last executing test programs: 9m54.884212908s ago: executing program 32 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) write(r0, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) 9m20.073047611s ago: executing program 33 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x1) syz_usb_control_io(r0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) 9m6.336656683s ago: executing program 34 (id=414): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x6609, 0x0) 7m52.830141732s ago: executing program 35 (id=991): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x4, 0x810f) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) eventfd(0x1) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c02000000150005001601ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc10080400240200e260f9", 0x55}], 0x1}, 0x0) 6m20.810514569s ago: executing program 36 (id=1816): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x3d, 0x10000000000d08, 0x4, 0x2, 0x4, 0xc, 0x7, 0x7fffffff, 0x122, 0x6000, 0x10, r2, r3, 0x982}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) utimes(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0x2710}}) 5m50.463164625s ago: executing program 37 (id=2044): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0x1) 5m4.68654926s ago: executing program 38 (id=2410): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000001c0)="c4e17e10a101000000c4e2fd9a1064660f3882390f01fb660f38805a0cf20fb4780266b833010f00d8660f380647fbc4c1cd76c8640f32", 0x37}], 0x1, 0x4, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0x5fffffffffb, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x3, 0x100000001, 0x68ff, 0x5, 0x400009, 0xba13, 0x2000, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m40.235880286s ago: executing program 9 (id=2575): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r1, 0x0, 0x0, 0x11, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc000000010902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m38.828107194s ago: executing program 9 (id=2585): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1e3) r1 = landlock_create_ruleset(&(0x7f0000000200)={0x6490, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 4m38.763022161s ago: executing program 9 (id=2587): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001680)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) 4m38.615394422s ago: executing program 9 (id=2588): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) umount2(&(0x7f0000000180)='./file0\x00', 0xa) 4m38.57640646s ago: executing program 9 (id=2590): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x48}}, 0x40800) 4m37.983286539s ago: executing program 9 (id=2595): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = dup3(r1, r0, 0x0) fchdir(r3) creat(&(0x7f0000000040)='./bus\x00', 0x0) 4m37.812027023s ago: executing program 39 (id=2595): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = dup3(r1, r0, 0x0) fchdir(r3) creat(&(0x7f0000000040)='./bus\x00', 0x0) 3m13.668548057s ago: executing program 2 (id=3263): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r2, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x3, 0x1, 0xdd, 0x38, 0x345, 0x1000008, 0x5, 0x20, 0x1, 0x5, 0x9, 0x7}, [{0x3, 0x4, 0x5, 0x6, 0x80, 0x6, 0x2, 0x10000}], "898ee164a8a0249e82a227de702fa1ddfb25b10f1d77b88cd1a2cffc4487fcc342e5a1a7afdc4f2330ed69c4d2aae4a5d0befad5d97806db4dccfb2d01f59a116dea3fefff818fbe540026f0c94e21b923c1c31780551b16f2529d5ca730f77b439f3c0d5bc2ccbb590d75f776e481fe71442b6c"}, 0xcc) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3m13.482728622s ago: executing program 2 (id=3267): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) newfstatat(0xffffffffffffff9c, &(0x7f0000004200)='./file0\x00', &(0x7f0000004240), 0x6000) 3m13.284267489s ago: executing program 2 (id=3269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0xff, @loopback, 0x7}, 0x1c) write$tun(r0, &(0x7f0000000480)={@val={0xa, 0x890d}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="0eb6ff7fffff", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}}, 0x4e) 3m12.815598455s ago: executing program 2 (id=3272): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x89101) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 3m12.697063671s ago: executing program 2 (id=3273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000033d000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0xba}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x20, 0x5, 0xfd}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x3, 0x40, 0x9, 0xff, 0x10000000100006, 0x10074, 0x5, 0xb, 0x3, 0xffffffff, 0xfffffffffffffff, 0x7, 0x1, 0x20000000000fc, 0x10000, 0x47], 0x8080000, 0x40085}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m5.61960702s ago: executing program 2 (id=3292): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x42}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x4000800) r2 = dup3(r0, r1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 3m5.181798431s ago: executing program 40 (id=3292): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x42}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x4000800) r2 = dup3(r0, r1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 2m8.24347623s ago: executing program 5 (id=3683): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0xa81c0000, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x8001, 0xa}]}) 2m8.031472326s ago: executing program 5 (id=3687): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x92) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x40, 0x180) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1002, 0x2c3) write(r3, &(0x7f0000004200), 0x0) sendfile(r3, r2, 0x0, 0x40003) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2m6.915126775s ago: executing program 5 (id=3696): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) chdir(&(0x7f00000000c0)='./sys\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000000c0)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0xd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8bbde28bbcee00", "e73400", "000000d900"}, 0x38) 2m6.491728997s ago: executing program 5 (id=3699): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0xa) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) 2m6.409251368s ago: executing program 5 (id=3700): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x10, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) 2m5.996129181s ago: executing program 5 (id=3702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000480)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x7, 0x40, 0x0, 0x6, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x2, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m5.61334374s ago: executing program 41 (id=3702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000480)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x7, 0x40, 0x0, 0x6, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x2, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m49.231297879s ago: executing program 0 (id=3800): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000700)={@dev={0xfe, 0x80, '\x00', 0xf}, 0x8, 0x0, 0x1, 0x0, 0x1ff, 0x9}, 0x20) r4 = syz_usb_connect$uac2(0x5, 0x9e, &(0x7f0000000840)=ANY=[@ANYBLOB="12010102000000208c0d0c0040000202030109028c000301008008080b0101010c20060904000000010120000924010300042c000408240a05004000030c24030207030603050300010f2406030506ee0000080007000400090401"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x60, 0x21, 0xaa, {0xaa, 0x22, "d53dc52c2ac8e2cb797f71fcf86fafbdb156addfc47e2da6091d739c1329adaa10a8f016ec9e2441fe24b60d50053d524b53ab1ca677c8aca0da20839ca9b0cfce04e07c0f23acebf439e6bed12b23dcb42c304fce164fc6eb1a3a3c92a8cf940af940d6e6a8cabe4927e3ae7f25ecd13cda982596809d4a0dca6f915404ab21d8e9f4a7e5c73ba8fab5a5d04718f12ef610fc80addc8fc2d5cae71f44c12efd6247b79d34e4e307"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x3, 0x2, 0x5, 0x8, 0xc023}}}, &(0x7f0000000640)={0x84, &(0x7f0000000200)={0x0, 0x17, 0x69, "e420bf896852e703350e614f159db8efb9ede9b8f5679e2a85194e3b54813fd6a735849652d465cae8dfa05039c605b845c80ac6f21adfefbdd2869c3cdcbf816babaaf87ad1e00d8308e2d6339a4c17c8439d5c5bed7fffad426273518d9c14f9556fb96a65c27490"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x20, 0x40, [0xf000]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0xfffa}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000400)={0x40, 0xb, 0x2, "01a5"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000480)={0x40, 0x13, 0x6, @local}, &(0x7f00000004c0)={0x40, 0x17, 0x6}, &(0x7f0000000500)={0x40, 0x19, 0x2, "91bc"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x6}, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x21, 0x1}}) 1m49.10895829s ago: executing program 0 (id=3801): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x0, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r1, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 1m48.433565793s ago: executing program 0 (id=3814): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x17f) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_marker\x00', 0x1, 0x102) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000000100)="eba191b60abcf3c2c989e75e65f22de7ffd86928ef738d7f6e870f54746a8e7b61995a90a3a9a9a6781db6879d619cd95930575f1a72cc38c735e32319adb3ee984ac26625037ebc6dddbad6f38e119eea23615b607453", 0x57) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r2, 0x0, 0x14014) read(r1, &(0x7f0000000500), 0x1000) 1m48.290262933s ago: executing program 0 (id=3807): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0xfffffffffffffffd, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x2, 0xfffffffffffffffc, 0x7, 0x6, 0x6, 0x100000000001, 0xfffffffffffffffe], 0x8000000, 0x4fb40}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1}, 0x6e) write(0xffffffffffffffff, &(0x7f0000000300)="040800", 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m48.08615615s ago: executing program 0 (id=3808): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) 1m45.335408224s ago: executing program 0 (id=3816): r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r0, 0x8800000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) sendfile(r3, r0, 0x0, 0x1000009) accept$alg(r1, 0x0, 0x0) 1m44.957823671s ago: executing program 42 (id=3816): r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r0, 0x8800000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) sendfile(r3, r0, 0x0, 0x1000009) accept$alg(r1, 0x0, 0x0) 1m20.015221074s ago: executing program 7 (id=3963): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x4000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000940)={0x2, 0x0, @ioapic={0x5000, 0x8004, 0x1, 0xfffffffe, 0x0, [{0x7, 0xc, 0x7, '\x00', 0x38}, {0x9, 0xde, 0x7a, '\x00', 0x9}, {0x2, 0xb3, 0x3, '\x00', 0x5}, {0x5, 0x9, 0x6, '\x00', 0x4}, {0x5, 0x5, 0x6, '\x00', 0x7c}, {0x0, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0xff, '\x00', 0x45}, {0x52, 0xc, 0x9, '\x00', 0x7}, {0x7, 0x6, 0x73, '\x00', 0x3}, {0x1, 0xb7, 0x89, '\x00', 0x7}, {0x16, 0x24, 0xa9, '\x00', 0x81}, {0x3, 0x1, 0x17, '\x00', 0xb}, {0x6, 0x5, 0x5, '\x00', 0x3}, {0x19, 0x9, 0x89, '\x00', 0x4}, {0x5, 0x1, 0x3, '\x00', 0x1}, {0xa, 0x9, 0xcb, '\x00', 0x5}, {0x4, 0xe, 0xb, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x44, 0x3, 0x3, '\x00', 0x4}, {0xf4, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x7, 0x31, '\x00', 0xf7}, {0x7, 0x8b, 0xe6, '\x00', 0xb}, {0xff, 0x8, 0x3, '\x00', 0xa}, {0x7, 0x83, 0x4, '\x00', 0xff}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 1m19.744030754s ago: executing program 7 (id=3966): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b///\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L6\x18\x91\xd2_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\x04\x00\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\xc8\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x2900, 0x88c, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e1a051f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c00", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x4, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x4, 0x5, 0x8001, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r2, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m17.849303306s ago: executing program 7 (id=3979): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x805) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b80)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x800, 0xa}, {@in6=@local, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2}}]}, 0x154}}, 0x0) 1m17.563257946s ago: executing program 7 (id=3981): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20040005) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {}, 0xa}}, 0x26) 1m17.157267172s ago: executing program 43 (id=3981): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20040005) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {}, 0xa}}, 0x26) 58.710970775s ago: executing program 8 (id=4058): r0 = syz_open_dev$sg(&(0x7f0000000380), 0x6f2, 0x20100) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 54.675748692s ago: executing program 8 (id=4066): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x1f90, @empty}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r2, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) sendmsg(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000840)="ec", 0x1}], 0x1}, 0x8084) accept(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 53.586452234s ago: executing program 8 (id=4081): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 53.029787169s ago: executing program 8 (id=4074): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0xa) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) 52.850212022s ago: executing program 8 (id=4076): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x0, r1, 0x1, 0xffffffff}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x6, 0x0, 0x0, 0x2, 0x1}}) 52.367332935s ago: executing program 8 (id=4078): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x301100, 0x1) fsetxattr$security_capability(r1, &(0x7f00000001c0), 0x0, 0x0, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xfffffffe, 0x1, 0x401d031, r1, 0x0) 52.056246638s ago: executing program 44 (id=4078): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x301100, 0x1) fsetxattr$security_capability(r1, &(0x7f00000001c0), 0x0, 0x0, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xfffffffe, 0x1, 0x401d031, r1, 0x0) 8.629778523s ago: executing program 6 (id=4418): socket$inet(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_ublk_setup_io_uring(0x4322, &(0x7f0000000000)={0x0, 0x76f4, 0x0, 0x0, 0x23f}, 0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x80000000, 