscuous mode [ 469.688869][ T8630] bond_slave_1: left promiscuous mode [ 470.146520][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.862'. [ 471.529700][ T8415] veth0_vlan: entered promiscuous mode [ 471.640858][ T8415] veth1_vlan: entered promiscuous mode [ 471.800378][ T5846] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 471.963653][ T8415] veth0_macvtap: entered promiscuous mode [ 471.990762][ T8680] FAULT_INJECTION: forcing a failure. [ 471.990762][ T8680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.007882][ T8680] CPU: 0 UID: 0 PID: 8680 Comm: syz.0.875 Not tainted syzkaller #0 PREEMPT(none) [ 472.008038][ T8680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 472.008126][ T8680] Call Trace: [ 472.008177][ T8680] [ 472.008229][ T8680] __dump_stack+0x26/0x30 [ 472.008420][ T8680] dump_stack_lvl+0x1df/0x270 [ 472.008600][ T8680] dump_stack+0x1e/0x25 [ 472.008760][ T8680] should_fail_ex+0x7dc/0x8a0 [ 472.008938][ T8680] should_fail+0x2a/0x40 [ 472.009084][ T8680] should_fail_usercopy+0x2e/0x40 [ 472.009253][ T8680] _copy_to_user+0x35/0x120 [ 472.009424][ T8680] simple_read_from_buffer+0x1b2/0x340 [ 472.009616][ T8680] proc_fail_nth_read+0x1e0/0x2d0 [ 472.009779][ T8680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.009932][ T8680] vfs_read+0x279/0xf90 [ 472.010086][ T8680] ? stack_depot_save_flags+0x35/0x7b0 [ 472.010238][ T8680] ? kmsan_get_metadata+0xfb/0x160 [ 472.010419][ T8680] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 472.010594][ T8680] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 472.010776][ T8680] __x64_sys_read+0x1fb/0x4d0 [ 472.010970][ T8680] x64_sys_call+0x2f9c/0x3e30 [ 472.011156][ T8680] do_syscall_64+0xd9/0x210 [ 472.011301][ T8680] ? irqentry_exit+0x16/0x60 [ 472.011483][ T8680] ? clear_bhb_loop+0x40/0x90 [ 472.011642][ T8680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.011795][ T8680] RIP: 0033:0x7fbaf2d8d8dc [ 472.011903][ T8680] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 472.012026][ T8680] RSP: 002b:00007fbaf3cf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 472.012148][ T8680] RAX: ffffffffffffffda RBX: 00007fbaf2fe5fa0 RCX: 00007fbaf2d8d8dc [ 472.012249][ T8680] RDX: 000000000000000f RSI: 00007fbaf3cf70a0 RDI: 0000000000000005 [ 472.012347][ T8680] RBP: 00007fbaf3cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 472.012438][ T8680] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 472.012532][ T8680] R13: 00007fbaf2fe6038 R14: 00007fbaf2fe5fa0 R15: 00007ffcf9bd4618 [ 472.012670][ T8680] [ 472.080163][ T8415] veth1_macvtap: entered promiscuous mode [ 472.084340][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.236533][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.346238][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.360980][ T5846] usb 2-1: config 255 has too many interfaces: 236, using maximum allowed: 32 [ 472.371012][ T5846] usb 2-1: config 255 has an invalid interface descriptor of length 8, skipping [ 472.381325][ T5846] usb 2-1: config 255 descriptor has 1 excess byte, ignoring [ 472.389157][ T5846] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 236 [ 472.452474][ T5846] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1f.24 [ 472.462540][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.471134][ T5846] usb 2-1: Product: syz [ 472.475619][ T5846] usb 2-1: Manufacturer: syz [ 472.480442][ T5846] usb 2-1: SerialNumber: syz [ 472.495097][ T5846] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 472.507866][ T5846] usb 2-1: no configuration chosen from 1 choice [ 472.558953][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.678058][ T6576] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.729165][ T6576] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.768115][ T6580] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.830311][ T6580] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.704505][ T8701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.880'. [ 474.866056][ T5846] usb 2-1: USB disconnect, device number 22 [ 475.827045][ T8736] sctp: [Deprecated]: syz.1.888 (pid 8736) Use of int in max_burst socket option deprecated. [ 475.827045][ T8736] Use struct sctp_assoc_value instead [ 476.065642][ T5841] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 476.314464][ T5841] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.326527][ T5841] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 476.340744][ T5841] usb 1-1: config 0 interface 0 has no altsetting 0 [ 476.347887][ T5841] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 476.357445][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.405057][ T5841] usb 1-1: config 0 descriptor?? [ 478.131123][ T5841] usbhid 1-1:0.0: can't add hid device: -71 [ 478.144561][ T5841] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 478.196534][ T5841] usb 1-1: USB disconnect, device number 32 [ 478.727255][ T5841] kernel write not supported for file /sequencer (pid: 5841 comm: kworker/1:5) [ 479.473318][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 480.357223][ T8779] sctp: [Deprecated]: syz.3.900 (pid 8779) Use of int in max_burst socket option deprecated. [ 480.357223][ T8779] Use struct sctp_assoc_value instead [ 480.568475][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.575674][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 480.822093][ T8789] netlink: 120 bytes leftover after parsing attributes in process `syz.0.902'. [ 481.023707][ T8792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.904'. [ 481.799597][ T6581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.807882][ T6581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.967864][ T6576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.978929][ T6576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.259337][ T8805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.311210][ T5846] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 482.513462][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'. [ 482.547738][ T5846] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 482.559514][ T5846] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 482.564322][ T8812] fuse: Unknown parameter '0x0000000000000004' [ 482.571174][ T5846] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 482.587752][ T5846] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 482.597225][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.663721][ T8801] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 482.691958][ T5846] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 482.753619][ T8812] 9pnet_fd: Insufficient options for proto=fd [ 483.102748][ T5841] usb 4-1: USB disconnect, device number 18 [ 485.324289][ T8825] sctp: [Deprecated]: syz.5.913 (pid 8825) Use of int in max_burst socket option deprecated. [ 485.324289][ T8825] Use struct sctp_assoc_value instead [ 486.416916][ T8834] netlink: 20 bytes leftover after parsing attributes in process `syz.5.916'. [ 488.331301][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 489.978816][ T8877] FAULT_INJECTION: forcing a failure. [ 489.978816][ T8877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.992793][ T8877] CPU: 1 UID: 0 PID: 8877 Comm: syz.0.929 Not tainted syzkaller #0 PREEMPT(none) [ 489.992946][ T8877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 