last executing test programs: 10m22.199486115s ago: executing program 1 (id=36): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x64, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MIN_RATE64={0x4}, @TCA_MQPRIO_MODE={0x6}]}}}]}, 0x94}}, 0x0) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08029078e599fd316000000000"], 0x0) ioctl$XFS_IOC_GOINGDOWN(r3, 0x8004587d, &(0x7f0000000000)=0x7fffffff) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c626172726965722c6e6f626172726965722c6e6f626172726965722c6e6f626172726965722c706172743d307830303030303030303030303030301432e69e662c747970653d59ed131f2c6e6c733d63703933322c00848eaaddd079c76fd36bf0c60356f7e57cc3f41a16a91d1fd471573452234587622f881f05a186982dac6bf19e967a2aba2dcacd014001718700aced5a920fa2c5a9b29ceba32bd2bd9fd7c993f72d699b2cb3ed"], 0xfe, 0x5e5, &(0x7f0000001080)="$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") getdents(0xffffffffffffffff, &(0x7f0000000900)=""/194, 0xc2) truncate(0x0, 0xae) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0xa9) syz_io_uring_setup(0x121e, &(0x7f0000000bc0)={0x0, 0x5b46, 0x8, 0x0, 0xef}, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) r5 = socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r5, 0x58b) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(r5, 0x8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) write(r6, &(0x7f0000002080)='x', 0x1) pwrite64(r4, &(0x7f0000000b80)="b6", 0x1, 0x260000) ioctl$NILFS_IOCTL_GET_SUINFO(r3, 0x80186e84, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x10, 0x5, 0x3}) write$char_usb(r4, &(0x7f0000000180)="84be1f448e95d7929b72416eb8027d6cd8338667d94f10257a5f51", 0x1b) 10m15.720654165s ago: executing program 1 (id=46): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}, 0x1, 0x0, 0x0, 0x4084810}, 0x40000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket(0x22, 0x2, 0x2) setsockopt$inet6_int(r6, 0x29, 0x13, 0x0, 0x0) ioctl$IMGETCOUNT(r6, 0x80044944, 0x0) 10m13.520769107s ago: executing program 1 (id=48): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) shutdown(r4, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0x1, 0x20000000, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0xfea8, 0xa) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) socket(0x15, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) 10m12.265101736s ago: executing program 1 (id=52): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x80) r0 = fsopen(&(0x7f0000002380)='ecryptfs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x20) ioctl$BLKPG(r1, 0xc0184d16, &(0x7f0000000580)={0x2, 0x300, 0x0, 0x0}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbM:', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000180)={&(0x7f0000000980)={{@my=0x0}, {@hyper, 0x1}, 0x400, "7df70918c4e3fc35b898141464441748655937bb34d22f02362479246bb6372d891a3b5dafa58a6abc5a678d6874fc8fb5f8a529c6e30103484f2667c174fb6cda19ea0a9301bc3238eb816e9c3882f243bcd4bd7115b26dacf5923f060498d471cb4f789562fcda119739dd1a5b0e4e1a4a64dbd7b398bd4e7a247d81f968f2e945f293fc3860bf11f0424193fce743067d27f0ac187b44b128a4999547f73d8c35d3c2bd8b51bbc9a31123f773be89e109cc71b8ec29a539083c0cba15b08933865e3e154c28b3c4e2ebe360ac44f942a703b9a3a37fbbefe9ae0de04a32336a6eba07b2fb6ad426d56e17291bb1a9d1fcdaa939378bab6dd2eac37b369ef163c9e0fc8039352c24d8147fcc2e2559b47066abd21a3a5f83f239a2227d17d4ca90f60ed9acc243ed38818e3883a985106b54dc157b67022525a74e8f9cb99852760359278d5d22294a70433ba4cec5147fbb09b1d0008ba76257f1c5af6b8d6bf3bcfd5a468a566a4e98fe5f264f2663b72cb421c90d8b7883ddfb5749b27a3e146f9d8538706fea61b07c6e064446337439b9d5a5dc82f6c63c57d6ba0e709b7c1b15fa8367a0f7319cf59b0b30740ef47c5cccffce5911569591ce4ab62275964cd147e87a30cc6e71f7e40e161997cdbadcfbfb6c54e0289ac137508b7b5339414e4ab7afcc420148e37d49b664cc07c8178a3b50f566c5bdd3aa9217ef909805972bd63ee1d729b282cd866c183744b20da3227f9d43843236b571c8d3237408c266e08d0699ebd30e0820362664ab323b15d3ae9896d6120aae384d43c763ddcb66c31238b031476c86e6b16d7703fcbacc7269ce8622eab1cfdf82a364209ec4ac912db924bb76bc35ddf8d0e7a372f0d08a48c07be47303b59653d9409f14dc59ac33cae5e010466f54d86772e43e3680863bb9bf10c971f16a731e601d7fcdbb91d7146e7834d89059ad522d70398c2bacf113ed791e32f933dfa23f5d6d11bfc9d9e0f04a34b0eddd99d16cd9712485e0a5c9aaf1ebf3f14d00005f8960b6145cbb7d4522692ebe1f9491f87a3ba367c5fb60f5e69bde2a758742999fc986a2dbf6199977e9b446691bf9f95d0abd84557c77ea13356c977d0f098a04000000cbd6447f2e6893e2fa6a0a7b272dab66e69b7def48f8b3583a53a0941fb3e4367fa8d56e05ee3b265f17ca0439fcdcea276f7f0a9bf4c2a324d7143658007cf4019e8da69ba1b7dff4383714cbcb71dfe6f1b1ac5d5e99484cb2c360ddb1889d92cd36f8fc72ac865f1c6445957b2a57c1af59ef8d2e9fe328ec2bde763d65c4dea965042f540515bf2f879d1b26309ebc1d7f76c569fa88fbe61845e96e93d3b6025b6285777e59495943596c128fdacc545263ce458bf99f57d7e5dc77f65cf650902b5b6d5af9359334759843365bf0dfb244817a40e8cc9030"}, 0x418, 0x2001}) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0xc, 0x4e}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0x3, 0x1}}, 0x44) syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000001b340)={0x2020}, 0x2020) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) chdir(0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) 10m9.878503281s ago: executing program 1 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x22) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x144) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)=':2\a>pt', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c736f66742c74696d656f3d312c72657472616e733d312c7365633d6b7262352c00685c96f99875e694e3c4e3a4a5fce63942e16e72cc267752449268a83f73ba8638de9393134f7ed1ddf23089273c40de7b241310bc328e2a033a606904f9bc3aa51980aaf912503d20f0b7e3cb32eda9bbcee203f2d2220f6dd2b2c1446396800aa6c433ce2d515bb08f22c2606ea856b4a9f2d6ea7e21866fdbf4a0d1e0"]) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(0x0, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/file0\x00') write(0xffffffffffffffff, &(0x7f0000000000)="5a0003000100", 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYRESDEC], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0xfffffffffffffffc, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x38, 0x10, 0x0, 0xffffffffffffff90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 10m8.526467192s ago: executing program 1 (id=55): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000480)=[{0x33, '\x00', @buffer={"9e6fea3493e5d9f6054085200965c5ee9743458f1a569109c8299300461f2c13", 0x20}, 0xf8}, {0x45, '\x00', @st={0x4, [{0x0, @uvalue=0x1}, {0x3, @svalue=0x80000002}, {0x1, @svalue=0x400005}, {0x1, @svalue=0xc}]}, 0x4100f467}, {0x22, '\x00', @data=0x9fe, 0x7}, {0x2e, '\x00', @st={0x4, [{0x3, @svalue=0x1008}, {0x2, @uvalue=0x6}, {0x3, @uvalue=0x6}, {0x3, @uvalue=0x3}]}, 0x7}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x922000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/driver/rndis-000\x00', 0x0, 0x0) read(r3, &(0x7f0000000400)=""/100, 0x64) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x58051) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setrlimit(0xc, &(0x7f00000005c0)={0x1, 0x6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x2) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind(0xffffffffffffffff, &(0x7f0000000240)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r6, &(0x7f00000000c0)='1', 0x1) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='threads=0000000000000 000013,threads=00000000000000000000,errors=continue,threads=00000000000000000008,threads=00000000000000002048,errors=continue,threads=single,threads=single,\x00'], 0x1, 0x185, &(0x7f0000000280)="$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") ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={0x0, 0x44}}, 0x0) 9m53.317743215s ago: executing program 32 (id=55): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000480)=[{0x33, '\x00', @buffer={"9e6fea3493e5d9f6054085200965c5ee9743458f1a569109c8299300461f2c13", 0x20}, 0xf8}, {0x45, '\x00', @st={0x4, [{0x0, @uvalue=0x1}, {0x3, @svalue=0x80000002}, {0x1, @svalue=0x400005}, {0x1, @svalue=0xc}]}, 0x4100f467}, {0x22, '\x00', @data=0x9fe, 0x7}, {0x2e, '\x00', @st={0x4, [{0x3, @svalue=0x1008}, {0x2, @uvalue=0x6}, {0x3, @uvalue=0x6}, {0x3, @uvalue=0x3}]}, 0x7}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x922000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/driver/rndis-000\x00', 0x0, 0x0) read(r3, &(0x7f0000000400)=""/100, 0x64) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x58051) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setrlimit(0xc, &(0x7f00000005c0)={0x1, 0x6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x2) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind(0xffffffffffffffff, &(0x7f0000000240)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r6, &(0x7f00000000c0)='1', 0x1) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='threads=0000000000000 000013,threads=00000000000000000000,errors=continue,threads=00000000000000000008,threads=00000000000000002048,errors=continue,threads=single,threads=single,\x00'], 0x1, 0x185, &(0x7f0000000280)="$eJxckk1LKmEUx//P+PhyL/eKi7u4L1wQirLCHEd7gTZCVERQmz6AomaClqWUheTYLnDTqnYSQqvoI0SrwGgv2KoP0EJqGxPPzJnp0YGZ35zzn/N/zjnMdnmv7AXw0a+lEQAYxP0DL4yBA/gnEgDeFIsXxGdiwwLu6LsVyp8Rq72p25vH9afOanjy+n/70n/Q1Jb/tJtXD4kSiy++/1poKHg1i7v9WppcnCsDQNZdQ9pfDrhgODqHNcI4gEilWIqUj47D+WIql81ldzQtNqvGVXVGi2zlC1nVejLJnpqG4AQAsZlvku6Wjv8+1Krd+gm3KNd5ACRJD40M1omzDMMwIPHL897x8FJOrGATY/ABONSZlA2abhzmWAkwuCiI8qEeFfhMYTq9W8jUwcDssha44xHtwu0EmhzE/Kj21pI6lkI/4f2N0zna3Lxut14nBokJYovYJdo/2AY5cNPhnKKQDnhQTVUq+1GxROvNyWlOTgvo8kJHxUnK4NAdij8DAAD//3cScbo=") ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={0x0, 0x44}}, 0x0) 8.215909479s ago: executing program 5 (id=3926): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 7.898091797s ago: executing program 5 (id=3931): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 7.635923213s ago: executing program 4 (id=3935): syz_usb_connect(0x2, 0x5e3, &(0x7f0000000300)=ANY=[@ANYBLOB="120110010b9ab71099116190cd84010203010902d1"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x100000001, 0x8000000000000000, 0x1, 0x1, 0xfb, 0x3, 0x1], 0x41000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x8, 0x2, 0x50, 0x0, 0x2000000b, 0x7, 0x2, 0x9, 0x1, 0x8, 0x0, 0x51, 0x0, 0x40004, 0x10, 0xff, 0xb, 0x2, 0xf, '\x00', 0x2, 0x4080000000000005}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.604486944s ago: executing program 5 (id=3936): openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x420, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727f, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 6.993188268s ago: executing program 4 (id=3942): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x400c080) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, 0x0, 0x40, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x47) sendmsg$nl_generic(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="8002000043000701fefffffffcdbdf25017c0000040045806802018064029f8004002f805c02b5804502378008004200", @ANYBLOB="7501b0808d001c8004008c80", @ANYBLOB='\b\x00i\x00', @ANYRES32, @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="0800a100"], 0x280}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x3d4, 0x3, 0x3}, 0x7}) r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000001280)='ntfs3\x00', 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r7, r8, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x19, 0xc9, "8ca6b3fd0f34416c"}}}, 0xe) 6.651380246s ago: executing program 2 (id=3945): syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1', 0x1) 6.271968114s ago: executing program 3 (id=3946): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 6.236375825s ago: executing program 5 (id=3947): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 3.720168723s ago: executing program 2 (id=3948): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180)=0x1, 0x4) 3.692090554s ago: executing program 0 (id=3949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="c0bf63f6b44d1866baf80cb868d43185ef66bafc0c66edf2400f0d3ec4627d1d05feffffffc744240000000100c7442402ab000000c7442406000000000f01142466b81f008ed83e0f79de66440fe74603440f07ad", 0x55}], 0x1, 0x8, &(0x7f0000000300)=[@cr4={0x1, 0x200000}, @vmwrite={0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x4, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10004, 0xfffffffe, 0x0, [{0x2, 0x1, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x81, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x5, 0x6, '\x00', 0xf9}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xbc, 0xd, 0xa, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0xf, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x11, 0x2, 0x3, '\x00', 0x10}, {0x9, 0x23, 0xf3, '\x00', 0x4}, {0x0, 0x6, 0x4}]}}) 3.645076685s ago: executing program 3 (id=3950): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1.776501679s ago: executing program 3 (id=3951): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7f, 0x2, 0xf9, 0x0, 0x800, 0x5, 0xc, 0xf8, 0x2, 0x7, 0x3, 0x1, 0x0, 0xfffff353, 0x3, 0x2, 0xfe, 0x9, 0x4, '\x00', 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 1.71606453s ago: executing program 0 (id=3952): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x0, 0x6, 0xffff1896, 0x3, 0x26, 0x4, 0x1a}, 0x9c) 1.69710593s ago: executing program 5 (id=3953): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1.480878046s ago: executing program 2 (id=3954): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0xf3) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x1) 1.355008928s ago: executing program 3 (id=3955): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000006c0)={[{@grpjquota}, {@journal_dev={'journal_dev', 0x3d, 0x4b65}}, {@data_err_ignore}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_continue}, {@i_version}, {@oldalloc}, {@prjquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a3407b, 0x0, 0x1, 0x0, &(0x7f0000000040)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file7/file0\x00', 0x800020, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file7/file0\x00', 0x2) 1.354842598s ago: executing program 0 (id=3956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x40, 0x1, 0x0, 0x7}, {0x6, 0x0, 0x0, 0x101}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1.354005008s ago: executing program 5 (id=3957): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x264c, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "985300"}, 0x10}}, 0xd209f6d814827b17) read(r0, &(0x7f0000002fc0)=""/52, 0x34) 1.211825242s ago: executing program 4 (id=3958): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffb, 0x9, 0x10001, 0x7, 0x0, 0x0, 0x4002004c4, 0x9, 0x76, 0xc592, 0x1, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2000000000000000, 0x4000000000000b3, 0xffffffffffffff04], 0xeeee0000, 0x201893}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.159957943s ago: executing program 0 (id=3959): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) creat(&(0x7f0000000580)='./bus\x00', 0x80) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') 1.159712323s ago: executing program 2 (id=3960): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0xf3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 1.111120964s ago: executing program 3 (id=3961): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote}, 0xa}}, 0x26) close(0x3) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) 1.053220935s ago: executing program 4 (id=3962): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 979.939607ms ago: executing program 0 (id=3963): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="02", 0x1}], 0x1}, 0x40000c4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 846.60564ms ago: executing program 2 (id=3964): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x101001a, 0x0, 0xfb, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000100)='./file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x2) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002380)={0x50, 0x0, r1, {0x7, 0x2d, 0x7fff, 0x1004000, 0xe, 0xc781, 0xff, 0x5850, 0x0, 0x0, 0x8, 0xffffffff}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002dc0)="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", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0x2, 0xffff, 0x0, 0xf88, 0x0, 0x0, 0x2, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 838.865841ms ago: executing program 4 (id=3965): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r1], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000680001270000000000f0ff00000000000000000008000100020000000c00020001"], 0x2c}}, 0x0) 784.015682ms ago: executing program 0 (id=3966): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r1, 0x8cee000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff34, 0x0, 0x0}, &(0x7f00000002c0)=0x40) 691.017664ms ago: executing program 3 (id=3967): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 667.668874ms ago: executing program 4 (id=3968): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x400c080) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, 0x0, 0x40, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x47) sendmsg$nl_generic(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="8002000043000701fefffffffcdbdf25017c0000040045806802018064029f8004002f805c02b5804502378008004200", @ANYBLOB="7501b0808d001c8004008c80", @ANYBLOB='\b\x00i\x00', @ANYRES32, @ANYRES32, @ANYBLOB="080096", @ANYRES32=0x0, @ANYBLOB="0800a100"], 0x280}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x3d4, 0x3, 0x3}, 0x7}) r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000001280)='ntfs3\x00', 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r7, r8, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x19, 0xc9, "8ca6b3fd0f34416c"}}}, 0xe) 0s ago: executing program 2 (id=3969): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) kernel console output (not intermixed with test programs): 050] loop2: detected capacity change from 0 to 1024 [ 252.702313][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 252.790011][ T6050] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 253.175375][ T6063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.363'. [ 253.872603][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 256.040543][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'. [ 256.432421][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.438803][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.088849][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 258.100104][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 259.380995][ T6128] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 260.389109][ T6142] tipc: Started in network mode [ 260.436870][ T6142] tipc: Node identity , cluster identity 4711 [ 260.481156][ T6142] tipc: Failed to obtain node identity [ 260.537628][ T6142] tipc: Enabling of bearer rejected, failed to enable media [ 261.295926][ T6165] netlink: 36 bytes leftover after parsing attributes in process `syz.3.387'. [ 261.747130][ T4290] Bluetooth: hci5: command 0x0406 tx timeout [ 262.110932][ T6170] loop3: detected capacity change from 0 to 4096 [ 262.167955][ T6170] ntfs: (device loop3): parse_options(): The nls option requires an argument. [ 262.228245][ T6177] overlayfs: failed to clone upperpath [ 262.312000][ T6180] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 262.320440][ T6180] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 262.329014][ T6180] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 264.251617][ T6200] loop3: detected capacity change from 0 to 40427 [ 264.289225][ T6200] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(1) [ 264.318337][ T6200] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 265.639056][ T6215] loop3: detected capacity change from 0 to 4096 [ 265.691297][ T6215] ntfs: (device loop3): parse_options(): The fmask option requires an argument. [ 267.807379][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.408'. [ 268.072439][ T6243] netlink: 404 bytes leftover after parsing attributes in process `syz.0.409'. [ 274.456889][ T6308] netlink: 404 bytes leftover after parsing attributes in process `syz.4.424'. [ 274.831973][ T6318] loop3: detected capacity change from 0 to 1024 [ 274.853681][ T6318] hfsplus: creator requires a 4 character value [ 274.860003][ T6318] hfsplus: unable to parse mount options [ 276.166114][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 277.084350][ T6330] loop3: detected capacity change from 0 to 32768 [ 277.151992][ T6330] JBD2: Ignoring recovery information on journal [ 277.234918][ T6330] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 277.393679][ T4282] ocfs2: Unmounting device (7,3) on (node local) [ 279.413704][ T6368] netlink: 404 bytes leftover after parsing attributes in process `syz.5.439'. [ 279.658982][ T6380] loop3: detected capacity change from 0 to 1024 [ 279.706580][ T6380] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 281.232936][ T6386] loop3: detected capacity change from 0 to 40427 [ 281.266554][ T6386] F2FS-fs (loop3): build fault injection attr: rate: 24, type: 0x3ffff [ 281.291527][ T6386] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x76 [ 281.332917][ T6386] F2FS-fs (loop3): invalid crc value [ 281.351434][ T6386] F2FS-fs (loop3) : inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x5882/0x7120 [ 281.367543][ T6386] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12) [ 282.731733][ T6411] fuse: Bad value for 'fd' [ 283.627486][ T6412] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 284.130340][ T6424] SET target dimension over the limit! [ 284.893772][ T6426] fuse: Bad value for 'fd' [ 286.561998][ T6442] fuse: Bad value for 'fd' [ 286.749457][ T6448] fuse: Bad value for 'fd' [ 286.902386][ T4290] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 286.978947][ T6430] loop3: detected capacity change from 0 to 32768 [ 287.183433][ T6430] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #72: inline data id_count 1848 exceeds max 312 [ 287.251274][ T6430] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 287.382296][ T6430] OCFS2: File system is now read-only. [ 287.469090][ T6430] (syz.3.463,6430,0):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 287.516065][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 287.815528][ T6430] (syz.3.463,6430,0):_ocfs2_get_system_file_inode:141 ERROR: status = -30 [ 287.993582][ T6430] (syz.3.463,6430,0):ocfs2_init_local_system_inodes:492 ERROR: status=-30, sysfile=7, slot=0 [ 288.083076][ T6430] (syz.3.463,6430,1):ocfs2_init_local_system_inodes:501 ERROR: status = -30 [ 288.092148][ T6430] (syz.3.463,6430,1):ocfs2_mount_volume:1815 ERROR: status = -30 [ 288.114463][ T6430] (syz.3.463,6430,1):ocfs2_fill_super:1176 ERROR: status = -30 [ 292.781083][ T6499] fuse: Bad value for 'fd' [ 295.057080][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 295.298609][ T6521] SET target dimension over the limit! [ 297.108271][ T6541] fuse: Bad value for 'fd' [ 297.211819][ T6546] fuse: Bad value for 'fd' [ 297.539121][ T6554] fuse: Bad value for 'fd' [ 304.008870][ T4285] Bluetooth: hci5: command 0x0406 tx timeout [ 304.096176][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.521'. [ 305.049834][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 306.040407][ T6625] overlayfs: failed to resolve './file0': -2 [ 306.280739][ T6628] netlink: 'syz.3.524': attribute type 4 has an invalid length. [ 306.894614][ T6629] netlink: 'syz.3.524': attribute type 4 has an invalid length. [ 307.224398][ T6636] netlink: 404 bytes leftover after parsing attributes in process `syz.5.530'. [ 307.437067][ T6642] fuse: Bad value for 'fd' [ 308.085088][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.536'. [ 310.073506][ T6681] fuse: Bad value for 'fd' [ 310.574468][ T4290] Bluetooth: hci0: Malformed Event: 0x13 [ 312.508763][ T6711] fuse: Bad value for 'fd' [ 313.162634][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.562'. [ 317.186052][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.193253][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.669597][ T6793] overlayfs: failed to clone upperpath [ 317.842440][ T6793] netlink: 'syz.2.591': attribute type 4 has an invalid length. [ 318.450408][ T6795] netlink: 'syz.2.591': attribute type 4 has an invalid length. [ 321.067688][ T6843] fuse: Bad value for 'fd' [ 321.710850][ T6860] SET target dimension over the limit! [ 322.544949][ T6866] fuse: Bad value for 'fd' [ 323.539093][ T6893] fuse: Bad value for 'fd' [ 324.326076][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.645'. [ 325.622869][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 327.010458][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.660'. [ 328.652360][ T4290] Bluetooth: hci5: unexpected subevent 0x19 length: 4 < 28 [ 329.437897][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'. [ 329.453456][ T6996] SET target dimension over the limit! [ 331.141646][ T7018] fuse: Bad value for 'fd' [ 331.591051][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'. [ 332.146598][ T7042] fuse: Bad value for 'fd' [ 337.830221][ T7105] fuse: Bad value for 'fd' [ 339.773056][ T26] audit: type=1326 audit(1788992141.691:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.4.746" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 339.842805][ T26] audit: type=1326 audit(1788992141.691:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.4.746" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 339.948104][ T26] audit: type=1326 audit(1788992141.721:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.4.746" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4085b5e98e code=0x7ffc0000 [ 340.019846][ T26] audit: type=1326 audit(1788992141.721:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.4.746" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 340.094036][ T26] audit: type=1326 audit(1788992141.721:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.4.746" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 340.949843][ T7189] netlink: 404 bytes leftover after parsing attributes in process `syz.2.758'. [ 341.757938][ T7216] netlink: 32 bytes leftover after parsing attributes in process `syz.2.771'. [ 341.778092][ T7216] netlink: 7 bytes leftover after parsing attributes in process `syz.2.771'. [ 342.599982][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.783'. [ 342.615794][ T7242] netlink: 'syz.5.784': attribute type 10 has an invalid length. [ 342.730710][ T7242] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 343.796061][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 344.543292][ T4290] Bluetooth: hci1: command 0x2016 tx timeout [ 344.870488][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.5.801'. [ 346.516963][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.807'. [ 346.953657][ T7325] netlink: 404 bytes leftover after parsing attributes in process `syz.4.816'. [ 347.523725][ T7350] fuse: Bad value for 'fd' [ 347.673470][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.826'. [ 348.493994][ T7366] netlink: 404 bytes leftover after parsing attributes in process `syz.5.831'. [ 348.880663][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 348.948628][ T7382] fuse: Bad value for 'fd' [ 349.537604][ T7405] netlink: 404 bytes leftover after parsing attributes in process `syz.3.847'. [ 349.641690][ T4285] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 349.819605][ T7413] fuse: Bad value for 'fd' [ 350.120116][ T7432] netlink: 404 bytes leftover after parsing attributes in process `syz.2.861'. [ 350.237820][ T7433] IPv6: Can't replace route, no match found [ 350.419883][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.858'. [ 350.866723][ T7462] netlink: 404 bytes leftover after parsing attributes in process `syz.2.872'. [ 351.321808][ T7482] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.354121][ T7484] PKCS8: Unsupported PKCS#8 version [ 351.511981][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 351.562493][ T7489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.884'. [ 351.594648][ T7493] fuse: Bad value for 'fd' [ 351.797748][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.888'. [ 352.325844][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 354.645936][ T26] audit: type=1326 audit(1788992156.561:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.5.908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170779e159 code=0x7ffc0000 [ 354.704257][ T26] audit: type=1326 audit(1788992156.561:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.5.908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170779e159 code=0x7ffc0000 [ 354.797170][ T26] audit: type=1326 audit(1788992156.591:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.5.908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170779e159 code=0x7ffc0000 [ 354.858206][ T7557] netlink: 'syz.5.912': attribute type 30 has an invalid length. [ 354.867243][ T26] audit: type=1326 audit(1788992156.591:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.5.908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170779e159 code=0x7ffc0000 [ 354.940876][ T26] audit: type=1326 audit(1788992156.601:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.5.908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f170779e159 code=0x7ffc0000 [ 355.035266][ T26] audit: type=1326 audit(1788992156.601:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.5.908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170779e159 code=0x7ffc0000 [ 355.121196][ T26] audit: type=1326 audit(1788992156.601:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.5.908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170779e159 code=0x7ffc0000 [ 355.235054][ T26] audit: type=1326 audit(1788992156.601:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.5.908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f170779e159 code=0x7ffc0000 [ 355.403122][ T26] audit: type=1326 audit(1788992156.601:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.5.908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f170779e159 code=0x7ffc0000 [ 356.747044][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 357.904427][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'. [ 358.176966][ T7628] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 358.230345][ T7628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.302481][ T7628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 359.578798][ T7652] netlink: 'syz.3.947': attribute type 2 has an invalid length. [ 360.004218][ T7658] Cannot find del_set index 4 as target [ 360.139424][ T7660] fuse: Bad value for 'fd' [ 360.536169][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 360.921516][ T7680] IPv6: Can't replace route, no match found [ 361.861579][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.974'. [ 362.049896][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.973'. [ 363.329749][ T7739] netlink: 'syz.3.980': attribute type 29 has an invalid length. [ 363.337595][ T7739] netlink: 'syz.3.980': attribute type 3 has an invalid length. [ 363.345395][ T7739] netlink: 76 bytes leftover after parsing attributes in process `syz.3.980'. [ 363.735245][ T7746] fuse: Bad value for 'fd' [ 363.778794][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'. [ 364.609986][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 364.805644][ T7757] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 364.824994][ T7757] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 364.835353][ T7757] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 364.864459][ T7757] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 364.922281][ T7757] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 364.928481][ T7757] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 365.000567][ T7757] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 365.008869][ T7757] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 366.872394][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 366.942250][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 366.987150][ T7788] fuse: Bad value for 'fd' [ 367.032754][ T4285] Bluetooth: hci5: command 0x0c1a tx timeout [ 367.403919][ T4285] Bluetooth: hci0: unexpected event for opcode 0x080c [ 367.962607][ T7818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.995406][ T7818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.038145][ T7818] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 368.497807][ T7836] tc_dump_action: action bad kind [ 368.602069][ T4285] Bluetooth: hci0: unexpected event for opcode 0x080d [ 368.689792][ T7844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.949097][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 368.962436][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 369.023592][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 369.579621][ T7873] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 369.931671][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1041'. [ 369.942662][ T7886] netlink: 'syz.2.1041': attribute type 2 has an invalid length. [ 369.950658][ T7886] netlink: 'syz.2.1041': attribute type 1 has an invalid length. [ 369.969918][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 371.436712][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1057'. [ 372.467894][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'. [ 372.507626][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'. [ 372.795142][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 373.031564][ T26] audit: type=1326 audit(1788992174.941:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.4.