0xfffffffd, 0x7, 0x5, 0x5c6}]}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.346205527s ago: executing program 6 (id=4433): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) 6.876647599s ago: executing program 6 (id=4436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x20e6, 0x5, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00140006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) 6.487400455s ago: executing program 6 (id=4439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) fsopen(0x0, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0x200002e6) read$FUSE(r1, &(0x7f0000002f80)={0x2020}, 0x2020) fcntl$setpipe(r2, 0x407, 0x7000000) 5.729632374s ago: executing program 6 (id=4452): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5.549401244s ago: executing program 6 (id=4446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 3.447168765s ago: executing program 4 (id=4467): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xe5e631ea2f09be13, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f000000ac40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a700)={0x78, 0x0, 0x4, {0x9, 0x0, 0x0, {0x2, 0x8, 0x400, 0xa1, 0xfffffffffffffc28, 0xfffffffffffffff6, 0x400, 0x3, 0x5, 0x4000, 0x3, 0x0, 0x0, 0x9, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r2, 0x0, 0x0) 3.08010054s ago: executing program 3 (id=4474): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc51b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x40, "", [{{0x9, 0x4, 0x0, 0x10, 0xfe, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x81, 0x2}}}}}]}}]}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffdeb, &(0x7f00000005c0)=[{&(0x7f0000000000)="64000000100001060000000000000000000000007fff0000000000000000000010002000766574682b000000000000002400120008000100766574681800020014000100000000007fff000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2006c00030100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto(r3, &(0x7f0000000100)="44000000100005060000000000000000000000000000000000000000000000000c0003006d796c6f7770616e0800050002000000100012000b0001006c6f7770616e0000", 0x44, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x31, 0x28, {0x28, 0x9, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.537054658s ago: executing program 4 (id=4479): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000040)=@ethtool_perm_addr}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) 2.264554785s ago: executing program 4 (id=4483): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r5, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x200005, 0x5d}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 2.170564295s ago: executing program 4 (id=4484): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r0, &(0x7f0000000180)=""/145, 0x91) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x12, r1, 0x93013000) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000bcb000/0x4000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x4000}) 2.161470205s ago: executing program 1 (id=4485): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xd, {[@local=@item_012={0x0, 0x2, 0x5}, @global=@item_012={0x1, 0x1, 0x4, 'j'}, @main=@item_4={0x3, 0x0, 0xb, 'I\"g\b'}, @local=@item_4={0x3, 0x2, 0x2, "a4bcc2f3"}]}}, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.598246701s ago: executing program 1 (id=4486): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r2, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 1.53718639s ago: executing program 1 (id=4487): timer_create(0x0, 0x0, 0x0) io_setup(0x80000000, &(0x7f0000000740)=0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000526) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) io_submit(r0, 0x0, &(0x7f0000000f00)) msync(&(0x7f0000003000/0x1000)=nil, 0xffffffffdfffcfff, 0x0) 1.46398608s ago: executing program 3 (id=4488): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @empty}, 0x10) listen(r0, 0x5) rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.45040955s ago: executing program 1 (id=4489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{0x6, 0x1, 0x0, 0x7}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1.391629772s ago: executing program 1 (id=4490): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "0f"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) 1.330013161s ago: executing program 1 (id=4491): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 1.244722697s ago: executing program 4 (id=4492): ptrace(0x10, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "7af9c2add30c3b0d788d9a94b0731ab8d4a8502c36822594c41a3a588f9ea10f4ea91dff6ece7b715bd30d67c5da8c5c4dada466bf73ee60295d1d133135d5c7", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x10001) read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020) r2 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$IPC_INFO(r2, 0x3, &(0x7f00000001c0)=""/243) 1.007176659s ago: executing program 3 (id=4493): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x2710}, 0x0, 0x2002}], 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) write(r0, &(0x7f0000001640)="8b", 0xffe4) 835.837487ms ago: executing program 3 (id=4494): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x100}], 0x0, 0x1000000, 0x0}) 554.746635ms ago: executing program 3 (id=4495): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x695d8e8, 0x4) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 91.73023ms ago: executing program 4 (id=4496): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x5, 0x44, 0x2, 0x8}, 0x20) r1 = fcntl$dupfd(r0, 0x406, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f}}, 0x20) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 0s ago: executing program 3 (id=4497): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x44000) gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Y]=FORCED_BIND [ 584.793937][T18057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 584.793951][T18057] Call Trace: [ 584.793961][T18057] [ 584.793973][T18057] dump_stack_lvl+0xe8/0x150 [ 584.794011][T18057] should_fail_ex+0x3eb/0x540 [ 584.794043][T18057] should_failslab+0xa8/0x100 [ 584.794076][T18057] ? dst_alloc+0x105/0x170 [ 584.794114][T18057] kmem_cache_alloc_noprof+0x9c/0x600 [ 584.794151][T18057] ? dst_alloc+0x105/0x170 [ 584.794189][T18057] dst_alloc+0x105/0x170 [ 584.794219][T18057] ? ip_check_mc_rcu+0x68a/0x7c0 [ 584.794250][T18057] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 584.794295][T18057] ? ip_route_output_key_hash+0xd8/0x2a0 [ 584.794331][T18057] ip_route_output_key_hash+0x18d/0x2a0 [ 584.794367][T18057] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 584.794406][T18057] ? lock_acquire+0x115/0x350 [ 584.794443][T18057] ip_route_output_flow+0x2a/0x150 [ 584.794472][T18057] ? security_sk_classify_flow+0x6d/0x150 [ 584.794509][T18057] udp_sendmsg+0x144a/0x2140 [ 584.794566][T18057] ? __pfx_udp_sendmsg+0x10/0x10 [ 584.794607][T18057] ? trace_hrtimer_start+0x82/0x200 [ 584.794636][T18057] ? hrtimer_start_range_ns_common+0x7f6/0xb60 [ 584.794687][T18057] ? finish_task_switch+0x40e/0xc60 [ 584.794718][T18057] ? lockdep_hardirqs_on+0x7b/0x110 [ 584.794749][T18057] ? rcu_is_watching+0x16/0xb0 [ 584.794782][T18057] ? trace_sched_exit_tp+0x3a/0x130 [ 584.794818][T18057] ? begin_current_label_crit_section+0x299/0x830 [ 584.794857][T18057] udpv6_sendmsg+0x915/0x2610 [ 584.794911][T18057] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 584.794977][T18057] ? __pfx_current_check_autobind_udp_socket+0x10/0x10 [ 584.795020][T18057] ? inet_send_prepare+0x5b/0x260 [ 584.795056][T18057] ? inet6_sendmsg+0xe4/0x120 [ 584.795089][T18057] ? __pfx_inet6_sendmsg+0x10/0x10 [ 584.795119][T18057] sock_sendmsg_nosec+0x90/0x180 [ 584.795156][T18057] sock_write_iter+0x2de/0x3e0 [ 584.795190][T18057] ? __pfx_sock_write_iter+0x10/0x10 [ 584.795230][T18057] ? bpf_lsm_file_permission+0x9/0x20 [ 584.795261][T18057] ? security_file_permission+0x75/0x260 [ 584.795306][T18057] vfs_write+0x612/0xba0 [ 584.795343][T18057] ? __pfx_vfs_write+0x10/0x10 [ 584.795375][T18057] ? __fget_files+0x3a2/0x420 [ 584.795400][T18057] ? __fget_files+0x2a/0x420 [ 584.795431][T18057] ? fdget+0x1ac/0x250 [ 584.795464][T18057] ksys_write+0x150/0x270 [ 584.795494][T18057] ? __pfx_ksys_write+0x10/0x10 [ 584.795535][T18057] do_syscall_64+0x166/0x520 [ 584.795562][T18057] ? trace_irq_disable+0x3b/0x140 [ 584.795590][T18057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.795614][T18057] ? clear_bhb_loop+0x70/0xc0 [ 584.795644][T18057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.795667][T18057] RIP: 0033:0x7f163bb9e159 [ 584.795689][T18057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.795709][T18057] RSP: 002b:00007f163ca12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 584.795736][T18057] RAX: ffffffffffffffda RBX: 00007f163be25fa0 RCX: 00007f163bb9e159 [ 584.795754][T18057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 584.795769][T18057] RBP: 00007f163bc3506b R08: 0000000000000000 R09: 0000000000000000 [ 584.795785][T18057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.795800][T18057] R13: 00007f163be26038 R14: 00007f163be25fa0 R15: 00007ffeda170a18 [ 584.795848][T18057] [ 584.860502][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 584.879199][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 584.879359][ T10] usb 9-1: New USB device found: idVendor=0d8c, idProduct=000c, bcdDevice=0.40 [ 584.909488][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.909570][ T10] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 584.937056][ T10] usb 9-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 584.937143][ T10] usb 9-1: Product: syz [ 584.937188][ T10] usb 9-1: Manufacturer: syz [ 584.937238][ T10] usb 9-1: SerialNumber: syz [ 585.251099][T18026] lo speed is unknown, defaulting to 1000 [ 585.488489][ T10] usb 9-1: 3:0: cannot get min/max values for control 2 (id 3) [ 585.488527][ T10] usb 9-1: applying playback min mute quirk [ 585.488545][ T10] usb 9-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 585.488565][ T10] usb 9-1: [3] FU [ÑŠ Playback Volume] ch = 1, val = 0/1/1 [ 585.489515][ T10] usb 9-1: 3:0: cannot get min/max values for control 8 (id 3) [ 585.491626][ T10] usb 9-1: 3:0: failed to get current value for ch 1 (-71) [ 585.547797][ T10] usb 9-1: 3:0: failed to get current value for ch 1 (-71) [ 585.723343][ T10] usb 9-1: USB disconnect, device number 36 [ 585.798780][T16061] udevd[16061]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.989458][ T5621] Bluetooth: hci0: command tx timeout [ 586.326852][T18026] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.328651][T18026] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.329787][T18026] bridge_slave_0: entered allmulticast mode [ 586.334052][T18026] bridge_slave_0: entered promiscuous mode [ 586.357552][T18026] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.395516][T18026] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.395742][T18026] bridge_slave_1: entered allmulticast mode [ 586.397685][T18026] bridge_slave_1: entered promiscuous mode [ 586.731502][T18026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.762992][T18026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.204887][T18108] binder: BINDER_SET_CONTEXT_MGR already set [ 587.205573][T18108] binder: Write failure EINVAL in pid:1233 [ 587.205987][T18108] binder: Read failure Err(EFAULT) in pid:1233 [ 587.228146][T18026] team0: Port device team_slave_0 added [ 587.274317][T18026] team0: Port device team_slave_1 added [ 587.409235][T18026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.409257][T18026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.409287][T18026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.416868][T18026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.416890][T18026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.416921][T18026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.439104][T18114] FAULT_INJECTION: forcing a failure. [ 587.439104][T18114] name failslab, interval 1, probability 0, space 0, times 0 [ 587.439227][T18114] CPU: 0 UID: 0 PID: 18114 Comm: syz.4.3844 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 587.439315][T18114] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 587.439338][T18114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 587.439380][T18114] Call Trace: [ 587.439410][T18114] [ 587.439434][T18114] dump_stack_lvl+0xe8/0x150 [ 587.439532][T18114] should_fail_ex+0x3eb/0x540 [ 587.439626][T18114] should_failslab+0xa8/0x100 [ 587.439714][T18114] __kmalloc_cache_noprof+0x9e/0x600 [ 587.439798][T18114] ? kvm_init_irq_routing+0x4f/0x110 [ 587.439874][T18114] ? kvm_init_irq_routing+0x4f/0x110 [ 587.439982][T18114] kvm_init_irq_routing+0x4f/0x110 [ 587.440061][T18114] kvm_dev_ioctl+0x5e7/0x16e0 [ 587.440174][T18114] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 587.440282][T18114] ? bpf_lsm_file_ioctl+0x9/0x20 [ 587.440368][T18114] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 587.440480][T18114] __se_sys_ioctl+0xfc/0x170 [ 587.440577][T18114] do_syscall_64+0x166/0x520 [ 587.440662][T18114] ? trace_irq_disable+0x3b/0x140 [ 587.440738][T18114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.440809][T18114] ? clear_bhb_loop+0x70/0xc0 [ 587.440885][T18114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.440950][T18114] RIP: 0033:0x7f163bb9e159 [ 587.441014][T18114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.441068][T18114] RSP: 002b:00007f163ca12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.441129][T18114] RAX: ffffffffffffffda RBX: 00007f163be25fa0 RCX: 00007f163bb9e159 [ 587.441175][T18114] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 587.441216][T18114] RBP: 00007f163bc3506b R08: 0000000000000000 R09: 0000000000000000 [ 587.441251][T18114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.441294][T18114] R13: 00007f163be26038 R14: 00007f163be25fa0 R15: 00007ffeda170a18 [ 587.441390][T18114] [ 587.798077][T18026] hsr_slave_0: entered promiscuous mode [ 587.804891][T18026] hsr_slave_1: entered promiscuous mode [ 587.805474][T18026] debugfs: 'hsr0' already exists in 'hsr' [ 587.805492][T18026] Cannot create hsr debugfs directory [ 588.061327][ T5621] Bluetooth: hci0: command tx timeout [ 588.343221][T18140] FAULT_INJECTION: forcing a failure. [ 588.343221][T18140] name failslab, interval 1, probability 0, space 0, times 0 [ 588.343262][T18140] CPU: 0 UID: 0 PID: 18140 Comm: syz.8.3852 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 588.343298][T18140] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 588.343308][T18140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 588.343322][T18140] Call