last executing test programs: 16m1.854717245s ago: executing program 2 (id=40): syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000000c0)) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x398) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) setrlimit(0xd, &(0x7f00000001c0)={0x3, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x80000000000003) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x501442, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@dev, @in6=@dev}}, {{@in6=@private1}, 0x0, @in=@dev}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1fa) 15m59.445431024s ago: executing program 2 (id=42): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a40, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001600)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xb, "97451a24bdc556"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, &(0x7f0000000600)={r7, r6, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) r8 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'syzkaller1\x00', {0x1}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) 15m49.578786035s ago: executing program 2 (id=53): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f2) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x40084) connect$pppoe(r7, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000050000005600000025000000190004000400000007fd170000000000040000000000000000", 0x39}], 0x1) 15m46.042756522s ago: executing program 2 (id=57): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x10) r5 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) mmap(&(0x7f0000610000/0x3000)=nil, 0x3000, 0x3000012, 0x4c10a0703446b531, r5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 15m43.192097991s ago: executing program 2 (id=63): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x80800) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0x8, 0x1800}, {0x1, 0xe65b}], 0x3) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2c, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) pause() sendmsg$NFT_BATCH(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) landlock_restrict_self(0xffffffffffffffff, 0xc) 15m38.561450404s ago: executing program 2 (id=70): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x20060400) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x3) r6 = gettid() syz_open_procfs(r6, &(0x7f00000000c0)='stat\x00') r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f00000000c0)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000040)={0x0}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r5}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x0, r5, 0x4}) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x149a82, 0x0) write$cgroup_int(r9, &(0x7f00000001c0)=0x9, 0x12) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000240)=""/75}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r10, &(0x7f0000000040)='1\x00', 0x1) 15m22.010650178s ago: executing program 32 (id=70): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x20060400) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x3) r6 = gettid() syz_open_procfs(r6, &(0x7f00000000c0)='stat\x00') r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f00000000c0)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000040)={0x0}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r5}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x0, r5, 0x4}) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x149a82, 0x0) write$cgroup_int(r9, &(0x7f00000001c0)=0x9, 0x12) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000240)=""/75}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r10, &(0x7f0000000040)='1\x00', 0x1) 12m52.791041052s ago: executing program 4 (id=287): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(r0, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, r5, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x18}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f0000000040)=[0x0]) socket$inet_icmp(0x2, 0x2, 0x1) write(r6, &(0x7f0000000180)='1', 0x1) 12m51.107295102s ago: executing program 4 (id=288): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x1000000, &(0x7f00000006c0), 0x1, 0x62f, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x100, 0x116) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc2}}) r1 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0xfffffffd, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x40000600) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) syz_io_uring_setup(0x54f1, &(0x7f0000000280)={0x0, 0xa985, 0x40000, 0x1000, 0x2aa}, 0x0, &(0x7f0000000180), 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x101000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r10, 0xc0305602, &(0x7f0000001200)={0x0, 0x4, 0x2007, 0x1}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r3, 0x0, r12, 0x0, 0x80000038f9, 0x0) splice(r11, 0x0, r1, 0x0, 0x7fffffffffffffff, 0x1) write(r2, &(0x7f0000000040), 0xffffff4a) 12m47.887222911s ago: executing program 4 (id=289): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0', 0xb) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000040000000060000000800000000000000", @ANYRES32, @ANYBLOB="16005545000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffffc, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 12m43.86413234s ago: executing program 4 (id=294): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) syz_open_procfs$namespace(0x0, &(0x7f00000012c0)='ns/ipc\x00') ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r8, 0x0, r6, 0x0, 0xf3a, 0x0) tee(r5, 0xffffffffffffffff, 0xf3a, 0x4) write$binfmt_elf64(r7, &(0x7f0000000380)=ANY=[], 0x18c6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f00000034c0)={0x2020}, 0x2020) epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r11, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12m41.470435128s ago: executing program 4 (id=315): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000908000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x4000) ftruncate(r0, 0xc17a) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="100000000000"], 0x30}, 0x3400c8d4) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000480)=0x3) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000900)={0x7, 0x7f, 0x200}) pwritev(r3, 0x0, 0x0, 0x2, 0xffffff7f) openat(0xffffffffffffff9c, 0x0, 0x2, 0x144) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00006d2000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x1) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) 12m37.340188439s ago: executing program 4 (id=320): socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000001200)={0x23, 0x2, 0xc, 0x21}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) accept$inet(r2, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x3}, 0xf) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000001a00010e25bd70000000000002000000ff00000000000000"], 0x1c}}, 0x844) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) 12m21.368905672s ago: executing program 33 (id=320): socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000001200)={0x23, 0x2, 0xc, 0x21}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) accept$inet(r2, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x3}, 0xf) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000001a00010e25bd70000000000002000000ff00000000000000"], 0x1c}}, 0x844) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) 11m49.045214689s ago: executing program 3 (id=369): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r7 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) read(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) 11m47.8464646s ago: executing program 3 (id=371): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0xc0000000}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) lseek(r6, 0xfffffffffffffff5, 0x1) inotify_init() syz_emit_vhci(0x0, 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) io_setup(0xc, 0x0) r7 = timerfd_create(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) 11m42.445143176s ago: executing program 3 (id=391): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="ee6b5fd600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x1a, 0x0, 0x8, 0x4}, 0x28) ioctl(r2, 0xc048aeca, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101202) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) syz_emit_ethernet(0x373, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x33d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x500, 0x26000000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x0, 0x6, "0000000566994ff111397b4a8840491bae50dd6fc1f9dd74244c6faa519bda83168fc5186a3ff03c13a185e1a664d5e4"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a70507000000ddde250bff5b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x16, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd"}, {0x0, 0x5, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0x800) socket$l2tp(0x2, 0x2, 0x73) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6000, 0x0, &(0x7f0000ffa000/0x6000)=nil) 11m40.375167139s ago: executing program 3 (id=380): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r7 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) read(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) 11m37.455596543s ago: executing program 3 (id=384): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, 0x0, &(0x7f0000000380)) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x8, 0x0, 0x31}, 0xfffffffe, 0x7}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x18a0, 0x6}}]}, {0x4}, {0xc, 0x3, {0x20}}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_getoverrun(r5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') lchown(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) r6 = syz_open_dev$vivid(&(0x7f0000000180), 0x2, 0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f00000006c0)={{r0}, r7, 0xc, @unused=[0xfffffffffffffff9, 0x2, 0x7fff, 0xfe1], @name="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"}) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 11m35.726494847s ago: executing program 3 (id=386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x4008, 0x3, 0x0, 0x888}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f0000000140)={0xd, 0x8}, 0x1) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r7 = socket(0x1e, 0x4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r8 = socket$inet(0x2b, 0x4, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0x8, 0x20000014}, 0x2c) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f0000003240), 0x4000000000000e4, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) ioctl(r9, 0x4048aecb, &(0x7f0000000400)) ioctl$KVM_RUN(r9, 0xae80, 0x0) 11m20.619865329s ago: executing program 34 (id=386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x4008, 0x3, 0x0, 0x888}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f0000000140)={0xd, 0x8}, 0x1) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r7 = socket(0x1e, 0x4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r8 = socket$inet(0x2b, 0x4, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0x8, 0x20000014}, 0x2c) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f0000003240), 0x4000000000000e4, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) ioctl(r9, 0x4048aecb, &(0x7f0000000400)) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3m17.067319584s ago: executing program 0 (id=2282): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00', 0xb}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7e) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 3m16.798879001s ago: executing program 0 (id=2285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0xa900000000000000, 0xffff1000, 0x4000000000009, 0x0, 0x6}) 3m16.652112994s ago: executing program 0 (id=2287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4c008) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x1411, 0x1, 0x70bd29, 0x20003, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 3m13.511107854s ago: executing program 0 (id=2293): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdd}}, {@nojournal_checksum}, {@acl}, {@errors_remount}]}, 0x1, 0x4d4, &(0x7f0000000a00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 3m11.187599102s ago: executing program 0 (id=2299): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x28) close(0x3) 3m10.626886837s ago: executing program 0 (id=2304): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f2) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') preadv(r5, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000050000005600000025000000190004000400000007fd170000000000040000000000000000", 0x39}], 0x1) 3m10.472046191s ago: executing program 35 (id=2304): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f2) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') preadv(r5, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000050000005600000025000000190004000400000007fd170000000000040000000000000000", 0x39}], 0x1) 14.086962313s ago: executing program 7 (id=2983): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 10.467732835s ago: executing program 7 (id=2989): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) futex(&(0x7f0000000000)=0x1, 0xd, 0xfffffffe, 0x0, 0x0, 0xffffffff) 10.399832127s ago: executing program 8 (id=2990): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.742528403s ago: executing program 5 (id=2996): mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 9.735971473s ago: executing program 8 (id=2997): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0xeffffffffffffc04, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) 9.513200029s ago: executing program 8 (id=2998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000150a010400000000000000200a0000030909000000797a31000000000900020073797a30000000000900010073797a3100000000730008002f578452008bd7137842e3d514774740d410313dbb9907ea97dd3e5bc186a1a70e563280f435416b06e272b3f744421f7322fa14e594858147fcb6fc2369ab20b52a8d966a2b522d3463458d813c291260943f94ddf787499f26e55dc17b69ad8a9ebb77850cdb74e5bf821101b1ed00"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4c008) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x1411, 0x1, 0x70bd29, 0x20003, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 9.350113913s ago: executing program 7 (id=3000): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)}, 0x12121) 8.426062607s ago: executing program 5 (id=3001): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x41032, 0xffffffffffffffff, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) 8.120326594s ago: executing program 6 (id=3003): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x3, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x11, 0x1, @multicast}, 0x10) 8.100331045s ago: executing program 8 (id=3005): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, 0x0, 0x0) 7.826993252s ago: executing program 6 (id=3006): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x6e) close(0x3) eventfd2(0x0, 0x1) r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7.774824423s ago: executing program 1 (id=3007): getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) 7.703428605s ago: executing program 7 (id=3008): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000060000000405"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000540), 0xa7c, r2}, 0x38) ioctl(r1, 0x4048aec9, &(0x7f0000000140)="0300000000000000010000000200000000") 7.677551216s ago: executing program 8 (id=3009): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x5, 0x7, 0x6e, 0x8000, 0x9, '\a\x00', 0xc8, 0xf}) 7.542820549s ago: executing program 6 (id=3010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbdd, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x40, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0xb3b3}, @TCA_CAKE_AUTORATE={0x0, 0x9, 0x4}, @TCA_CAKE_ATM, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xa97f}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xfc}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x800) 7.541772349s ago: executing program 1 (id=3011): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 7.344045974s ago: executing program 1 (id=3012): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f2) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') preadv(r5, 0x0, 0x0, 0xffffffff, 0x34) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000050000005600000025000000190004000400000007fd170000000000040000000000000000", 0x39}], 0x1) 7.303291055s ago: executing program 7 (id=3013): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 7.263275256s ago: executing program 6 (id=3014): mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 4.194058694s ago: executing program 6 (id=3015): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) fchdir(r1) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') 4.102713116s ago: executing program 1 (id=3016): signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xffffffeffffffff5]}, 0x8, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ff, 0x14b, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0x401}, 0x0, 0x0, 0x0, 0x0) 2.789659689s ago: executing program 5 (id=3017): unshare(0x22060600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000280), &(0x7f0000000440)=r0}, 0x20) 2.705553082s ago: executing program 8 (id=3018): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 2.526851216s ago: executing program 1 (id=3019): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) setuid(0xee01) 2.486183497s ago: executing program 5 (id=3020): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/alua_access_type\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000680)={0x30, 0x5, 0x0, {0x0, 0x4, 0x9, 0x268}}, 0x30) 2.400423639s ago: executing program 6 (id=3021): setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x40084) 2.190759195s ago: executing program 5 (id=3022): sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x20000800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x1}, &(0x7f0000000700)=0x0) timer_gettime(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a020600) syncfs(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.932920411s ago: executing program 1 (id=3023): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f2) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') preadv(r5, &(0x7f00000026c0)=[{0x0}], 0x1, 0xffffffff, 0x34) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000050000005600000025000000190004000400000007fd170000000000040000000000000000", 0x39}], 0x1) 338.998771ms ago: executing program 7 (id=3024): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) write$cgroup_pid(r0, &(0x7f0000000180), 0x12) 0s ago: executing program 5 (id=3025): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x108e073, &(0x7f0000000840)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0], 0x7, 0x2d4, &(0x7f0000000180)="$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") mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000200)=0x9, 0x34) kernel console output (not intermixed with test programs): 57] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 802.809794][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x1ad3 instead [ 802.861141][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xcfe5 instead [ 802.891058][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 802.912246][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 802.934413][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x1ad3 instead [ 803.001874][T12177] siw: device registration error -23 [ 803.032885][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xcfe5 instead [ 803.087974][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 803.098644][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 803.109464][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x1ad3 instead [ 803.130616][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xcfe5 instead [ 803.142489][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 803.153008][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 803.163525][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x1ad3 instead [ 803.174053][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xcfe5 instead [ 803.187802][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 803.209289][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 803.224895][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x1ad3 instead [ 803.237439][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xcfe5 instead [ 803.251746][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 803.271646][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 803.296843][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x1ad3 instead [ 803.348870][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xcfe5 instead [ 803.384861][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 803.419204][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 803.431132][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x1ad3 instead [ 803.447441][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xcfe5 instead [ 803.458201][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 803.499353][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 803.519713][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x1ad3 instead [ 803.531849][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xcfe5 instead [ 803.547618][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 803.578885][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 803.655556][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x1ad3 instead [ 803.691585][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xcfe5 instead [ 803.702356][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 803.712740][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 803.723545][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x1ad3 instead [ 803.736305][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xcfe5 instead [ 803.752179][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 803.772203][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 803.787162][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x1ad3 instead [ 803.805824][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xcfe5 instead [ 803.825379][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 803.866331][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 803.928808][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x1ad3 instead [ 803.959976][T12189] netlink: 'syz.0.2014': attribute type 4 has an invalid length. [ 803.981598][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xcfe5 instead [ 804.062539][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 804.087896][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 804.120688][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x1ad3 instead [ 804.165754][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xcfe5 instead [ 804.215541][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 804.254821][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 804.297347][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x1ad3 instead [ 804.338890][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xcfe5 instead [ 804.389176][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 804.438396][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 804.485484][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x1ad3 instead [ 804.519320][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xcfe5 instead [ 804.554614][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 804.598392][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 804.637745][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x1ad3 instead [ 804.681483][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xcfe5 instead [ 804.726926][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 804.761840][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 804.803486][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x1ad3 instead [ 804.824249][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xcfe5 instead [ 804.888979][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 804.921094][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 804.972255][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x1ad3 instead [ 805.002305][T12211] siw: device registration error -23 [ 805.055411][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xcfe5 instead [ 805.209835][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 805.384633][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 805.546896][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x1ad3 instead [ 805.681000][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xcfe5 instead [ 805.773315][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 805.783964][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 805.822177][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x1ad3 instead [ 805.832855][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xcfe5 instead [ 805.843589][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 805.854202][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 805.865070][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x1ad3 instead [ 805.875828][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xcfe5 instead [ 805.905184][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 805.955432][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 806.000968][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x1ad3 instead [ 806.038049][T12157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xcfe5 instead [ 806.083362][T12157] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 806.125046][T12157] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 806.997209][T12249] netlink: 'syz.5.2033': attribute type 4 has an invalid length. [ 808.206404][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.213006][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.392480][T12266] netlink: 'syz.7.2040': attribute type 8 has an invalid length. [ 808.400258][T12266] netem: change failed [ 808.477520][T12269] ip_tables: iptables: counters copy to user failed while replacing table [ 808.488795][T12269] ip_tables: iptables: counters copy to user failed while replacing table [ 809.750130][T12291] netlink: 'syz.7.2047': attribute type 4 has an invalid length. [ 809.969357][T12297] siw: device registration error -23 [ 812.333948][T12319] fuse: Bad value for 'fd' [ 812.833714][T12329] netlink: 'syz.1.2057': attribute type 4 has an invalid length. [ 813.724576][T12348] netlink: 'syz.0.2066': attribute type 4 has an invalid length. [ 814.628128][T12362] siw: device registration error -23 [ 814.659973][T12364] fuse: Bad value for 'fd' [ 815.095142][T12373] netlink: 'syz.5.2078': attribute type 4 has an invalid length. [ 815.494964][T12383] netlink: 'syz.1.2079': attribute type 4 has an invalid length. [ 817.171332][T12414] netlink: 'syz.6.2085': attribute type 4 has an invalid length. [ 818.396168][T12432] netlink: 'syz.7.2090': attribute type 4 has an invalid length. [ 821.738492][T12450] siw: device registration error -23 [ 823.315337][T12467] ip_tables: iptables: counters copy to user failed while replacing table [ 823.401679][T12473] syz.5.2105[12473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 823.401825][T12473] syz.5.2105[12473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 823.940854][T12486] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2110'. [ 824.086997][T12489] netlink: 'syz.7.2109': attribute type 4 has an invalid length. [ 824.521198][T12499] netlink: 'syz.0.2107': attribute type 4 has an invalid length. [ 825.993902][T12530] siw: device registration error -23 [ 827.007665][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2130'. [ 827.022491][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2130'. [ 828.341105][T12562] netlink: 'syz.6.2133': attribute type 4 has an invalid length. [ 828.374126][T12563] siw: device registration error -23 [ 829.656446][T12580] netlink: 'syz.5.2137': attribute type 4 has an invalid length. [ 830.411459][T12585] fuse: Bad value for 'group_id' [ 831.566087][T12596] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2144'. [ 832.028936][T12614] fuse: Bad value for 'group_id' [ 833.301464][T12627] fuse: Bad value for 'fd' [ 833.399277][T12631] netlink: 'syz.5.2155': attribute type 4 has an invalid length. [ 833.439321][T12633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.609054][T12633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.018077][T12644] netlink: 'syz.1.2165': attribute type 4 has an invalid length. [ 834.266018][T12652] device team0 entered promiscuous mode [ 834.271712][T12652] device team_slave_0 entered promiscuous mode [ 834.279457][T12652] device team_slave_1 entered promiscuous mode [ 834.288789][T12652] device macvlan2 entered promiscuous mode [ 834.296141][T12652] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 835.267631][T12659] fuse: Unknown parameter 'group_id00000000000000000000' [ 835.778465][T12666] bond0: option slaves: invalid value (-dummy0) [ 837.829572][T12688] netlink: 'syz.7.2183': attribute type 4 has an invalid length. [ 838.318706][T12692] fuse: Unknown parameter 'group_id00000000000000000000' [ 839.473860][T12712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.483978][T12712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.579205][T12717] netlink: 'syz.1.2192': attribute type 4 has an invalid length. [ 839.984137][T12725] fuse: Unknown parameter 'group_id00000000000000000000' [ 842.388322][T12754] loop0: detected capacity change from 0 to 128 [ 842.437444][T12754] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 842.459846][T12754] ext4 filesystem being mounted at /446/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 842.519427][T12754] fscrypt (loop0, inode 12): Unsupported encryption flags (0x10) [ 842.564961][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 842.911119][T12771] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2215'. [ 843.020510][T12771] siw: device registration error -23 [ 843.065390][T12772] netlink: 'syz.0.2213': attribute type 4 has an invalid length. [ 843.099962][T12775] fuse: Unknown parameter 'group_i00000000000000000000' [ 844.113026][T12787] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2221'. [ 844.211199][T12791] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2223'. [ 844.230837][T12791] siw: device registration error -23 [ 844.790574][T12803] netlink: 'syz.5.2226': attribute type 4 has an invalid length. [ 844.830687][T12806] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2228'. [ 844.931543][T12808] siw: device registration error -23 [ 847.148097][T12811] fuse: Unknown parameter 'group_id00000000000000000000' [ 848.070539][T12828] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 848.295971][T12832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.500968][T12844] fuse: Bad value for 'fd' [ 850.315869][T12842] siw: device registration error -23 [ 850.626186][T12852] netlink: 'syz.1.2244': attribute type 4 has an invalid length. [ 851.036917][T12864] program syz.6.2250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 851.394665][T12868] netlink: 'syz.5.2252': attribute type 4 has an invalid length. [ 851.748847][T12886] siw: device registration error -23 [ 853.076901][ T26] audit: type=1800 audit(1791215261.279:30): pid=12897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2259" name="max_speed" dev="configfs" ino=62454 res=0 errno=0 [ 853.162237][T12899] device dummy0 entered promiscuous mode [ 853.187653][T12899] device dummy0 left promiscuous mode [ 854.322390][T12933] siw: device registration error -23 [ 854.795479][T12950] netlink: 'syz.6.2274': attribute type 4 has an invalid length. [ 854.825105][T12951] fuse: Bad value for 'user_id' [ 855.940916][T12963] fuse: Bad value for 'fd' [ 856.240560][T12966] input: syz1 as /devices/virtual/input/input9 [ 856.329932][T12972] fuse: Bad value for 'fd' [ 859.202018][T12987] fuse: Bad value for 'user_id' [ 859.776694][T12993] loop0: detected capacity change from 0 to 512 [ 859.794805][T12991] fuse: Bad value for 'fd' [ 859.987101][T13002] siw: device registration error -23 [ 861.752545][T12993] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 861.832310][T12993] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 862.025964][ T4274] Quota error (device loop0): do_check_range: Getting block 773 out of range 1-5 [ 862.036289][ T4274] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 862.051612][ T4274] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz-executor: Failed to acquire dquot type 1 [ 862.073248][ T4274] EXT4-fs (loop0): Remounting filesystem read-only [ 862.485704][ T5136] EXT4-fs (loop0): unmounting filesystem. [ 862.650446][ T4915] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.805794][ T4915] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.826119][T13031] fuse: Bad value for 'fd' [ 862.940495][ T4915] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.078246][ T4915] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.332370][ T4915] tipc: Disabling bearer [ 863.338140][ T4915] tipc: Left network mode [ 863.347822][T13043] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 863.359096][T13043] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 863.395547][T13043] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 863.405395][T13043] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 863.416549][T13043] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 863.425672][T13043] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 863.596838][T13042] lo speed is unknown, defaulting to 1000 [ 863.607437][T13042] wg1 speed is unknown, defaulting to 1000 [ 864.161195][T13042] chnl_net:caif_netlink_parms(): no params data found [ 864.268163][T13076] program syz.6.2321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 864.455015][T13088] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2325'. [ 864.586766][T13042] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.594397][T13042] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.605418][T13042] device bridge_slave_0 entered promiscuous mode [ 865.252750][T13091] siw: device registration error -23 [ 865.465562][T13042] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.479458][T13042] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.486816][T13043] Bluetooth: hci2: command 0x0409 tx timeout [ 865.517306][T13042] device bridge_slave_1 entered promiscuous mode [ 865.799245][T13042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.814803][T13107] program syz.7.2331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 865.863218][T13042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.017245][T13112] siw: device registration error -23 [ 866.095884][T13042] team0: Port device team_slave_0 added [ 866.319931][T13042] team0: Port device team_slave_1 added [ 866.810480][ T4915] device hsr_slave_0 left promiscuous mode [ 866.830632][ T4915] device hsr_slave_1 left promiscuous mode [ 866.847768][ T4915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.859067][ T4915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.870103][ T4915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.877948][ T4915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.888404][ T4915] device bridge_slave_0 left promiscuous mode [ 866.896411][ T4915] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.927726][ T4915] device team0 left promiscuous mode [ 866.933167][ T4915] device team_slave_0 left promiscuous mode [ 866.934964][T13121] input: syz1 as /devices/virtual/input/input10 [ 866.940918][ T4915] device team_slave_1 left promiscuous mode [ 866.958958][ T4915] device veth1_macvtap left promiscuous mode [ 866.965360][ T4915] device veth0_macvtap left promiscuous mode [ 866.971597][ T4915] device veth1_vlan left promiscuous mode [ 866.977874][ T4915] device veth0_vlan left promiscuous mode [ 867.149411][T13126] fuse: Bad value for 'fd' [ 867.355732][T13134] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2339'. [ 867.514997][T13134] siw: device registration error -23 [ 867.572367][T13043] Bluetooth: hci2: command 0x041b tx timeout [ 867.794424][T13151] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2345'. [ 867.918769][T13155] siw: device registration error -23 [ 869.644621][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.644982][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 869.651104][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.862960][T13157] fuse: Bad value for 'rootmode' [ 870.496310][ T4915] team0 (unregistering): Port device team_slave_1 removed [ 870.577558][ T4915] team0 (unregistering): Port device team_slave_0 removed [ 870.654281][ T4915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.770630][ T4915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.208924][ T4915] bond0 (unregistering): Released all slaves [ 871.269669][T13042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.276863][T13042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.303353][T13042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.316019][T13042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.323234][T13042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.349584][T13042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.402287][ T4321] infiniband syz2: ib_query_port failed (-19) [ 871.571493][T13042] device hsr_slave_0 entered promiscuous mode [ 871.599280][T13042] device hsr_slave_1 entered promiscuous mode [ 871.722118][T13043] Bluetooth: hci2: command 0x0419 tx timeout [ 871.760335][T13184] fuse: Unknown parameter 'use00000000000000000000' [ 872.969119][T13042] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 873.014520][T13042] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 873.045533][T13042] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 873.090389][T13042] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 873.369305][T13042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.428786][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 873.438747][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 873.483017][T13042] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.501385][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 873.516003][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 873.540060][ T9697] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.547295][ T9697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.642888][T13214] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2367'. [ 873.661391][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 873.679630][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 873.837252][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 874.020109][ T9697] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.027427][ T9697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.424496][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 874.503861][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 874.512730][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 874.524443][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 874.537172][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 874.548031][ T9675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 874.564490][ T9675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 874.575656][T13219] lo speed is unknown, defaulting to 1000 [ 874.607930][T13219] lo speed is unknown, defaulting to 1000 [ 874.628824][T13042] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 874.675303][T13042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 874.725006][T13219] lo speed is unknown, defaulting to 1000 [ 874.755738][ T9702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 874.778319][T13219] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 874.786390][ T9702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 874.825723][ T9702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 874.863876][ T9702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 874.897809][ T9702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 874.932761][T13219] lo speed is unknown, defaulting to 1000 [ 874.939124][T13219] lo speed is unknown, defaulting to 1000 [ 874.991598][T13219] lo speed is unknown, defaulting to 1000 [ 875.013134][T13219] lo speed is unknown, defaulting to 1000 [ 875.019433][T13219] lo speed is unknown, defaulting to 1000 [ 875.800749][ T9702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 875.820893][ T9702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 875.849072][T13042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.797350][T13288] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2385'. [ 876.963057][T13291] siw: device registration error -23 [ 877.713423][ T9687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 877.722565][ T9687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 877.839957][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 877.863100][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 878.018362][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 878.074222][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 878.083064][T13042] device veth0_vlan entered promiscuous mode [ 878.190515][T13042] device veth1_vlan entered promiscuous mode [ 878.310410][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2390'. [ 878.576320][T13042] device veth0_macvtap entered promiscuous mode [ 878.661183][ T9702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 878.711033][ T9702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 878.739520][ T9702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 878.749184][ T9702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 878.761016][ T9702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 878.774542][T13042] device veth1_macvtap entered promiscuous mode [ 878.816347][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.852992][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.872094][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.898878][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.909125][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.920495][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.941113][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.952086][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.970227][T13042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.981968][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 878.999501][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 879.014702][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.031195][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.052345][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.068205][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.079761][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.110890][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.132128][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.179802][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.209986][T13042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.222678][ T9702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 879.236310][ T9702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 879.253720][T13042] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.269223][T13042] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.283636][T13042] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.298694][T13042] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.419620][ T9702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.431128][ T9702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.455276][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 879.478168][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.486519][ T4318] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 879.507250][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.533189][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 879.637963][T13336] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2398'. [ 879.663172][T13336] siw: device registration error -23 [ 879.682328][ T4318] usb 7-1: Using ep0 maxpacket: 32 [ 879.690434][ T4318] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 879.821567][T13339] siw: device registration error -23 [ 881.405548][ T9697] wlan1: Trigger new scan to find an IBSS to join [ 881.471529][ T4318] usb 7-1: config 0 has no interface number 0 [ 881.579025][ T4318] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 881.726427][ T4318] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.906258][ T4318] usb 7-1: Product: syz [ 881.964600][ T4318] usb 7-1: Manufacturer: syz [ 882.078225][ T4318] usb 7-1: SerialNumber: syz [ 882.449226][ T4318] usb 7-1: config 0 descriptor?? [ 882.715166][ T4318] usb 7-1: can't set config #0, error -71 [ 882.762954][ T4318] usb 7-1: USB disconnect, device number 21 [ 882.863544][T13344] fuse: Bad value for 'fd' [ 884.022484][T13390] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2414'. [ 884.034955][T13389] fuse: Bad value for 'fd' [ 885.402457][ T4320] wlan1: Trigger new scan to find an IBSS to join [ 886.702534][ T9687] wlan1: Creating new IBSS network, BSSID 7a:c1:63:3b:0a:04 [ 886.844621][T13417] fuse: Bad value for 'fd' [ 886.969026][T13422] fuse: Bad value for 'fd' [ 889.138788][T13442] fuse: Bad value for 'fd' [ 889.300118][ T26] audit: type=1326 audit(1791215297.499:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13445 comm="syz.1.2433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b39e199 code=0x7ffc0000 [ 889.366169][ T26] audit: type=1326 audit(1791215297.499:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13445 comm="syz.1.2433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b39e199 code=0x7ffc0000 [ 889.426808][ T26] audit: type=1326 audit(1791215297.499:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13445 comm="syz.1.2433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fed7b39e199 code=0x7ffc0000 [ 889.483058][ T26] audit: type=1326 audit(1791215297.499:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13445 comm="syz.1.2433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b39e199 code=0x7ffc0000 [ 889.533932][ T26] audit: type=1326 audit(1791215297.499:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13445 comm="syz.1.2433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b39e199 code=0x7ffc0000 [ 889.587096][ T26] audit: type=1326 audit(1791215297.499:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13445 comm="syz.1.2433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b39e199 code=0x7ffc0000 [ 889.611992][ T26] audit: type=1326 audit(1791215297.499:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13445 comm="syz.1.2433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b39e199 code=0x7ffc0000 [ 889.641931][ T26] audit: type=1326 audit(1791215297.499:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13445 comm="syz.1.2433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b39e199 code=0x7ffc0000 [ 889.729941][ T26] audit: type=1326 audit(1791215297.499:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13445 comm="syz.1.2433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fed7b39e199 code=0x7ffc0000 [ 889.813088][ T26] audit: type=1326 audit(1791215297.499:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13445 comm="syz.1.2433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b39e199 code=0x7ffc0000 [ 890.112288][ T4318] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 890.415494][T13487] netlink: 'syz.1.2445': attribute type 4 has an invalid length. [ 891.072117][ T4318] usb 7-1: Using ep0 maxpacket: 16 [ 891.078964][ T4318] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 891.127208][ T4318] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 891.156825][ T4318] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 891.182116][ T4318] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.200437][ T4318] usb 7-1: Product: syz [ 891.204917][ T4318] usb 7-1: Manufacturer: syz [ 891.222249][ T4318] usb 7-1: SerialNumber: syz [ 891.260326][ T4318] usb 7-1: config 0 descriptor?? [ 891.275940][ T4318] hub 7-1:0.0: bad descriptor, ignoring hub [ 891.292023][ T4318] hub: probe of 7-1:0.0 failed with error -5 [ 891.399389][ T4318] snd-usb-audio: probe of 7-1:0.0 failed with error -12 [ 891.427711][T12996] udevd[12996]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 891.632685][ T5051] usb 7-1: USB disconnect, device number 22 [ 892.025975][T13511] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 892.321816][T13526] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2458'. [ 892.441315][T13529] siw: device registration error -23 [ 892.674777][T13528] netlink: 'syz.7.2454': attribute type 4 has an invalid length. [ 894.067258][T13542] fuse: Bad value for 'group_id' [ 894.868794][T13570] fuse: Bad value for 'fd' [ 894.990184][T13572] netlink: 'syz.6.2471': attribute type 4 has an invalid length. [ 896.053943][T13580] netlink: 'syz.1.2475': attribute type 4 has an invalid length. [ 896.790711][T13589] fuse: Bad value for 'group_id' [ 897.159850][T13601] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2483'. [ 897.768763][T13626] fuse: Bad value for 'group_id' [ 898.037234][T11792] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 898.232230][T11792] usb 9-1: Using ep0 maxpacket: 8 [ 898.305703][T11792] usb 9-1: unable to get BOS descriptor or descriptor too short [ 