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 373.064382][ T26] audit: type=1326 audit(1788992174.981:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.4.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 373.099640][ T26] audit: type=1326 audit(1788992174.981:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.4.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 373.129127][ T26] audit: type=1326 audit(1788992174.981:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.4.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 373.166530][ T26] audit: type=1326 audit(1788992174.981:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.4.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 373.243953][ T26] audit: type=1326 audit(1788992174.981:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.4.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 373.278509][ T26] audit: type=1326 audit(1788992174.981:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.4.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 373.307157][ T26] audit: type=1326 audit(1788992174.981:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.4.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 373.335145][ T26] audit: type=1326 audit(1788992175.041:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.4.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4085b5e98e code=0x7ffc0000 [ 373.359767][ T26] audit: type=1326 audit(1788992175.041:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.4.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4085b5e98e code=0x7ffc0000 [ 373.709189][ T7980] fuse: Bad value for 'fd' [ 373.937883][ T7985] fuse: Bad value for 'fd' [ 373.978377][ T7989] netlink: 'syz.2.1077': attribute type 2 has an invalid length. [ 374.201218][ T7992] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1079'. [ 374.518764][ T8003] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1087'. [ 374.725697][ T8012] fuse: Bad value for 'fd' [ 375.087951][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1083'. [ 376.630585][ T8066] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1107'. [ 376.702386][ T8070] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1107'. [ 377.578035][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'. [ 378.567930][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1120'. [ 378.577913][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1120'. [ 378.626180][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.632907][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.884497][ T8114] netlink: 'syz.4.1122': attribute type 1 has an invalid length. [ 379.352484][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1123'. [ 382.101275][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 382.153514][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1141'. [ 383.522338][ T4361] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 383.602957][ T8195] netlink: 'syz.5.1151': attribute type 1 has an invalid length. [ 383.767874][ T4361] usb 4-1: Using ep0 maxpacket: 32 [ 383.814237][ T4361] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 383.842374][ T4361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.870802][ T4361] usb 4-1: Product: syz [ 383.886578][ T4361] usb 4-1: Manufacturer: syz [ 383.901713][ T4361] usb 4-1: SerialNumber: syz [ 383.958541][ T4361] usb 4-1: config 0 descriptor?? [ 383.998563][ T4361] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 384.014925][ T4361] dvb-usb: bulk message failed: -22 (4/0) [ 384.036502][ T4361] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 384.062971][ T4361] dvb-usb: bulk message failed: -22 (5/0) [ 384.072478][ T4361] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 384.106839][ T4361] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 384.143981][ T4361] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 384.164974][ T4361] usb 4-1: media controller created [ 384.206526][ T8180] dvb-usb: bulk message failed: -22 (7/0) [ 384.240879][ T4361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.250250][ T8180] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 384.284946][ T8180] ttusb2: i2c transfer failed. [ 384.362058][ T4361] usb 4-1: selecting invalid altsetting 3 [ 384.385938][ T4361] ttusb2: set interface to alts=3 failed [ 384.550681][ T4361] DVB: Unable to find symbol tda10086_attach() [ 384.559039][ T4361] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 384.622471][ T4361] dvb-usb: bulk message failed: -22 (4/0) [ 384.649404][ T4361] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 384.661340][ T4361] dvb-usb: bulk message failed: -22 (5/0) [ 384.667474][ T4361] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 384.678107][ T4361] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 384.726854][ T8223] device syz_tun entered promiscuous mode [ 384.744635][ T8223] device macsec1 entered promiscuous mode [ 384.748962][ T4361] usb 4-1: USB disconnect, device number 2 [ 384.827999][ T8223] device syz_tun left promiscuous mode [ 384.880294][ T4361] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 384.984745][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1164'. [ 384.997731][ T8230] fuse: Bad value for 'fd' [ 386.723103][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 386.990558][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'. [ 388.074489][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'. [ 389.646771][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1195'. [ 391.473262][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1206'. [ 391.981886][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1213'. [ 392.456290][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'. [ 392.712031][ T8399] ALSA: seq fatal error: cannot create timer (-22) [ 393.427576][ T8413] batman_adv: batadv0: Adding interface: gretap1 [ 393.501403][ T8413] batman_adv: batadv0: Interface activated: gretap1 [ 394.742854][ T5338] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 394.944055][ T5338] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.011657][ T5338] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 395.047812][ T5338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.061361][ T5338] usb 4-1: Product: syz [ 395.095654][ T8440] fuse: Bad value for 'fd' [ 395.119681][ T5338] usb 4-1: Manufacturer: syz [ 395.137846][ T5338] usb 4-1: SerialNumber: syz [ 395.289390][ T8445] netlink: 264 bytes leftover after parsing attributes in process `syz.5.1236'. [ 395.318631][ T8445] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1236'. [ 395.595476][ T5338] dvbdev: DVB: registering new adapter (DEC3000-s) [ 395.625295][ T5338] usb 4-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 395.650689][ T8449] fuse: Bad value for 'fd' [ 395.739674][ T5338] ttusb_dec_send_command: command bulk message failed: error -71 [ 395.810629][ T5338] usb 4-1: USB disconnect, device number 3 [ 396.328061][ T8461] tipc: Enabling of bearer rejected, failed to enable media [ 396.642035][ T8467] fuse: Bad value for 'fd' [ 396.782401][ T5338] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 397.022280][ T5338] usb 4-1: Using ep0 maxpacket: 32 [ 397.029362][ T5338] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 397.066284][ T5338] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 397.122044][ T5338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.170620][ T5338] usb 4-1: Product: syz [ 397.189881][ T5338] usb 4-1: Manufacturer: syz [ 397.321300][ T5338] usb 4-1: SerialNumber: syz [ 397.329476][ T5338] usb 4-1: config 0 descriptor?? [ 397.342741][ T5338] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 397.353158][ T5338] dvb-usb: bulk message failed: -22 (2/0) [ 397.395287][ T5338] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 397.419634][ T5338] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 397.442422][ T5338] usb 4-1: media controller created [ 397.508791][ T5338] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.528228][ T5338] usb 4-1: selecting invalid altsetting 7 [ 397.534161][ T5338] cxusb: set interface failed [ 397.538984][ T5338] dvb-usb: bulk message failed: -22 (1/0) [ 397.556634][ T8463] dvb-usb: bulk message failed: -22 (4/0) [ 397.586856][ T8463] cxusb: i2c read failed [ 397.685568][ T5338] DVB: Unable to find symbol lgdt330x_attach() [ 397.701015][ T5338] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 397.891597][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 397.950716][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1253'. [ 398.082218][ T5338] rc_core: IR keymap rc-dvico-portable not found [ 398.088657][ T5338] Registered IR keymap rc-empty [ 398.108749][ T5338] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 398.130493][ T5338] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input7 [ 398.153098][ T5338] dvb-usb: schedule remote query interval to 100 msecs. [ 398.160200][ T5338] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 398.177576][ T5338] usb 4-1: USB disconnect, device number 4 [ 398.298106][ T5338] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 399.194348][ T8519] fuse: Bad value for 'fd' [ 400.111538][ T8541] overlayfs: failed to clone upperpath [ 400.302682][ T8547] bridge0: Device is already in use. [ 401.293353][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1276'. [ 402.711172][ T8601] device ip6gretap0 entered promiscuous mode [ 403.135066][ T8612] fuse: Bad value for 'fd' [ 403.932230][ T5342] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 404.128313][ T5342] usb 4-1: Using ep0 maxpacket: 8 [ 404.138719][ T5342] usb 4-1: config 0 interface 0 has no altsetting 0 [ 404.150004][ T5342] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 404.172254][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.207710][ T5342] usb 4-1: config 0 descriptor?? [ 404.663742][ T5342] kye 0003:0458:501A.0001: ignoring exceeding usage max [ 404.734266][ T5342] kye 0003:0458:501A.0001: hidraw0: USB HID v0.81 Device [HID 0458:501a] on usb-dummy_hcd.3-1/input0 [ 404.757950][ T5342] kye 0003:0458:501A.0001: tablet-enabling feature report not found [ 404.776597][ T5342] kye 0003:0458:501A.0001: tablet enabling failed [ 404.852864][ T5342] usb 4-1: USB disconnect, device number 5 [ 405.158466][ T8663] capability: warning: `syz.5.1327' uses 32-bit capabilities (legacy support in use) [ 405.200961][ T8655] fido_id[8655]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 405.462584][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1328'. [ 406.260968][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 406.261084][ T26] audit: type=1326 audit(1788992208.171:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.4.1337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 406.312086][ T26] audit: type=1326 audit(1788992208.171:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.4.1337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 406.401326][ T26] audit: type=1326 audit(1788992208.231:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.4.1337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 406.439255][ T26] audit: type=1326 audit(1788992208.231:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.4.1337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 406.520355][ T26] audit: type=1326 audit(1788992208.231:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.4.1337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 406.571328][ T26] audit: type=1326 audit(1788992208.261:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.4.1337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 406.632492][ T26] audit: type=1326 audit(1788992208.261:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.4.1337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 406.725830][ T26] audit: type=1326 audit(1788992208.261:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.4.1337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085b9e159 code=0x7ffc0000 [ 406.768909][ T8694] fuse: Bad value for 'fd' [ 407.024375][ T8700] device ipvlan2 entered promiscuous mode [ 407.042019][ T8700] bridge0: port 3(ipvlan2) entered blocking state [ 407.063963][ T8700] bridge0: port 3(ipvlan2) entered disabled state [ 407.781816][ T8709] fuse: Bad value for 'fd' [ 408.012943][ T8714] tipc: Started in network mode [ 408.041008][ T8714] tipc: Node identity , cluster identity 4711 [ 408.350005][ T8725] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1356'. [ 408.542006][ T8731] netlink: 'syz.3.1359': attribute type 5 has an invalid length. [ 408.897611][ T8741] fuse: Bad value for 'fd' [ 409.123998][ T8725] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1356'. [ 409.440796][ T8659] Set syz0 is full, maxelem 65536 reached [ 409.755689][ T8773] bridge0: Device is already in use. [ 409.968308][ T8780] fuse: Bad value for 'fd' [ 411.120633][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'. [ 411.582460][ T129] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 411.802411][ T129] usb 4-1: Using ep0 maxpacket: 8 [ 411.812583][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.866445][ T129] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.937939][ T129] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 411.967777][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.031155][ T129] usb 4-1: config 0 descriptor?? [ 412.354557][ T8833] fuse: Bad value for 'fd' [ 412.668891][ T129] sony 0003:1345:3008.0002: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 412.754553][ T129] sony 0003:1345:3008.0002: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.3-1/input0 [ 412.797368][ T129] sony 0003:1345:3008.0002: failed to claim input [ 412.882394][ T129] usb 4-1: USB disconnect, device number 6 [ 413.136077][ T8843] fido_id[8843]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 413.699855][ T8876] device erspan0 entered promiscuous mode [ 414.210644][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 414.827924][ T8890] fuse: Bad value for 'fd' [ 415.380806][ T8914] fuse: Bad value for 'fd' [ 415.943644][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1437'. [ 416.552334][ T26] audit: type=1326 audit(2000000009.640:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.2.