Trace: [ 588.343333][T18140] [ 588.343344][T18140] dump_stack_lvl+0xe8/0x150 [ 588.343375][T18140] should_fail_ex+0x3eb/0x540 [ 588.343400][T18140] should_failslab+0xa8/0x100 [ 588.343425][T18140] ? security_inode_alloc+0x39/0x310 [ 588.343447][T18140] kmem_cache_alloc_noprof+0x9c/0x600 [ 588.343470][T18140] ? __pfx_make_kgid+0x10/0x10 [ 588.343489][T18140] ? security_inode_alloc+0x39/0x310 [ 588.343519][T18140] security_inode_alloc+0x39/0x310 [ 588.343544][T18140] inode_init_always_gfp+0x97e/0xd30 [ 588.343574][T18140] alloc_inode+0x82/0x1b0 [ 588.343594][T18140] new_inode+0x1f/0x170 [ 588.343622][T18140] binderfs_fill_super+0x543/0x1970 [ 588.343659][T18140] ? __init_swait_queue_head+0xa8/0x150 [ 588.343689][T18140] ? __pfx_binderfs_fill_super+0x10/0x10 [ 588.343749][T18140] ? __pfx_binderfs_fill_super+0x10/0x10 [ 588.343778][T18140] get_tree_nodev+0xbb/0x150 [ 588.343805][T18140] vfs_get_tree+0x92/0x2a0 [ 588.343833][T18140] vfs_cmd_create+0xa2/0x200 [ 588.343866][T18140] __se_sys_fsconfig+0x6b9/0x810 [ 588.343901][T18140] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 588.343933][T18140] ? rcu_is_watching+0x16/0xb0 [ 588.343968][T18140] ? __x64_sys_fsconfig+0x20/0xc0 [ 588.344015][T18140] do_syscall_64+0x166/0x520 [ 588.344039][T18140] ? trace_irq_disable+0x3b/0x140 [ 588.344064][T18140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.344086][T18140] ? clear_bhb_loop+0x70/0xc0 [ 588.344111][T18140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.344133][T18140] RIP: 0033:0x7fdfc4d9e159 [ 588.344155][T18140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.344173][T18140] RSP: 002b:00007fdfc5cd0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 588.344195][T18140] RAX: ffffffffffffffda RBX: 00007fdfc5025fa0 RCX: 00007fdfc4d9e159 [ 588.344212][T18140] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 588.344226][T18140] RBP: 00007fdfc4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 588.344240][T18140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.344254][T18140] R13: 00007fdfc5026038 R14: 00007fdfc5025fa0 R15: 00007fff9455f348 [ 588.344288][T18140] [ 588.814839][T18146] netlink: 'syz.8.3854': attribute type 4 has an invalid length. [ 588.872670][T18147] netlink: 'syz.8.3854': attribute type 4 has an invalid length. [ 590.149527][ T5621] Bluetooth: hci0: command tx timeout [ 591.085767][T18208] overlayfs: failed to clone upperpath [ 591.602813][T18026] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 591.640144][T18026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 591.641117][T18026] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 591.740151][T18026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 591.814739][T18026] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 591.854455][T18026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 591.855434][T18026] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 592.022044][T18026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 592.218718][ T5621] Bluetooth: hci0: command tx timeout [ 592.370480][T18252] FAULT_INJECTION: forcing a failure. [ 592.370480][T18252] name failslab, interval 1, probability 0, space 0, times 0 [ 592.370516][T18252] CPU: 0 UID: 0 PID: 18252 Comm: syz.4.3878 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 592.370552][T18252] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 592.370563][T18252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 592.370578][T18252] Call Trace: [ 592.370588][T18252] [ 592.370599][T18252] dump_stack_lvl+0xe8/0x150 [ 592.370636][T18252] should_fail_ex+0x3eb/0x540 [ 592.370677][T18252] ? __alloc_skb+0x1db/0x7a0 [ 592.370703][T18252] should_failslab+0xa8/0x100 [ 592.370738][T18252] ? __alloc_skb+0x1db/0x7a0 [ 592.370757][T18252] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 592.370783][T18252] ? __alloc_skb+0x18d/0x7a0 [ 592.370807][T18252] ? __alloc_skb+0x1db/0x7a0 [ 592.370836][T18252] __alloc_skb+0x1db/0x7a0 [ 592.370864][T18252] ctrl_getfamily+0x3d0/0x5c0 [ 592.370904][T18252] ? __pfx_ctrl_getfamily+0x10/0x10 [ 592.370942][T18252] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 592.370978][T18252] genl_family_rcv_msg_doit+0x233/0x340 [ 592.371011][T18252] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 592.371052][T18252] ? __dev_queue_xmit+0x29b/0x3820 [ 592.371089][T18252] genl_rcv_msg+0x614/0x7a0 [ 592.371120][T18252] ? __pfx_genl_rcv_msg+0x10/0x10 [ 592.371143][T18252] ? __pfx_ctrl_getfamily+0x10/0x10 [ 592.371185][T18252] ? __asan_memcpy+0x40/0x70 [ 592.371216][T18252] netlink_rcv_skb+0x226/0x4a0 [ 592.371249][T18252] ? __pfx_genl_rcv_msg+0x10/0x10 [ 592.371275][T18252] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 592.371327][T18252] ? down_read+0x2b9/0x320 [ 592.371363][T18252] genl_rcv+0x28/0x40 [ 592.371383][T18252] netlink_unicast+0x7bd/0x940 [ 592.371424][T18252] netlink_sendmsg+0x7c3/0xae0 [ 592.371463][T18252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.371504][T18252] ? apparmor_socket_sendmsg+0x98/0x360 [ 592.371542][T18252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.371574][T18252] sock_sendmsg_nosec+0x13a/0x180 [ 592.371612][T18252] __sys_sendto+0x408/0x5a0 [ 592.371642][T18252] ? __pfx___sys_sendto+0x10/0x10 [ 592.371725][T18252] ? do_user_addr_fault+0xd3f/0x1480 [ 592.371770][T18252] __x64_sys_sendto+0xde/0x100 [ 592.371798][T18252] do_syscall_64+0x166/0x520 [ 592.371826][T18252] ? trace_irq_disable+0x3b/0x140 [ 592.371854][T18252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.371878][T18252] ? clear_bhb_loop+0x70/0xc0 [ 592.371908][T18252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.371933][T18252] RIP: 0033:0x7f163bb5e98e [ 592.371956][T18252] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 592.371978][T18252] RSP: 002b:00007f163ca10e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 592.372004][T18252] RAX: ffffffffffffffda RBX: 00007f163ca126c0 RCX: 00007f163bb5e98e [ 592.372022][T18252] RDX: 0000000000000020 RSI: 00007f163ca11000 RDI: 0000000000000006 [ 592.372039][T18252] RBP: 0000000000000000 R08: 00007f163ca10f04 R09: 000000000000000c [ 592.372055][T18252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 592.372070][T18252] R13: 00007f163ca10f58 R14: 00007f163ca11000 R15: 0000000000000000 [ 592.372107][T18252] [ 592.375373][T18026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.786749][T18026] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.844004][ T8202] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.844133][ T8202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.915864][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.915992][ T8211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.223465][T18266] fuse: fd is not a fuse device [ 593.818653][ T10] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 593.969581][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 593.975781][ T10] usb 9-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 593.983532][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 593.983688][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.023598][ T10] usb 9-1: config 0 descriptor?? [ 594.271660][ T10] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 594.585858][ T33] audit: type=1800 audit(1790898958.108:45): pid=18292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3885" name=08 dev="sda1" ino=2067 res=0 errno=-22 [ 594.767942][T11491] usb 9-1: USB disconnect, device number 37 [ 594.834247][T18026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.338286][T18308] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 595.898904][T11491] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 596.050128][T11491] usb 5-1: Using ep0 maxpacket: 16 [ 596.051017][T11491] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 596.053017][T11491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 596.055781][T11491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.055810][T11491] usb 5-1: Product: syz [ 596.055826][T11491] usb 5-1: Manufacturer: syz [ 596.055843][T11491] usb 5-1: SerialNumber: syz [ 596.084992][T11491] usb 5-1: config 0 descriptor?? [ 596.113593][T18026] veth0_vlan: entered promiscuous mode [ 596.129295][T11491] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 596.129352][T11491] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 596.137321][T18026] veth1_vlan: entered promiscuous mode [ 596.207850][T18026] veth0_macvtap: entered promiscuous mode [ 596.224010][T18026] veth1_macvtap: entered promiscuous mode [ 596.249767][T18026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.270220][T18026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.331328][ T8212] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.349519][ T8207] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.419055][ T8202] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.431089][ T61] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.614274][T18338] overlayfs: failed to clone upperpath [ 596.637092][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.637117][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.766584][T11491] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 596.768278][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.768302][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.175781][T18352] tipc: Started in network mode [ 597.175857][T18352] tipc: Node identity 76259f28fdf2, cluster identity 4711 [ 597.176069][T18352] tipc: Enabled bearer , priority 0 [ 597.201479][T18352] syzkaller0: MTU too low for tipc bearer [ 597.201506][T18352] tipc: Disabling bearer [ 597.598282][T18360] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 597.637079][T11491] em28xx 5-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 597.637118][T11491] em28xx 5-1:0.0: failed to read eeprom (err=-5) [ 597.637166][T11491] em28xx 5-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 597.739502][T11491] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 597.739657][T11491] em28xx 5-1:0.0: dvb set to bulk mode. [ 597.740867][T18334] em28xx 5-1:0.0: Binding DVB extension [ 597.776784][T11491] usb 5-1: USB disconnect, device number 23 [ 597.794023][T11491] em28xx 5-1:0.0: Disconnecting em28xx [ 597.847318][ T33] audit: type=1326 audit(1790898961.368:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18364 comm="syz.1.3907" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e6239e159 code=0x0 [ 597.926881][T18334] em28xx 5-1:0.0: Registering input extension [ 597.927259][T11491] em28xx 5-1:0.0: Closing input extension [ 597.974900][T11491] em28xx: Freeing device [ 598.548547][T11491] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 598.721197][T11491] usb 5-1: Using ep0 maxpacket: 8 [ 598.724106][T11491] usb 5-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 598.725273][T11491] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 598.725302][T11491] usb 5-1: config 0 has no interface number 0 [ 598.725344][T11491] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 598.725374][T11491] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 598.725393][T11491] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 598.725413][T11491] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 598.725443][T11491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.787253][T11491] usb 5-1: config 0 descriptor?? [ 598.836704][T11491] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 598.980752][T18402] jffs2: notice: (18402) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 599.160689][T11491] usb 5-1: USB disconnect, device number 24 [ 599.160846][ C1] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 599.205490][T18384] ldusb: No device or device unplugged -19 [ 599.205492][T11491] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 600.538367][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3917'. [ 600.541354][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3917'. [ 602.378522][ T5721] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 602.539725][ T5721] usb 9-1: New USB device found: idVendor=0402, idProduct=5602, bcdDevice=1.00 [ 602.544120][ T5721] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.544152][ T5721] usb 9-1: Product: syz [ 602.544172][ T5721] usb 9-1: Manufacturer: syz [ 602.544189][ T5721] usb 9-1: SerialNumber: syz [ 602.600805][ T5721] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 602.600906][ T5721] gspca_m5602: Forcing a MT9M111 sensor [ 602.648721][T18334] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 602.818625][T18334] usb 5-1: Using ep0 maxpacket: 32 [ 602.824326][T18334] usb 5-1: unable to get BOS descriptor or descriptor too short [ 602.824368][T18334] usb 5-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 602.826810][T18334] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 602.826837][T18334] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 602.826859][T18334] usb 5-1: config 14 has no interface number 0 [ 602.826893][T18334] usb 5-1: config 14 has no interface number 1 [ 602.826937][T18334] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 602.826956][T18334] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 602.826976][T18334] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 602.826996][T18334] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 602.827051][T18334] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 602.827071][T18334] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 602.827091][T18334] usb 5-1: config 14 interface 57 has no altsetting 0 [ 602.827105][T18334] usb 5-1: config 14 interface 228 has no altsetting 0 [ 602.933805][T18334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.933836][T18334] usb 5-1: Product: syz [ 602.933852][T18334] usb 5-1: Manufacturer: syz [ 602.933868][T18334] usb 5-1: SerialNumber: syz [ 603.201926][ T5721] gspca_m5602: Could not initialize controls [ 603.202205][ T5721] ALi m5602 9-1:1.0: probe with driver ALi m5602 failed with error -34 [ 603.232756][ T5721] usb 9-1: USB disconnect, device number 38 [ 603.434674][T18334] legousbtower 5-1:14.57: interrupt endpoints not found [ 603.837629][T18334] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 603.859747][T18334] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 604.166410][T18556] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (265596) [ 604.736166][ T5810] usb 5-1: USB disconnect, device number 25 [ 604.790566][ T5810] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 604.970870][T18580] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3938'. [ 605.868489][ T2240] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 606.018527][ T2240] usb 5-1: Using ep0 maxpacket: 8 [ 606.020284][ T2240] usb 