898.336249][T11792] usb 9-1: config 4 interface 0 has no altsetting 0 [ 898.346730][T11792] usb 9-1: string descriptor 0 read error: -22 [ 898.353191][T11792] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 898.363107][T11792] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 898.446313][T13650] netlink: 'syz.7.2498': attribute type 4 has an invalid length. [ 898.650094][T11792] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 899.050876][T11792] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 899.062704][T11792] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 899.071152][T11792] usb 9-1: media controller created [ 899.093612][T11792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 899.239138][T13659] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2499'. [ 899.303580][T13659] siw: device registration error -23 [ 899.333096][ T1173] usb 9-1: USB disconnect, device number 2 [ 900.043735][T13684] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2510'. [ 900.104024][T13684] siw: device registration error -23 [ 900.995445][T13714] fuse: Bad value for 'fd' [ 902.082491][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 902.112217][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 902.141375][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x1ad3 instead [ 902.167027][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xcfe5 instead [ 902.193133][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 902.209116][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 902.221146][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 902.236042][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 902.247409][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 902.259181][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 902.269943][T13730] jffs2: Further such events for this erase block will not be printed [ 902.278770][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 902.310194][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 902.326652][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x1ad3 instead [ 902.357566][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xcfe5 instead [ 902.378525][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 902.393928][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 902.407441][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 902.433814][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 902.466816][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 902.488363][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 902.502146][T13730] jffs2: Further such events for this erase block will not be printed [ 902.522809][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 902.566634][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 902.629237][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x1ad3 instead [ 902.648858][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xcfe5 instead [ 902.670394][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 902.691114][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 902.726776][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x1ad3 instead [ 902.738745][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xcfe5 instead [ 902.759583][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 902.795640][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 902.817192][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x1ad3 instead [ 902.837874][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xcfe5 instead [ 902.851199][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 902.867192][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 902.878010][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x1ad3 instead [ 902.893798][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xcfe5 instead [ 902.908743][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 902.921075][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 902.941397][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x1ad3 instead [ 902.951907][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xcfe5 instead [ 902.965688][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 902.976189][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 902.999365][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x1ad3 instead [ 903.016993][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xcfe5 instead [ 903.036034][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 903.060828][T13757] fuse: Bad value for 'fd' [ 903.107876][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 903.233054][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x1ad3 instead [ 903.380893][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xcfe5 instead [ 903.569011][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 903.747734][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 903.805437][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x1ad3 instead [ 903.818194][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xcfe5 instead [ 903.829039][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 903.839690][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 903.850349][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x1ad3 instead [ 903.861078][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xcfe5 instead [ 903.871543][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 903.881980][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 903.892614][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x1ad3 instead [ 903.903054][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xcfe5 instead [ 903.913638][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 903.924078][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 903.934568][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x1ad3 instead [ 903.945089][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xcfe5 instead [ 903.955621][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 903.967532][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 904.002101][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x1ad3 instead [ 904.014199][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xcfe5 instead [ 904.026540][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 904.057673][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 904.082724][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x1ad3 instead [ 904.130059][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xcfe5 instead [ 904.161087][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 904.193608][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 904.239082][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x1ad3 instead [ 904.269892][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xcfe5 instead [ 904.327637][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 904.550416][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 904.561222][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x1ad3 instead [ 904.571662][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xcfe5 instead [ 904.582790][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 904.593283][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 904.603943][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x1ad3 instead [ 904.620542][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xcfe5 instead [ 904.645038][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 904.659756][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 904.676203][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x1ad3 instead [ 904.756181][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xcfe5 instead [ 904.771500][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 904.790961][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 904.801787][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x1ad3 instead [ 904.819978][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xcfe5 instead [ 904.841447][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 904.852770][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 904.864920][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x1ad3 instead [ 904.876081][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xcfe5 instead [ 904.887642][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 904.912140][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 904.930985][T13778] 9pnet_fd: Insufficient options for proto=fd [ 904.954019][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x1ad3 instead [ 904.982147][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xcfe5 instead [ 905.010057][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 905.038965][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 905.050608][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x1ad3 instead [ 905.062384][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xcfe5 instead [ 905.089128][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 905.168417][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 905.212099][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x1ad3 instead [ 905.239268][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xcfe5 instead [ 905.259656][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 905.271208][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 905.285758][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x1ad3 instead [ 905.298193][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xcfe5 instead [ 905.312427][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 905.323685][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 905.334262][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x1ad3 instead [ 905.344742][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xcfe5 instead [ 905.355319][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 905.367078][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 905.377616][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x1ad3 instead [ 905.392629][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xcfe5 instead [ 905.407715][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 905.418366][ T4321] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 905.426770][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 905.437694][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x1ad3 instead [ 905.448957][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xcfe5 instead [ 905.459672][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 905.470972][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 905.488301][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x1ad3 instead [ 905.499499][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xcfe5 instead [ 905.510266][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 905.525122][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 905.537189][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x1ad3 instead [ 905.548663][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xcfe5 instead [ 905.560430][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 905.570936][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 905.585976][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x1ad3 instead [ 905.597667][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xcfe5 instead [ 905.608534][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 905.619018][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 905.631264][ T4321] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.638144][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x1ad3 instead [ 905.652775][ T4321] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 905.663248][T13730] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xcfe5 instead [ 905.672182][ T4321] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 905.687596][ T4321] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 905.698731][ T4321] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 905.717868][ T4321] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 905.729245][ T4321] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 905.747036][ T4321] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 905.759050][T13730] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 905.774941][ T4321] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 905.787282][T13730] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 905.797422][ T4321] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 905.850249][ T4321] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 905.897379][ T4321] usb 9-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 905.958007][ T4321] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 906.049135][T13799] netlink: 'syz.6.2549': attribute type 4 has an invalid length. [ 906.120007][ T4321] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.264630][ T4321] usb 9-1: Product: syz [ 906.343734][ T4321] usb 9-1: Manufacturer: syz [ 906.435662][ T4321] usb 9-1: SerialNumber: syz [ 906.628055][T13784] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 906.644521][T13784] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 906.682309][T13784] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 906.689557][T13784] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 906.712346][T13784] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 906.719697][T13784] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 906.751595][T13784] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 906.758895][T13784] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 906.788942][ T4321] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 906.804727][ T4321] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 7 [ 906.822397][ T4321] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 5 [ 906.845174][ T4321] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 906.865282][ T4321] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 3 [ 906.885784][ T4321] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 4 [ 906.903339][ T4321] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 906.926943][ T4321] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 906.949799][T13808] FAULT_INJECTION: forcing a failure. [ 906.949799][T13808] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 906.982117][T13808] CPU: 0 PID: 13808 Comm: syz.7.2554 Not tainted syzkaller #0 [ 906.989644][T13808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 906.999722][T13808] Call Trace: [ 907.003041][T13808] [ 907.005995][T13808] dump_stack_lvl+0x188/0x24e [ 907.010713][T13808] ? show_regs_print_info+0x12/0x12 [ 907.015950][T13808] ? load_image+0x410/0x410 [ 907.020494][T13808] ? __lock_acquire+0x7ea0/0x7ea0 [ 907.025553][T13808] ? do_futex+0x310/0x320 [ 907.029990][T13808] should_fail_ex+0x390/0x4c0 [ 907.034784][T13808] strncpy_from_user+0x32/0x340 [ 907.039717][T13808] __se_sys_prctl+0x68b/0x1100 [ 907.044571][T13808] ? __x64_sys_prctl+0xc0/0xc0 [ 907.049378][T13808] ? lockdep_hardirqs_on+0x94/0x140 [ 907.054620][T13808] ? __x64_sys_prctl+0x1c/0xc0 [ 907.059436][T13808] do_syscall_64+0x4c/0xa0 [ 907.063885][T13808] ? clear_bhb_loop+0x60/0xb0 [ 907.068599][T13808] ? clear_bhb_loop+0x60/0xb0 [ 907.073314][T13808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 907.079255][T13808] RIP: 0033:0x7fec26f9e199 [ 907.083700][T13808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.103333][T13808] RSP: 002b:00007fec27f51028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 907.111774][T13808] RAX: ffffffffffffffda RBX: 00007fec27225fa0 RCX: 00007fec26f9e199 [ 907.119792][T13808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000f [ 907.127892][T13808] RBP: 00007fec270350b8 R08: 0000000000000000 R09: 0000000000000000 [ 907.135893][T13808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.143895][T13808] R13: 00007fec27226038 R14: 00007fec27225fa0 R15: 00007ffd6020d3a8 [ 907.151921][T13808] [ 907.304429][ T4374] usb 9-1: USB disconnect, device number 3 [ 907.321929][ T4374] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 907.339161][ T4374] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 907.350910][ T4374] keyspan 9-1:1.0: device disconnected [ 908.083170][T13841] fuse: Invalid rootmode [ 909.476774][T13844] fuse: Bad value for 'fd' [ 910.321119][T13881] netlink: 'syz.6.2578': attribute type 4 has an invalid length. [ 911.312701][T13906] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2587'. [ 911.460596][T13912] siw: device registration error -23 [ 