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4fb759e159 code=0x0 [ 416.910410][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'. [ 416.928302][ T8944] 9pnet_fd: Insufficient options for proto=fd [ 416.936021][ T8945] fuse: Bad value for 'fd' [ 417.225462][ T4290] Bluetooth: hci5: hcon ffff88807dfd6000 sent 1 < count 65279 [ 417.960498][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1453'. [ 419.561337][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1458'. [ 419.738971][ T9006] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1465'. [ 420.828463][ T9024] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1473'. [ 420.845812][ T9022] syz.2.1472[9022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.845985][ T9022] syz.2.1472[9022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.259043][ T9036] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1479'. [ 421.467613][ T9047] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 421.521525][ T9047] netlink: 'syz.4.1484': attribute type 12 has an invalid length. [ 421.616482][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1486'. [ 421.904337][ T9068] netlink: 404 bytes leftover after parsing attributes in process `syz.5.1494'. [ 421.915296][ T9066] device erspan0 entered promiscuous mode [ 422.268770][ T9082] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1501'. [ 422.635251][ T9097] netlink: 404 bytes leftover after parsing attributes in process `syz.5.1507'. [ 422.846803][ T9105] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1511'. [ 423.064035][ T9115] fuse: Bad value for 'fd' [ 423.361701][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1504'. [ 423.571403][ T9135] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1521'. [ 423.841211][ T9144] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1525'. [ 424.103800][ T9150] fuse: Bad value for 'fd' [ 424.356242][ T9155] syz.5.1530[9155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.356367][ T9155] syz.5.1530[9155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.011319][ T9167] netlink: 404 bytes leftover after parsing attributes in process `syz.5.1535'. [ 425.270471][ T9174] fuse: Bad value for 'fd' [ 426.598790][ T9190] fuse: Bad value for 'fd' [ 426.828233][ T9200] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1549'. [ 427.059960][ T9205] fuse: Bad value for 'fd' [ 429.269401][ T9231] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1562'. [ 429.849042][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'. [ 430.218244][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'. [ 431.567632][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 433.279759][ T9315] program syz.3.1589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.980816][ T9337] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1599'. [ 434.231438][ T9346] fuse: Bad value for 'fd' [ 434.302459][ T4285] Bluetooth: hci5: command 0x206e tx timeout [ 435.035318][ T9372] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1614'. [ 435.360215][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1600'. [ 435.909002][ T9395] fuse: Bad value for 'fd' [ 436.360859][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'. [ 436.412422][ T4285] Bluetooth: hci5: command 0x206e tx timeout [ 437.811920][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1618'. [ 437.881048][ T9433] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1630'. [ 438.586799][ T9450] team0: Device wg1 is of different type [ 438.831907][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1631'. [ 439.270051][ T9465] fuse: Bad value for 'fd' [ 440.002297][ T5333] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 440.086859][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.099240][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.175104][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 440.766811][ T9481] fuse: Bad value for 'fd' [ 440.837157][ T5333] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 440.854503][ T5333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.932908][ T5333] usb 4-1: config 0 descriptor?? [ 441.246316][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 441.764115][ T5333] usb 4-1: Cannot set autoneg [ 441.769832][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1650'. [ 441.777679][ T5333] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 441.827605][ T5333] usb 4-1: USB disconnect, device number 7 [ 442.450641][ T9530] team0: Device wg1 is of different type [ 443.130921][ T9555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1659'. [ 443.668706][ T9571] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 444.113944][ T9579] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1681'. [ 445.071411][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1685'. [ 445.476320][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'. [ 446.382281][ T129] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 446.455188][ T9636] device gretap0 entered promiscuous mode [ 446.582223][ T129] usb 4-1: Using ep0 maxpacket: 16 [ 446.589395][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.631082][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.651518][ T129] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 446.685278][ T129] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 446.712667][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.743089][ T129] usb 4-1: config 0 descriptor?? [ 447.162294][ T9617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.200493][ T9617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.232522][ T129] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 447.250616][ T129] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 447.276485][ T129] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 447.297469][ T129] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 447.321317][ T129] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input9 [ 447.361315][ T129] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 447.457876][ T129] usb 4-1: USB disconnect, device number 8 [ 447.813682][ T9662] fido_id[9662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 447.966578][ T9674] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1717'. [ 448.216128][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1716'. [ 449.150632][ T9710] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1729'. [ 450.166785][ T9753] fuse: Bad value for 'fd' [ 450.857640][ T9770] fuse: Bad value for 'fd' [ 452.011946][ T9] wlan1: Trigger new scan to find an IBSS to join [ 452.174599][ T9789] fuse: Bad value for 'fd' [ 452.347303][ T9797] device macvlan0 entered promiscuous mode [ 452.358693][ T9797] netlink: 'syz.0.1768': attribute type 1 has an invalid length. [ 452.370086][ T9797] netlink: 'syz.0.1768': attribute type 2 has an invalid length. [ 452.508869][ T9802] fuse: Bad value for 'fd' [ 452.762264][ T5342] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 452.980813][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.002800][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.028554][ T5342] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 453.051646][ T9822] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1778'. [ 453.070014][ T5342] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 453.082247][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.105801][ T5342] usb 4-1: config 0 descriptor?? [ 453.541333][ T5342] plantronics 0003:047F:FFFF.0004: unbalanced delimiter at end of report description [ 453.561816][ T5342] plantronics 0003:047F:FFFF.0004: parse failed [ 453.581809][ T5342] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 453.766366][ T9833] fuse: Bad value for 'fd' [ 453.810238][ T5342] usb 4-1: USB disconnect, device number 9 [ 453.877633][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1777'. [ 454.617565][ T9851] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 454.850979][ T9857] netlink: 404 bytes leftover after parsing attributes in process `syz.5.1789'. [ 455.631107][ T9873] fuse: Bad value for 'fd' [ 456.408891][ T9897] fuse: Bad value for 'fd' [ 456.718934][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1801'. [ 456.758366][ T9905] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 456.794320][ T9909] fuse: Bad value for 'fd' [ 456.865585][ T4478] wlan1: Trigger new scan to find an IBSS to join [ 456.896168][ T9905] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 457.104640][ T9915] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 457.282623][ T9916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 457.289485][ T9916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 457.296361][ T9916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 457.303273][ T9916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 457.310119][ T9916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 457.316985][ T9916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 457.323885][ T9916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 457.330745][ T9916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 457.337621][ T9916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 457.646833][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1805'. [ 458.206227][ T4472] wlan1: Creating new IBSS network, BSSID e2:70:09:09:dd:03 [ 459.164777][ T9944] fuse: Bad value for 'fd' [ 459.868912][ T9959] bond0: (slave bridge0): Error: Slave device does not support XDP [ 460.936868][ T9977] fuse: Bad value for 'fd' [ 463.754844][T10026] netlink: 'syz.2.1850': attribute type 3 has an invalid length. [ 463.802362][T10026] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1850'. [ 463.858178][T10026] netlink: 'syz.2.1850': attribute type 3 has an invalid length. [ 463.892175][T10026] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1850'. [ 464.749863][ T4285] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 465.493636][T10070] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1868'. [ 466.339838][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'. [ 467.190344][T10110] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1884'. [ 467.393411][T10115] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 467.463130][T10116] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1885'. [ 467.720428][T10126] overlayfs: failed to clone upperpath [ 468.165064][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1891'. [ 468.770686][T10153] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1896'. [ 470.396601][T10199] net_ratelimit: 247 callbacks suppressed [ 470.396693][T10199] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 470.429413][T10199] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 470.436380][T10199] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 470.443231][T10199] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 470.450041][T10199] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 470.456884][T10199] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 470.463729][T10199] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 470.470533][T10199] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 470.477405][T10199] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 470.484265][T10199] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 470.942338][ T5342] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 471.136193][ T5342] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 471.157110][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.193170][ T5342] usb 4-1: config 0 descriptor?? [ 471.231376][ T5342] cp210x 4-1:0.0: cp210x converter detected [ 471.652312][ T5342] usb 4-1: cp210x converter now attached to ttyUSB0 [ 471.837828][ T5342] usb 4-1: USB disconnect, device number 10 [ 471.874250][ T5342] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 471.917758][ T5342] cp210x 4-1:0.0: device disconnected [ 472.055842][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'. [ 472.068715][T10240] device ip6gre1 entered promiscuous mode [ 472.076998][ T5333] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 472.086971][ T5333] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 472.102511][ T5334] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 472.282466][ T5342] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.022646][ T5333] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.282078][T10283] block device autoloading is deprecated and will be removed. [ 473.709540][T10310] fuse: Bad value for 'fd' [ 473.748459][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1969'. [ 473.776681][T10312] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1969'. [ 473.828217][T10314] netlink: 'syz.5.1968': attribute type 2 has an invalid length. [ 473.873238][T10314] netlink: 'syz.5.1968': attribute type 2 has an invalid length. [ 473.890669][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1968'. [ 474.797123][T10355] fuse: Bad value for 'fd' [ 474.885065][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1985'. [ 475.822300][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 476.308452][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2007'. [ 477.722064][T10455] fuse: Bad value for 'fd' [ 478.349467][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2031'. [ 478.530042][T10482] mkiss: ax0: crc mode is auto. [ 478.795295][T10488] fuse: Bad value for 'fd' [ 479.760276][T10529] fuse: Bad value for 'fd' [ 479.888688][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 480.617234][T10557] fuse: Bad value for 'fd' [ 481.491335][T10587] bridge0: port 3(syz_tun) entered blocking state [ 481.526671][T10587] bridge0: port 3(syz_tun) entered disabled state [ 481.566048][T10587] device syz_tun entered promiscuous mode [ 481.582544][T10583] syz.2.2072 (10583) used greatest stack depth: 16528 bytes left [ 481.608094][T10587] bridge0: port 3(syz_tun) entered blocking state [ 481.614762][T10587] bridge0: port 3(syz_tun) entered forwarding state [ 481.671530][T10590] fuse: Bad value for 'fd' [ 481.898728][T10596] sctp: [Deprecated]: syz.0.2078 (pid 10596) Use of int in max_burst socket option deprecated. [ 481.898728][T10596] Use struct sctp_assoc_value instead [ 482.167646][T10601] fuse: Bad value for 'fd' [ 483.258618][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2090'. [ 483.592248][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 484.427243][T10658] device vxcan3 entered promiscuous mode [ 485.429059][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2112'. [ 485.468789][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2112'. [ 485.499839][T10683] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.509450][T10683] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.518318][T10683] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.527106][T10683] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.543846][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2112'. [ 485.561790][T10684] overlayfs: failed to resolve './file0': -2 [ 485.628132][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2112'. [ 486.070785][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2118'. [ 487.643674][T10752] overlayfs: failed to clone upperpath [ 488.101975][T10766] fuse: Bad value for 'fd' [ 488.204160][T10768] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2146'. [ 488.276327][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 489.467180][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2157'. [ 490.037702][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2161'. [ 491.096225][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2172'. [ 491.967834][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2180'. [ 492.712619][ T5342] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 492.904713][ T5342] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 492.926208][ T5342] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 492.946748][ T5342] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 492.956433][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.983645][T10853] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 493.013960][T10881] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2190'. [ 493.249117][ T5342] usb 4-1: USB disconnect, device number 11 [ 493.840875][T10909] fuse: Bad value for 'fd' [ 494.066756][T10913] fuse: Bad value for 'fd' [ 494.697323][T10937] fuse: Bad value for 'fd' [ 494.954855][T10945] fuse: Bad value for 'fd' [ 495.274209][T10955] net_ratelimit: 3255 callbacks suppressed [ 495.274227][T10955] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 495.841158][T10972] overlayfs: failed to clone lowerpath [ 496.258387][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2228'. [ 497.614489][T11009] fuse: Bad value for 'fd' [ 498.412855][T11027] syz.4.2248[11027] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.413012][T11027] syz.4.2248[11027] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 499.317654][T11049] FAULT_INJECTION: forcing a failure. [ 499.317654][T11049] name failslab, interval 1, probability 0, space 0, times 1 [ 499.331056][T11049] CPU: 0 PID: 11049 Comm: syz.3.2255 Not tainted syzkaller #0 [ 499.338563][T11049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.348664][T11049] Call Trace: [ 499.352040][T11049] [ 499.355039][T11049] dump_stack_lvl+0x188/0x24e [ 499.359848][T11049] ? show_regs_print_info+0x12/0x12 [ 499.365120][T11049] ? load_image+0x410/0x410 [ 499.369676][T11049] should_fail_ex+0x390/0x4c0 [ 499.374449][T11049] should_failslab+0x5/0x20 [ 499.379007][T11049] slab_pre_alloc_hook+0x59/0x300 [ 499.384092][T11049] kmem_cache_alloc_node+0x5a/0x310 [ 499.389323][T11049] ? alloc_io_context+0x27/0x290 [ 499.394361][T11049] alloc_io_context+0x27/0x290 [ 499.399161][T11049] set_task_ioprio+0x458/0x5d0 [ 499.403955][T11049] ? set_task_ioprio+0x5b/0x5d0 [ 499.408845][T11049] __se_sys_ioprio_set+0x811/0xa70 [ 