5-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 606.022825][ T2240] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 606.022857][ T2240] usb 5-1: config 0 has no interface number 0 [ 606.022899][ T2240] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 606.022927][ T2240] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 606.022956][ T2240] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 606.022986][ T2240] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 606.023033][ T2240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.047273][ T2240] usb 5-1: config 0 descriptor?? [ 606.148605][ T2240] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 606.345780][ T5810] usb 5-1: USB disconnect, device number 26 [ 606.376627][ T5810] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 606.956737][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3955'. [ 606.956767][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3955'. [ 608.080831][T18656] FAULT_INJECTION: forcing a failure. [ 608.080831][T18656] name failslab, interval 1, probability 0, space 0, times 0 [ 608.080871][T18656] CPU: 0 UID: 0 PID: 18656 Comm: syz.7.3962 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 608.080908][T18656] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 608.080920][T18656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 608.080936][T18656] Call Trace: [ 608.080947][T18656] [ 608.080958][T18656] dump_stack_lvl+0xe8/0x150 [ 608.081012][T18656] should_fail_ex+0x3eb/0x540 [ 608.081043][T18656] should_failslab+0xa8/0x100 [ 608.081076][T18656] ? alloc_empty_file+0x5b/0x1d0 [ 608.081113][T18656] kmem_cache_alloc_noprof+0x9c/0x600 [ 608.081141][T18656] ? alloc_empty_file+0x5b/0x1d0 [ 608.081184][T18656] alloc_empty_file+0x5b/0x1d0 [ 608.081221][T18656] alloc_file_pseudo+0x110/0x1e0 [ 608.081261][T18656] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 608.081309][T18656] __shmem_file_setup+0x2e9/0x370 [ 608.081341][T18656] ? __pfx___shmem_file_setup+0x10/0x10 [ 608.081376][T18656] ? vma_set_pgoff+0x163/0x290 [ 608.081413][T18656] shmem_zero_setup+0x90/0x130 [ 608.081443][T18656] mmap_region+0x1f86/0x2c60 [ 608.081484][T18656] ? __lock_acquire+0x747/0x2de0 [ 608.081523][T18656] ? __pfx_mmap_region+0x10/0x10 [ 608.081556][T18656] ? do_raw_spin_lock+0x12b/0x2f0 [ 608.081604][T18656] ? rcu_is_watching+0x16/0xb0 [ 608.081636][T18656] ? trace_hrtimer_start+0x82/0x200 [ 608.081664][T18656] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 608.081715][T18656] ? finish_task_switch+0x40e/0xc60 [ 608.081808][T18656] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 608.081881][T18656] ? __pfx_shmem_get_unmapped_area+0x10/0x10 [ 608.081910][T18656] ? cap_mmap_addr+0xb1/0xf0 [ 608.081943][T18656] ? bpf_lsm_mmap_addr+0x9/0x50 [ 608.081981][T18656] ? security_mmap_addr+0x71/0x240 [ 608.082024][T18656] do_mmap+0xe0a/0x1300 [ 608.082068][T18656] ? __pfx_do_mmap+0x10/0x10 [ 608.082113][T18656] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 608.082138][T18656] ? down_write_killable+0x179/0x230 [ 608.082176][T18656] ? __pfx_down_write_killable+0x10/0x10 [ 608.082209][T18656] ? apparmor_mmap_file+0x1cc/0x390 [ 608.082241][T18656] ? security_mmap_file+0x4df/0xa20 [ 608.082279][T18656] vm_mmap_pgoff+0x272/0x4e0 [ 608.082314][T18656] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 608.082342][T18656] ? rcu_is_watching+0x16/0xb0 [ 608.082378][T18656] ? ksys_mmap_pgoff+0xf3/0x760 [ 608.082411][T18656] ? __x64_sys_mmap+0x7f/0x140 [ 608.082451][T18656] do_syscall_64+0x166/0x520 [ 608.082479][T18656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.082504][T18656] ? clear_bhb_loop+0x70/0xc0 [ 608.082533][T18656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.082557][T18656] RIP: 0033:0x7fd09b79e159 [ 608.082581][T18656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.082602][T18656] RSP: 002b:00007fd09c62f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 608.082630][T18656] RAX: ffffffffffffffda RBX: 00007fd09ba25fa0 RCX: 00007fd09b79e159 [ 608.082648][T18656] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 0000000000000000 [ 608.082665][T18656] RBP: 00007fd09b83506b R08: ffffffffffffffff R09: 0000000000000000 [ 608.082682][T18656] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 608.082697][T18656] R13: 00007fd09ba26038 R14: 00007fd09ba25fa0 R15: 00007ffe7c7932d8 [ 608.082734][T18656] [ 608.594856][T18661] mmap: syz.8.3972 (18661) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 608.856463][T18667] FAULT_INJECTION: forcing a failure. [ 608.856463][T18667] name failslab, interval 1, probability 0, space 0, times 0 [ 608.856505][T18667] CPU: 0 UID: 0 PID: 18667 Comm: syz.7.3966 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 608.856541][T18667] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 608.856552][T18667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 608.856568][T18667] Call Trace: [ 608.856579][T18667] [ 608.856590][T18667] dump_stack_lvl+0xe8/0x150 [ 608.856627][T18667] should_fail_ex+0x3eb/0x540 [ 608.856660][T18667] should_failslab+0xa8/0x100 [ 608.856696][T18667] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 608.856726][T18667] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 608.856754][T18667] ? smb3_parse_devname+0x16b/0x850 [ 608.856780][T18667] ? smb3_parse_devname+0x16b/0x850 [ 608.856814][T18667] kstrndup+0x7e/0x160 [ 608.856851][T18667] smb3_parse_devname+0x16b/0x850 [ 608.856880][T18667] ? smb3_fs_context_parse_param+0x242/0x7b50 [ 608.856914][T18667] smb3_fs_context_parse_param+0x4255/0x7b50 [ 608.856942][T18667] ? __se_sys_fsconfig+0x68d/0x810 [ 608.856980][T18667] ? __pfx___mutex_lock+0x10/0x10 [ 608.857011][T18667] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 608.857046][T18667] ? static_key_count+0x41/0x70 [ 608.857074][T18667] vfs_parse_fs_param+0x1a9/0x420 [ 608.857109][T18667] __se_sys_fsconfig+0x6b9/0x810 [ 608.857152][T18667] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 608.857201][T18667] ? __x64_sys_fsconfig+0x20/0xc0 [ 608.857239][T18667] do_syscall_64+0x166/0x520 [ 608.857274][T18667] ? trace_irq_disable+0x3b/0x140 [ 608.857308][T18667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.857333][T18667] ? clear_bhb_loop+0x70/0xc0 [ 608.857363][T18667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.857388][T18667] RIP: 0033:0x7fd09b79e159 [ 608.857411][T18667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.857432][T18667] RSP: 002b:00007fd09c62f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 608.857459][T18667] RAX: ffffffffffffffda RBX: 00007fd09ba25fa0 RCX: 00007fd09b79e159 [ 608.857479][T18667] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000005 [ 608.857496][T18667] RBP: 00007fd09b83506b R08: 0000000000000000 R09: 0000000000000000 [ 608.857513][T18667] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 608.857529][T18667] R13: 00007fd09ba26038 R14: 00007fd09ba25fa0 R15: 00007ffe7c7932d8 [ 608.857566][T18667] [ 608.916255][T18667] CIFS: VFS: Unable to allocate memory for devname [ 611.194885][ T8207] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.568875][ T8207] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.788683][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 611.793893][ T8207] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.836085][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 611.852042][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 611.854223][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 611.855093][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 612.045223][T18720] lo speed is unknown, defaulting to 1000 [ 612.229306][ T8207] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.326415][ T8219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.326440][ T8219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.846472][ T8207] bridge_slave_1: left allmulticast mode [ 612.846530][ T8207] bridge_slave_1: left promiscuous mode [ 612.846749][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.881685][ T8207] bridge_slave_0: left allmulticast mode [ 612.881715][ T8207] bridge_slave_0: left promiscuous mode [ 612.882553][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.067934][T18749] input: syz1 as /devices/virtual/input/input47 [ 613.602589][ T8207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.772828][ T8207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.777489][ T8207] bond0 (unregistering): Released all slaves [ 613.930806][ T5279] 8021q: adding VLAN 0 to HW filter on device eth13 [ 613.988897][ T5623] Bluetooth: hci0: command tx timeout [ 614.067304][ T8207] tipc: Left network mode [ 614.123702][T18715] lo speed is unknown, defaulting to 1000 [ 614.215108][T18770] fuse: fd is not a fuse device [ 614.778060][T18782] overlayfs: failed to clone upperpath [ 615.778940][ T8207] hsr_slave_0: left promiscuous mode [ 615.794755][ T8207] hsr_slave_1: left promiscuous mode [ 615.795809][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.795838][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.797348][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.797374][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.861360][ T8207] veth1_macvtap: left promiscuous mode [ 615.861405][ T8207] veth0_macvtap: left promiscuous mode [ 615.861517][ T8207] veth1_vlan: left promiscuous mode [ 615.861603][ T8207] veth0_vlan: left promiscuous mode [ 616.060191][ T5623] Bluetooth: hci0: command tx timeout [ 616.349085][ T32] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 616.441112][ T8207] team0 (unregistering): Port device team_slave_1 removed [ 616.481336][ T8207] team0 (unregistering): Port device team_slave_0 removed [ 616.499517][ T32] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 616.500879][ T32] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.500919][ T32] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 616.503524][ T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.503554][ T32] usb 9-1: Product: syz [ 616.503572][ T32] usb 9-1: Manufacturer: syz [ 616.503589][ T32] usb 9-1: SerialNumber: syz [ 616.766284][T18811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.802394][T18811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.824238][ T32] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 616.884450][ T32] usb 9-1: USB disconnect, device number 39 [ 616.942456][ T5279] 8021q: adding VLAN 0 to HW filter on device eth14 [ 617.369409][ T32] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 617.545051][ T32] usb 9-1: Using ep0 maxpacket: 8 [ 617.548994][ T32] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 617.553834][ T32] usb 9-1: config index 0 descriptor too short (expected 301, got 72) [ 617.553909][ T32] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 617.554027][ T32] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 617.554096][ T32] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 617.554162][ T32] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 617.554229][ T32] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.554297][ T32] usb 9-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 617.554406][ T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.826306][ T32] usb 9-1: GET_CAPABILITIES returned 0 [ 617.826362][ T32] usbtmc 9-1:16.0: can't read capabilities [ 617.940983][ T5279] 8021q: adding VLAN 0 to HW filter on device eth15 [ 618.073088][T18715] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.073231][T18715] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.073432][T18715] bridge_slave_0: entered allmulticast mode [ 618.104866][T18715] bridge_slave_0: entered promiscuous mode [ 618.130641][T18715] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.130877][T18715] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.131083][T18715] bridge_slave_1: entered allmulticast mode [ 618.169503][ T5623] Bluetooth: hci0: command tx timeout [ 618.191790][T18715] bridge_slave_1: entered promiscuous mode [ 618.209788][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.210018][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.210231][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.210441][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.210650][ C1] usbtmc 9-1:16.0: invalid notification: 11 [ 618.210862][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.211260][ C1] usbtmc 9-1:16.0: invalid notification: 2 [ 618.211471][ C1] usbtmc 9-1:16.0: invalid notification: 5 [ 618.211682][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.211899][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.212110][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.212320][ C1] usbtmc 9-1:16.0: invalid notification: 40 [ 