489.993035][ T8877] Call Trace: [ 489.993088][ T8877] [ 489.993141][ T8877] __dump_stack+0x26/0x30 [ 489.993320][ T8877] dump_stack_lvl+0x1df/0x270 [ 489.993500][ T8877] dump_stack+0x1e/0x25 [ 489.993668][ T8877] should_fail_ex+0x7dc/0x8a0 [ 489.993849][ T8877] should_fail+0x2a/0x40 [ 489.993991][ T8877] should_fail_usercopy+0x2e/0x40 [ 489.994159][ T8877] _copy_from_user+0x33/0x100 [ 489.994332][ T8877] ___sys_sendmsg+0x11b/0x3b0 [ 489.994547][ T8877] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 489.994750][ T8877] ? __rcu_read_unlock+0x6d/0xd0 [ 489.994917][ T8877] ? __fget_files+0x3b4/0x4a0 [ 489.995099][ T8877] ? __fget_files+0x3b9/0x4a0 [ 489.995282][ T8877] ? kmsan_get_metadata+0xfb/0x160 [ 489.995449][ T8877] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 489.995631][ T8877] __x64_sys_sendmsg+0x211/0x3e0 [ 489.995838][ T8877] ? fput+0x113/0x160 [ 489.995968][ T8877] ? kmsan_get_metadata+0xfb/0x160 [ 489.996136][ T8877] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 489.996314][ T8877] ? kmsan_get_metadata+0xfb/0x160 [ 489.996508][ T8877] x64_sys_call+0x1dfd/0x3e30 [ 489.996704][ T8877] do_syscall_64+0xd9/0x210 [ 489.996848][ T8877] ? irqentry_exit+0x16/0x60 [ 489.997041][ T8877] ? clear_bhb_loop+0x40/0x90 [ 489.997200][ T8877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.997359][ T8877] RIP: 0033:0x7fbaf2d8eec9 [ 489.997467][ T8877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.997596][ T8877] RSP: 002b:00007fbaf3cf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.997741][ T8877] RAX: ffffffffffffffda RBX: 00007fbaf2fe5fa0 RCX: 00007fbaf2d8eec9 [ 489.997851][ T8877] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 489.997945][ T8877] RBP: 00007fbaf3cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 489.998037][ T8877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.998125][ T8877] R13: 00007fbaf2fe6038 R14: 00007fbaf2fe5fa0 R15: 00007ffcf9bd4618 [ 489.998264][ T8877] [ 490.798920][ T8885] loop5: detected capacity change from 0 to 512 [ 490.900689][ T8885] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 490.912442][ T8885] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 490.960178][ T8885] EXT4-fs (loop5): 1 truncate cleaned up [ 490.968425][ T8885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.078358][ T8885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.360463][ T8914] bond_slave_0: entered promiscuous mode [ 492.366729][ T8914] bond_slave_1: entered promiscuous mode [ 492.376907][ T8914] vlan3: entered promiscuous mode [ 492.382186][ T8914] bond0: entered promiscuous mode [ 493.321116][ T8918] loop5: detected capacity change from 0 to 32768 [ 493.460973][ T8918] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 493.699785][ T5841] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 493.793850][ T8918] XFS (loop5): Ending clean mount [ 493.824507][ T8918] XFS (loop5): Quotacheck needed: Please wait. [ 493.896169][ T5841] usb 1-1: Using ep0 maxpacket: 8 [ 493.932327][ T5841] usb 1-1: config 162 has an invalid interface number: 46 but max is 1 [ 493.941363][ T5841] usb 1-1: config 162 has no interface number 0 [ 493.948360][ T5841] usb 1-1: config 162 interface 1 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 493.962000][ T5841] usb 1-1: config 162 interface 46 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 493.973261][ T5841] usb 1-1: config 162 interface 46 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 493.986857][ T5841] usb 1-1: config 162 interface 46 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 493.999566][ T5841] usb 1-1: config 162 interface 46 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 