912.193943][T13933] fuse: Bad value for 'rootmode' [ 913.200619][T13935] ima: policy update failed [ 913.263335][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 913.263348][ T26] audit: type=1802 audit(1791215321.469:44): pid=13935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.2597" res=0 errno=0 [ 913.380481][T13948] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2601'. [ 913.405514][T13946] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2600'. [ 913.562294][T13393] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 913.583035][T13955] siw: device registration error -23 [ 915.275302][T13956] siw: device registration error -23 [ 915.299739][T13393] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 915.885652][T13393] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 916.203896][T13393] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 916.525948][T13393] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 916.840323][T13393] usb 7-1: string descriptor 0 read error: -71 [ 916.920291][T13393] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 917.130418][T13393] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.397364][T13393] usb 7-1: can't set config #1, error -71 [ 917.563425][T13393] usb 7-1: USB disconnect, device number 23 [ 917.753022][T13964] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2604'. [ 919.813506][ T4612] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 920.386725][T13977] netlink: 'syz.5.2608': attribute type 4 has an invalid length. [ 920.751826][T13981] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2609'. [ 921.695263][T13990] fuse: Bad value for 'rootmode' [ 924.097579][T14002] FAULT_INJECTION: forcing a failure. [ 924.097579][T14002] name failslab, interval 1, probability 0, space 0, times 0 [ 924.163225][T14002] CPU: 0 PID: 14002 Comm: syz.8.2614 Not tainted syzkaller #0 [ 924.170737][T14002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 924.180826][T14002] Call Trace: [ 924.184136][T14002] [ 924.187099][T14002] dump_stack_lvl+0x188/0x24e [ 924.191821][T14002] ? show_regs_print_info+0x12/0x12 [ 924.197053][T14002] ? load_image+0x410/0x410 [ 924.201596][T14002] ? __might_sleep+0xd0/0xd0 [ 924.206282][T14002] ? __lock_acquire+0x7ea0/0x7ea0 [ 924.211347][T14002] should_fail_ex+0x390/0x4c0 [ 924.216073][T14002] should_failslab+0x5/0x20 [ 924.220663][T14002] slab_pre_alloc_hook+0x59/0x300 [ 924.225752][T14002] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 924.231553][T14002] __kmem_cache_alloc_node+0x4f/0x270 [ 924.236961][T14002] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 924.242718][T14002] __kmalloc+0xa3/0x240 [ 924.246935][T14002] tomoyo_realpath_from_path+0xe2/0x5c0 [ 924.252533][T14002] ? tomoyo_domain+0xd2/0x120 [ 924.257256][T14002] ? tomoyo_path_perm+0x244/0x610 [ 924.262322][T14002] tomoyo_path_perm+0x26f/0x610 [ 924.267231][T14002] ? tomoyo_path_permission+0x3a0/0x3a0 [ 924.272866][T14002] ? __fget_files+0x3fc/0x460 [ 924.277602][T14002] security_inode_getattr+0xcf/0x120 [ 924.282941][T14002] vfs_getattr+0x26/0x3a0 [ 924.287325][T14002] __x64_sys_newfstat+0x13d/0x220 [ 924.292382][T14002] ? __ia32_sys_newfstatat+0x250/0x250 [ 924.297889][T14002] ? lockdep_hardirqs_on+0x94/0x140 [ 924.303118][T14002] do_syscall_64+0x4c/0xa0 [ 924.307546][T14002] ? clear_bhb_loop+0x60/0xb0 [ 924.312250][T14002] ? clear_bhb_loop+0x60/0xb0 [ 924.316948][T14002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 924.322857][T14002] RIP: 0033:0x7f752479e199 [ 924.327283][T14002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.346898][T14002] RSP: 002b:00007f7525664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 924.355321][T14002] RAX: ffffffffffffffda RBX: 00007f7524a25fa0 RCX: 00007f752479e199 [ 924.363323][T14002] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 924.371308][T14002] RBP: 00007f75248350b8 R08: 0000000000000000 R09: 0000000000000000 [ 924.379304][T14002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.387281][T14002] R13: 00007f7524a26038 R14: 00007f7524a25fa0 R15: 00007ffd1876a168 [ 924.395298][T14002] [ 924.477432][T14002] ERROR: Out of memory at tomoyo_realpath_from_path. [ 924.695358][T14020] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 924.733259][ T4317] kernel read not supported for file /input/event1 (pid: 4317 comm: kworker/1:5) [ 925.289590][T14039] fuse: Unknown parameter 'use00000000000000000000' [ 925.621094][T14050] FAULT_INJECTION: forcing a failure. [ 925.621094][T14050] name failslab, interval 1, probability 0, space 0, times 0 [ 925.639752][T14050] CPU: 1 PID: 14050 Comm: syz.6.2632 Not tainted syzkaller #0 [ 925.647256][T14050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 925.657342][T14050] Call Trace: [ 925.660663][T14050] [ 925.663621][T14050] dump_stack_lvl+0x188/0x24e [ 925.668340][T14050] ? show_regs_print_info+0x12/0x12 [ 925.673570][T14050] ? load_image+0x410/0x410 [ 925.678118][T14050] ? __might_sleep+0xd0/0xd0 [ 925.682764][T14050] ? __lock_acquire+0x7ea0/0x7ea0 [ 925.687835][T14050] should_fail_ex+0x390/0x4c0 [ 925.692572][T14050] should_failslab+0x5/0x20 [ 925.697111][T14050] slab_pre_alloc_hook+0x59/0x300 [ 925.702183][T14050] ? tomoyo_encode+0x28a/0x550 [ 925.706992][T14050] __kmem_cache_alloc_node+0x4f/0x270 [ 925.712401][T14050] ? tomoyo_realpath_from_path+0x5c0/0x5c0 [ 925.718249][T14050] ? tomoyo_encode+0x28a/0x550 [ 925.723068][T14050] __kmalloc+0xa3/0x240 [ 925.727293][T14050] tomoyo_encode+0x28a/0x550 [ 925.731951][T14050] tomoyo_realpath_from_path+0x578/0x5c0 [ 925.737623][T14050] ? tomoyo_domain+0xd2/0x120 [ 925.742346][T14050] ? tomoyo_path_perm+0x244/0x610 [ 925.747408][T14050] tomoyo_path_perm+0x26f/0x610 [ 925.752299][T14050] ? tomoyo_path_permission+0x3a0/0x3a0 [ 925.757919][T14050] ? futex_wake_mark+0x150/0x150 [ 925.762901][T14050] ? __fget_files+0x3fc/0x460 [ 925.767627][T14050] security_inode_getattr+0xcf/0x120 [ 925.772963][T14050] vfs_getattr+0x26/0x3a0 [ 925.777341][T14050] __x64_sys_newfstat+0x13d/0x220 [ 925.782410][T14050] ? __ia32_sys_newfstatat+0x250/0x250 [ 925.787926][T14050] ? lockdep_hardirqs_on+0x94/0x140 [ 925.793173][T14050] do_syscall_64+0x4c/0xa0 [ 925.797621][T14050] ? clear_bhb_loop+0x60/0xb0 [ 925.802339][T14050] ? clear_bhb_loop+0x60/0xb0 [ 925.807055][T14050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 925.812980][T14050] RIP: 0033:0x7f509d19e199 [ 925.817426][T14050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.837063][T14050] RSP: 002b:00007f509e00d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 925.845513][T14050] RAX: ffffffffffffffda RBX: 00007f509d425fa0 RCX: 00007f509d19e199 [ 925.853521][T14050] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 925.861554][T14050] RBP: 00007f509d2350b8 R08: 0000000000000000 R09: 0000000000000000 [ 925.869556][T14050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.877584][T14050] R13: 00007f509d426038 R14: 00007f509d425fa0 R15: 00007fff63e6dcf8 [ 925.885645][T14050] [ 925.986052][ T4317] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 926.184453][ T4317] usb 9-1: Using ep0 maxpacket: 8 [ 926.195680][ T4317] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 926.252139][ T4317] usb 9-1: config 0 has no interface number 0 [ 926.252175][T14050] ERROR: Out of memory at tomoyo_realpath_from_path. [ 926.281048][ T4317] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 926.341461][ T4317] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.383207][ T4317] usb 9-1: Product: syz [ 926.401190][ T4317] usb 9-1: Manufacturer: syz [ 926.436345][ T4317] usb 9-1: SerialNumber: syz [ 926.485151][ T4317] usb 9-1: config 0 descriptor?? [ 926.695554][ T4317] usb 9-1: Found UVC 0.04 device syz (046d:08c3) [ 926.712236][ T4317] usb 9-1: No valid video chain found. [ 926.752757][ T4317] usb 9-1: USB disconnect, device number 4 [ 927.112165][T11792] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 927.331652][T11792] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 927.353179][T11792] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 927.388471][T11792] usb 7-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 927.419729][T11792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.441099][T11792] usb 7-1: Product: syz [ 927.462402][T11792] usb 7-1: Manufacturer: syz [ 927.467837][T11792] usb 7-1: SerialNumber: syz [ 927.518936][T11792] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 927.583942][T11792] ums-sddr09 7-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 927.583942][T11792] Please send a copy of this message to and [ 927.765950][T14083] fuse: Unknown parameter 'use00000000000000000000' [ 930.161003][T14110] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2646'. [ 930.320718][T14115] siw: device registration error -23 [ 930.768525][T11792] ums-sddr09: probe of 7-1:1.0 failed with error -22 [ 930.800475][T11792] usb 7-1: USB disconnect, device number 24 [ 931.081868][T14122] wg1 speed is unknown, defaulting to 1000 [ 931.095788][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.103469][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.186497][T14130] fuse: Unknown parameter 'group_id00000000000000000000' [ 932.203258][T14155] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2659'. [ 932.210541][T14122] lo speed is unknown, defaulting to 1000 [ 932.410093][T14157] siw: device registration error -23 [ 934.971062][T14165] fuse: Unknown parameter 'use00000000000000000000' [ 936.257214][T14178] fuse: Unknown parameter 'group_id00000000000000000000' [ 936.695326][ T4317] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 936.911105][ T4317] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 936.941429][ T4317] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 936.984721][ T4317] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 937.028980][ T4317] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 937.058693][T14200] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2674'. [ 937.074429][ T4317] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 937.087301][ T4317] usb 7-1: Product: syz [ 937.095399][ T4317] usb 7-1: Manufacturer: syz [ 937.100195][ T4317] usb 7-1: SerialNumber: syz [ 937.123024][T14199] bridge0: port 3(netdevsim0) entered disabled state [ 937.130063][T14199] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.137319][T14199] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.187057][T14200] siw: device registration error -23 [ 937.196621][T14199] bond0: (slave bridge0): Releasing backup interface [ 937.219830][T14199] bridge0: port 3(netdevsim0) entered blocking state [ 937.227063][T14199] bridge0: port 3(netdevsim0) entered forwarding state [ 937.236662][T14199] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.243812][T14199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.251247][T14199] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.258439][T14199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.338921][ T4317] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 937.359743][T14199] team0: Port device bridge0 added [ 937.605327][ T4317] usb 7-1: USB disconnect, device number 25 [ 937.648324][ T4317] usblp0: removed [ 937.811496][T14213] fuse: Bad value for 'user_id' [ 940.247071][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2682'. [ 940.297298][T14234] tipc: Resetting bearer [ 940.478187][T14241] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2686'. [ 940.514168][T14234] tipc: Disabling bearer [ 940.637094][T14243] siw: device registration error -23 [ 941.801372][T14256] fuse: Unknown parameter 'user_i00000000000000000000' [ 943.434299][T14286] netlink: 'syz.1.2697': attribute type 4 has an invalid length. [ 945.091134][T14293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2699'. [ 945.137605][T14293] device bridge2 entered promiscuous mode [ 945.400774][T14293] team0: Port device bridge2 added [ 946.166421][T14293] bridge0: port 3(team0) entered blocking state [ 946.714745][T14293] bridge0: port 3(team0) entered disabled state [ 946.804127][T14293] device team0 entered promiscuous mode [ 946.809795][T14293] device team_slave_1 entered promiscuous mode [ 946.872644][T14293] bridge0: port 3(team0) entered blocking state [ 946.879081][T14293] bridge0: port 3(team0) entered forwarding state [ 946.988481][T14299] device syzkaller1 entered promiscuous mode [ 947.268876][T14304] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2703'. [ 947.383785][T14304] siw: device registration error -23 [ 950.244448][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2711'. [ 950.289151][T14352] device ip6gre1 entered promiscuous mode [ 950.385846][T14356] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2715'. [ 950.413245][T11791] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 950.422967][T11791] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 950.472585][ T4374] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 950.512219][ T22] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 950.578398][T14357] siw: device registration error -23 [ 950.594559][T11791] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 950.707939][T14363] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2717'. [ 950.776803][ T22] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 950.812896][T11791] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 950.822254][ T22] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 950.856322][ T22] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 950.877202][ T22] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 950.897058][ T22] usb 9-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 950.907366][ T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.950036][T14372] siw: device registration error -23 [ 950.968551][T14351] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 950.994844][T14351] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 951.036565][ T22] pl2303 9-1:1.0: pl2303 converter detected [ 951.173971][ T22] usb 9-1: pl2303 converter now attached to ttyUSB0 [ 951.563933][ T7103] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 954.000556][ T5051] usb 9-1: USB disconnect, device number 5 [ 954.028389][ T5051] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 954.091283][ T5051] pl2303 9-1:1.0: device disconnected [ 954.202327][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 954.506015][T14395] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2729'. [ 954.612169][ T4374] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 955.689111][ T4374] corsair-cpro: probe of 0003:1B1C:0C10.0003 failed with error -110 [ 956.027076][T14405] fido_id[14405]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 956.070302][T14409] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 956.501402][T14416] tipc: Started in network mode [ 956.506623][T14416] tipc: Node identity 7f000001, cluster identity 4711 [ 956.533342][T14416] tipc: Enabled bearer , priority 10 [ 957.654516][ T5051] tipc: Node number set to 2130706433 [ 957.922902][T14441] netlink: 'syz.5.2744': attribute type 4 has an invalid length. [ 959.859614][T14450] netlink: 'syz.8.2745': attribute type 4 has an invalid length. [ 960.133742][T14448] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2746'. [ 960.225332][T14448] siw: device registration error -23 [ 961.659105][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2751'. [ 962.153509][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 963.274663][T14475] FAULT_INJECTION: forcing a failure. [ 963.274663][T14475] name failslab, interval 1, probability 0, space 0, times 0 [ 963.309626][T14475] CPU: 1 PID: 14475 Comm: syz.7.2755 Not tainted syzkaller #0 [ 963.317161][T14475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 963.327242][T14475] Call Trace: [ 963.330542][T14475] [ 963.333500][T14475] dump_stack_lvl+0x188/0x24e [ 963.338220][T14475] ? show_regs_print_info+0x12/0x12 [ 963.343449][T14475] ? load_image+0x410/0x410 [ 963.347999][T14475] ? __might_sleep+0xd0/0xd0 [ 963.352623][T14475] ? __lock_acquire+0x7ea0/0x7ea0 [ 963.357695][T14475] should_fail_ex+0x390/0x4c0 [ 963.362428][T14475] should_failslab+0x5/0x20 [ 963.366970][T14475] slab_pre_alloc_hook+0x59/0x300 [ 963.372029][T14475] kmem_cache_alloc_lru+0x49/0x2e0 [ 963.377167][T14475] ? proc_alloc_inode+0x26/0xb0 [ 963.382091][T14475] proc_alloc_inode+0x26/0xb0 [ 963.386804][T14475] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 963.393176][T14475] new_inode_pseudo+0x5f/0x1c0 [ 963.397978][T14475] new_inode+0x25/0x1d0 [ 963.402178][T14475] proc_get_inode+0x1e/0x710 [ 