618.212720][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.212933][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.213144][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.213361][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.213574][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.213798][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.214007][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.214215][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.214425][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.214639][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.214852][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.215062][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.215270][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.215482][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.215693][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.215913][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.216120][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.216328][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.216536][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.216746][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.216955][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.217164][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.217376][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.217593][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.217794][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.217982][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.218173][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.218365][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.218863][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.219052][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.219473][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.219677][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.225688][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.231950][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.237940][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.243965][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.244370][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.250457][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.250981][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.258571][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.258995][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.264955][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.271073][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.277121][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.283101][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.289114][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.295358][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.301639][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.307671][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.313698][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.319711][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.325654][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.331820][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.337873][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.343904][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.349992][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.350452][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.350895][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.356889][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.362904][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.368960][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.374914][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.380995][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.386969][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.389839][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.395881][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.401959][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.407919][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.413965][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.419947][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.425897][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.431892][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.437851][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.444099][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.450153][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.456134][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.456592][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.462598][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.468599][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.474552][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.480635][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.481099][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.487074][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.493086][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.499402][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.505357][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.505577][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.505809][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.506024][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.506265][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.512346][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.512564][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.512777][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.512985][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.519004][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.519218][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.525361][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.531677][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.537697][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.543903][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.550133][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.556187][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.556812][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.562845][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.568847][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.574808][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.580831][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.586780][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.592819][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.598825][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.604940][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.610981][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.611445][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.617418][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.623505][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.629540][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.635600][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.641633][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.647774][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.653851][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.659999][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.660566][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.666640][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.673130][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.679198][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.685187][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.691222][ C1] usbtmc 9-1:16.0: invalid notification: 44 [ 618.697322][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.703856][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.709894][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.710111][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.716069][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.722092][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.728081][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.734119][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.740181][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.740679][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.746680][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.752798][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.758824][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.764802][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.765279][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.771432][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.777493][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.783702][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.789803][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.795752][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.801746][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.807696][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.814585][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.820585][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.826534][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.832587][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.838649][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.844597][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.850712][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.856716][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.865673][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.866173][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.872235][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.872749][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.878893][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.884926][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.890930][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.896875][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.902900][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.908912][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.914850][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.920864][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.926813][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.932812][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.939145][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.945183][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.951247][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.957212][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.963274][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.969314][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.969812][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.975774][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.981789][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.987728][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 618.993868][ C1] usbtmc 9-1:16.0: invalid notification: 0 [ 619.249041][T18715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.396091][T18715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.468645][T18334] usb 9-1: USB disconnect, device number 40 [ 619.645172][T18715] team0: Port device team_slave_0 added [ 619.665448][T18715] team0: Port device team_slave_1 added [ 619.803147][T18715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.803167][T18715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.803198][T18715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.808861][T18715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.808976][T18715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.809055][T18715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.977427][T18715] hsr_slave_0: entered promiscuous mode [ 619.986336][T18715] hsr_slave_1: entered promiscuous mode [ 619.987252][T18715] debugfs: 'hsr0' already exists in 'hsr' [ 619.987276][T18715] Cannot create hsr debugfs directory [ 620.218545][ T5623] Bluetooth: hci0: command tx timeout [ 620.857205][T18715] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.892061][T18863] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (265596) [ 621.004502][ T5279] 8021q: adding VLAN 0 to HW filter on device eth16 [ 621.044888][T18865] fuse: fd is not a fuse device [ 621.260001][T18870] FAULT_INJECTION: forcing a failure. [ 621.260001][T18870] name failslab, interval 1, probability 0, space 0, times 0 [ 621.260035][T18870] CPU: 1 UID: 0 PID: 18870 Comm: syz.4.4018 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 621.260065][T18870] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 621.260075][T18870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 621.260088][T18870] Call Trace: [ 621.260097][T18870] [ 621.260107][T18870] dump_stack_lvl+0xe8/0x150 [ 621.260140][T18870] should_fail_ex+0x3eb/0x540 [ 621.260168][T18870] should_failslab+0xa8/0x100 [ 621.260208][T18870] ? do_getname_kernel+0x54/0x230 [ 621.260240][T18870] kmem_cache_alloc_noprof+0x9c/0x600 [ 621.260261][T18870] ? trace_kmalloc+0x2a/0xf0 [ 621.260286][T18870] ? do_getname_kernel+0x54/0x230 [ 621.260318][T18870] ? __kmalloc_node_track_caller_noprof+0x4cd/0x720 [ 621.260346][T18870] do_getname_kernel+0x54/0x230 [ 621.260376][T18870] ? kern_path+0x1b/0x150 [ 621.260400][T18870] kern_path+0x25/0x150 [ 621.260424][T18870] ovl_parse_param_lowerdir+0x6c7/0xab0 [ 621.260462][T18870] ? __pfx_ovl_parse_param_lowerdir+0x10/0x10 [ 621.260510][T18870] ovl_parse_param+0x5f2/0xf40 [ 621.260543][T18870] ? __pfx_ovl_parse_param+0x10/0x10 [ 621.260578][T18870] ? static_key_count+0x41/0x70 [ 621.260604][T18870] vfs_parse_fs_param+0x1a9/0x420 [ 621.260633][T18870] vfs_parse_monolithic_sep+0x281/0x360 [ 621.260662][T18870] ? __pfx_ovl_next_opt+0x10/0x10 [ 621.260710][T18870] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 621.260741][T18870] ? mutex_init_lockdep+0xdf/0x110 [ 621.260771][T18870] ? alloc_fs_context+0x9b2/0xd00 [ 621.260806][T18870] do_new_mount+0x2e2/0xdc0 [ 621.260834][T18870] ? __pfx_do_new_mount+0x10/0x10 [ 621.260858][T18870] ? ns_capable+0x84/0xe0 [ 621.260885][T18870] ? path_mount+0x647/0x1050 [ 621.260910][T18870] ? user_path_at+0xd4/0x160 [ 621.260937][T18870] __se_sys_mount+0x31d/0x420 [ 621.260964][T18870] ? __pfx___se_sys_mount+0x10/0x10 [ 621.260993][T18870] ? __x64_sys_mount+0x20/0xc0 [ 621.261018][T18870] do_syscall_64+0x166/0x520 [ 621.261043][T18870] ? trace_irq_disable+0x3b/0x140 [ 621.261067][T18870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.261088][T18870] ? clear_bhb_loop+0x70/0xc0 [ 621.261115][T18870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.261136][T18870] RIP: 0033:0x7f163bb9e159 [ 621.261157][T18870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.261176][T18870] RSP: 002b:00007f163ca12028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 621.261200][T18870] RAX: ffffffffffffffda RBX: 00007f163be25fa0 RCX: 00007f163bb9e159 [ 621.261216][T18870] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 621.261232][T18870] RBP: 00007f163bc3506b R08: 0000200000000040 R09: 0000000000000000 [ 621.261247][T18870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.261261][T18870] R13: 00007f163be26038 R14: 00007f163be25fa0 R15: 00007ffeda170a18 [ 621.261292][T18870] [ 621.263772][T18870] overlayfs: failed to resolve './file0': -12 [ 621.644775][T18715] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.908199][T18883] fuse: fd is not a fuse device [ 621.945027][T18715] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.129389][T18715] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.250405][ T33] audit: type=1800 audit(1790898985.768:47): pid=18889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4025" name=08 dev="sda1" ino=2067 res=0 errno=-22 [ 622.813643][T18715] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 622.826286][T18715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 622.827885][T18715] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 622.866364][T18715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 622.867462][T18715] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 622.896242][T18715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 622.903555][T18715] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 622.935999][T18715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 623.056542][T18715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.095872][T18715] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.116834][ T8219] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.116948][ T8219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.146621][ T8219] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.146745][ T8219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.948541][ T5810] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 624.098479][ T5810] usb 9-1: Using ep0 maxpacket: 8 [ 624.099316][ T5810] usb 9-1: New USB device found: idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 624.099361][ T5810] usb 9-1: too many configurations: 17, using maximum allowed: 8 [ 624.100196][ T5810] usb 9-1: config 0 has no interfaces? [ 624.100853][ T5810] usb 9-1: config 0 has no interfaces? [ 624.101925][ T5810] usb 9-1: config 0 has no interfaces? [ 624.104142][ T5810] usb 9-1: config 0 has no interfaces? [ 624.104801][ T5810] usb 9-1: config 0 has no interfaces? [ 624.105312][ T5810] usb 9-1: config 0 has no interfaces? [ 624.106099][ T5810] usb 9-1: config 0 has no interfaces? [ 624.106747][ T5810] usb 9-1: config 0 has no interfaces? [ 624.106784][ T5810] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.188887][ T5810] usb 9-1: config 0 descriptor?? [ 624.401281][T18715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.443154][ T5810] usb 9-1: USB disconnect, device number 41 [ 624.462067][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.585403][T18715] veth0_vlan: entered promiscuous mode [ 624.617402][T18715] veth1_vlan: entered promiscuous mode [ 624.659898][T18715] veth0_macvtap: entered promiscuous mode [ 624.665194][T18715] veth1_macvtap: entered promiscuous mode [ 624.697010][T18715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.724233][T18715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.759692][ T8211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.803017][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.803224][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.803267][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.851545][ T5350] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 624.989356][ T8211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.989380][ T8211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.021951][ T5350] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 625.026700][ T5350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.041584][ T5350] usb 5-1: config 0 descriptor?? [ 625.105671][ T8207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.105697][ T8207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.268922][ T5350] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 625.532230][ T5350] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 625.532260][ T5350] [drm] Initialized udl on minor 1 [ 625.673230][ T5350] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 625.674389][ T5350] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 625.755394][ T5350] usb 5-1: USB disconnect, device number 27 [ 626.435124][ T33] audit: type=1800 audit(1790898989.958:48): pid=18969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4043" name="file1" dev="sda1" ino=2061 res=0 errno=-22 [ 627.517096][T18994] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 627.522400][ T33] audit: type=1800 audit(1790898991.038:49): pid=18994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4052" name="sysfs" dev="sda1" ino=2071 res=0 errno=-22 [ 627.951032][ T5810] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 628.167514][ T5810] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 628.221076][ T5810] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.277113][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.277145][ T5810] usb 4-1: Product: syz [ 628.277161][ T5810] usb 4-1: Manufacturer: syz [ 628.277176][ T5810] usb 4-1: SerialNumber: syz [ 629.393763][ T5810] cdc_ncm 4-1:1.0: bind() failure [ 629.400646][ T5810] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 629.400714][ T5810] cdc_ncm 4-1:1.1: bind() failure [ 629.424215][ T5810] usb 4-1: USB disconnect, device number 41 [ 630.780912][ T33] audit: type=1800 audit(1790898994.308:50): pid=19021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4060" name="file1" dev="sda1" ino=2061 res=0 errno=-22 [ 633.802346][T19004] lo speed is unknown, defaulting to 1000 [ 634.366436][T19057] orangefs_devreq_open: device cannot be opened in blocking mode [ 635.000977][T19076] FAULT_INJECTION: forcing a failure. [ 635.000977][T19076] name failslab, interval 1, probability 0, space 0, times 0 [ 635.001019][T19076] CPU: 1 UID: 0 PID: 19076 Comm: syz.8.4081 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 635.001055][T19076] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 635.001071][T19076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 635.001087][T19076] Call Trace: [ 635.001096][T19076] [ 635.001107][T19076] dump_stack_lvl+0xe8/0x150 [ 635.001144][T19076] should_fail_ex+0x3eb/0x540 [ 635.001176][T19076] should_failslab+0xa8/0x100 [ 635.001211][T19076] __kvmalloc_node_noprof+0x171/0x820 [ 635.001245][T19076] ? tun_attach+0x8e8/0x1560 [ 635.001268][T19076] ? tun_attach+0x8e8/0x1560 [ 635.001301][T19076] tun_attach+0x8e8/0x1560 [ 635.001371][T19076] ? __mod_timer+0xb53/0xed0 [ 635.001406][T19076] ? timer_init_key+0x161/0x2c0 [ 635.001439][T19076] tun_net_init+0x309/0x3d0 [ 635.001471][T19076] register_netdevice+0x69c/0x1eb0 [ 635.001500][T19076] ? alloc_netdev_mqs+0xd59/0x12c0 [ 635.001532][T19076] ? alloc_netdev_mqs+0xd59/0x12c0 [ 635.001559][T19076] ? trace_kmalloc+0x2a/0xf0 [ 635.001586][T19076] ? alloc_netdev_mqs+0xd59/0x12c0 [ 635.001616][T19076] ? __kvmalloc_node_noprof+0x52a/0x820 [ 635.001643][T19076] ? __kmalloc_cache_noprof+0x31c/0x600 [ 635.001671][T19076] ? __pfx_register_netdevice+0x10/0x10 [ 635.001702][T19076] ? tun_net_initialize+0x199/0x460 [ 635.001729][T19076] ? __pfx_tun_net_initialize+0x10/0x10 [ 635.001756][T19076] ? alloc_netdev_mqs+0xe78/0x12c0 [ 635.001795][T19076] tun_set_iff+0x82b/0xf20 [ 635.001835][T19076] __tun_chr_ioctl+0x7e5/0x1e70 [ 635.001872][T19076] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 635.001898][T19076] ? __fget_files+0x2a/0x420 [ 635.001932][T19076] ? __fget_files+0x2a/0x420 [ 635.001962][T19076] ? bpf_lsm_file_ioctl+0x9/0x20 [ 635.001994][T19076] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 635.002032][T19076] __se_sys_ioctl+0xfc/0x170 [ 635.002066][T19076] do_syscall_64+0x166/0x520 [ 635.002094][T19076] ? trace_irq_disable+0x3b/0x140 [ 635.002121][T19076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.002145][T19076] ? clear_bhb_loop+0x70/0xc0 [ 635.002175][T19076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.002198][T19076] RIP: 0033:0x7fdfc4d9e159 [ 635.002221][T19076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.002243][T19076] RSP: 002b:00007fdfc5cd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.002270][T19076] RAX: ffffffffffffffda RBX: 00007fdfc5025fa0 RCX: 00007fdfc4d9e159 [ 635.002289][T19076] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000006 [ 635.002306][T19076] RBP: 00007fdfc4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 635.002321][T19076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.002337][T19076] R13: 00007fdfc5026038 R14: 00007fdfc5025fa0 R15: 00007fff9455f348 [ 635.002374][T19076] [ 636.569926][T19101] FAULT_INJECTION: forcing a failure. [ 636.569926][T19101] name failslab, interval 1, probability 0, space 0, times 0 [ 636.569965][T19101] CPU: 1 UID: 0 PID: 19101 Comm: syz.3.4082 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 636.570000][T19101] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 636.570011][T19101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 636.570026][T19101] Call Trace: [ 636.570036][T19101] [ 636.570050][T19101] dump_stack_lvl+0xe8/0x150 [ 636.570088][T19101] should_fail_ex+0x3eb/0x540 [ 636.570118][T19101] should_failslab+0xa8/0x100 [ 636.570152][T19101] __kmalloc_noprof+0xf9/0x710 [ 636.570179][T19101] ? io_cache_alloc_new+0x40/0x100 [ 636.570208][T19101] ? io_cache_alloc_new+0x40/0x100 [ 636.570246][T19101] io_cache_alloc_new+0x40/0x100 [ 636.570280][T19101] io_uring_alloc_async_data+0x1b6/0x2e0 [ 636.570318][T19101] io_send_zc_prep+0x3f7/0x9e0 [ 636.570358][T19101] io_submit_sqes+0xbde/0x2310 [ 636.570423][T19101] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 636.570471][T19101] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 636.570506][T19101] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 636.570549][T19101] ? rcu_is_watching+0x16/0xb0 [ 636.570588][T19101] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 636.570626][T19101] do_syscall_64+0x166/0x520 [ 636.570652][T19101] ? trace_irq_disable+0x3b/0x140 [ 636.570688][T19101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.570714][T19101] ? clear_bhb_loop+0x70/0xc0 [ 636.570744][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.570769][T19101] RIP: 0033:0x7f4d84f9e159 [ 636.570791][T19101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.570813][T19101] RSP: 002b:00007f4d831f5f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 636.570840][T19101] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d84f9e159 [ 636.570857][T19101] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 636.570872][T19101] RBP: 0000000000000174 R08: 0000000000000000 R09: 0000000000000008 [ 636.570888][T19101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000a80 [ 636.570904][T19101] R13: 0000200000000a88 R14: 00000000000003c9 R15: 0000000000000000 [ 636.570940][T19101] [ 636.894559][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 636.909348][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 636.911937][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 636.916641][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 636.917524][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 637.773480][T19137] orangefs_devreq_open: device cannot be opened in blocking mode [ 638.051785][T19107] lo speed is unknown, defaulting to 1000 [ 638.245547][T19152] FAULT_INJECTION: forcing a failure. [ 638.245547][T19152] name failslab, interval 1, probability 0, space 0, times 0 [ 638.245585][T19152] CPU: 0 UID: 0 PID: 19152 Comm: syz.3.4093 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 638.245621][T19152] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 638.245632][T19152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 638.245647][T19152] Call Trace: [ 638.245657][T19152] [ 638.245668][T19152] dump_stack_lvl+0xe8/0x150 [ 638.245707][T19152] should_fail_ex+0x3eb/0x540 [ 638.245739][T19152] should_failslab+0xa8/0x100 [ 638.245774][T19152] __kmalloc_noprof+0xf9/0x710 [ 638.245800][T19152] ? sk_prot_alloc+0x57/0x210 [ 638.245826][T19152] ? security_sk_alloc+0x52/0x360 [ 638.245854][T19152] ? security_sk_alloc+0x52/0x360 [ 638.245885][T19152] ? kmem_cache_alloc_noprof+0x151/0x600 [ 638.245913][T19152] security_sk_alloc+0x52/0x360 [ 638.245945][T19152] sk_prot_alloc+0x101/0x210 [ 638.245974][T19152] sk_alloc+0x3a/0x390 [ 638.246003][T19152] inet6_create+0x81a/0x1270 [ 638.246038][T19152] ? inet6_create+0x80/0x1270 [ 638.246075][T19152] __sock_create+0x4b5/0xac0 [ 638.246119][T19152] mptcp_subflow_create_socket+0xfd/0x810 [ 638.246165][T19152] ? begin_current_label_crit_section+0x299/0x830 [ 638.246193][T19152] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 638.246228][T19152] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 638.246263][T19152] __mptcp_nmpc_sk+0x155/0x770 [ 638.246301][T19152] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 638.246345][T19152] mptcp_connect+0x6e/0x7f0 [ 638.246378][T19152] __inet_stream_connect+0x28c/0xf50 [ 638.246426][T19152] ? do_raw_spin_lock+0x12b/0x2f0 [ 638.246465][T19152] ? __pfx___inet_stream_connect+0x10/0x10 [ 638.246504][T19152] ? inet_stream_connect+0x51/0xa0 [ 638.246541][T19152] ? __local_bh_enable_ip+0xd6/0x140 [ 638.246576][T19152] inet_stream_connect+0x66/0xa0 [ 638.246614][T19152] __sys_connect+0x316/0x450 [ 638.246640][T19152] ? __pfx___sys_connect+0x10/0x10 [ 638.246700][T19152] __x64_sys_connect+0x7a/0x90 [ 638.246725][T19152] do_syscall_64+0x166/0x520 [ 638.246753][T19152] ? trace_irq_disable+0x3b/0x140 [ 638.246782][T19152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.246807][T19152] ? clear_bhb_loop+0x70/0xc0 [ 638.246836][T19152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.246861][T19152] RIP: 0033:0x7f4d84f9e159 [ 638.246883][T19152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.246905][T19152] RSP: 002b:00007f4d831f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 638.246931][T19152] RAX: ffffffffffffffda RBX: 00007f4d85225fa0 RCX: 00007f4d84f9e159 [ 638.246950][T19152] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000005 [ 638.246967][T19152] RBP: 00007f4d8503506b R08: 0000000000000000 R09: 0000000000000000 [ 638.246983][T19152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.246998][T19152] R13: 00007f4d85226038 R14: 00007f4d85225fa0 R15: 00007ffd82d6f528 [ 638.247035][T19152] [ 638.647290][T19154] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 639.033971][T19171] FAULT_INJECTION: forcing a failure. [ 639.033971][T19171] name failslab, interval 1, probability 0, space 0, times 0 [ 639.034014][T19171] CPU: 0 UID: 0 PID: 19171 Comm: syz.4.4098 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 639.034050][T19171] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 639.034061][T19171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 639.034076][T19171] Call Trace: [ 639.034086][T19171] [ 639.034097][T19171] dump_stack_lvl+0xe8/0x150 [ 639.034135][T19171] should_fail_ex+0x3eb/0x540 [ 639.034166][T19171] should_failslab+0xa8/0x100 [ 639.034201][T19171] __kmalloc_noprof+0xf9/0x710 [ 639.034227][T19171] ? io_cache_alloc_new+0x40/0x100 [ 639.034256][T19171] ? io_cache_alloc_new+0x40/0x100 [ 639.034294][T19171] io_cache_alloc_new+0x40/0x100 [ 639.034326][T19171] io_uring_alloc_async_data+0x1b6/0x2e0 [ 639.034366][T19171] io_send_zc_prep+0x3f7/0x9e0 [ 639.034405][T19171] io_submit_sqes+0xbde/0x2310 [ 639.034468][T19171] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 639.034514][T19171] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 639.034547][T19171] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 639.034589][T19171] ? rcu_is_watching+0x16/0xb0 [ 639.034629][T19171] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 639.034665][T19171] do_syscall_64+0x166/0x520 [ 639.034693][T19171] ? trace_irq_disable+0x3b/0x140 [ 639.034722][T19171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.034746][T19171] ? clear_bhb_loop+0x70/0xc0 [ 639.034775][T19171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.034799][T19171] RIP: 