499.414058][T11049] ? __se_sys_ioprio_set+0xf4/0xa70 [ 499.419291][T11049] ? lockdep_hardirqs_on+0x94/0x140 [ 499.424562][T11049] do_syscall_64+0x4c/0xa0 [ 499.429019][T11049] ? clear_bhb_loop+0x60/0xb0 [ 499.433789][T11049] ? clear_bhb_loop+0x60/0xb0 [ 499.438504][T11049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.444442][T11049] RIP: 0033:0x7f80ae19e159 [ 499.448932][T11049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.468594][T11049] RSP: 002b:00007f80aefad028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 499.477035][T11049] RAX: ffffffffffffffda RBX: 00007f80ae425fa0 RCX: 00007f80ae19e159 [ 499.485029][T11049] RDX: 0000000000004004 RSI: 0000000000000000 RDI: 0000000000000002 [ 499.493111][T11049] RBP: 00007f80ae23503b R08: 0000000000000000 R09: 0000000000000000 [ 499.501116][T11049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.509109][T11049] R13: 00007f80ae426038 R14: 00007f80ae425fa0 R15: 00007ffe315bc838 [ 499.517208][T11049] [ 499.582293][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 500.286177][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 500.947896][ T4482] wlan1: Trigger new scan to find an IBSS to join [ 501.212233][ T5333] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 501.403951][ T5333] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.438696][ T5333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.515587][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.521991][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.539178][ T5333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.549464][ T5333] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.563480][ T5333] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.573062][ T5333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.588933][ T5333] usb 4-1: config 0 descriptor?? [ 502.004593][ T5333] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 502.049061][ T5333] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 502.331179][ T129] usb 4-1: USB disconnect, device number 12 [ 502.459719][T11091] fido_id[11091]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 502.729408][T11107] device dummy0 entered promiscuous mode [ 502.745007][T11107] device gretap0 entered promiscuous mode [ 502.761881][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 503.239772][T11128] netlink: 'syz.4.2278': attribute type 1 has an invalid length. [ 503.402585][T11128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.489931][T11132] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 503.568536][T11132] bond1: (slave batadv1): making interface the new active one [ 504.214895][T11132] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 504.242669][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2279'. [ 504.433635][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 504.952266][ T11] wlan1: Trigger new scan to find an IBSS to join [ 506.000584][ T4458] wlan1: Creating new IBSS network, BSSID ae:ab:87:36:0b:6a [ 506.682243][ T4327] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 506.892263][ T4327] usb 4-1: Using ep0 maxpacket: 16 [ 506.899468][ T4327] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.018881][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2306'. [ 507.667668][ T4327] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 507.677674][ T4327] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 507.687494][ T4327] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 507.711561][ T4327] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.772175][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 507.780244][ T4327] usb 4-1: SerialNumber: syz [ 507.830611][T11194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 507.848060][T11194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 507.887532][ T4327] hub 4-1:1.0: bad descriptor, ignoring hub [ 507.904129][ T4327] hub: probe of 4-1:1.0 failed with error -5 [ 508.111907][T11194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 508.152558][T11194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 508.599793][ T4327] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 509.187625][ T6971] usb 4-1: USB disconnect, device number 13 [ 509.355728][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2318'. [ 509.375574][ T6971] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 510.363661][T11277] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0 [ 513.109196][T11324] fuse: Bad value for 'fd' [ 513.133567][T11324] 9pnet_fd: Insufficient options for proto=fd [ 513.636103][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2344'. [ 514.104138][T11349] bond0: (slave bond_slave_1): Releasing backup interface [ 515.463473][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2352'. [ 516.304322][T11393] fuse: Bad value for 'fd' [ 519.027141][T11406] overlayfs: failed to clone upperpath [ 520.122272][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2360'. [ 521.264376][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 521.329003][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 521.361798][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xefc1 instead [ 521.393001][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x9207 instead [ 521.438998][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 521.500558][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 521.556173][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 521.579112][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 521.650724][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 521.713621][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 521.769243][T11439] jffs2: Further such events for this erase block will not be printed [ 521.842733][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 521.917144][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 521.937419][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xefc1 instead [ 521.948246][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x9207 instead [ 521.959340][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 521.979530][T11449] xt_bpf: check failed: parse error [ 522.016967][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 522.077553][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 522.088363][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 522.099054][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 522.110197][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 522.167095][T11439] jffs2: Further such events for this erase block will not be printed [ 522.203419][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 522.234840][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 522.250366][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xefc1 instead [ 522.273536][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x9207 instead [ 522.330554][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 522.348657][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 522.359268][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xefc1 instead [ 522.377145][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x9207 instead [ 522.408877][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 522.440858][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 522.458927][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xefc1 instead [ 522.469755][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x9207 instead [ 522.487103][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 522.500411][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 522.522450][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xefc1 instead [ 522.533186][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x9207 instead [ 522.543745][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 522.568852][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 522.588264][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xefc1 instead [ 522.609180][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x9207 instead [ 522.635225][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 522.682196][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 522.712841][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xefc1 instead [ 522.737075][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x9207 instead [ 522.755980][T11471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2377'. [ 522.777678][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 522.782556][T11471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.839402][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 522.874212][T11471] bond1: (slave batadv1): Error -99 calling set_mac_address [ 522.892285][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xefc1 instead [ 522.903860][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x9207 instead [ 522.917065][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 522.927947][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 522.938846][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xefc1 instead [ 522.949859][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x9207 instead [ 522.960684][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 522.980951][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 523.001819][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xefc1 instead [ 523.026041][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x9207 instead [ 523.051361][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 523.068690][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 523.080896][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xefc1 instead [ 523.115667][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x9207 instead [ 523.153197][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 523.186079][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 523.216811][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xefc1 instead [ 523.288690][T11488] overlayfs: failed to clone upperpath [ 523.308395][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x9207 instead [ 523.337068][T11490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.353662][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 523.371666][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 523.415244][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xefc1 instead [ 523.449771][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x9207 instead [ 523.477169][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 523.488963][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 523.516911][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xefc1 instead [ 523.539709][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x9207 instead [ 523.560419][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 523.582334][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 523.604259][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xefc1 instead [ 523.628850][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x9207 instead [ 523.651279][T11495] overlayfs: failed to clone lowerpath [ 523.657120][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 523.679138][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 523.703638][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xefc1 instead [ 523.739042][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x9207 instead [ 523.769039][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 523.800099][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 523.858917][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xefc1 instead [ 523.890178][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x9207 instead [ 523.915214][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 523.932741][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 523.965097][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xefc1 instead [ 523.994830][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x9207 instead [ 524.031312][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 524.070937][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 524.116089][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xefc1 instead [ 524.162673][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x9207 instead [ 524.187820][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 524.229526][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 524.264585][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xefc1 instead [ 524.310533][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x9207 instead [ 524.349907][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 524.398959][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 524.442251][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xefc1 instead [ 524.502428][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x9207 instead [ 524.535306][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 524.568089][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 524.777460][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xefc1 instead [ 524.930876][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2395'. [ 525.122735][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x9207 instead [ 525.654187][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 525.664669][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 525.678447][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xefc1 instead [ 525.700039][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x9207 instead [ 525.776158][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 525.842143][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 525.892273][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xefc1 instead [ 525.952211][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x9207 instead [ 526.025789][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 526.076367][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 526.126985][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xefc1 instead [ 526.162319][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x9207 instead [ 526.191895][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 526.244444][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 526.290007][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xefc1 instead [ 526.327079][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x9207 instead [ 526.367317][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 526.416773][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 526.449893][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xefc1 instead [ 526.472331][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x9207 instead [ 526.507175][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 526.538265][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 526.579384][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xefc1 instead [ 526.624278][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x9207 instead [ 526.652186][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 526.693949][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 526.737203][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xefc1 instead [ 526.768133][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x9207 instead [ 526.802270][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 526.948037][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 526.972284][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xefc1 instead [ 526.992177][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x9207 instead [ 527.223762][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2399'. [ 527.758556][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 527.799485][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 527.902260][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xefc1 instead [ 527.912777][T11439] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x9207 instead [ 527.927439][T11439] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 527.936864][T11439] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 528.033067][T11541] fuse: Bad value for 'fd' [ 528.778526][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2411'. [ 528.796626][T11571] Dropped outbound packet type=1c [ 529.863495][T11599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 529.882232][ T129] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 530.076106][ T129] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 