963.406804][T14475] proc_lookup_de+0x244/0x2f0 [ 963.411525][T14475] __lookup_slow+0x29d/0x3f0 [ 963.416149][T14475] ? lookup_one_len+0x2d0/0x2d0 [ 963.421038][T14475] ? down_read+0x1a8/0x2d0 [ 963.425485][T14475] lookup_slow+0x53/0x70 [ 963.429756][T14475] link_path_walk+0x976/0xea0 [ 963.434486][T14475] ? handle_lookup_down+0x130/0x130 [ 963.439737][T14475] path_openat+0x285/0x2f10 [ 963.444313][T14475] ? kasan_set_track+0x60/0x70 [ 963.449180][T14475] ? verify_lock_unused+0x140/0x140 [ 963.454425][T14475] ? do_sys_openat2+0xdd/0x4f0 [ 963.459236][T14475] ? do_filp_open+0x420/0x420 [ 963.463961][T14475] do_filp_open+0x1ee/0x420 [ 963.468494][T14475] ? vfs_tmpfile+0x470/0x470 [ 963.473125][T14475] ? _raw_spin_unlock+0x24/0x40 [ 963.477997][T14475] ? alloc_fd+0x590/0x640 [ 963.482375][T14475] do_sys_openat2+0x14b/0x4f0 [ 963.487085][T14475] ? do_sys_open+0xe0/0xe0 [ 963.491540][T14475] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 963.497567][T14475] ? lock_chain_count+0x20/0x20 [ 963.502452][T14475] __x64_sys_openat+0x135/0x160 [ 963.507354][T14475] do_syscall_64+0x4c/0xa0 [ 963.511795][T14475] ? clear_bhb_loop+0x60/0xb0 [ 963.516496][T14475] ? clear_bhb_loop+0x60/0xb0 [ 963.521206][T14475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 963.527124][T14475] RIP: 0033:0x7fec26f9e199 [ 963.531562][T14475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.551207][T14475] RSP: 002b:00007fec27f51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 963.559649][T14475] RAX: ffffffffffffffda RBX: 00007fec27225fa0 RCX: 00007fec26f9e199 [ 963.567649][T14475] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 963.575643][T14475] RBP: 00007fec270350b8 R08: 0000000000000000 R09: 0000000000000000 [ 963.583653][T14475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.591648][T14475] R13: 00007fec27226038 R14: 00007fec27225fa0 R15: 00007ffd6020d3a8 [ 963.599659][T14475] [ 964.445568][T14483] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2758'. [ 965.244911][T14495] netlink: 'syz.7.2760': attribute type 4 has an invalid length. [ 965.362194][T14483] siw: device registration error -23 [ 965.426178][T14498] fuse: Unknown parameter '0x0000000000000006' [ 965.929305][T14513] netlink: 'syz.1.2778': attribute type 4 has an invalid length. [ 965.992142][T14516] netlink: 'syz.1.2778': attribute type 4 has an invalid length. [ 967.086525][T14529] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2770'. [ 968.113314][T14536] fuse: Unknown parameter '0x0000000000000008' [ 969.745947][T14552] fuse: Unknown parameter '0x0000000000000008' [ 969.772519][T14551] FAULT_INJECTION: forcing a failure. [ 969.772519][T14551] name failslab, interval 1, probability 0, space 0, times 0 [ 969.957547][T14551] CPU: 1 PID: 14551 Comm: syz.8.2779 Not tainted syzkaller #0 [ 969.965079][T14551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 969.975162][T14551] Call Trace: [ 969.978461][T14551] [ 969.981499][T14551] dump_stack_lvl+0x188/0x24e [ 969.986215][T14551] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 969.991872][T14551] ? show_regs_print_info+0x12/0x12 [ 969.997104][T14551] ? load_image+0x410/0x410 [ 970.001739][T14551] should_fail_ex+0x390/0x4c0 [ 970.006462][T14551] should_failslab+0x5/0x20 [ 970.010992][T14551] slab_pre_alloc_hook+0x59/0x300 [ 970.016043][T14551] ? do_epoll_create+0x107/0x340 [ 970.021115][T14551] __kmem_cache_alloc_node+0x4f/0x270 [ 970.026530][T14551] ? do_epoll_create+0x107/0x340 [ 970.031514][T14551] kmalloc_trace+0x26/0xe0 [ 970.035957][T14551] do_epoll_create+0x107/0x340 [ 970.040760][T14551] __x64_sys_epoll_create1+0x33/0x40 [ 970.046075][T14551] do_syscall_64+0x4c/0xa0 [ 970.050534][T14551] ? clear_bhb_loop+0x60/0xb0 [ 970.055253][T14551] ? clear_bhb_loop+0x60/0xb0 [ 970.059962][T14551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 970.065885][T14551] RIP: 0033:0x7f752479e199 [ 970.070341][T14551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.089975][T14551] RSP: 002b:00007f7525664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 970.098421][T14551] RAX: ffffffffffffffda RBX: 00007f7524a25fa0 RCX: 00007f752479e199 [ 970.106411][T14551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 970.114405][T14551] RBP: 00007f75248350b8 R08: 0000000000000000 R09: 0000000000000000 [ 970.122410][T14551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 970.130394][T14551] R13: 00007f7524a26038 R14: 00007f7524a25fa0 R15: 00007ffd1876a168 [ 970.138399][T14551] [ 972.595855][T14571] netlink: 'syz.1.2785': attribute type 4 has an invalid length. [ 976.373717][T14606] netlink: 'syz.5.2795': attribute type 10 has an invalid length. [ 976.544511][T14606] bridge0: port 3(team0) entered disabled state [ 976.623284][T14611] FAULT_INJECTION: forcing a failure. [ 976.623284][T14611] name failslab, interval 1, probability 0, space 0, times 0 [ 976.638369][T14611] CPU: 0 PID: 14611 Comm: syz.6.2797 Not tainted syzkaller #0 [ 976.645847][T14611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 976.655913][T14611] Call Trace: [ 976.659221][T14611] [ 976.662198][T14611] dump_stack_lvl+0x188/0x24e [ 976.666916][T14611] ? show_regs_print_info+0x12/0x12 [ 976.672153][T14611] ? load_image+0x410/0x410 [ 976.676707][T14611] ? __might_sleep+0xd0/0xd0 [ 976.681317][T14611] ? __lock_acquire+0x7ea0/0x7ea0 [ 976.686369][T14611] should_fail_ex+0x390/0x4c0 [ 976.691109][T14611] should_failslab+0x5/0x20 [ 976.695627][T14611] slab_pre_alloc_hook+0x59/0x300 [ 976.700677][T14611] kmem_cache_alloc_lru+0x49/0x2e0 [ 976.705820][T14611] ? proc_alloc_inode+0x26/0xb0 [ 976.710698][T14611] proc_alloc_inode+0x26/0xb0 [ 976.715398][T14611] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 976.721753][T14611] new_inode_pseudo+0x5f/0x1c0 [ 976.726536][T14611] new_inode+0x25/0x1d0 [ 976.730741][T14611] proc_get_inode+0x1e/0x710 [ 976.735354][T14611] proc_lookup_de+0x244/0x2f0 [ 976.740049][T14611] __lookup_slow+0x29d/0x3f0 [ 976.744678][T14611] ? lookup_one_len+0x2d0/0x2d0 [ 976.749553][T14611] ? down_read+0x1a8/0x2d0 [ 976.753992][T14611] lookup_slow+0x53/0x70 [ 976.758263][T14611] link_path_walk+0x976/0xea0 [ 976.762973][T14611] ? handle_lookup_down+0x130/0x130 [ 976.768205][T14611] path_openat+0x285/0x2f10 [ 976.772759][T14611] ? kasan_set_track+0x60/0x70 [ 976.777549][T14611] ? lock_chain_count+0x20/0x20 [ 976.782426][T14611] ? do_filp_open+0x420/0x420 [ 976.787132][T14611] ? lockdep_hardirqs_on+0x94/0x140 [ 976.792354][T14611] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 976.798533][T14611] do_filp_open+0x1ee/0x420 [ 976.803052][T14611] ? vfs_tmpfile+0x470/0x470 [ 976.807684][T14611] ? _raw_spin_unlock+0x24/0x40 [ 976.812547][T14611] ? alloc_fd+0x590/0x640 [ 976.816900][T14611] do_sys_openat2+0x14b/0x4f0 [ 976.821600][T14611] ? do_sys_open+0xe0/0xe0 [ 976.826057][T14611] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 976.832065][T14611] ? lock_chain_count+0x20/0x20 [ 976.836932][T14611] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 976.842939][T14611] __x64_sys_openat+0x135/0x160 [ 976.847824][T14611] do_syscall_64+0x4c/0xa0 [ 976.852262][T14611] ? clear_bhb_loop+0x60/0xb0 [ 976.856954][T14611] ? clear_bhb_loop+0x60/0xb0 [ 976.861652][T14611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 976.867564][T14611] RIP: 0033:0x7f509d19e199 [ 976.871992][T14611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.891618][T14611] RSP: 002b:00007f509e00d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 976.900053][T14611] RAX: ffffffffffffffda RBX: 00007f509d425fa0 RCX: 00007f509d19e199 [ 976.908037][T14611] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 976.916019][T14611] RBP: 00007f509d2350b8 R08: 0000000000000000 R09: 0000000000000000 [ 976.924007][T14611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.931987][T14611] R13: 00007f509d426038 R14: 00007f509d425fa0 R15: 00007fff63e6dcf8 [ 976.939985][T14611] [ 977.513720][T14606] device team0 left promiscuous mode [ 977.519101][T14606] device team_slave_1 left promiscuous mode [ 977.569167][T14606] bridge0: port 3(team0) entered disabled state [ 977.699145][T14606] team0 (unregistering): Port device team_slave_1 removed [ 977.824548][T14606] team0 (unregistering): Port device bridge2 removed [ 977.885877][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 977.987547][T14613] netlink: 'syz.7.2796': attribute type 4 has an invalid length. [ 980.766801][T14624] fuse: Unknown parameter '0x0000000000000008' [ 983.006109][T14638] xt_hashlimit: size too large, truncated to 1048576 [ 983.022573][T14638] xt_hashlimit: max too large, truncated to 1048576 [ 983.063081][T14638] xt_hashlimit: Unknown mode mask B2F8C501, kernel too old? [ 985.492457][ T7103] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 985.612282][ T4317] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 985.708708][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2812'. [ 985.732807][T14658] bond0: Unable to set up delay as MII monitoring is disabled [ 985.819373][ T4317] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 985.843912][ T4317] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.879759][ T4317] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 985.905242][ T4317] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.931096][ T4317] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 985.956424][ T4317] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 985.998849][ T4317] usb 7-1: Product: syz [ 986.037979][ T4317] usb 7-1: Manufacturer: syz [ 986.175982][ T4317] cdc_wdm 7-1:1.0: skipping garbage [ 986.181325][ T4317] cdc_wdm 7-1:1.0: skipping garbage [ 986.203613][ T4317] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 986.209663][ T4317] cdc_wdm 7-1:1.0: Unknown control protocol [ 986.369443][T14669] fuse: Unknown parameter '0x0000000000000008' [ 987.482705][ T4284] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 987.482834][T13043] Bluetooth: hci3: command 0x1003 tx timeout [ 987.733725][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 987.740633][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 987.751996][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 987.758643][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 987.769786][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 987.776444][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 987.784995][ T4318] usb 7-1: USB disconnect, device number 26 [ 989.492242][T14672] Bluetooth: hci2: command 0x0406 tx timeout [ 990.397139][T14696] FAULT_INJECTION: forcing a failure. [ 990.397139][T14696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.541810][T14696] CPU: 1 PID: 14696 Comm: syz.6.2824 Not tainted syzkaller #0 [ 990.549459][T14696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 990.559546][T14696] Call Trace: [ 990.562855][T14696] [ 990.565811][T14696] dump_stack_lvl+0x188/0x24e [ 990.570555][T14696] ? show_regs_print_info+0x12/0x12 [ 990.575790][T14696] ? load_image+0x410/0x410 [ 990.580359][T14696] ? __lock_acquire+0x7ea0/0x7ea0 [ 990.585445][T14696] ? __kasan_slab_alloc+0x6b/0x80 [ 990.590538][T14696] should_fail_ex+0x390/0x4c0 [ 990.595293][T14696] strncpy_from_user+0x32/0x340 [ 990.600281][T14696] getname_flags+0xf2/0x500 [ 990.604850][T14696] do_mq_open+0x19e/0x750 [ 990.609299][T14696] ? mq_put_mnt+0x40/0x40 [ 990.613668][T14696] __x64_sys_mq_open+0x182/0x1e0 [ 990.618712][T14696] ? proc_ipc_sem_dointvec+0x170/0x170 [ 990.624229][T14696] ? lockdep_hardirqs_on+0x94/0x140 [ 990.629476][T14696] do_syscall_64+0x4c/0xa0 [ 990.633931][T14696] ? clear_bhb_loop+0x60/0xb0 [ 990.638653][T14696] ? clear_bhb_loop+0x60/0xb0 [ 990.643401][T14696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 990.649331][T14696] RIP: 0033:0x7f509d19e199 [ 990.653885][T14696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.673541][T14696] RSP: 002b:00007f509e00d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 990.681997][T14696] RAX: ffffffffffffffda RBX: 00007f509d425fa0 RCX: 00007f509d19e199 [ 990.690002][T14696] RDX: 0000000000000014 RSI: 0000000000000042 RDI: 0000000000000000 [ 990.698007][T14696] RBP: 00007f509d2350b8 R08: 0000000000000000 R09: 0000000000000000 [ 990.706004][T14696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.714024][T14696] R13: 00007f509d426038 R14: 00007f509d425fa0 R15: 00007fff63e6dcf8 [ 990.722046][T14696] [ 992.524861][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.532402][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.808131][T14712] FAULT_INJECTION: forcing a failure. [ 992.808131][T14712] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 992.892296][T14712] CPU: 1 PID: 14712 Comm: syz.8.2831 Not tainted syzkaller #0 [ 992.899918][T14712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 992.910003][T14712] Call Trace: [ 992.913307][T14712] [ 992.916262][T14712] dump_stack_lvl+0x188/0x24e [ 992.920979][T14712] ? show_regs_print_info+0x12/0x12 [ 992.926214][T14712] ? load_image+0x410/0x410 [ 992.930760][T14712] ? __lock_acquire+0x7ea0/0x7ea0 [ 992.935838][T14712] should_fail_ex+0x390/0x4c0 [ 992.940569][T14712] prepare_alloc_pages+0x1e1/0x5b0 [ 992.945834][T14712] __alloc_pages+0x130/0x4f0 [ 992.950474][T14712] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 992.956233][T14712] ? zone_statistics+0x170/0x170 [ 992.961225][T14712] ? __rwlock_init+0x140/0x140 [ 992.966034][T14712] ? do_raw_spin_unlock+0x11d/0x230 [ 992.971293][T14712] __get_free_pages+0x8/0x30 [ 992.975945][T14712] kasan_populate_vmalloc_pte+0x31/0xf0 [ 992.981519][T14712] ? __apply_to_page_range+0x97b/0xd10 [ 992.987011][T14712] __apply_to_page_range+0x98d/0xd10 [ 992.992335][T14712] ? kasan_populate_vmalloc+0x70/0x70 [ 992.997741][T14712] alloc_vmap_area+0x179f/0x18d0 [ 993.002720][T14712] ? vm_map_ram+0xab0/0xab0 [ 993.007266][T14712] ? rcu_is_watching+0x11/0xa0 [ 993.012153][T14712] __get_vm_area_node+0x158/0x330 [ 993.017219][T14712] __vmalloc_node_range+0x357/0x1380 [ 993.022540][T14712] ? stack_map_alloc+0x2f9/0x510 [ 993.027548][T14712] ? futex_wait_queue+0x23/0x1b0 [ 993.032554][T14712] ? futex_wait_queue+0x134/0x1b0 [ 993.037615][T14712] ? futex_unqueue+0xc7/0xf0 [ 993.042257][T14712] ? free_vm_area+0x50/0x50 [ 993.046796][T14712] ? apparmor_capable+0x12c/0x190 [ 993.051909][T14712] ? bpf_lsm_capable+0x5/0x10 [ 993.056626][T14712] ? security_capable+0x85/0xb0 [ 993.061515][T14712] bpf_map_area_alloc+0xd4/0xe0 [ 993.066461][T14712] ? stack_map_alloc+0x2f9/0x510 [ 993.071421][T14712] stack_map_alloc+0x2f9/0x510 [ 993.076209][T14712] map_create+0x524/0xff0 [ 993.080562][T14712] ? security_bpf+0x7a/0xa0 [ 993.085093][T14712] __sys_bpf+0x38b/0x780 [ 993.089389][T14712] ? bpf_link_show_fdinfo+0x380/0x380 [ 993.094812][T14712] ? lock_chain_count+0x20/0x20 [ 993.099702][T14712] __x64_sys_bpf+0x78/0x90 [ 993.104149][T14712] do_syscall_64+0x4c/0xa0 [ 993.108597][T14712] ? clear_bhb_loop+0x60/0xb0 [ 993.113305][T14712] ? clear_bhb_loop+0x60/0xb0 [ 993.118013][T14712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 993.123938][T14712] RIP: 0033:0x7f752479e199 [ 993.128372][T14712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.148007][T14712] RSP: 002b:00007f7525664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 993.156454][T14712] RAX: ffffffffffffffda RBX: 00007f7524a25fa0 RCX: 00007f752479e199 [ 993.164449][T14712] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 993.172443][T14712] RBP: 00007f75248350b8 R08: 0000000000000000 R09: 0000000000000000 [ 993.180442][T14712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 993.188446][T14712] R13: 00007f7524a26038 R14: 00007f7524a25fa0 R15: 00007ffd1876a168 [ 993.196456][T14712] [ 993.299845][T14718] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2833'. [ 993.528189][T14721] siw: device registration error -23 [ 995.857963][T14729] FAULT_INJECTION: forcing a failure. [ 995.857963][T14729] name failslab, interval 1, probability 0, space 0, times 0 [ 995.873578][T14729] CPU: 0 PID: 14729 Comm: syz.7.2836 Not tainted syzkaller #0 [ 995.881083][T14729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 995.891176][T14729] Call Trace: [ 995.894485][T14729] [ 995.897440][T14729] dump_stack_lvl+0x188/0x24e [ 995.902150][T14729] ? show_regs_print_info+0x12/0x12 [ 995.907383][T14729] ? load_image+0x410/0x410 [ 995.911930][T14729] ? __might_sleep+0xd0/0xd0 [ 995.916552][T14729] ? __lock_acquire+0x7ea0/0x7ea0 [ 995.921628][T14729] should_fail_ex+0x390/0x4c0 [ 995.926363][T14729] should_failslab+0x5/0x20 [ 995.930907][T14729] slab_pre_alloc_hook+0x59/0x300 [ 995.935975][T14729] kmem_cache_alloc+0x56/0x2f0 [ 995.940767][T14729] ? mas_alloc_nodes+0x2ec/0x880 [ 995.945777][T14729] mas_alloc_nodes+0x2ec/0x880 [ 995.950587][T14729] mas_preallocate+0x162/0x3b0 [ 995.955380][T14729] mmap_region+0xdcb/0x1c50 [ 995.959922][T14729] ? file_mmap_ok+0x170/0x170 [ 995.964642][T14729] ? vma_expand+0x850/0x850 [ 995.969196][T14729] ? cap_mmap_addr+0x206/0x2c0 [ 995.973989][T14729] do_mmap+0x9ce/0x10d0 [ 995.978171][T14729] ? mlock_future_check+0x100/0x100 [ 995.983386][T14729] ? ima_file_mmap+0xf7/0x140 [ 995.988150][T14729] ? ima_file_free+0x3e0/0x3e0 [ 995.992951][T14729] vm_mmap_pgoff+0x1c1/0x2d0 [ 995.997636][T14729] ? account_locked_vm+0xe0/0xe0 [ 996.002599][T14729] ? ksys_mmap_pgoff+0xef/0x720 [ 996.007469][T14729] ? lockdep_hardirqs_on+0x94/0x140 [ 996.012696][T14729] do_syscall_64+0x4c/0xa0 [ 996.017136][T14729] ? clear_bhb_loop+0x60/0xb0 [ 996.021860][T14729] ? clear_bhb_loop+0x60/0xb0 [ 996.026573][T14729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 996.032487][T14729] RIP: 0033:0x7fec26f9e199 [ 996.036925][T14729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.056554][T14729] RSP: 002b:00007fec27f51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 996.064996][T14729] RAX: ffffffffffffffda RBX: 00007fec27225fa0 RCX: 00007fec26f9e199 [ 996.072989][T14729] RDX: 0000000004000002 RSI: 0000000000c00000 RDI: 0000000000000000 [ 996.080990][T14729] RBP: 00007fec270350b8 R08: ffffffffffffffff R09: 0000000000000000 [ 996.088977][T14729] R10: 0000000000014032 R11: 0000000000000246 R12: 0000000000000000 [ 996.096960][T14729] R13: 00007fec27226038 R14: 00007fec27225fa0 R15: 00007ffd6020d3a8 [ 996.104958][T14729] [ 996.264214][T14733] fuse: Unknown parameter '0x0000000000000006' [ 997.112725][T14761] FAULT_INJECTION: forcing a failure. [ 997.112725][T14761] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 997.171146][T14761] CPU: 0 PID: 14761 Comm: syz.6.2851 Not tainted syzkaller #0 [ 997.178708][T14761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 997.188805][T14761] Call Trace: [ 997.192115][T14761] [ 997.195072][T14761] dump_stack_lvl+0x188/0x24e [ 997.199793][T14761] ? show_regs_print_info+0x12/0x12 [ 997.205037][T14761] ? load_image+0x410/0x410 [ 997.209598][T14761] ? __lock_acquire+0x7ea0/0x7ea0 [ 997.214690][T14761] ? __kasan_slab_alloc+0x6b/0x80 [ 997.219780][T14761] should_fail_ex+0x390/0x4c0 [ 997.224524][T14761] prepare_alloc_pages+0x1e1/0x5b0 [ 997.229716][T14761] __alloc_pages+0x130/0x4f0 [ 997.234375][T14761] ? zone_statistics+0x170/0x170 [ 997.239407][T14761] ? mark_lock+0x94/0x320 [ 997.243823][T14761] __get_free_pages+0x8/0x30 [ 997.248475][T14761] kasan_populate_vmalloc_pte+0x31/0xf0 [ 997.254075][T14761] ? __apply_to_page_range+0x97b/0xd10 [ 997.259620][T14761] __apply_to_page_range+0x98d/0xd10 [ 997.264962][T14761] ? kasan_populate_vmalloc+0x70/0x70 [ 997.270385][T14761] alloc_vmap_area+0x179f/0x18d0 [ 997.275386][T14761] ? vm_map_ram+0xab0/0xab0 [ 997.279940][T14761] ? rcu_is_watching+0x11/0xa0 [ 997.284769][T14761] __get_vm_area_node+0x158/0x330 [ 997.289855][T14761] __vmalloc_node_range+0x357/0x1380 [ 997.295187][T14761] ? stack_map_alloc+0x2f9/0x510 [ 997.300175][T14761] ? futex_wait_queue+0x23/0x1b0 [ 997.305158][T14761] ? futex_wait_queue+0x134/0x1b0 [ 997.310346][T14761] ? futex_unqueue+0xc7/0xf0 [ 997.315007][T14761] ? free_vm_area+0x50/0x50 [ 997.319562][T14761] ? apparmor_capable+0x12c/0x190 [ 997.324645][T14761] ? bpf_lsm_capable+0x5/0x10 [ 997.329367][T14761] ? security_capable+0x85/0xb0 [ 997.334261][T14761] bpf_map_area_alloc+0xd4/0xe0 [ 997.339163][T14761] ? stack_map_alloc+0x2f9/0x510 [ 997.344151][T14761] stack_map_alloc+0x2f9/0x510 [ 997.348962][T14761] map_create+0x524/0xff0 [ 997.353344][T14761] ? security_bpf+0x7a/0xa0 [ 997.357895][T14761] __sys_bpf+0x38b/0x780 [ 997.362192][T14761] ? bpf_link_show_fdinfo+0x380/0x380 [ 997.367631][T14761] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 997.373855][T14761] __x64_sys_bpf+0x78/0x90 [ 997.378330][T14761] do_syscall_64+0x4c/0xa0 [ 997.382798][T14761] ? clear_bhb_loop+0x60/0xb0 [ 997.387526][T14761] ? clear_bhb_loop+0x60/0xb0 [ 997.392256][T14761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 997.398196][T14761] RIP: 0033:0x7f509d19e199 [ 997.402654][T14761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.422327][T14761] RSP: 002b:00007f509e00d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 997.430818][T14761] RAX: ffffffffffffffda RBX: 00007f509d425fa0 RCX: 00007f509d19e199 [ 997.438828][T14761] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 997.446840][T14761] RBP: 00007f509d2350b8 R08: 0000000000000000 R09: 0000000000000000 [ 997.454850][T14761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.462882][T14761] R13: 00007f509d426038 R14: 00007f509d425fa0 R15: 00007fff63e6dcf8 [ 997.470919][T14761] [ 997.549806][T14769] xt_hashlimit: size too large, truncated to 1048576 [ 997.556563][T14769] xt_hashlimit: max too large, truncated to 1048576 [ 997.563297][T14769] xt_hashlimit: Unknown mode mask B2F8C501, kernel too old? [ 997.987024][T14778] fuse: Unknown parameter 'fd0x0000000000000008' [ 999.456191][T14785] ip_tables: iptables: counters copy to user failed while replacing table [ 999.784729][T14793] FAULT_INJECTION: forcing a failure. [ 999.784729][T14793] name failslab, interval 1, probability 0, space 0, times 0 [ 999.819411][T14793] CPU: 0 PID: 14793 Comm: syz.8.2862 Not tainted syzkaller #0 [ 999.826957][T14793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 999.837061][T14793] Call Trace: [ 999.840373][T14793] [ 999.843328][T14793] dump_stack_lvl+0x188/0x24e [ 999.848059][T14793] ? show_regs_print_info+0x12/0x12 [ 999.853306][T14793] ? load_image+0x410/0x410 [ 999.857855][T14793] ? __might_sleep+0xd0/0xd0 [ 999.862478][T14793] ? __lock_acquire+0x7ea0/0x7ea0 [ 999.867547][T14793] should_fail_ex+0x390/0x4c0 [ 999.872388][T14793] should_failslab+0x5/0x20 [ 999.876942][T14793] slab_pre_alloc_hook+0x59/0x300 [ 999.882012][T14793] kmem_cache_alloc+0x56/0x2f0 [ 999.886811][T14793] ? security_file_alloc+0x30/0x110 [ 999.892062][T14793] security_file_alloc+0x30/0x110 [ 999.897136][T14793] __alloc_file+0xc2/0x230 [ 999.901588][T14793] alloc_empty_file+0x90/0x180 [ 999.906392][T14793] alloc_file+0x5b/0x5f0 [ 999.910694][T14793] alloc_file_pseudo+0x180/0x200 [ 999.915670][T14793] ? alloc_empty_file_noaccount+0x80/0x80 [ 999.921427][T14793] ? alloc_fd+0x590/0x640 [ 999.925841][T14793] anon_inode_getfd+0xc6/0x1b0 [ 999.930663][T14793] do_inotify_init+0x33e/0x450 [ 999.935478][T14793] __x64_sys_inotify_init1+0x33/0x40 [ 999.940810][T14793] do_syscall_64+0x4c/0xa0 [ 999.945277][T14793] ? clear_bhb_loop+0x60/0xb0 [ 999.950033][T14793] ? clear_bhb_loop+0x60/0xb0 [ 999.954771][T14793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 999.960705][T14793] RIP: 0033:0x7f752479e199 [ 999.965162][T14793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.984821][T14793] RSP: 002b:00007f7525664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 999.993279][T14793] RAX: ffffffffffffffda RBX: 00007f7524a25fa0 RCX: 00007f752479e199 [ 1000.001293][T14793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000800 [ 1000.009327][T14793] RBP: 00007f75248350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1000.017333][T14793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.025350][T14793] R13: 00007f7524a26038 R14: 00007f7524a25fa0 R15: 00007ffd1876a168 [ 1000.033384][T14793] [ 1002.252469][T11792] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1002.478252][T14824] fuse: Unknown parameter 'fd0x0000000000000008' [ 1002.505651][T11792] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1002.843889][T11792] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.595281][T11792] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1004.586537][T11792] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.988532][T11792] usb 7-1: string descriptor 0 read error: -71 [ 1006.001963][T11792] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1006.062425][T11792] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1006.124482][T11792] usb 7-1: can't set config #1, error -71 [ 1006.181330][T11792] usb 7-1: USB disconnect, device number 27 [ 1006.367824][T14843] FAULT_INJECTION: forcing a failure. [ 1006.367824][T14843] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.436103][T14843] CPU: 1 PID: 14843 Comm: syz.8.2879 Not tainted syzkaller #0 [ 1006.443656][T14843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1006.453745][T14843] Call Trace: [ 1006.457063][T14843] [ 1006.460016][T14843] dump_stack_lvl+0x188/0x24e [ 1006.464739][T14843] ? show_regs_print_info+0x12/0x12 [ 1006.470005][T14843] ? load_image+0x410/0x410 [ 1006.474563][T14843] ? __lock_acquire+0x7ea0/0x7ea0 [ 1006.479634][T14843] should_fail_ex+0x390/0x4c0 [ 1006.484400][T14843] should_failslab+0x5/0x20 [ 1006.488949][T14843] slab_pre_alloc_hook+0x59/0x300 [ 1006.494016][T14843] ? legacy_init_fs_context+0x4d/0xb0 [ 1006.499511][T14843] __kmem_cache_alloc_node+0x4f/0x270 [ 1006.504934][T14843] ? legacy_init_fs_context+0x4d/0xb0 [ 1006.510354][T14843] kmalloc_trace+0x26/0xe0 [ 1006.514812][T14843] legacy_init_fs_context+0x4d/0xb0 [ 1006.520059][T14843] alloc_fs_context+0x628/0x7d0 [ 1006.524969][T14843] __se_sys_fsopen+0xa0/0x2c0 [ 1006.529695][T14843] do_syscall_64+0x4c/0xa0 [ 1006.534285][T14843] ? clear_bhb_loop+0x60/0xb0 [ 1006.539023][T14843] ? clear_bhb_loop+0x60/0xb0 [ 1006.543762][T14843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.549702][T14843] RIP: 0033:0x7f752479e199 [ 1006.554143][T14843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.573779][T14843] RSP: 002b:00007f7525664028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1006.582226][T14843] RAX: ffffffffffffffda RBX: 00007f7524a25fa0 RCX: 00007f752479e199 [ 1006.590231][T14843] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001280 [ 1006.598231][T14843] RBP: 00007f75248350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1006.606334][T14843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.614334][T14843] R13: 00007f7524a26038 R14: 00007f7524a25fa0 R15: 00007ffd1876a168 [ 1006.622442][T14843] [ 1009.172363][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1011.461019][T14890] FAULT_INJECTION: forcing a failure. [ 1011.461019][T14890] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.499985][T14890] CPU: 1 PID: 14890 Comm: syz.8.2894 Not tainted syzkaller #0 [ 1011.507552][T14890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1011.517643][T14890] Call Trace: [ 1011.520954][T14890] [ 1011.523916][T14890] dump_stack_lvl+0x188/0x24e [ 1011.528643][T14890] ? show_regs_print_info+0x12/0x12 [ 1011.533885][T14890] ? load_image+0x410/0x410 [ 1011.538442][T14890] ? __might_sleep+0xd0/0xd0 [ 1011.543068][T14890] ? __lock_acquire+0x7ea0/0x7ea0 [ 1011.548137][T14890] should_fail_ex+0x390/0x4c0 [ 1011.552862][T14890] should_failslab+0x5/0x20 [ 1011.557411][T14890] slab_pre_alloc_hook+0x59/0x300 [ 1011.562484][T14890] ? kvmalloc_node+0x6c/0x180 [ 1011.567207][T14890] __kmem_cache_alloc_node+0x4f/0x270 [ 1011.572625][T14890] ? kvmalloc_node+0x6c/0x180 [ 1011.577354][T14890] __kmalloc_node+0xa2/0x240 [ 1011.581988][T14890] kvmalloc_node+0x6c/0x180 [ 1011.586554][T14890] alloc_fdtable+0x169/0x2c0 [ 1011.591198][T14890] dup_fd+0x743/0xa20 [ 1011.595234][T14890] ? _raw_spin_unlock+0x24/0x40 [ 1011.600113][T14890] ? copy_fs_struct+0x1bf/0x270 [ 1011.605005][T14890] ksys_unshare+0x458/0x8e0 [ 1011.609629][T14890] ? sighand_ctor+0x40/0x40 [ 1011.614165][T14890] ? lock_chain_count+0x20/0x20 [ 1011.619067][T14890] ? syscall_enter_from_user_mode+0x21/0x80 [ 1011.625025][T14890] __x64_sys_unshare+0x34/0x40 [ 1011.629832][T14890] do_syscall_64+0x4c/0xa0 [ 1011.634286][T14890] ? clear_bhb_loop+0x60/0xb0 [ 1011.639002][T14890] ? clear_bhb_loop+0x60/0xb0 [ 1011.643721][T14890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1011.649649][T14890] RIP: 0033:0x7f752479e199 [ 1011.654086][T14890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.673719][T14890] RSP: 002b:00007f7525664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1011.682256][T14890] RAX: ffffffffffffffda RBX: 00007f7524a25fa0 RCX: 00007f752479e199 [ 1011.690255][T14890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 1011.698249][T14890] RBP: 00007f75248350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1011.706241][T14890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.714236][T14890] R13: 00007f7524a26038 R14: 00007f7524a25fa0 R15: 00007ffd1876a168 [ 1011.722249][T14890] [ 1013.986919][T14927] netlink: 'syz.6.2901': attribute type 3 has an invalid length. [ 1014.015192][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2901'. [ 1014.035873][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2901'. [ 1015.100758][T14939] netlink: 'syz.1.2905': attribute type 4 has an invalid length. [ 1015.978918][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2911'. [ 1016.606324][T14960] netlink: 'syz.6.2912': attribute type 4 has an invalid length. [ 1016.942146][ T4317] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1017.044967][T14967] FAULT_INJECTION: forcing a failure. [ 1017.044967][T14967] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.065482][T14967] CPU: 1 PID: 14967 Comm: syz.7.2917 Not tainted syzkaller #0 [ 1017.073022][T14967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1017.083123][T14967] Call Trace: [ 1017.086440][T14967] [ 1017.089436][T14967] dump_stack_lvl+0x188/0x24e [ 1017.094160][T14967] ? show_regs_print_info+0x12/0x12 [ 1017.099407][T14967] ? load_image+0x410/0x410 [ 1017.103970][T14967] ? __lock_acquire+0x7ea0/0x7ea0 [ 1017.109051][T14967] should_fail_ex+0x390/0x4c0 [ 1017.113788][T14967] should_failslab+0x5/0x20 [ 1017.118332][T14967] slab_pre_alloc_hook+0x59/0x300 [ 1017.123416][T14967] ? security_sb_alloc+0x3d/0x120 [ 1017.128485][T14967] __kmem_cache_alloc_node+0x4f/0x270 [ 1017.133904][T14967] ? security_sb_alloc+0x3d/0x120 [ 1017.138962][T14967] __kmalloc+0xa3/0x240 [ 1017.143193][T14967] security_sb_alloc+0x3d/0x120 [ 1017.148095][T14967] alloc_super+0x203/0x930 [ 1017.152578][T14967] ? kill_litter_super+0xa0/0xa0 [ 1017.157573][T14967] sget_fc+0x2d4/0x750 [ 1017.161680][T14967] ? kill_litter_super+0xa0/0xa0 [ 1017.166657][T14967] ? mqueue_get_tree+0xe0/0xe0 [ 1017.171453][T14967] get_tree_nodev+0x26/0x160 [ 1017.176086][T14967] vfs_get_tree+0x88/0x270 [ 1017.180541][T14967] fc_mount+0x18/0xa0 [ 1017.184629][T14967] mq_init_ns+0x39d/0x510 [ 1017.188999][T14967] copy_ipcs+0x2de/0x500 [ 1017.193298][T14967] create_new_namespaces+0x212/0x700 [ 1017.198699][T14967] unshare_nsproxy_namespaces+0x116/0x160 [ 1017.204458][T14967] ksys_unshare+0x4f6/0x8e0 [ 1017.209017][T14967] ? sighand_ctor+0x40/0x40 [ 1017.213582][T14967] ? lock_chain_count+0x20/0x20 [ 1017.218489][T14967] ? syscall_enter_from_user_mode+0x21/0x80 [ 1017.224430][T14967] __x64_sys_unshare+0x34/0x40 [ 1017.229233][T14967] do_syscall_64+0x4c/0xa0 [ 1017.233697][T14967] ? clear_bhb_loop+0x60/0xb0 [ 1017.238420][T14967] ? clear_bhb_loop+0x60/0xb0 [ 1017.243142][T14967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1017.249078][T14967] RIP: 0033:0x7fec26f9e199 [ 1017.253530][T14967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.273186][T14967] RSP: 002b:00007fec27f51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1017.281645][T14967] RAX: ffffffffffffffda RBX: 00007fec27225fa0 RCX: 00007fec26f9e199 [ 1017.289688][T14967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000200 [ 1017.297708][T14967] RBP: 00007fec270350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1017.305715][T14967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.313716][T14967] R13: 00007fec27226038 R14: 00007fec27225fa0 R15: 00007ffd6020d3a8 [ 1017.321748][T14967] [ 1017.352509][ T4317] usb 9-1: Using ep0 maxpacket: 8 [ 1017.365431][ T4317] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1017.388576][ T4317] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1017.429021][ T4317] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1017.471160][ T4317] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1017.499082][ T4317] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1017.570928][ T4317] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1017.581682][ T4317] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.932868][ T4317] usb 9-1: usb_control_msg returned -32 [ 1017.938619][ T4317] usbtmc 9-1:16.0: can't read capabilities [ 1017.993512][ T4317] usb 9-1: USB disconnect, device number 6 [ 1019.215278][T14993] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2926'. [ 