0033:0x7f163bb9e159 [ 639.034828][T19171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.034849][T19171] RSP: 002b:00007f163ca11f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 639.034874][T19171] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f163bb9e159 [ 639.034891][T19171] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 639.034905][T19171] RBP: 00000000000000ee R08: 0000000000000000 R09: 0000000000000008 [ 639.034919][T19171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000a80 [ 639.034943][T19171] R13: 0000200000000a88 R14: 00000000000003c9 R15: 0000000000000000 [ 639.034978][T19171] [ 639.102557][ T5621] Bluetooth: hci1: command tx timeout [ 640.144304][T19107] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.144383][T19107] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.144524][T19107] bridge_slave_0: entered allmulticast mode [ 640.166085][T19107] bridge_slave_0: entered promiscuous mode [ 640.184405][T19107] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.184480][T19107] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.184627][T19107] bridge_slave_1: entered allmulticast mode [ 640.205684][T19107] bridge_slave_1: entered promiscuous mode [ 640.316121][T19107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.332940][T19107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.441179][T19107] team0: Port device team_slave_0 added [ 640.457509][T19107] team0: Port device team_slave_1 added [ 640.633320][T19107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.633341][T19107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.633373][T19107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.717716][T19107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.717744][T19107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.717767][T19107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.944921][T19107] hsr_slave_0: entered promiscuous mode [ 640.949944][T19107] hsr_slave_1: entered promiscuous mode [ 640.952765][T19107] debugfs: 'hsr0' already exists in 'hsr' [ 640.952838][T19107] Cannot create hsr debugfs directory [ 641.179064][ T5621] Bluetooth: hci1: command tx timeout [ 641.244683][T19214] binder: Write failure EINVAL in pid:67 [ 641.291657][T19216] fuse: fd is not a fuse device [ 641.500578][T19220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4114'. [ 642.028192][T19230] overlayfs: failed to clone upperpath [ 642.472146][T19245] Bluetooth: MGMT ver 1.23 [ 643.259166][ T5621] Bluetooth: hci1: command tx timeout [ 643.837320][T19107] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 643.855814][T19107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 643.870993][T19107] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 643.885798][T19107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 643.896079][T19107] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 643.913724][T19107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 643.917085][T19107] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 643.926766][T19303] fuse: fd is not a fuse device [ 643.952510][T19107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 644.154092][T19107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.206316][T19107] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.231656][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.231738][ T8211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.262875][ T8219] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.262989][ T8219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.962420][ T8211] bridge_slave_1: left allmulticast mode [ 644.962451][ T8211] bridge_slave_1: left promiscuous mode [ 644.962706][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.985880][ T8211] bridge_slave_0: left allmulticast mode [ 644.985963][ T8211] bridge_slave_0: left promiscuous mode [ 644.986567][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.338897][ T5621] Bluetooth: hci1: command tx timeout [ 645.636229][T19369] fuse: fd is not a fuse device [ 645.653756][ T8211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.672935][ T8211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.676217][ T8211] bond0 (unregistering): Released all slaves [ 646.215754][T19385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4157'. [ 646.800220][T19107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.114603][ T8211] hsr_slave_0: left promiscuous mode [ 647.119934][ T8211] hsr_slave_1: left promiscuous mode [ 647.125866][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.125895][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.154032][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.154058][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.214714][ T8211] veth1_macvtap: left promiscuous mode [ 647.214756][ T8211] veth0_macvtap: left promiscuous mode [ 647.214859][ T8211] veth1_vlan: left promiscuous mode [ 647.214927][ T8211] veth0_vlan: left promiscuous mode [ 647.739308][T15381] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 647.850424][ T8211] team0 (unregistering): Port device team_slave_1 removed [ 647.883587][ T8211] team0 (unregistering): Port device team_slave_0 removed [ 647.891175][T15381] usb 4-1: Using ep0 maxpacket: 32 [ 647.893235][T15381] usb 4-1: New USB device found: idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 647.914026][T15381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.914062][T15381] usb 4-1: Product: syz [ 647.914074][T15381] usb 4-1: Manufacturer: syz [ 647.914086][T15381] usb 4-1: SerialNumber: syz [ 647.944789][T15381] usb 4-1: config 0 descriptor?? [ 647.970478][T15381] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 648.375371][T19431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4165'. [ 648.766364][ T8211] IPVS: stop unused estimator thread 0... [ 648.907813][T19107] veth0_vlan: entered promiscuous mode [ 648.932375][T19107] veth1_vlan: entered promiscuous mode [ 649.003627][T19107] veth0_macvtap: entered promiscuous mode [ 649.024819][T19107] veth1_macvtap: entered promiscuous mode [ 649.100295][T19107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.146331][T19107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.229345][ T8219] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.229398][ T8219] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.229439][ T8219] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.229478][ T8219] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.539398][ T8212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.539424][ T8212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.654961][ T8207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.654987][ T8207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.894670][T15381] gspca_ov534_9: reg_r err -71 [ 650.148680][T15381] gspca_ov534_9: Unknown sensor 0000 [ 650.148778][T15381] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 650.158121][T15381] usb 4-1: USB disconnect, device number 42 [ 650.202214][ T5350] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 650.348712][ T5350] usb 7-1: Using ep0 maxpacket: 16 [ 650.349744][ T5350] usb 7-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 650.351589][ T5350] usb 7-1: config 0 has an invalid interface number: 105 but max is -1 [ 650.351625][ T5350] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.351646][ T5350] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 650.351669][ T5350] usb 7-1: config 0 has no interface number 0 [ 650.351722][ T5350] usb 7-1: config 0 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 650.351752][ T5350] usb 7-1: config 0 interface 105 has no altsetting 0 [ 650.363779][ T5350] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 650.363884][ T5350] usb 7-1: Product: syz [ 650.363921][ T5350] usb 7-1: Manufacturer: syz [ 650.363965][ T5350] usb 7-1: SerialNumber: syz [ 650.406502][ T5350] usb 7-1: config 0 descriptor?? [ 650.862596][T15381] usb 7-1: USB disconnect, device number 29 [ 651.136073][T19499] fuse: fd is not a fuse device [ 652.744933][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4187'. [ 652.744963][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4187'. [ 653.593555][T19554] kvm: pic: non byte write [ 653.593653][T19554] kvm: pic: non byte write [ 653.593922][T19554] kvm: pic: level sensitive irq not supported [ 653.594844][T19554] kvm: pic: non byte write [ 653.595278][T19554] kvm: pic: non byte write [ 654.066891][T19576] netlink: 'syz.6.4196': attribute type 10 has an invalid length. [ 654.101913][T19576] team0 (unregistering): Port device team_slave_0 removed [ 654.125886][T19576] team0 (unregistering): Port device team_slave_1 removed [ 654.701361][T19595] bond0: option arp_validate: invalid value (al) [ 654.822671][T19600] FAULT_INJECTION: forcing a failure. [ 654.822671][T19600] name failslab, interval 1, probability 0, space 0, times 0 [ 654.822708][T19600] CPU: 0 UID: 0 PID: 19600 Comm: syz.6.4202 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 654.822743][T19600] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 654.822753][T19600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 654.822768][T19600] Call Trace: [ 654.822778][T19600] [ 654.822788][T19600] dump_stack_lvl+0xe8/0x150 [ 654.822828][T19600] should_fail_ex+0x3eb/0x540 [ 654.822902][T19600] should_failslab+0xa8/0x100 [ 654.822937][T19600] __kmalloc_cache_noprof+0x9e/0x600 [ 654.822964][T19600] ? trace_contention_end+0x3d/0x140 [ 654.822997][T19600] ? snd_card_file_add+0x58/0x250 [ 654.823025][T19600] ? snd_card_file_add+0x58/0x250 [ 654.823058][T19600] snd_card_file_add+0x58/0x250 [ 654.823091][T19600] snd_pcm_open+0xc7/0x690 [ 654.823127][T19600] ? __asan_memset+0x22/0x50 [ 654.823154][T19600] ? __pfx_snd_pcm_open+0x10/0x10 [ 654.823201][T19600] snd_pcm_playback_open+0x5f/0xc0 [ 654.823225][T19600] chrdev_open+0x4d9/0x600 [ 654.823260][T19600] ? __pfx_chrdev_open+0x10/0x10 [ 654.823295][T19600] ? devcgroup_check_permission+0x31/0x8f0 [ 654.823334][T19600] ? __pfx_chrdev_open+0x10/0x10 [ 654.823362][T19600] do_dentry_open+0x80e/0x1360 [ 654.823406][T19600] vfs_open_consume+0x4a/0x350 [ 654.823438][T19600] ? path_openat+0x148a/0x1da0 [ 654.823470][T19600] path_openat+0x14a6/0x1da0 [ 654.823514][T19600] do_file_open+0x23e/0x4a0 [ 654.823551][T19600] ? __pfx_do_file_open+0x10/0x10 [ 654.823607][T19600] ? _raw_spin_unlock+0x28/0x50 [ 654.823632][T19600] ? alloc_fd+0x6af/0x760 [ 654.823668][T19600] do_sys_openat2+0x115/0x200 [ 654.823709][T19600] ? __pfx_do_sys_openat2+0x10/0x10 [ 654.823752][T19600] ? do_user_addr_fault+0xd3f/0x1480 [ 654.823793][T19600] __x64_sys_openat+0x138/0x170 [ 654.823852][T19600] do_syscall_64+0x166/0x520 [ 654.823882][T19600] ? trace_irq_disable+0x3b/0x140 [ 654.823910][T19600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.823936][T19600] ? clear_bhb_loop+0x70/0xc0 [ 654.823965][T19600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.823985][T19600] RIP: 0033:0x7fdc24d5e98e [ 654.824006][T19600] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 654.824025][T19600] RSP: 002b:00007fdc25d07b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 654.824049][T19600] RAX: ffffffffffffffda RBX: 00007fdc25d086c0 RCX: 00007fdc24d5e98e [ 654.824065][T19600] RDX: 0000000000000000 RSI: 00007fdc25d07c00 RDI: ffffffffffffff9c [ 654.824082][T19600] RBP: 00007fdc25d07c00 R08: 0000000000000000 R09: 0000000000000000 [ 654.824098][T19600] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 654.824114][T19600] R13: 00007fdc25026038 R14: 00007fdc25025fa0 R15: 00007ffe15edab18 [ 654.824150][T19600] [ 656.008548][T15381] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 656.168115][T15381] usb 5-1: Using ep0 maxpacket: 8 [ 656.174761][T15381] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 656.188010][T15381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.188041][T15381] usb 5-1: Product: syz [ 656.188058][T15381] usb 5-1: Manufacturer: syz [ 656.188075][T15381] usb 5-1: SerialNumber: syz [ 656.208120][T15381] usb 5-1: config 0 descriptor?? [ 656.407117][T19650] fuse: fd is not a fuse device [ 656.429464][T15381] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 656.951985][T19673] FAULT_INJECTION: forcing a failure. [ 656.951985][T19673] name failslab, interval 1, probability 0, space 0, times 0 [ 656.952024][T19673] CPU: 1 UID: 0 PID: 19673 Comm: syz.6.4218 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 656.952060][T19673] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 656.952070][T19673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 656.952084][T19673] Call Trace: [ 656.952093][T19673] [ 656.952104][T19673] dump_stack_lvl+0xe8/0x150 [ 656.952137][T19673] should_fail_ex+0x3eb/0x540 [ 656.952176][T19673] should_failslab+0xa8/0x100 [ 656.952207][T19673] __kmalloc_cache_noprof+0x9e/0x600 [ 656.952233][T19673] ? open_substream+0xb4/0x780 [ 656.952258][T19673] ? open_substream+0xb4/0x780 [ 656.952283][T19673] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.952309][T19673] open_substream+0xb4/0x780 [ 656.952340][T19673] rawmidi_open_priv+0xc4/0x630 [ 656.952370][T19673] snd_rawmidi_open+0x43b/0xb40 [ 656.952408][T19673] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 656.952435][T19673] ? __pfx_default_wake_function+0x10/0x10 [ 656.952478][T19673] chrdev_open+0x4d9/0x600 [ 656.952510][T19673] ? __pfx_chrdev_open+0x10/0x10 [ 656.952541][T19673] ? devcgroup_check_permission+0x31/0x8f0 [ 656.952573][T19673] ? __pfx_chrdev_open+0x10/0x10 [ 656.952602][T19673] do_dentry_open+0x80e/0x1360 [ 656.952643][T19673] vfs_open_consume+0x4a/0x350 [ 656.952672][T19673] ? path_openat+0x148a/0x1da0 [ 656.952701][T19673] path_openat+0x14a6/0x1da0 [ 656.952746][T19673] do_file_open+0x23e/0x4a0 [ 656.952777][T19673] ? __pfx_do_file_open+0x10/0x10 [ 656.952824][T19673] ? _raw_spin_unlock+0x28/0x50 [ 656.952843][T19673] ? alloc_fd+0x6af/0x760 [ 656.952875][T19673] do_sys_openat2+0x115/0x200 [ 656.952909][T19673] ? __pfx_do_sys_openat2+0x10/0x10 [ 656.952952][T19673] ? do_user_addr_fault+0xd3f/0x1480 [ 656.952994][T19673] __x64_sys_openat+0x138/0x170 [ 656.953031][T19673] do_syscall_64+0x166/0x520 [ 656.953055][T19673] ? trace_irq_disable+0x3b/0x140 [ 656.953079][T19673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.953100][T19673] ? clear_bhb_loop+0x70/0xc0 [ 656.953126][T19673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.953147][T19673] RIP: 0033:0x7fdc24d5e98e [ 656.953173][T19673] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 656.953193][T19673] RSP: 002b:00007fdc25d07b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 656.953217][T19673] RAX: ffffffffffffffda