494.014389][ T5841] usb 1-1: config 162 interface 46 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.029710][ T5841] usb 1-1: config 162 interface 1 has no altsetting 0 [ 494.037032][ T5841] usb 1-1: config 162 interface 46 has no altsetting 0 [ 494.143318][ T5841] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a89, bcdDevice=26.be [ 494.156704][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.164976][ T5841] usb 1-1: Product: syz [ 494.169762][ T5841] usb 1-1: Manufacturer: syz [ 494.174579][ T5841] usb 1-1: SerialNumber: syz [ 494.193523][ T8918] XFS (loop5): Quotacheck: Done. [ 494.558136][ T8415] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 494.571491][ T5841] ipaq 1-1:162.46: PocketPC PDA converter detected [ 494.580215][ T5841] usb 1-1: active config #162 != 1 ?? [ 494.718002][ T5841] usb 1-1: USB disconnect, device number 33 [ 495.575906][ T5841] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 495.760603][ T5841] usb 6-1: Using ep0 maxpacket: 8 [ 496.003886][ T5841] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 496.013576][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.022068][ T5841] usb 6-1: Product: syz [ 496.026639][ T5841] usb 6-1: Manufacturer: syz [ 496.031434][ T5841] usb 6-1: SerialNumber: syz [ 496.078356][ T5841] usb 6-1: config 0 descriptor?? [ 496.105575][ T1878] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 496.136123][ T5841] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 496.144746][ T5841] dvb-usb: bulk message failed: -22 (2/0) [ 496.320392][ T5841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 496.371455][ T5841] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 496.381642][ T5841] usb 6-1: media controller created [ 496.427798][ T1878] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 496.439171][ T1878] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 496.453127][ T1878] usb 1-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 496.475579][ T1878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.586041][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 496.691237][ T1878] usb 1-1: config 0 descriptor?? [ 497.436282][ T1878] usb 1-1: USB disconnect, device number 34 [ 497.449836][ T5841] cxusb: set interface failed [ 497.454725][ T5841] dvb-usb: bulk message failed: -22 (1/0) [ 497.701106][ T8964] bond_slave_0: entered promiscuous mode [ 497.707234][ T8964] bond_slave_1: entered promiscuous mode [ 497.713450][ T8964] vlan3: entered promiscuous mode [ 497.718937][ T8964] bond0: entered promiscuous mode [ 499.425033][ T8973] loop5: detected capacity change from 0 to 32768 [ 499.526786][ T8973] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 499.536013][ T5841] DVB: Unable to find symbol mt352_attach() [ 499.548746][ T5841] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 499.826803][ T8973] XFS (loop5): Ending clean mount [ 499.843009][ T8973] XFS (loop5): Quotacheck needed: Please wait. [ 499.913330][ T8973] XFS (loop5): Quotacheck: Done. [ 500.234153][ T8415] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 500.538462][ T5841] rc_core: IR keymap rc-dvico-portable not found [ 500.545037][ T5841] Registered IR keymap rc-empty [ 500.556080][ T5841] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 500.580654][ T5841] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input10 [ 500.756401][ T5841] dvb-usb: schedule remote query interval to 100 msecs. [ 500.763730][ T5841] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 500.916219][ T1878] dvb-usb: bulk message failed: -22 (1/0) [ 500.936035][ T5841] usb 6-1: USB disconnect, device number 2 [ 501.977277][ T5841] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 502.077246][ T9003] syz.5.960 (9003) used obsolete PPPIOCDETACH ioctl [ 504.132286][ T9020] loop5: detected capacity change from 0 to 2048 [ 504.402045][ T9020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.997572][ T9040] fuse: Unknown parameter '0x0000000000000004' [ 505.102674][ T9040] fuse: Unknown parameter 'user_i0000000000000000000000000000000000000000' [ 505.138206][ T8415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.249023][ T9040] 9pnet_fd: Insufficient options for proto=fd [ 505.384189][ T9044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.973'. [ 506.086056][ T5841] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 506.340222][ T5841] usb 2-1: device descriptor read/64, error -71 [ 506.530359][ T1878] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 506.619078][ T5840] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 506.696317][ T5841] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 506.838508][ T1878] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 506.848743][ T1878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.945798][ T5840] usb 6-1: Using ep0 maxpacket: 32 [ 506.975922][ T5841] usb 2-1: device descriptor read/64, error -71 [ 506.998408][ T5840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.010164][ T5840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.024940][ T5840] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 507.036187][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.168392][ T5841] usb usb2-port1: attempt power cycle [ 507.181005][ T1878] usb 1-1: config 0 descriptor?? [ 507.672847][ T9048] ===================================================== [ 507.680103][ T9048] BUG: KMSAN: uninit-value in aes_encrypt+0x126a/0x1960 [ 507.687792][ T9048] aes_encrypt+0x126a/0x1960 [ 507.692591][ T9048] aesti_encrypt+0x7d/0xf0 [ 507.697359][ T9048] cipher_crypt_one+0x11d/0x2e0 [ 507.702561][ T9048] crypto_cipher_encrypt_one+0x33/0x40 [ 507.708294][ T9048] drbg_ctr_update+0x19a9/0x3700 [ 507.713462][ T9048] drbg_seed+0xb1e/0xe20 [ 507.717901][ T9048] drbg_kcapi_seed+0x19b2/0x1e40 [ 507.723082][ T9048] crypto_rng_reset+0x190/0x250 [ 507.728146][ T9048] rng_setkey+0x52/0x70 [ 507.732594][ T9048] alg_setkey+0x265/0x3b0 [ 507.737210][ T9048] alg_setsockopt+0x503/0x760 [ 507.742085][ T9048] __sys_setsockopt+0x43e/0x580 [ 507.747158][ T9048] __x64_sys_setsockopt+0xf4/0x1a0 [ 507.752514][ T9048] x64_sys_call+0x27c9/0x3e30 [ 507.757413][ T9048] do_syscall_64+0xd9/0x210 [ 507.762095][ T9048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.768191][ T9048] [ 507.770617][ T9048] [ 507.770617][ T9048] [ 507.779660][ T9048] Uninit was stored to memory at: [ 507.785230][ T9048] crypto_sha3_finup+0x136/0xe00 [ 507.790393][ T9048] crypto_shash_finup+0x327/0xe80 [ 507.795650][ T9048] jent_hash_time+0x247/0x590 [ 507.800789][ T9048] jent_condition_data+0x4f0/0x510 [ 507.806242][ T9048] jent_measure_jitter+0x547/0x770 [ 507.811611][ T9048] jent_gen_entropy+0x209/0x450 [ 507.816681][ T9048] jent_read_entropy+0x353/0xeb0 [ 507.821878][ T9048] jent_kcapi_random+0x6c/0x250 [ 507.827416][ T9048] drbg_seed+0x3f2/0xe20 [ 507.831855][ T9048] drbg_kcapi_seed+0x19b2/0x1e40 [ 507.836998][ T9048] crypto_rng_reset+0x190/0x250 [ 507.842047][ T9048] rng_setkey+0x52/0x70 [ 507.846469][ T9048] alg_setkey+0x265/0x3b0 [ 507.851029][ T9048] alg_setsockopt+0x503/0x760 [ 507.855993][ T9048] __sys_setsockopt+0x43e/0x580 [ 507.861085][ T9048] __x64_sys_setsockopt+0xf4/0x1a0 [ 507.866446][ T9048] x64_sys_call+0x27c9/0x3e30 [ 507.871587][ T9048] do_syscall_64+0xd9/0x210 [ 507.876296][ T9048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.882574][ T9048] [ 507.885024][ T9048] Uninit was stored to memory at: [ 507.890458][ T9048] crypto_shash_finup+0xc5a/0xe80 [ 507.895838][ T9048] jent_hash_time+0x1de/0x590 [ 507.900771][ T9048] jent_condition_data+0x4f0/0x510 [ 507.906099][ T9048] jent_measure_jitter+0x547/0x770 [ 507.911451][ T9048] jent_gen_entropy+0x209/0x450 [ 507.916919][ T9048] jent_read_entropy+0x353/0xeb0 [ 507.922082][ T9048] jent_kcapi_random+0x6c/0x250 [ 507.927253][ T9048] drbg_seed+0x3f2/0xe20 [ 507.931720][ T9048] drbg_kcapi_seed+0x19b2/0x1e40 [ 507.936907][ T9048] crypto_rng_reset+0x190/0x250 [ 507.942099][ T9048] rng_setkey+0x52/0x70 [ 507.946468][ T9048] alg_setkey+0x265/0x3b0 [ 507.951001][ T9048] alg_setsockopt+0x503/0x760 [ 507.955884][ T9048] __sys_setsockopt+0x43e/0x580 [ 507.960973][ T9048] __x64_sys_setsockopt+0xf4/0x1a0 [ 507.966335][ T9048] x64_sys_call+0x27c9/0x3e30 [ 507.971239][ T9048] do_syscall_64+0xd9/0x210 [ 507.975931][ T9048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.982034][ T9048] [ 507.984456][ T9048] Uninit was stored to memory at: [ 507.989804][ T9048] crypto_sha3_finup+0xc98/0xe00 [ 507.995036][ T9048] crypto_shash_finup+0x327/0xe80 [ 508.000306][ T9048] jent_hash_time+0x247/0x590 [ 508.005261][ T9048] jent_condition_data+0x4f0/0x510 [ 508.010738][ T9048] jent_measure_jitter+0x547/0x770 [ 508.016552][ T9048] jent_gen_entropy+0x209/0x450 [ 508.021662][ T9048] jent_read_entropy+0x353/0xeb0 [ 508.026825][ T9048] jent_kcapi_random+0x6c/0x250 [ 508.031919][ T9048] drbg_seed+0x3f2/0xe20 [ 508.036369][ T9048] drbg_kcapi_seed+0x19b2/0x1e40 [ 508.041529][ T9048] crypto_rng_reset+0x190/0x250 [ 508.046685][ T9048] rng_setkey+0x52/0x70 [ 508.051122][ T9048] alg_setkey+0x265/0x3b0 [ 508.055628][ T9048] alg_setsockopt+0x503/0x760 [ 508.060485][ T9048] __sys_setsockopt+0x43e/0x580 [ 508.065653][ T9048] __x64_sys_setsockopt+0xf4/0x1a0 [ 508.071080][ T9048] x64_sys_call+0x27c9/0x3e30 [ 508.076072][ T9048] do_syscall_64+0xd9/0x210 [ 508.080837][ T9048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.086931][ T9048] [ 508.089354][ T9048] Uninit was stored to memory at: [ 508.094748][ T9048] keccakf+0x1efb/0x2110 [ 508.099211][ T9048] crypto_sha3_finup+0x772/0xe00 [ 508.104376][ T9048] crypto_shash_finup+0x327/0xe80 [ 508.109645][ T9048] jent_hash_time+0x247/0x590 [ 508.114549][ T9048] jent_condition_data+0x4f0/0x510 [ 508.119886][ T9048] jent_measure_jitter+0x547/0x770 [ 508.125215][ T9048] jent_gen_entropy+0x209/0x450 [ 508.130267][ T9048] jent_read_entropy+0x353/0xeb0 [ 508.135424][ T9048] jent_kcapi_random+0x6c/0x250 [ 508.140513][ T9048] drbg_seed+0x3f2/0xe20 [ 508.144955][ T9048] drbg_kcapi_seed+0x19b2/0x1e40 [ 508.150095][ T9048] crypto_rng_reset+0x190/0x250 [ 508.155149][ T9048] rng_setkey+0x52/0x70 [ 508.159469][ T9048] alg_setkey+0x265/0x3b0 [ 508.163962][ T9048] alg_setsockopt+0x503/0x760 [ 508.168796][ T9048] __sys_setsockopt+0x43e/0x580 [ 508.173929][ T9048] __x64_sys_setsockopt+0xf4/0x1a0 [ 508.179266][ T9048] x64_sys_call+0x27c9/0x3e30 [ 508.184561][ T9048] do_syscall_64+0xd9/0x210 [ 508.189342][ T9048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.195451][ T9048] [ 508.197893][ T9048] Uninit was stored to memory at: [ 508.203532][ T9048] crypto_sha3_finup+0x5be/0xe00 [ 508.209246][ T9048] crypto_shash_finup+0x327/0xe80 [ 508.214727][ T9048] jent_hash_time+0x247/0x590 [ 508.219649][ T9048] jent_condition_data+0x4f0/0x510 [ 508.224985][ T9048] jent_measure_jitter+0x547/0x770 [ 508.230334][ T9048] jent_gen_entropy+0x209/0x450 [ 508.235495][ T9048] jent_read_entropy+0x353/0xeb0 [ 508.240752][ T9048] jent_kcapi_random+0x6c/0x250 [ 508.245857][ T9048] drbg_seed+0x3f2/0xe20 [ 508.250299][ T9048] drbg_kcapi_seed+0x19b2/0x1e40 [ 508.255446][ T9048] crypto_rng_reset+0x190/0x250 [ 508.260532][ T9048] rng_setkey+0x52/0x70 [ 508.264907][ T9048] alg_setkey+0x265/0x3b0 [ 508.269457][ T9048] alg_setsockopt+0x503/0x760 [ 508.274334][ T9048] __sys_setsockopt+0x43e/0x580 [ 508.279408][ T9048] __x64_sys_setsockopt+0xf4/0x1a0 [ 508.284770][ T9048] x64_sys_call+0x27c9/0x3e30 [ 508.289673][ T9048] do_syscall_64+0xd9/0x210 [ 508.294458][ T9048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.300586][ T9048] [ 508.303019][ T9048] Uninit was stored to memory at: [ 508.308348][ T9048] crypto_sha3_finup+0x136/0xe00 [ 508.313498][ T9048] crypto_shash_finup+0x327/0xe80 [ 508.318771][ T9048] jent_hash_time+0x247/0x590 [ 508.323729][ T9048] jent_condition_data+0x4f0/0x510 [ 508.329518][ T9048] jent_measure_jitter+0x547/0x770 [ 508.334922][ T9048] jent_gen_entropy+0x209/0x450 [ 508.340324][ T9048] jent_read_entropy+0x353/0xeb0 [ 508.345627][ T9048] jent_kcapi_random+0x6c/0x250 [ 508.350743][ T9048] drbg_seed+0x3f2/0xe20 [ 508.355193][ T9048] drbg_kcapi_seed+0x19b2/0x1e40 [ 508.360369][ T9048] crypto_rng_reset+0x190/0x250 [ 508.365451][ T9048] rng_setkey+0x52/0x70 [ 508.369843][ T9048] alg_setkey+0x265/0x3b0 [ 508.374369][ T9048] alg_setsockopt+0x503/0x760 [ 508.379214][ T9048] __sys_setsockopt+0x43e/0x580 [ 508.384341][ T9048] __x64_sys_setsockopt+0xf4/0x1a0 [ 508.389711][ T9048] x64_sys_call+0x27c9/0x3e30 [ 508.394626][ T9048] do_syscall_64+0xd9/0x210 [ 508.399302][ T9048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.405393][ T9048] [ 508.407812][ T9048] Uninit was stored to memory at: [ 508.413290][ T9048] crypto_shash_finup+0xc5a/0xe80 [ 508.418530][ T9048] jent_hash_time+0x1de/0x590 [ 508.423473][ T9048] jent_condition_data+0x4f0/0x510 [ 508.428906][ T9048] jent_measure_jitter+0x547/0x770 [ 508.434329][ T9048] jent_gen_entropy+0x209/0x450 [ 508.439429][ T9048] jent_read_entropy+0x353/0xeb0 [ 508.444595][ T9048] jent_kcapi_random+0x6c/0x250 [ 508.449674][ T9048] drbg_seed+0x3f2/0xe20 [ 508.454200][ T9048] drbg_kcapi_seed+0x19b2/0x1e40 [ 508.459547][ T9048] crypto_rng_reset+0x190/0x250 [ 508.464611][ T9048] rng_setkey+0x52/0x70 [ 508.468963][ T9048] alg_setkey+0x265/0x3b0 [ 508.473565][ T9048] alg_setsockopt+0x503/0x760 [ 508.478431][ T9048] __sys_setsockopt+0x43e/0x580 [ 508.483615][ T9048] __x64_sys_setsockopt+0xf4/0x1a0 [ 508.488945][ T9048] x64_sys_call+0x27c9/0x3e30 [ 508.493847][ T9048] do_syscall_64+0xd9/0x210 [ 508.498661][ T9048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.504742][ T9048] [ 508.507245][ T9048] Local variable intermediary created at: [ 508.513103][ T9048] jent_hash_time+0x9b/0x590 [ 508.517922][ T9048] jent_condition_data+0x4f0/0x510 [ 508.523371][ T9048] [ 508.525820][ T9048] CPU: 0 UID: 0 PID: 9048 Comm: syz.1.973 Not tainted syzkaller #0 PREEMPT(none) [ 508.535198][ T9048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 508.545415][ T9048] ===================================================== [ 508.552463][ T9048] Disabling lock debugging due to kernel taint [ 508.558746][ T9048] Kernel panic - not syncing: kmsan.panic set ... [ 508.565486][ T9048] CPU: 0 UID: 0 PID: 9048 Comm: syz.1.973 Tainted: G B syzkaller #0 PREEMPT(none) [ 508.576570][ T9048] Tainted: [B]=BAD_PAGE [ 508.580843][ T9048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 508.591063][ T9048] Call Trace: [ 508.594482][ T9048] [ 508.597674][ T9048] __dump_stack+0x26/0x30 [ 508.602358][ T9048] dump_stack_lvl+0x53/0x270 [ 508.607194][ T9048] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 508.613258][ T9048] dump_stack+0x1e/0x25 [ 508.617656][ T9048] vpanic+0x435/0xd30 [ 508.621911][ T9048] panic+0x15d/0x160 [ 508.626143][ T9048] kmsan_report+0x31c/0x320 [ 508.630894][ T9048] ? __msan_warning+0x1b/0x30 [ 508.635792][ T9048] ? aes_encrypt+0x126a/0x1960 [ 508.640762][ T9048] ? aesti_encrypt+0x7d/0xf0 [ 508.645796][ T9048] ? cipher_crypt_one+0x11d/0x2e0 [ 508.651191][ T9048] ? crypto_cipher_encrypt_one+0x33/0x40 [ 508.657246][ T9048] ? drbg_ctr_update+0x19a9/0x3700 [ 508.662847][ T9048] ? drbg_seed+0xb1e/0xe20 [ 508.667523][ T9048] ? drbg_kcapi_seed+0x19b2/0x1e40 [ 508.673008][ T9048] ? crypto_rng_reset+0x190/0x250 [ 508.678243][ T9048] ? rng_setkey+0x52/0x70 [ 508.682760][ T9048] ? alg_setkey+0x265/0x3b0 [ 508.687435][ T9048] ? alg_setsockopt+0x503/0x760 [ 508.692558][ T9048] ? __sys_setsockopt+0x43e/0x580 [ 508.698171][ T9048] ? __x64_sys_setsockopt+0xf4/0x1a0 [ 508.703697][ T9048] ? x64_sys_call+0x27c9/0x3e30 [ 508.708776][ T9048] ? do_syscall_64+0xd9/0x210 [ 508.713668][ T9048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.719991][ T9048] ? crypto_sha3_finup+0xd11/0xe00 [ 508.725368][ T9048] ? kmsan_get_metadata+0xfb/0x160 [ 508.731016][ T9048] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 508.737720][ T9048] ? kmsan_get_metadata+0xfb/0x160 [ 508.743097][ T9048] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 508.749233][ T9048] ? kmsan_get_metadata+0xfb/0x160 [ 508.754613][ T9048] __msan_warning+0x1b/0x30 [ 508.759533][ T9048] aes_encrypt+0x126a/0x1960 [ 508.764343][ T9048] ? kmsan_get_metadata+0xfb/0x160 [ 508.769753][ T9048] aesti_encrypt+0x7d/0xf0 [ 508.774896][ T9048] cipher_crypt_one+0x11d/0x2e0 [ 508.780022][ T9048] ? __pfx_aesti_encrypt+0x10/0x10 [ 508.785363][ T9048] ? crypto_cipher_setkey+0x380/0x430 [ 508.791281][ T9048] ? kmsan_get_metadata+0xfb/0x160 [ 508.796746][ T9048] crypto_cipher_encrypt_one+0x33/0x40 [ 508.802820][ T9048] drbg_ctr_update+0x19a9/0x3700 [ 508.808259][ T9048] ? __pfx_drbg_ctr_update+0x10/0x10 [ 508.813806][ T9048] drbg_seed+0xb1e/0xe20 [ 508.818317][ T9048] ? __pfx_jent_kcapi_random+0x10/0x10 [ 508.824093][ T9048] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 508.830178][ T9048] drbg_kcapi_seed+0x19b2/0x1e40 [ 508.835359][ T9048] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 508.841529][ T9048] ? __pfx_drbg_kcapi_seed+0x10/0x10 [ 508.847071][ T9048] crypto_rng_reset+0x190/0x250 [ 508.852242][ T9048] rng_setkey+0x52/0x70 [ 508.857237][ T9048] ? __pfx_rng_setkey+0x10/0x10 [ 508.862514][ T9048] alg_setkey+0x265/0x3b0 [ 508.867103][ T9048] alg_setsockopt+0x503/0x760 [ 508.872181][ T9048] ? __pfx_alg_setsockopt+0x10/0x10 [ 508.878032][ T9048] __sys_setsockopt+0x43e/0x580 [ 508.883349][ T9048] __x64_sys_setsockopt+0xf4/0x1a0 [ 508.888837][ T9048] x64_sys_call+0x27c9/0x3e30 [ 508.893754][ T9048] do_syscall_64+0xd9/0x210 [ 508.898447][ T9048] ? irqentry_exit+0x16/0x60 [ 508.903362][ T9048] ? clear_bhb_loop+0x40/0x90 [ 508.908280][ T9048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.914383][ T9048] RIP: 0033:0x7f9820b8eec9 [ 508.919235][ T9048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.939401][ T9048] RSP: 002b:00007f9821a01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 508.948060][ T9048] RAX: ffffffffffffffda RBX: 00007f9820de6090 RCX: 00007f9820b8eec9 [ 508.956222][ T9048] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000005 [ 508.964438][ T9048] RBP: 00007f9820c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 508.972672][ T9048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.980907][ T9048] R13: 00007f9820de6128 R14: 00007f9820de6090 R15: 00007ffff9e4b258 [ 508.989125][ T9048] [ 508.992718][ T9048] Kernel Offset: disabled [ 508.997147][ T9048] Rebooting in 86400 seconds..