1022.019660][T15009] FAULT_INJECTION: forcing a failure. [ 1022.019660][T15009] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.113624][T15009] CPU: 1 PID: 15009 Comm: syz.8.2931 Not tainted syzkaller #0 [ 1022.121152][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1022.131229][T15009] Call Trace: [ 1022.134532][T15009] [ 1022.137489][T15009] dump_stack_lvl+0x188/0x24e [ 1022.142207][T15009] ? show_regs_print_info+0x12/0x12 [ 1022.147509][T15009] ? load_image+0x410/0x410 [ 1022.152065][T15009] ? __lock_acquire+0x7ea0/0x7ea0 [ 1022.157133][T15009] ? __x64_sys_unshare+0x34/0x40 [ 1022.162098][T15009] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1022.168203][T15009] should_fail_ex+0x390/0x4c0 [ 1022.172929][T15009] should_failslab+0x5/0x20 [ 1022.177473][T15009] slab_pre_alloc_hook+0x59/0x300 [ 1022.182545][T15009] ? alloc_super+0x5a/0x930 [ 1022.187087][T15009] __kmem_cache_alloc_node+0x4f/0x270 [ 1022.192499][T15009] ? alloc_super+0x5a/0x930 [ 1022.197060][T15009] kmalloc_trace+0x26/0xe0 [ 1022.201518][T15009] alloc_super+0x5a/0x930 [ 1022.205898][T15009] ? kill_litter_super+0xa0/0xa0 [ 1022.210878][T15009] sget_fc+0x2d4/0x750 [ 1022.214997][T15009] ? kill_litter_super+0xa0/0xa0 [ 1022.219975][T15009] ? mqueue_get_tree+0xe0/0xe0 [ 1022.224775][T15009] get_tree_nodev+0x26/0x160 [ 1022.229413][T15009] vfs_get_tree+0x88/0x270 [ 1022.233878][T15009] fc_mount+0x18/0xa0 [ 1022.237906][T15009] mq_init_ns+0x39d/0x510 [ 1022.242286][T15009] copy_ipcs+0x2de/0x500 [ 1022.246569][T15009] create_new_namespaces+0x212/0x700 [ 1022.251903][T15009] unshare_nsproxy_namespaces+0x116/0x160 [ 1022.257666][T15009] ksys_unshare+0x4f6/0x8e0 [ 1022.262233][T15009] ? sighand_ctor+0x40/0x40 [ 1022.266805][T15009] ? lock_chain_count+0x20/0x20 [ 1022.271710][T15009] ? syscall_enter_from_user_mode+0x21/0x80 [ 1022.277713][T15009] __x64_sys_unshare+0x34/0x40 [ 1022.282521][T15009] do_syscall_64+0x4c/0xa0 [ 1022.286984][T15009] ? clear_bhb_loop+0x60/0xb0 [ 1022.291699][T15009] ? clear_bhb_loop+0x60/0xb0 [ 1022.296430][T15009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1022.302367][T15009] RIP: 0033:0x7f752479e199 [ 1022.306813][T15009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.326462][T15009] RSP: 002b:00007f7525664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1022.334932][T15009] RAX: ffffffffffffffda RBX: 00007f7524a25fa0 RCX: 00007f752479e199 [ 1022.342935][T15009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000200 [ 1022.350947][T15009] RBP: 00007f75248350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1022.358945][T15009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.366944][T15009] R13: 00007f7524a26038 R14: 00007f7524a25fa0 R15: 00007ffd1876a168 [ 1022.374948][T15009] [ 1022.707414][ T4317] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1023.015964][ T4317] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1023.048846][ T4317] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1023.361259][T15029] netlink: 'syz.1.2937': attribute type 4 has an invalid length. [ 1023.671651][ T4317] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1023.699578][ T4317] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1023.716316][ T4317] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1023.741364][ T4317] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1023.803853][ T4317] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1025.177363][ T4317] usb 7-1: Product: syz [ 1025.382821][ T4317] usb 7-1: Manufacturer: syz [ 1026.198878][ T4317] usb 7-1: can't set config #1, error -71 [ 1026.243193][ T4317] usb 7-1: USB disconnect, device number 28 [ 1026.332397][T15044] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2941'. [ 1026.423694][T15044] siw: device registration error -23 [ 1028.290439][T15078] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2955'. [ 1029.384489][T15078] siw: device registration error -23 [ 1029.565549][T15087] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1030.231749][T15094] netlink: 'syz.6.2957': attribute type 4 has an invalid length. [ 1030.374699][T15099] netlink: 'syz.8.2958': attribute type 4 has an invalid length. [ 1031.225797][T15114] netlink: 'syz.7.2966': attribute type 10 has an invalid length. [ 1031.264897][T15114] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1031.352887][T15114] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2966'. [ 1031.564175][T15114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.656308][T15114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.688400][T15114] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1031.733950][T15114] bond0 (unregistering): Released all slaves [ 1031.793189][T15119] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2968'. [ 1031.899484][T15119] siw: device registration error -23 [ 1032.079949][T15124] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2970'. [ 1032.229261][T15127] siw: device registration error -23 [ 1038.181860][T15133] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2973'. [ 1038.219392][T15133] siw: device registration error -23 [ 1039.418562][T15166] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2984'. [ 1042.495459][T15166] siw: device registration error -23 [ 1042.672126][T15175] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2986'. [ 1042.682843][T15175] bond0: ARP target 170.170.170.170 is already present [ 1042.690785][T15175] bond0: option arp_ip_target: invalid value (2863311530) [ 1042.899195][T15181] FAULT_INJECTION: forcing a failure. [ 1042.899195][T15181] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1042.912236][T15181] CPU: 1 PID: 15181 Comm: syz.7.2989 Not tainted syzkaller #0 [ 1042.919730][T15181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1042.929817][T15181] Call Trace: [ 1042.933115][T15181] [ 1042.936096][T15181] dump_stack_lvl+0x188/0x24e [ 1042.940817][T15181] ? show_regs_print_info+0x12/0x12 [ 1042.946057][T15181] ? load_image+0x410/0x410 [ 1042.950610][T15181] should_fail_ex+0x390/0x4c0 [ 1042.955340][T15181] futex_lock_pi_atomic+0x117/0xcb0 [ 1042.960575][T15181] ? pi_state_update_owner+0x340/0x340 [ 1042.966072][T15181] ? futex_setup_timer+0xc0/0xc0 [ 1042.971055][T15181] futex_lock_pi+0x227/0x9e0 [ 1042.975701][T15181] ? futex_wait_queue+0x134/0x1b0 [ 1042.980767][T15181] ? fixup_pi_state_owner+0x5e0/0x5e0 [ 1042.986217][T15181] ? file_end_write+0x156/0x250 [ 1042.991126][T15181] ? vfs_write+0x777/0x9a0 [ 1042.995601][T15181] do_futex+0x1c1/0x320 [ 1042.999816][T15181] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1043.005759][T15181] __se_sys_futex+0x381/0x410 [ 1043.010472][T15181] ? __x64_sys_futex+0xf0/0xf0 [ 1043.015275][T15181] ? __x64_sys_futex+0x1d/0xf0 [ 1043.020084][T15181] do_syscall_64+0x4c/0xa0 [ 1043.024540][T15181] ? clear_bhb_loop+0x60/0xb0 [ 1043.029249][T15181] ? clear_bhb_loop+0x60/0xb0 [ 1043.033976][T15181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1043.039899][T15181] RIP: 0033:0x7fec26f9e199 [ 1043.044374][T15181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.064019][T15181] RSP: 002b:00007fec27f51028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1043.072504][T15181] RAX: ffffffffffffffda RBX: 00007fec27225fa0 RCX: 00007fec26f9e199 [ 1043.080509][T15181] RDX: 00000000fffffffe RSI: 000000000000000d RDI: 0000200000000000 [ 1043.088522][T15181] RBP: 00007fec270350b8 R08: 0000000000000000 R09: 00000000ffffffff [ 1043.096522][T15181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.104527][T15181] R13: 00007fec27226038 R14: 00007fec27225fa0 R15: 00007ffd6020d3a8 [ 1043.112562][T15181] [ 1043.452649][ T26] audit: type=1326 audit(1791215451.659:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15190 comm="syz.1.2992" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed7b39e199 code=0x0 [ 1043.808863][T15205] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2998'. [ 1044.787493][T15210] siw: device registration error -23 [ 1045.709228][T15242] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3010'. [ 1045.771585][T15244] fuse: Unknown parameter 'grou00000000000000000000' [ 1045.942380][T11792] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1046.164778][T11792] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.537585][T15254] netlink: 'syz.1.3012': attribute type 4 has an invalid length. [ 1047.428610][T11792] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1047.440427][T11792] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1047.451876][T11792] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1047.467091][T11792] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1047.478071][T11792] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.495764][T15239] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1047.551613][T15239] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1047.806897][T11792] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 1048.950167][T11792] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 1049.238286][T11792] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 1050.113276][T11792] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1050.343543][T11792] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 1050.422876][T11792] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 1050.497685][T11792] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1050.544974][T11792] usb 9-1: USB disconnect, device number 7 [ 1050.562309][T11792] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1050.580719][T11792] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1050.628767][T11792] keyspan 9-1:1.0: device disconnected [ 1053.539364][T15292] netlink: 'syz.1.3023': attribute type 4 has an invalid length. [ 1053.763814][T15289] ptp ptp0: new virtual clock ptp1 [ 1053.798346][T15289] ptp ptp0: guarantee physical clock free running [ 1053.816106][T15293] ptp ptp0: delete virtual clock ptp1 [ 1053.874604][T15293] [ 1053.877000][T15293] ====================================================== [ 1053.884039][T15293] WARNING: possible circular locking dependency detected [ 1053.891094][T15293] syzkaller #0 Not tainted [ 1053.895527][T15293] ------------------------------------------------------ [ 1053.902561][T15293] syz.7.3024/15293 is trying to acquire lock: [ 1053.908658][T15293] ffff888079c44130 (&clk->rwsem){++++}-{3:3}, at: posix_clock_unregister+0x5b/0xc0 [ 1053.918102][T15293] [ 1053.918102][T15293] but task is already holding lock: [ 1053.925482][T15293] ffff88814d3c18f0 (&ptp->n_vclocks_mux){+.+.}-{3:3}, at: n_vclocks_store+0xfc/0x750 [ 1053.935047][T15293] [ 1053.935047][T15293] which lock already depends on the new lock. [ 1053.935047][T15293] [ 1053.945473][T15293] [ 1053.945473][T15293] the existing dependency chain (in reverse order) is: [ 1053.954503][T15293] [ 1053.954503][T15293] -> #1 (&ptp->n_vclocks_mux){+.+.}-{3:3}: [ 1053.962530][T15293] __mutex_lock+0x12d/0xae0 [ 1053.967604][T15293] ptp_clock_settime+0x174/0x280 [ 1053.973088][T15293] pc_clock_settime+0x23c/0x2a0 [ 1053.978484][T15293] __x64_sys_clock_settime+0x25a/0x2a0 [ 1053.984483][T15293] do_syscall_64+0x4c/0xa0 [ 1053.989446][T15293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.995884][T15293] [ 1053.995884][T15293] -> #0 (&clk->rwsem){++++}-{3:3}: [ 1054.003220][T15293] __lock_acquire+0x3a03/0x7ea0 [ 1054.008623][T15293] lock_acquire+0x1bc/0x4a0 [ 1054.013679][T15293] down_write+0x36/0x60 [ 1054.018388][T15293] posix_clock_unregister+0x5b/0xc0 [ 1054.024144][T15293] ptp_clock_unregister+0x18a/0x200 [ 1054.029897][T15293] ptp_vclock_unregister+0x110/0x140 [ 1054.035739][T15293] unregister_vclock+0xca/0x130 [ 1054.041150][T15293] device_for_each_child_reverse+0x112/0x1b0 [ 1054.047692][T15293] n_vclocks_store+0x226/0x750 [ 1054.052999][T15293] kernfs_fop_write_iter+0x3a0/0x520 [ 1054.058835][T15293] vfs_write+0x482/0x9a0 [ 1054.063635][T15293] ksys_write+0x14d/0x260 [ 1054.068536][T15293] do_syscall_64+0x4c/0xa0 [ 1054.073521][T15293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.079971][T15293] [ 1054.079971][T15293] other info that might help us debug this: [ 1054.079971][T15293] [ 1054.090213][T15293] Possible unsafe locking scenario: [ 1054.090213][T15293] [ 1054.097677][T15293] CPU0 CPU1 [ 1054.103060][T15293] ---- ---- [ 1054.108442][T15293] lock(&ptp->n_vclocks_mux); [ 1054.113228][T15293] lock(&clk->rwsem); [ 1054.119839][T15293] lock(&ptp->n_vclocks_mux); [ 1054.127149][T15293] lock(&clk->rwsem); [ 1054.131244][T15293] [ 1054.131244][T15293] *** DEADLOCK *** [ 1054.131244][T15293] [ 1054.139418][T15293] 5 locks held by syz.7.3024/15293: [ 1054.144655][T15293] #0: ffff88807ca03768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 1054.153976][T15293] #1: ffff888078644460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 1054.162902][T15293] #2: ffff888054252888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1d8/0x520 [ 1054.172691][T15293] #3: ffff88814d37ecb8 (kn->active#93){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x520 [ 1054.182851][T15293] #4: ffff88814d3c18f0 (&ptp->n_vclocks_mux){+.+.}-{3:3}, at: n_vclocks_store+0xfc/0x750 [ 1054.192834][T15293] [ 1054.192834][T15293] stack backtrace: [ 1054.198746][T15293] CPU: 1 PID: 15293 Comm: syz.7.3024 Not tainted syzkaller #0 [ 1054.206231][T15293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1054.216312][T15293] Call Trace: [ 1054.219636][T15293] [ 1054.222592][T15293] dump_stack_lvl+0x188/0x24e [ 1054.227310][T15293] ? load_image+0x410/0x410 [ 1054.231857][T15293] ? show_regs_print_info+0x12/0x12 [ 1054.237110][T15293] ? print_circular_bug+0x12b/0x1a0 [ 1054.242368][T15293] check_noncircular+0x2f8/0x400 [ 1054.247388][T15293] ? print_deadlock_bug+0x5d0/0x5d0 [ 1054.252638][T15293] ? lockdep_lock+0xf1/0x1f0 [ 1054.257267][T15293] ? _find_first_zero_bit+0xd2/0x100 [ 1054.262630][T15293] __lock_acquire+0x3a03/0x7ea0 [ 1054.267624][T15293] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.273728][T15293] ? verify_lock_unused+0x140/0x140 [ 1054.278984][T15293] lock_acquire+0x1bc/0x4a0 [ 1054.283546][T15293] ? posix_clock_unregister+0x5b/0xc0 [ 1054.288995][T15293] ? __might_sleep+0xd0/0xd0 [ 1054.293620][T15293] ? read_lock_is_recursive+0x10/0x10 [ 1054.299042][T15293] ? kobject_put+0x416/0x450 [ 1054.303673][T15293] ? cdev_default_release+0x18b/0x1b0 [ 1054.309099][T15293] ? kobject_put+0x41d/0x450 [ 1054.313747][T15293] down_write+0x36/0x60 [ 1054.317943][T15293] ? posix_clock_unregister+0x5b/0xc0 [ 1054.323349][T15293] posix_clock_unregister+0x5b/0xc0 [ 1054.328582][T15293] ptp_clock_unregister+0x18a/0x200 [ 1054.333834][T15293] ptp_vclock_unregister+0x110/0x140 [ 1054.339150][T15293] unregister_vclock+0xca/0x130 [ 1054.344046][T15293] ? pps_echo_client_default+0x70/0x70 [ 1054.349545][T15293] device_for_each_child_reverse+0x112/0x1b0 [ 1054.355655][T15293] ? device_get_devnode+0x290/0x290 [ 1054.360890][T15293] n_vclocks_store+0x226/0x750 [ 1054.365686][T15293] ? n_vclocks_show+0xd0/0xd0 [ 1054.370405][T15293] ? sysfs_kf_write+0x183/0x2a0 [ 1054.375289][T15293] ? sysfs_kf_read+0x350/0x350 [ 1054.380082][T15293] kernfs_fop_write_iter+0x3a0/0x520 [ 1054.385408][T15293] vfs_write+0x482/0x9a0 [ 1054.389698][T15293] ? file_end_write+0x250/0x250 [ 1054.394590][T15293] ? __fget_files+0x3fc/0x460 [ 1054.399310][T15293] ? __fdget_pos+0x2ae/0x360 [ 1054.403957][T15293] ? ksys_write+0x70/0x260 [ 1054.408431][T15293] ksys_write+0x14d/0x260 [ 1054.412818][T15293] ? __ia32_sys_read+0x80/0x80 [ 1054.417621][T15293] ? lockdep_hardirqs_on+0x94/0x140 [ 1054.422876][T15293] do_syscall_64+0x4c/0xa0 [ 1054.427360][T15293] ? clear_bhb_loop+0x60/0xb0 [ 1054.432069][T15293] ? clear_bhb_loop+0x60/0xb0 [ 1054.436780][T15293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.442709][T15293] RIP: 0033:0x7fec26f9e199 [ 1054.447150][T15293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.466806][T15293] RSP: 002b:00007fec27f30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1054.475254][T15293] RAX: ffffffffffffffda RBX: 00007fec27226090 RCX: 00007fec26f9e199 [ 1054.483257][T15293] RDX: 0000000000000012 RSI: 0000200000000180 RDI: 0000000000000003 [ 1054.491255][T15293] RBP: 00007fec270350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1054.499262][T15293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.507257][T15293] R13: 00007fec27226128 R14: 00007fec27226090 R15: 00007ffd6020d3a8 [ 1054.515273][T15293] [ 1054.522536][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.531641][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.558982][T15293] ptp ptp0: only physical clock in use now