530.100409][ T129] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 530.131802][ T129] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 530.169900][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.411566][T11615] overlayfs: failed to clone upperpath [ 530.738096][T11620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 530.745418][T11620] IPv6: NLM_F_CREATE should be set when creating new route [ 530.760200][T11620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2427'. [ 531.407643][ T129] pegasus 4-1:1.0: can't reset MAC [ 531.415488][ T129] pegasus: probe of 4-1:1.0 failed with error -5 [ 531.451458][ T129] usb 4-1: USB disconnect, device number 14 [ 532.222955][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.726014][T11666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 533.272428][ T5334] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 533.462161][ T5334] usb 4-1: Using ep0 maxpacket: 32 [ 533.477650][ T5334] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.519351][ T5334] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 533.539424][ T5334] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 533.571194][ T5334] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 533.595483][ T5334] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 533.612528][ T5334] usb 4-1: config 1 interface 1 has no altsetting 0 [ 533.624197][ T5334] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 533.633526][ T5334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.641733][ T5334] usb 4-1: Product: syz [ 533.656567][ T5334] usb 4-1: Manufacturer: syz [ 533.669519][ T5334] usb 4-1: SerialNumber: syz [ 533.772001][T11696] overlayfs: failed to clone upperpath [ 533.916914][ T5334] usb 4-1: selecting invalid altsetting 0 [ 534.098373][T11707] fuse: Bad value for 'fd' [ 534.114317][ T5334] usb 4-1: 1:1: cannot get freq (v2/v3): err -32 [ 534.585236][ T5334] usb 4-1: USB disconnect, device number 15 [ 534.631443][T11727] overlayfs: failed to clone upperpath [ 535.373910][ T26] audit: type=1400 audit(2000000128.550:107): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=11777 comm="syz.3.2473" name="unknown" offset=16 [ 537.999010][ T4458] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 538.077002][ T26] audit: type=1326 audit(2000000131.250:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.0.2490" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f966c79e159 code=0x0 [ 538.982772][T11849] 9pnet_fd: Insufficient options for proto=fd [ 539.775493][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2500'. [ 541.296971][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'. [ 543.788348][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2516'. [ 544.791689][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2518'. [ 546.031400][T11968] fuse: Bad value for 'fd' [ 546.306928][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2532'. [ 546.869239][T11981] overlayfs: failed to clone upperpath [ 547.393775][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2542'. [ 547.614333][T12006] can0: slcan on ttyS3. [ 547.823215][T12009] can0 (unregistered): slcan off ttyS3. [ 548.152502][T12026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2547'. [ 549.499580][T12060] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 549.887809][T12073] fuse: Bad value for 'fd' [ 551.454014][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2568'. [ 552.138373][T12110] bond0: (slave bridge0): Error: Slave device does not support XDP [ 552.286039][T12113] netlink: 'syz.0.2571': attribute type 10 has an invalid length. [ 552.412959][T12113] bridge0: port 3(syz_tun) entered disabled state [ 552.491474][T12113] bridge0: port 3(syz_tun) entered disabled state [ 552.533971][T12113] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 552.686544][T12129] xt_limit: Overflow, try lower: 167772/2147483648 [ 552.702409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.446378][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2583'. [ 554.841633][T12170] overlayfs: failed to clone lowerpath [ 555.596641][T12184] netlink: 'syz.2.2592': attribute type 7 has an invalid length. [ 555.634228][T12184] netlink: 'syz.2.2592': attribute type 7 has an invalid length. [ 555.678247][T12184] netlink: 'syz.2.2592': attribute type 7 has an invalid length. [ 556.710210][T12220] device batadv_slave_1 entered promiscuous mode [ 556.741714][T12220] device batadv_slave_1 left promiscuous mode [ 556.961013][T12233] overlayfs: failed to clone upperpath [ 557.273256][T12247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.156899][T12287] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 559.199679][T12287] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 559.277091][T12287] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 559.295530][T12287] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 559.327985][T12287] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 559.360467][T12287] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 559.404137][T12287] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 559.482234][T12286] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 559.758649][T12299] fuse: Bad value for 'fd' [ 560.313523][T12311] bridge0: port 2(netdevsim0) entered disabled state [ 560.320407][T12311] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.498325][T12321] IPv6: sit1: Disabled Multicast RS [ 561.135875][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2646'. [ 562.956222][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.964424][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.645029][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2662'. [ 564.563693][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 565.230325][T12446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 565.418755][T12451] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 565.546403][T12453] fuse: Bad value for 'fd' [ 566.660492][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2675'. [ 567.684652][T12495] device bridge1 entered promiscuous mode [ 567.814981][T12498] fuse: Bad value for 'fd' [ 568.099847][T12511] fuse: Bad value for 'fd' [ 568.276215][T12522] netlink: 'syz.0.2688': attribute type 1 has an invalid length. [ 568.311859][T12522] 8021q: adding VLAN 0 to HW filter on device bond2 [ 568.376681][T12522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.395347][T12522] bond2: (slave batadv0): Enslaving as a backup interface with an up link [ 568.414237][ T4492] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 568.422709][ T5338] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 568.433246][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 568.603476][ T4492] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 568.643775][ T5338] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.665135][ T5338] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.695824][ T5338] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 568.729236][ T5338] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 568.740080][ T5338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.776950][ T5338] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 568.795966][ T5338] keyspan 4-1:1.0: unsupported endpoint type 0 [ 568.812279][ T5338] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 568.829698][ T5338] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 568.847042][ T5338] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 568.879149][ T5338] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 568.920818][ T5338] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 568.966618][ T5338] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 568.998383][ T5338] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 569.082462][ T5338] usb 4-1: USB disconnect, device number 16 [ 569.103110][ T5338] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 569.150452][ T5338] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 569.163324][T12548] fuse: Bad value for 'fd' [ 569.184123][ T5338] keyspan 4-1:1.0: device disconnected [ 569.369817][T12555] fuse: Unknown parameter 'group_i00000000000000000000' [ 569.805494][T12557] 8021q: adding VLAN 0 to HW filter on device bond3 [ 569.828819][T12557] team0: Port device bond3 added [ 569.992408][T11780] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 570.630164][T12589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2707'. [ 571.352390][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 571.404206][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 571.461933][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 571.471724][T12599] fuse: Bad value for 'fd' [ 571.503822][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 571.606120][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 571.652896][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 571.701626][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 573.948985][T12660] overlayfs: failed to clone upperpath [ 574.056418][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2720'. [ 574.068608][T12649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2725'. [ 574.821364][T12687] fuse: Bad value for 'fd' [ 575.353197][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 579.320245][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2759'. [ 581.130126][T12802] fuse: Bad value for 'fd' [ 588.351253][T12901] ip_tables: iptables: counters copy to user failed while replacing table [ 590.083652][T12916] fuse: Bad value for 'fd' [ 591.599986][T12946] fuse: Bad value for 'fd' [ 591.686321][T12948] FAULT_INJECTION: forcing a failure. [ 591.686321][T12948] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 591.736589][T12948] CPU: 0 PID: 12948 Comm: syz.3.2810 Not tainted syzkaller #0 [ 591.744128][T12948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 591.754229][T12948] Call Trace: [ 591.757545][T12948] [ 591.760521][T12948] dump_stack_lvl+0x188/0x24e [ 591.765260][T12948] ? show_regs_print_info+0x12/0x12 [ 591.770519][T12948] ? load_image+0x410/0x410 [ 591.775080][T12948] ? __lock_acquire+0x7c40/0x7c40 [ 591.780216][T12948] should_fail_ex+0x390/0x4c0 [ 591.784958][T12948] prepare_alloc_pages+0x1e1/0x5b0 [ 591.790208][T12948] __alloc_pages+0x130/0x4f0 [ 591.794860][T12948] ? zone_statistics+0x170/0x170 [ 591.799856][T12948] ? verify_lock_unused+0x140/0x140 [ 591.805113][T12948] __folio_alloc+0xe/0x30 [ 591.809506][T12948] vma_alloc_folio+0x499/0x900 [ 591.814383][T12948] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 591.820226][T12948] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 591.826031][T12948] ? shmem_replace_folio+0xdc0/0xdc0 [ 591.831356][T12948] ? xas_load+0x119/0x140 [ 591.835732][T12948] ? __filemap_get_folio+0x10f/0xde0 [ 591.841093][T12948] ? __filemap_get_folio+0xb43/0xde0 [ 591.846426][T12948] ? __filemap_get_folio+0x10f/0xde0 [ 591.851747][T12948] ? page_cache_prev_miss+0x380/0x380 [ 591.857147][T12948] ? mark_lock+0x94/0x320 [ 591.861507][T12948] ? mark_lock+0x94/0x320 [ 591.865964][T12948] shmem_get_folio_gfp+0x1439/0x35e0 [ 591.871306][T12948] shmem_fallocate+0x8c1/0xfc0 [ 591.876117][T12948] ? shmem_mmap+0x170/0x170 [ 591.880655][T12948] ? rcu_read_lock_any_held+0xb0/0x130 [ 591.886228][T12948] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 591.891546][T12948] ? common_file_perm+0x171/0x1c0 [ 591.896660][T12948] vfs_fallocate+0x57b/0x6f0 [ 591.901345][T12948] __x64_sys_fallocate+0xbd/0x100 [ 591.906405][T12948] do_syscall_64+0x4c/0xa0 [ 591.910863][T12948] ? clear_bhb_loop+0x60/0xb0 [ 591.915564][T12948] ? clear_bhb_loop+0x60/0xb0 [ 591.920268][T12948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.926198][T12948] RIP: 0033:0x7f80ae19e159 [ 591.930637][T12948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.950263][T12948] RSP: 002b:00007f80aefad028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 591.958697][T12948] RAX: ffffffffffffffda RBX: 00007f80ae425fa0 RCX: 00007f80ae19e159 [ 591.966680][T12948] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 591.974671][T12948] RBP: 00007f80ae23503b R08: 0000000000000000 R09: 0000000000000000 [ 591.982660][T12948] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 591.990651][T12948] R13: 00007f80ae426038 R14: 00007f80ae425fa0 R15: 00007ffe315bc838 [ 591.998658][T12948] [ 592.073364][T12952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 592.362589][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2817'. [ 592.405829][T12958] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.414787][T12958] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.423585][T12958] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.432321][T12958] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.459629][T12958] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.468937][T12958] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.477888][T12958] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.487258][T12958] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.612854][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2817'. [ 592.651400][T11725] Bluetooth: hci5: unexpected event for opcode 0x0035 [ 592.689141][T12958] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.698153][T12958] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.707032][T12958] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.715837][T12958] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.749915][T12958] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.758958][T12958] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.767939][T12958] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.777047][T12958] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.662249][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 593.845376][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2820'. [ 594.746328][T13009] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2836'. [ 595.150333][T13021] overlayfs: failed to clone upperpath [ 595.998027][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2846'. [ 596.172491][ T5333] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 596.188782][T13044] bond0: (slave syz_tun): Releasing backup interface [ 596.237037][ T5342] infiniband syz1: ib_query_port failed (-19) [ 596.372272][ T5333] usb 4-1: Using ep0 maxpacket: 32 [ 596.379472][ T5333] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 596.417836][ T5333] usb 4-1: config 0 has no interface number 0 [ 596.442231][ T5333] usb 4-1: config 0 interface 12 has no altsetting 0 [ 596.461761][ T5333] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 596.512243][ T5333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.537933][ T5333] usb 4-1: Product: syz [ 596.553050][ T5333] usb 4-1: Manufacturer: syz [ 596.557697][ T5333] usb 4-1: SerialNumber: syz [ 596.590481][ T5333] usb 4-1: config 0 descriptor?? [ 597.022397][T13069] overlayfs: failed to clone upperpath [ 597.079217][T13071] fuse: Bad value for 'fd' [ 597.804307][T13088] fuse: Bad value for 'user_id' [ 598.041087][T13090] overlayfs: failed to clone upperpath [ 598.056220][ T5333] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 598.082865][ T5333] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 598.106915][ T5333] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 598.136567][ T5333] f81534: probe of 4-1:0.12 failed with error -71 [ 598.203218][ T5333] usb 4-1: USB disconnect, device number 17 [ 598.415706][T13098] overlayfs: failed to clone upperpath [ 601.803330][T13116] fuse: Bad value for 'fd' [ 602.322303][T13135] fuse: Bad value for 'rootmode' [ 603.555285][T13152] fuse: Bad value for 'fd' [ 603.871907][T13154] overlayfs: failed to clone lowerpath [ 605.966811][T13184] fuse: Bad value for 'fd' [ 606.150858][T13186] overlayfs: failed to clone upperpath [ 606.639015][T13195] overlayfs: failed to clone upperpath [ 606.879178][T13217] fuse: Bad value for 'fd' [ 606.891594][T13216] fuse: Unknown parameter 'grou00000000000000000000' [ 606.941825][T13219] fuse: Bad value for 'fd' [ 609.317711][T13265] fuse: Bad value for 'fd' [ 609.407927][T13268] fuse: Unknown parameter 'use00000000000000000000' [ 610.464186][T13283] overlayfs: failed to clone upperpath [ 610.496133][T13283] overlayfs: failed to clone upperpath [ 617.013078][T13394] fuse: Bad value for 'fd' [ 618.352112][T13423] overlayfs: failed to clone upperpath [ 618.643365][T13441] fuse: Bad value for 'fd' [ 618.784018][T13446] fuse: Unknown parameter 'grou00000000000000000000' [ 620.178184][T13471] fuse: root generation should be zero [ 620.237905][T13473] fuse: Bad value for 'fd' [ 620.407468][T13477] fuse: Bad value for 'rootmode' [ 620.490088][T13482] fuse: Bad value for 'fd' [ 621.182484][ T4497] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 621.447630][T13513] fuse: Bad value for 'fd' [ 621.989700][T13534] overlayfs: failed to clone upperpath [ 622.244766][T13541] fuse: Unknown parameter 'group_i00000000000000000000' [ 623.064026][T13564] overlayfs: failed to clone upperpath [ 623.079804][T13566] fuse: Unknown parameter 'group_i00000000000000000000' [ 623.288955][T13576] ip_tables: iptables: counters copy to user failed while replacing table [ 623.325686][T13576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 624.397818][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 624.409950][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.416408][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.144810][T13600] fuse: Unknown parameter 'group_id00000000000000000000' [ 625.448192][T13608] overlayfs: './file0' not a directory [ 626.480791][T13632] fuse: Unknown parameter 'group_id00000000000000000000' [ 626.819114][T13645] 9pnet_fd: Insufficient options for proto=fd [ 628.015410][T13672] fuse: Unknown parameter 'group_id00000000000000000000' [ 629.408490][T13711] fuse: Bad value for 'fd' [ 629.557511][T13717] fuse: Bad value for 'user_id' [ 631.862973][T13748] fuse: Bad value for 'user_id' [ 632.393851][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3104'. [ 632.743816][T13778] fuse: Bad value for 'user_id' [ 634.152262][ T6971] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 634.347732][ T6971] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 634.375204][ T6971] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 634.394837][ T6971] usb 4-1: config 220 has no interface number 2 [ 634.401562][ T6971] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 634.433355][ T6971] usb 4-1: config 220 interface 0 has no altsetting 0 [ 634.449800][ T6971] usb 4-1: config 220 interface 76 has no altsetting 0 [ 634.467331][ T6971] usb 4-1: config 220 interface 1 has no altsetting 0 [ 634.486390][ T6971] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 634.504426][T13843] fuse: Bad value for 'fd' [ 634.516047][ T6971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.535853][ T6971] usb 4-1: Product: syz [ 634.553359][ T6971] usb 4-1: Manufacturer: syz [ 634.566065][ T6971] usb 4-1: SerialNumber: syz [ 634.835773][ T6971] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 634.872565][ T6971] usb 4-1: No valid video chain found. [ 634.898234][ T6971] usb 4-1: selecting invalid altsetting 0 [ 634.967446][ T6971] usb 4-1: selecting invalid altsetting 0 [ 634.977474][ T6971] usbtest: probe of 4-1:220.1 failed with error -22 [ 634.994906][ T6971] usb 4-1: USB disconnect, device number 18 [ 636.038671][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3147'. [ 636.416746][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3154'. [ 636.436046][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3154'. [ 636.527504][T13893] overlayfs: failed to clone upperpath [ 636.622322][ T5333] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 636.786455][T13899] overlayfs: failed to clone upperpath [ 636.835828][ T5333] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.864614][ T5333] usb 4-1: config 0 has no interfaces? [ 636.885276][ T5333] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 636.915620][ T5333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.962707][ T5333] usb 4-1: config 0 descriptor?? [ 637.242671][ T5333] usb 4-1: USB disconnect, device number 19 [ 637.492631][T13919] fuse: Unknown parameter 'user_id00000000000000000000' [ 638.142275][ T6971] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 638.346388][ T6971] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 638.370311][ T6971] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.431324][ T6971] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 638.452995][ T6971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.505535][ T6971] hub 4-1:4.0: USB hub found [ 638.709288][ T6971] hub 4-1:4.0: 2 ports detected [ 638.715494][ T6971] usb 4-1: selecting invalid altsetting 1 [ 638.735009][ T6971] hub 4-1:4.0: Using single TT (err -22) [ 638.916292][ T6971] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 638.934035][ T6971] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 639.003014][ T6971] usb 4-1: USB disconnect, device number 20 [ 642.105683][T13990] fuse: Bad value for 'rootmode' [ 642.569929][T13994] fuse: Unknown parameter 'fd0x0000000000000007' [ 642.853998][T13996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3190'. [ 642.935011][T13996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3190'. [ 643.172779][T14002] ip_tables: iptables: counters copy to user failed while replacing table [ 643.891191][T14019] overlayfs: failed to clone lowerpath [ 644.095894][T14024] fuse: Unknown parameter 'fd0x0000000000000006' [ 645.387550][T14057] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 645.988628][T14069] fuse: Unknown parameter 'fd0x0000000000000006' [ 646.862897][ T4482] wlan1: Trigger new scan to find an IBSS to join [ 649.167335][T14124] overlayfs: failed to clone lowerpath [ 649.523855][T14131] fuse: Unknown parameter 'user_i00000000000000000000' [ 649.943525][ T4497] wlan1: Trigger new scan to find an IBSS to join [ 651.003262][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3249'. [ 651.111769][T14158] overlayfs: failed to clone lowerpath [ 652.086956][T14172] overlayfs: failed to clone upperpath [ 652.313556][T14182] overlayfs: failed to clone upperpath [ 652.487746][T14192] overlayfs: statfs failed on './file0' [ 652.862614][ T4458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.202669][ T4489] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 654.004592][T14212] ip_tables: iptables: counters copy to user failed while replacing table [ 654.704893][T14230] ubi: mtd0 is already attached to ubi0 [ 654.737594][T14233] overlayfs: failed to clone lowerpath [ 655.262429][T14253] fuse: Unknown parameter 'fd0x0000000000000006' [ 656.052678][T14270] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 656.419743][T14282] fuse: Unknown parameter 'fd0x0000000000000006' [ 656.716116][T14292] overlayfs: failed to clone upperpath [ 657.077093][T14308] overlayfs: failed to clone upperpath [ 657.186894][T14313] fuse: Unknown parameter 'fd0x0000000000000006' [ 658.719869][T14348] fuse: Bad value for 'rootmode' [ 659.885267][T14391] fuse: Bad value for 'rootmode' [ 661.270389][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3349'. [ 662.378857][T14431] overlayfs: failed to clone upperpath [ 662.542473][T14441] netlink: 'syz.4.3359': attribute type 5 has an invalid length. [ 663.853914][T14486] overlayfs: failed to clone upperpath [ 664.906871][T14513] overlayfs: failed to clone upperpath [ 665.644585][T14539] overlayfs: failed to clone upperpath [ 665.666280][T14525] kvm [14524]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x279f [ 668.543014][ T6971] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 668.722171][ T6971] usb 4-1: Using ep0 maxpacket: 32 [ 668.730140][ T6971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 668.751574][ T6971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 668.775849][ T6971] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 668.792371][ T6971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.841007][ T6971] usb 4-1: config 0 descriptor?? [ 668.853506][ T6971] hub 4-1:0.0: USB hub found [ 669.062357][ T6971] hub 4-1:0.0: 1 port detected [ 669.879558][ T6971] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 669.883253][ T5342] usb 4-1: USB disconnect, device number 21 [ 671.717829][T14682] overlayfs: failed to clone upperpath [ 672.011846][T14693] fuse: Unknown parameter 'fd0x0000000000000009' [ 672.854054][T14703] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 674.792666][T14731] fuse: Unknown parameter 'fd0x0000000000000006' [ 674.974822][T14737] overlayfs: failed to clone upperpath [ 675.010395][T14737] overlayfs: failed to clone upperpath [ 675.436356][T14748] netlink: 'syz.0.3467': attribute type 12 has an invalid length. [ 675.453196][T14748] netlink: 'syz.0.3467': attribute type 29 has an invalid length. [ 675.471439][T14748] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3467'. [ 675.486515][T14748] netlink: 'syz.0.3467': attribute type 1 has an invalid length. [ 675.514726][T14748] netlink: 'syz.0.3467': attribute type 2 has an invalid length. [ 675.532216][T14748] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3467'. [ 675.900584][T14773] tipc: Enabling of bearer rejected, failed to enable media [ 677.319786][T14808] overlayfs: failed to clone upperpath [ 678.442677][T14843] overlayfs: failed to clone upperpath [ 681.468372][T14891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3520'. [ 681.718023][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055246400: rx timeout, send abort [ 682.218090][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055246000: rx timeout, send abort [ 682.228640][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055246400: abort rx timeout. Force session deactivation [ 682.726516][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055246000: abort rx timeout. Force session deactivation [ 683.789248][T14903] No such timeout policy "syz1" [ 683.860589][T14908] netlink: 'syz.0.3527': attribute type 5 has an invalid length. [ 684.014828][T14913] overlayfs: failed to clone upperpath [ 684.037692][T14913] overlayfs: failed to clone upperpath [ 685.183260][ T4500] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 685.193759][ T4472] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 685.825019][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.831443][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.604204][T14958] overlayfs: failed to clone upperpath [ 686.653281][T14958] overlayfs: failed to clone upperpath [ 686.712104][ T5342] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 686.906123][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.917187][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.927402][ T5342] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 686.947593][ T5342] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 686.957177][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.003822][ T5342] usb 4-1: config 0 descriptor?? [ 687.151399][T14972] overlayfs: failed to clone upperpath [ 687.419830][ T5342] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 687.437763][ T5342] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 687.457971][ T5342] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 687.478193][ T5342] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 687.485925][ T5342] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 687.497094][ T5342] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 687.508643][ T5342] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 687.516332][ T5342] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 687.525241][ T5342] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 687.532883][ T5342] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 687.540374][ T5342] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 687.549785][ T5342] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 687.560275][ T5342] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 687.570108][ T5342] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 687.585396][ T5342] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 687.596118][ T5342] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 687.617082][ T5342] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 688.101024][T14997] usb 4-1: language id specifier not provided by device, defaulting to English [ 688.350942][T15011] overlayfs: failed to clone upperpath [ 689.932837][ T6971] usb 4-1: USB disconnect, device number 22 [ 691.166643][T15082] overlayfs: failed to clone upperpath [ 691.198013][T15082] overlayfs: failed to clone upperpath [ 691.366936][T15094] tipc: Enabling of bearer rejected, failed to enable media [ 691.817351][T15112] overlayfs: failed to clone upperpath [ 691.982943][T15122] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 695.448141][T15215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3635'. [ 695.503045][T15218] overlayfs: failed to clone upperpath [ 696.108857][T15233] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 697.267272][T11725] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 701.658454][T15316] FAULT_INJECTION: forcing a failure. [ 701.658454][T15316] name failslab, interval 1, probability 0, space 0, times 0 [ 701.742415][T15316] CPU: 0 PID: 15316 Comm: syz.3.3673 Not tainted syzkaller #0 [ 701.749984][T15316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 701.760078][T15316] Call Trace: [ 701.763386][T15316] [ 701.766336][T15316] dump_stack_lvl+0x188/0x24e [ 701.771047][T15316] ? show_regs_print_info+0x12/0x12 [ 701.776277][T15316] ? load_image+0x410/0x410 [ 701.780806][T15316] ? __might_sleep+0xd0/0xd0 [ 701.785481][T15316] ? __lock_acquire+0x7c40/0x7c40 [ 701.790539][T15316] should_fail_ex+0x390/0x4c0 [ 701.795246][T15316] should_failslab+0x5/0x20 [ 701.799779][T15316] slab_pre_alloc_hook+0x59/0x300 [ 701.804841][T15316] ? kvmalloc_node+0x6c/0x180 [ 701.809548][T15316] __kmem_cache_alloc_node+0x4f/0x270 [ 701.814950][T15316] ? kvmalloc_node+0x6c/0x180 [ 701.819664][T15316] __kmalloc_node+0xa2/0x240 [ 701.824287][T15316] kvmalloc_node+0x6c/0x180 [ 701.828822][T15316] bpf_jit_binary_pack_alloc+0x1b5/0x400 [ 701.834566][T15316] ? bpf_arch_text_copy+0x40/0x40 [ 701.839675][T15316] ? bpf_jit_binary_free+0x60/0x60 [ 701.844812][T15316] ? security_capable+0x85/0xb0 [ 701.849793][T15316] bpf_int_jit_compile+0xb86d/0xcbe0 [ 701.855149][T15316] ? slab_free_freelist_hook+0x133/0x1b0 [ 701.860850][T15316] ? __kmem_cache_free+0xb6/0x200 [ 701.865926][T15316] ? emit_bpf_dispatcher+0x1060/0x1060 [ 701.871440][T15316] ? rcu_is_watching+0x11/0xa0 [ 701.876244][T15316] bpf_prog_select_runtime+0x48b/0x7d0 [ 701.881727][T15316] ? bpf_prog_realloc+0x142/0x1c0 [ 701.886841][T15316] bpf_prepare_filter+0x100e/0x11b0 [ 701.892129][T15316] ? bpf_prog_create+0x1f0/0x1f0 [ 701.897103][T15316] ? kmemdup+0x42/0x60 [ 701.901238][T15316] ? __get_filter+0x2db/0x400 [ 701.905947][T15316] sk_attach_filter+0x20/0x140 [ 701.910733][T15316] sk_setsockopt+0x2078/0x29a0 [ 701.915596][T15316] ? sockopt_capable+0x60/0x60 [ 701.920389][T15316] ? aa_sk_perm+0x81f/0x950 [ 701.924963][T15316] ? aa_af_perm+0x340/0x340 [ 701.929486][T15316] ? __fget_files+0x3fc/0x460 [ 701.934214][T15316] ? aa_sock_opt_perm+0x74/0x100 [ 701.939183][T15316] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 701.944813][T15316] ? security_socket_setsockopt+0x7a/0xa0 [ 701.950602][T15316] __sys_setsockopt+0x2f6/0x3d0 [ 701.955524][T15316] __x64_sys_setsockopt+0xb1/0xc0 [ 701.960674][T15316] do_syscall_64+0x4c/0xa0 [ 701.965118][T15316] ? clear_bhb_loop+0x60/0xb0 [ 701.969824][T15316] ? clear_bhb_loop+0x60/0xb0 [ 701.974535][T15316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 701.980456][T15316] RIP: 0033:0x7f80ae19e159 [ 701.984886][T15316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.004507][T15316] RSP: 002b:00007f80aefad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 702.012947][T15316] RAX: ffffffffffffffda RBX: 00007f80ae425fa0 RCX: 00007f80ae19e159 [ 702.020938][T15316] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 702.028935][T15316] RBP: 00007f80ae23503b R08: 0000000000000010 R09: 0000000000000000 [ 702.036941][T15316] R10: 0000200000ab9ff0 R11: 0000000000000246 R12: 0000000000000000 [ 702.044933][T15316] R13: 00007f80ae426038 R14: 00007f80ae425fa0 R15: 00007ffe315bc838 [ 702.052948][T15316] [ 702.898592][T15337] overlayfs: failed to clone upperpath [ 703.445248][T11725] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 704.499782][T15383] netlink: 'syz.4.3696': attribute type 1 has an invalid length. [ 704.644248][T15383] 8021q: adding VLAN 0 to HW filter on device bond2 [ 704.843003][T15387] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 705.441021][T15389] bond2 (unregistering): (slave syz_tun): Releasing backup interface [ 705.475969][T15389] bond2 (unregistering): Released all slaves [ 706.640704][T15430] ip_tables: iptables: counters copy to user failed while replacing table [ 706.974834][T15445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3718'. [ 707.111284][T15449] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 707.177834][T15449] bond2: (slave vti0): Error -95 calling set_mac_address [ 707.721372][T15463] ip_tables: iptables: counters copy to user failed while replacing table [ 709.224489][T15497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3732'. [ 709.296918][T15500] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 709.334113][T15500] bond4: (slave vti0): Error -95 calling set_mac_address [ 709.437298][T15502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3735'. [ 709.451219][T15502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3735'. [ 709.471690][T15502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3735'. [ 710.055534][T15526] FAULT_INJECTION: forcing a failure. [ 710.055534][T15526] name failslab, interval 1, probability 0, space 0, times 0 [ 710.121807][T15526] CPU: 1 PID: 15526 Comm: syz.3.3745 Not tainted syzkaller #0 [ 710.129346][T15526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 710.139406][T15526] Call Trace: [ 710.142693][T15526] [ 710.145629][T15526] dump_stack_lvl+0x188/0x24e [ 710.150328][T15526] ? show_regs_print_info+0x12/0x12 [ 710.155558][T15526] ? load_image+0x410/0x410 [ 710.160077][T15526] ? __might_sleep+0xd0/0xd0 [ 710.164688][T15526] ? __lock_acquire+0x7c40/0x7c40 [ 710.169771][T15526] should_fail_ex+0x390/0x4c0 [ 710.174502][T15526] should_failslab+0x5/0x20 [ 710.179028][T15526] slab_pre_alloc_hook+0x59/0x300 [ 710.184078][T15526] kmem_cache_alloc+0x56/0x2f0 [ 710.188862][T15526] ? ep_insert+0x249/0x1980 [ 710.193506][T15526] ep_insert+0x249/0x1980 [ 710.197864][T15526] ? __mutex_lock+0x1ab/0xae0 [ 710.202574][T15526] ? ep_loop_check+0x1b0/0x1b0 [ 710.207368][T15526] ? mutex_lock_nested+0x10/0x10 [ 710.212331][T15526] ? __lock_acquire+0x7c40/0x7c40 [ 710.217427][T15526] do_epoll_ctl+0x8b2/0xf40 [ 710.221971][T15526] __x64_sys_epoll_ctl+0x162/0x1b0 [ 710.227119][T15526] ? ep_modify+0xa80/0xa80 [ 710.231568][T15526] ? lockdep_hardirqs_on+0x94/0x140 [ 710.236796][T15526] do_syscall_64+0x4c/0xa0 [ 710.241269][T15526] ? clear_bhb_loop+0x60/0xb0 [ 710.245976][T15526] ? clear_bhb_loop+0x60/0xb0 [ 710.250684][T15526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 710.256607][T15526] RIP: 0033:0x7f80ae19e159 [ 710.261038][T15526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.280667][T15526] RSP: 002b:00007f80aefad028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 710.289108][T15526] RAX: ffffffffffffffda RBX: 00007f80ae425fa0 RCX: 00007f80ae19e159 [ 710.297104][T15526] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 710.305094][T15526] RBP: 00007f80ae23503b R08: 0000000000000000 R09: 0000000000000000 [ 710.313083][T15526] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.321074][T15526] R13: 00007f80ae426038 R14: 00007f80ae425fa0 R15: 00007ffe315bc838 [ 710.329071][T15526] [ 715.236506][T15615] netlink: 'syz.0.3781': attribute type 1 has an invalid length. [ 715.336113][T15615] 8021q: adding VLAN 0 to HW filter on device bond5 [ 715.364564][T15619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3782'. [ 716.084848][T15620] bond5 (unregistering): Released all slaves [ 716.388432][T15634] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 716.405783][T15634] overlayfs: failed to set xattr on upper [ 716.417258][T15634] overlayfs: ...falling back to index=off,metacopy=off. [ 716.425817][T15634] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 716.542207][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 717.182337][T11780] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 717.192802][ T4500] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 720.813362][T15702] netlink: 'syz.2.3813': attribute type 4 has an invalid length. [ 721.349983][ T26] audit: type=1800 audit(2000000314.520:109): pid=15697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3809" name="cpuacct.usage_percpu" dev="fuse" ino=0 res=0 errno=0 [ 721.554538][T15733] FAULT_INJECTION: forcing a failure. [ 721.554538][T15733] name failslab, interval 1, probability 0, space 0, times 0 [ 721.581935][T15733] CPU: 1 PID: 15733 Comm: syz.3.3829 Not tainted syzkaller #0 [ 721.589484][T15733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 721.599590][T15733] Call Trace: [ 721.602910][T15733] [ 721.605875][T15733] dump_stack_lvl+0x188/0x24e [ 721.610622][T15733] ? show_regs_print_info+0x12/0x12 [ 721.615867][T15733] ? load_image+0x410/0x410 [ 721.620401][T15733] ? __might_sleep+0xd0/0xd0 [ 721.625024][T15733] ? __lock_acquire+0x7c40/0x7c40 [ 721.630116][T15733] should_fail_ex+0x390/0x4c0 [ 721.634879][T15733] should_failslab+0x5/0x20 [ 721.639408][T15733] slab_pre_alloc_hook+0x59/0x300 [ 721.644468][T15733] kmem_cache_alloc+0x56/0x2f0 [ 721.649256][T15733] ? skb_clone+0x1e7/0x370 [ 721.653727][T15733] skb_clone+0x1e7/0x370 [ 721.657996][T15733] pfkey_sendmsg+0x4c8/0x1140 [ 721.662808][T15733] ? pfkey_release+0x340/0x340 [ 721.667613][T15733] ? aa_sk_perm+0x81f/0x950 [ 721.672148][T15733] ? aa_af_perm+0x340/0x340 [ 721.676678][T15733] ? __might_fault+0xa6/0x120 [ 721.681426][T15733] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 721.687958][T15733] ? aa_sock_msg_perm+0x94/0x150 [ 721.692928][T15733] ? apparmor_socket_sendmsg+0x8a/0x330 [ 721.698506][T15733] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 721.703815][T15733] ? security_socket_sendmsg+0x7c/0xa0 [ 721.709301][T15733] ? pfkey_release+0x340/0x340 [ 721.714107][T15733] ____sys_sendmsg+0x5ed/0x9a0 [ 721.718914][T15733] ? __sys_sendmsg_sock+0x30/0x30 [ 721.723969][T15733] ? __import_iovec+0x306/0x510 [ 721.728905][T15733] ? import_iovec+0x6f/0xa0 [ 721.733443][T15733] ___sys_sendmsg+0x2a2/0x360 [ 721.738158][T15733] ? release_firmware_map_entry+0x187/0x187 [ 721.744092][T15733] ? __sys_sendmsg+0x2a0/0x2a0 [ 721.748915][T15733] ? __might_fault+0xc2/0x120 [ 721.753614][T15733] ? __might_fault+0xa6/0x120 [ 721.758333][T15733] __sys_sendmmsg+0x2c3/0x510 [ 721.763053][T15733] ? __ia32_sys_sendmsg+0x80/0x80 [ 721.768112][T15733] ? __ia32_sys_get_robust_list+0x100/0x100 [ 721.774110][T15733] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 721.780120][T15733] ? lock_chain_count+0x20/0x20 [ 721.785017][T15733] __x64_sys_sendmmsg+0x9c/0xb0 [ 721.789912][T15733] do_syscall_64+0x4c/0xa0 [ 721.794359][T15733] ? clear_bhb_loop+0x60/0xb0 [ 721.799064][T15733] ? clear_bhb_loop+0x60/0xb0 [ 721.803785][T15733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 721.809705][T15733] RIP: 0033:0x7f80ae19e159 [ 721.814142][T15733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.833776][T15733] RSP: 002b:00007f80aefad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 721.842217][T15733] RAX: ffffffffffffffda RBX: 00007f80ae425fa0 RCX: 00007f80ae19e159 [ 721.850211][T15733] RDX: 00000000000002c8 RSI: 00002000000000c0 RDI: 0000000000000004 [ 721.858202][T15733] RBP: 00007f80ae23503b R08: 0000000000000000 R09: 0000000000000000 [ 721.866192][T15733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 721.874214][T15733] R13: 00007f80ae426038 R14: 00007f80ae425fa0 R15: 00007ffe315bc838 [ 721.882224][T15733] [ 722.254624][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3836'. [ 729.762127][ T5338] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 729.964853][ T5338] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.015211][ T5338] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 730.042205][ T5338] usb 4-1: config 1 has no interface number 0 [ 730.062113][ T5338] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.095327][ T5338] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 730.118150][ T5338] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 730.137537][ T5338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.156142][ T5338] usb 4-1: Product: syz [ 730.166256][ T5338] usb 4-1: Manufacturer: syz [ 730.182075][ T5338] usb 4-1: SerialNumber: syz [ 730.345287][T15925] overlayfs: failed to clone upperpath [ 730.814068][ T5338] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 730.827223][ T5338] cdc_ncm 4-1:1.1: bind() failure [ 730.854269][ T5338] usb 4-1: USB disconnect, device number 23 [ 733.553958][T15999] device bridge0 entered promiscuous mode [ 733.601087][T15995] device bridge0 left promiscuous mode [ 740.749757][T16083] overlayfs: failed to clone upperpath [ 741.027023][T16096] overlayfs: failed to clone upperpath [ 742.072318][ C1] [ 742.074704][ C1] ================================ [ 742.079806][ C1] WARNING: inconsistent lock state [ 742.084921][ C1] syzkaller #0 Not tainted [ 742.089388][ C1] -------------------------------- [ 742.094502][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 742.101354][ C1] ksoftirqd/1/21 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 742.107603][ C1] ffff888078f74130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x109/0x250 [ 742.116970][ C1] {SOFTIRQ-ON-W} state was registered at: [ 742.122684][ C1] lock_acquire+0x1bb/0x4a0 [ 742.127288][ C1] lock_sock_nested+0x44/0x100 [ 742.132149][ C1] x25_bind+0x1aa/0x3e0 [ 742.136392][ C1] __sys_bind+0x2e9/0x3e0 [ 742.140806][ C1] __x64_sys_bind+0x76/0x80 [ 742.145401][ C1] do_syscall_64+0x4c/0xa0 [ 742.149913][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 742.155912][ C1] irq event stamp: 2202326 [ 742.160326][ C1] hardirqs last enabled at (2202326): [] __local_bh_enable_ip+0x136/0x1c0 [ 742.170534][ C1] hardirqs last disabled at (2202325): [] __local_bh_enable_ip+0xd7/0x1c0 [ 742.180609][ C1] softirqs last enabled at (2202276): [] run_ksoftirqd+0xa4/0x100 [ 742.190084][ C1] softirqs last disabled at (2202281): [] run_ksoftirqd+0xa4/0x100 [ 742.199543][ C1] [ 742.199543][ C1] other info that might help us debug this: [ 742.207597][ C1] Possible unsafe locking scenario: [ 742.207597][ C1] [ 742.215040][ C1] CPU0 [ 742.218327][ C1] ---- [ 742.221611][ C1] lock(sk_lock-AF_X25); [ 742.225954][ C1] [ 742.229430][ C1] lock(sk_lock-AF_X25); [ 742.233939][ C1] [ 742.233939][ C1] *** DEADLOCK *** [ 742.233939][ C1] [ 742.242094][ C1] 1 lock held by ksoftirqd/1/21: [ 742.247029][ C1] #0: ffffffff8cb2dc20 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x30/0x230 [ 742.257096][ C1] [ 742.257096][ C1] stack backtrace: [ 742.262984][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 742.270267][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 742.280323][ C1] Call Trace: [ 742.283600][ C1] [ 742.286536][ C1] dump_stack_lvl+0x188/0x24e [ 742.291238][ C1] ? show_regs_print_info+0x12/0x12 [ 742.296458][ C1] valid_state+0x13b/0x1d0 [ 742.300876][ C1] mark_lock_irq+0xa9/0x900 [ 742.305383][ C1] ? stack_trace_save+0xa6/0xf0 [ 742.310306][ C1] ? save_trace+0xbb0/0xbb0 [ 742.314819][ C1] ? mark_lock+0x94/0x320 [ 742.319159][ C1] ? save_trace+0x5a/0xbb0 [ 742.323577][ C1] ? mark_lock+0x94/0x320 [ 742.327913][ C1] mark_lock+0x208/0x320 [ 742.332165][ C1] __lock_acquire+0xce0/0x7c40 [ 742.336961][ C1] ? debug_objects_fill_pool+0x87/0x780 [ 742.342568][ C1] ? verify_lock_unused+0x140/0x140 [ 742.347881][ C1] ? verify_lock_unused+0x140/0x140 [ 742.353092][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 742.359166][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 742.364208][ C1] ? lock_chain_count+0x20/0x20 [ 742.369064][ C1] lock_acquire+0x1bb/0x4a0 [ 742.373589][ C1] ? x25_kill_by_neigh+0x109/0x250 [ 742.378701][ C1] ? x25_kill_by_neigh+0xff/0x250 [ 742.383722][ C1] ? read_lock_is_recursive+0x10/0x10 [ 742.389112][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 742.394485][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 742.399702][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 742.405077][ C1] ? _local_bh_enable+0xa0/0xa0 [ 742.409928][ C1] lock_sock_nested+0x44/0x100 [ 742.414695][ C1] ? x25_kill_by_neigh+0x109/0x250 [ 742.419810][ C1] x25_kill_by_neigh+0x109/0x250 [ 742.424751][ C1] x25_lapb_receive_frame+0x1a3/0xf20 [ 742.430128][ C1] ? psi_task_switch+0x400/0x740 [ 742.435065][ C1] ? netif_receive_skb_core+0x30/0x230 [ 742.440559][ C1] ? netif_receive_skb_core+0x30/0x230 [ 742.446026][ C1] ? x25_device_event+0x250/0x250 [ 742.451053][ C1] netif_receive_skb_core+0x166/0x230 [ 742.456430][ C1] lapbeth_napi_poll+0x3e/0x80 [ 742.461218][ C1] __napi_poll+0xbb/0x460 [ 742.465562][ C1] net_rx_action+0x622/0xbc0 [ 742.470157][ C1] ? net_tx_action+0x930/0x930 [ 742.474933][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 742.480927][ C1] ? __bpf_trace_tasklet+0x10/0x10 [ 742.486048][ C1] ? lock_chain_count+0x20/0x20 [ 742.490917][ C1] ? finish_task_switch+0x262/0x8e0 [ 742.496215][ C1] handle_softirqs+0x291/0x910 [ 742.500983][ C1] ? run_ksoftirqd+0xa4/0x100 [ 742.505688][ C1] ? do_softirq+0x210/0x210 [ 742.510196][ C1] run_ksoftirqd+0xa4/0x100 [ 742.514703][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 742.519909][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 742.525317][ C1] ? takeover_tasklets+0x770/0x770 [ 742.530433][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 742.535631][ C1] smpboot_thread_fn+0x667/0xa30 [ 742.540630][ C1] ? smpboot_thread_fn+0x49/0xa30 [ 742.545663][ C1] kthread+0x29d/0x330 [ 742.549735][ C1] ? cpu_report_death+0x250/0x250 [ 742.554766][ C1] ? kthread_blkcg+0xd0/0xd0 [ 742.559355][ C1] ret_from_fork+0x1f/0x30 [ 742.563777][ C1] [ 742.566868][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3506 [ 742.575637][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 21, name: ksoftirqd/1 [ 742.584579][ C1] preempt_count: 100, expected: 0 [ 742.589597][ C1] RCU nest depth: 1, expected: 0 [ 742.594547][ C1] INFO: lockdep is turned off. [ 742.599303][ C1] Preemption disabled at: [ 742.599310][ C1] [] handle_softirqs+0xfd/0x910 [ 742.610068][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 742.617453][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 742.627508][ C1] Call Trace: [ 742.630787][ C1] [ 742.633718][ C1] dump_stack_lvl+0x188/0x24e [ 742.638408][ C1] ? show_regs_print_info+0x12/0x12 [ 742.643613][ C1] ? load_image+0x410/0x410 [ 742.648125][ C1] ? handle_softirqs+0xfd/0x910 [ 742.652983][ C1] __might_resched+0x489/0x5f0 [ 742.657759][ C1] ? handle_softirqs+0xfd/0x910 [ 742.662616][ C1] ? __might_sleep+0xd0/0xd0 [ 742.667204][ C1] ? read_lock_is_recursive+0x10/0x10 [ 742.672575][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 742.678035][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 742.683234][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 742.688615][ C1] ? _local_bh_enable+0xa0/0xa0 [ 742.693466][ C1] lock_sock_nested+0x59/0x100 [ 742.698236][ C1] x25_kill_by_neigh+0x109/0x250 [ 742.703199][ C1] x25_lapb_receive_frame+0x1a3/0xf20 [ 742.708582][ C1] ? psi_task_switch+0x400/0x740 [ 742.713519][ C1] ? netif_receive_skb_core+0x30/0x230 [ 742.718989][ C1] ? netif_receive_skb_core+0x30/0x230 [ 742.724469][ C1] ? x25_device_event+0x250/0x250 [ 742.729500][ C1] netif_receive_skb_core+0x166/0x230 [ 742.734878][ C1] lapbeth_napi_poll+0x3e/0x80 [ 742.739644][ C1] __napi_poll+0xbb/0x460 [ 742.744011][ C1] net_rx_action+0x622/0xbc0 [ 742.748597][ C1] ? net_tx_action+0x930/0x930 [ 742.753355][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 742.759339][ C1] ? __bpf_trace_tasklet+0x10/0x10 [ 742.764442][ C1] ? lock_chain_count+0x20/0x20 [ 742.769291][ C1] ? finish_task_switch+0x262/0x8e0 [ 742.774503][ C1] handle_softirqs+0x291/0x910 [ 742.779264][ C1] ? run_ksoftirqd+0xa4/0x100 [ 742.783946][ C1] ? do_softirq+0x210/0x210 [ 742.788463][ C1] run_ksoftirqd+0xa4/0x100 [ 742.792977][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 742.798177][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 742.803743][ C1] ? takeover_tasklets+0x770/0x770 [ 742.808855][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 742.814058][ C1] smpboot_thread_fn+0x667/0xa30 [ 742.819012][ C1] ? smpboot_thread_fn+0x49/0xa30 [ 742.824044][ C1] kthread+0x29d/0x330 [ 742.828117][ C1] ? cpu_report_death+0x250/0x250 [ 742.833155][ C1] ? kthread_blkcg+0xd0/0xd0 [ 742.837753][ C1] ret_from_fork+0x1f/0x30 [ 742.842198][ C1] [ 747.263908][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.270333][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.102730][ T4395] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 751.116190][ T4395] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)