RBX: 00007fdc25d086c0 RCX: 00007fdc24d5e98e [ 656.953234][T19673] RDX: 000000000000003f RSI: 00007fdc25d07c00 RDI: ffffffffffffff9c [ 656.953249][T19673] RBP: 00007fdc25d07c00 R08: 0000000000000000 R09: 0000000000000000 [ 656.953262][T19673] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 656.953277][T19673] R13: 00007fdc25026038 R14: 00007fdc25025fa0 R15: 00007ffe15edab18 [ 656.953310][T19673] [ 657.280023][T15381] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 657.288168][T15381] usb 5-1: USB disconnect, device number 28 [ 657.417466][T19678] binder: Write failure EINVAL in pid:37 [ 657.668282][T19688] netlink: 428 bytes leftover after parsing attributes in process `syz.1.4223'. [ 657.668332][T19688] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4223'. [ 657.924301][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4227'. [ 658.822104][T19713] fuse: fd is not a fuse device [ 658.843468][T19714] netlink: 428 bytes leftover after parsing attributes in process `syz.4.4233'. [ 658.843508][T19714] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4233'. [ 659.445048][T15381] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 659.481002][T19728] ceph: No mds server is up or the cluster is laggy [ 660.058558][ T1973] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 660.208509][ T1973] usb 4-1: Using ep0 maxpacket: 16 [ 660.215892][ T1973] usb 4-1: New USB device found: idVendor=0d8c, idProduct=0102, bcdDevice=0.40 [ 660.241357][ T1973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.241392][ T1973] usb 4-1: Product: syz [ 660.241411][ T1973] usb 4-1: Manufacturer: syz [ 660.241428][ T1973] usb 4-1: SerialNumber: syz [ 660.807982][T19758] kvm: user requested TSC rate below hardware speed [ 660.825929][T19758] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 661.265368][T19763] fuse: fd is not a fuse device [ 661.707684][ T1973] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 661.736255][ T1973] usb 4-1: USB disconnect, device number 43 [ 661.912929][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4257'. [ 662.621050][T15381] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 662.770127][T15381] usb 5-1: New USB device found: idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 662.771521][T15381] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 662.771552][T15381] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 662.774342][T15381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.774371][T15381] usb 5-1: Product: syz [ 662.774388][T15381] usb 5-1: Manufacturer: syz [ 662.774405][T15381] usb 5-1: SerialNumber: syz [ 662.777614][T15381] usb 5-1: config 0 descriptor?? [ 662.826353][T15381] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 663.428635][ T5721] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 663.579500][ T5721] usb 4-1: Using ep0 maxpacket: 32 [ 663.581123][ T5721] usb 4-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 663.583597][ T5721] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 663.583624][ T5721] usb 4-1: config 0 has no interface number 0 [ 663.586120][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.586147][ T5721] usb 4-1: Product: syz [ 663.586164][ T5721] usb 4-1: Manufacturer: syz [ 663.586180][ T5721] usb 4-1: SerialNumber: syz [ 663.604271][ T5721] usb 4-1: config 0 descriptor?? [ 663.849409][T15381] gspca_sunplus: reg_r err -71 [ 663.849595][T15381] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 663.862915][T15381] usb 5-1: USB disconnect, device number 29 [ 664.064192][ T5721] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 664.064218][ T5721] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 664.671929][ T5721] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 664.672258][ T5721] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 664.710146][ T5721] usb 4-1: USB disconnect, device number 44 [ 665.318556][ T5721] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 665.357792][T19867] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 665.489592][ T5721] usb 5-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 665.490849][ T5721] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.490926][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.494248][ T5721] usb 5-1: config 0 descriptor?? [ 665.531451][ T5721] pwc: Askey VC010 type 2 USB webcam detected. [ 665.588827][ T5350] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 665.749383][ T5350] usb 4-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 665.750858][ T5350] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 665.752220][ T5350] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 665.755041][ T5350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.755069][ T5350] usb 4-1: Product: syz [ 665.755085][ T5350] usb 4-1: Manufacturer: syz [ 665.755111][ T5350] usb 4-1: SerialNumber: syz [ 665.802396][ T5350] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 665.825606][ T5350] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 665.840457][ T5350] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 665.903156][ T5721] pwc: recv_control_msg error -32 req 02 val 2b00 [ 665.903881][ T5721] pwc: recv_control_msg error -32 req 02 val 2700 [ 665.905835][ T5721] pwc: recv_control_msg error -32 req 02 val 2c00 [ 665.906403][ T5721] pwc: recv_control_msg error -32 req 04 val 1000 [ 665.906994][ T5721] pwc: recv_control_msg error -32 req 04 val 1300 [ 665.907584][ T5721] pwc: recv_control_msg error -32 req 04 val 1400 [ 666.113753][ T5721] pwc: recv_control_msg error -71 req 02 val 2100 [ 666.115956][ T5721] pwc: recv_control_msg error -71 req 04 val 1500 [ 666.116561][ T5721] pwc: recv_control_msg error -71 req 02 val 2500 [ 666.117058][ T5721] pwc: recv_control_msg error -71 req 02 val 2400 [ 666.117527][ T5721] pwc: recv_control_msg error -71 req 02 val 2600 [ 666.155942][ T5721] pwc: recv_control_msg error -71 req 02 val 2900 [ 666.156780][ T5721] pwc: recv_control_msg error -71 req 02 val 2800 [ 666.175745][ T5721] pwc: recv_control_msg error -71 req 04 val 1100 [ 666.183788][ T5721] pwc: recv_control_msg error -71 req 04 val 1200 [ 666.199959][ T5721] pwc: Registered as video103. [ 666.203555][ T5721] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input49 [ 666.224835][ T5721] usb 5-1: USB disconnect, device number 30 [ 666.467485][T19881] overlayfs: failed to clone upperpath [ 667.039497][T19906] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.4309'. [ 667.784492][T19914] FAULT_INJECTION: forcing a failure. [ 667.784492][T19914] name failslab, interval 1, probability 0, space 0, times 0 [ 667.784521][T19914] CPU: 1 UID: 0 PID: 19914 Comm: syz.6.4312 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 667.784545][T19914] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 667.784553][T19914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 667.784563][T19914] Call Trace: [ 667.784572][T19914] [ 667.784579][T19914] dump_stack_lvl+0xe8/0x150 [ 667.784606][T19914] should_fail_ex+0x3eb/0x540 [ 667.784628][T19914] should_failslab+0xa8/0x100 [ 667.784659][T19914] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 667.784682][T19914] ? kasprintf+0xe2/0x140 [ 667.784702][T19914] ? kasprintf+0xe2/0x140 [ 667.784727][T19914] kvasprintf+0xeb/0x1a0 [ 667.784771][T19914] ? __pfx_kvasprintf+0x10/0x10 [ 667.784815][T19914] kasprintf+0xe2/0x140 [ 667.784851][T19914] ? __pfx_kasprintf+0x10/0x10 [ 667.784879][T19914] ? __kasan_kmalloc+0x93/0xb0 [ 667.784902][T19914] ? __kmalloc_cache_noprof+0x31c/0x600 [ 667.784921][T19914] ? __kmalloc_cache_noprof+0x148/0x600 [ 667.784939][T19914] ? alloc_bprm+0x79/0x640 [ 667.784965][T19914] alloc_bprm+0x20e/0x640 [ 667.784987][T19914] do_execveat_common+0x167/0xbd0 [ 667.785007][T19914] ? strncpy_from_user+0x150/0x2c0 [ 667.785027][T19914] ? do_getname+0x151/0x250 [ 667.785054][T19914] __x64_sys_execveat+0xc7/0xf0 [ 667.785077][T19914] do_syscall_64+0x166/0x520 [ 667.785097][T19914] ? trace_irq_disable+0x3b/0x140 [ 667.785117][T19914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.785134][T19914] ? clear_bhb_loop+0x70/0xc0 [ 667.785157][T19914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.785174][T19914] RIP: 0033:0x7fdc24d9e159 [ 667.785191][T19914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.785206][T19914] RSP: 002b:00007fdc25d08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 667.785224][T19914] RAX: ffffffffffffffda RBX: 00007fdc25025fa0 RCX: 00007fdc24d9e159 [ 667.785237][T19914] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 667.785248][T19914] RBP: 00007fdc24e3506b R08: 0000000000001000 R09: 0000000000000000 [ 667.785259][T19914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.785269][T19914] R13: 00007fdc25026038 R14: 00007fdc25025fa0 R15: 00007ffe15edab18 [ 667.785293][T19914] [ 667.908850][T19866] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 667.940252][T15381] usb 4-1: USB disconnect, device number 45 [ 668.070390][T15381] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 668.091365][T15381] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 668.099582][T15381] ti_usb_3410_5052 4-1:2.0: device disconnected [ 668.830617][T19938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.489510][T19950] fuse: fd is not a fuse device [ 669.887527][T19959] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 669.911279][ T8207] IPVS: starting estimator thread 0... [ 669.998596][T19960] IPVS: using max 25 ests per chain, 60000 per kthread [ 670.396002][T19965] binder: Failure in copy_transaction_data: EINVAL [ 670.748511][T15381] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 670.901656][T15381] usb 5-1: Using ep0 maxpacket: 16 [ 670.904275][T15381] usb 5-1: New USB device found: idVendor=0d8c, idProduct=0102, bcdDevice=0.40 [ 670.916431][T15381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.916507][T15381] usb 5-1: Product: syz [ 670.916550][T15381] usb 5-1: Manufacturer: syz [ 670.916601][T15381] usb 5-1: SerialNumber: syz [ 672.604260][T15381] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 672.604325][T15381] usb 5-1: MIDIStreaming interface descriptor not found [ 672.862816][T15381] usb 5-1: USB disconnect, device number 31 [ 672.865014][T20039] fuse: fd is not a fuse device [ 672.898483][ T5728] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 673.059517][ T5728] usb 7-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 673.062876][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.062897][ T5728] usb 7-1: Product: syz [ 673.062909][ T5728] usb 7-1: Manufacturer: syz [ 673.062920][ T5728] usb 7-1: SerialNumber: syz [ 673.163331][T20046] FAULT_INJECTION: forcing a failure. [ 673.163331][T20046] name failslab, interval 1, probability 0, space 0, times 0 [ 673.163361][T20046] CPU: 0 UID: 0 PID: 20046 Comm: syz.3.4362 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 673.163386][T20046] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 673.163394][T20046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 673.163404][T20046] Call Trace: [ 673.163412][T20046] [ 673.163419][T20046] dump_stack_lvl+0xe8/0x150 [ 673.163448][T20046] should_fail_ex+0x3eb/0x540 [ 673.163471][T20046] should_failslab+0xa8/0x100 [ 673.163497][T20046] __kmalloc_cache_noprof+0x9e/0x600 [ 673.163518][T20046] ? fcloop_alloc_nport+0x56/0x860 [ 673.163538][T20046] ? fcloop_alloc_nport+0x56/0x860 [ 673.163562][T20046] fcloop_alloc_nport+0x56/0x860 [ 673.163591][T20046] fcloop_create_remote_port+0x9e/0x600 [ 673.163613][T20046] ? __pfx_fcloop_create_remote_port+0x10/0x10 [ 673.163634][T20046] ? sysfs_file_kobj+0x1a/0x230 [ 673.163652][T20046] ? sysfs_file_kobj+0x1a/0x230 [ 673.163668][T20046] ? sysfs_file_kobj+0x1a/0x230 [ 673.163686][T20046] ? sysfs_file_kobj+0x1e4/0x230 [ 673.163706][T20046] ? sysfs_kf_write+0x166/0x260 [ 673.163727][T20046] ? __pfx_sysfs_kf_write+0x10/0x10 [ 673.163745][T20046] kernfs_fop_write_iter+0x3a4/0x540 [ 673.163776][T20046] vfs_write+0x612/0xba0 [ 673.163802][T20046] ? __pfx_vfs_write+0x10/0x10 [ 673.163824][T20046] ? __fget_files+0x3a2/0x420 [ 673.163841][T20046] ? __fget_files+0x2a/0x420 [ 673.163868][T20046] ? fdget+0x1ac/0x250 [ 673.163892][T20046] ksys_write+0x150/0x270 [ 673.163914][T20046] ? __pfx_ksys_write+0x10/0x10 [ 673.163943][T20046] do_syscall_64+0x166/0x520 [ 673.163964][T20046] ? trace_irq_disable+0x3b/0x140 [ 673.163984][T20046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.164002][T20046] ? clear_bhb_loop+0x70/0xc0 [ 673.164023][T20046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.164040][T20046] RIP: 0033:0x7f4d84f9e159 [ 673.164056][T20046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.164070][T20046] RSP: 002b:00007f4d831f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 673.164088][T20046] RAX: ffffffffffffffda RBX: 00007f4d85225fa0 RCX: 00007f4d84f9e159 [ 673.164101][T20046] RDX: 0000000000000003 RSI: 0000200000000100 RDI: 0000000000000003 [ 673.164111][T20046] RBP: 00007f4d8503506b R08: 0000000000000000 R09: 0000000000000000 [ 673.164122][T20046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.164132][T20046] R13: 00007f4d85226038 R14: 00007f4d85225fa0 R15: 00007ffd82d6f528 [ 673.164159][T20046] [ 673.507105][ T5728] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 673.507173][ T5728] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 673.634308][T20050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 674.036722][T20068] FAULT_INJECTION: forcing a failure. [ 674.036722][T20068] name failslab, interval 1, probability 0, space 0, times 0 [ 674.036751][T20068] CPU: 0 UID: 0 PID: 20068 Comm: syz.3.4371 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 674.036776][T20068] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 674.036786][T20068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 674.036797][T20068] Call Trace: [ 674.036803][T20068] [ 674.036810][T20068] dump_stack_lvl+0xe8/0x150 [ 674.036838][T20068] should_fail_ex+0x3eb/0x540 [ 674.036860][T20068] should_failslab+0xa8/0x100 [ 674.036886][T20068] __kmalloc_cache_node_noprof+0xa5/0x620 [ 674.036908][T20068] ? __get_vm_area_node+0x155/0x2f0 [ 674.036932][T20068] ? __get_vm_area_node+0x155/0x2f0 [ 674.036962][T20068] __get_vm_area_node+0x155/0x2f0 [ 674.036991][T20068] ? relay_open_buf+0x3b0/0xda0 [ 674.037016][T20068] vmap+0x158/0x2f0 [ 674.037040][T20068] ? relay_open_buf+0x3b0/0xda0 [ 674.037069][T20068] relay_open_buf+0x3b0/0xda0 [ 674.037135][T20068] relay_open+0x413/0x900 [ 674.037178][T20068] blk_trace_setup_prepare+0x425/0x5a0 [ 674.037218][T20068] blk_trace_setup+0x2f5/0x520 [ 674.037244][T20068] ? __pfx_blk_trace_setup+0x10/0x10 [ 674.037282][T20068] ? snprintf+0xe8/0x140 [ 674.037325][T20068] blk_trace_ioctl+0x37f/0x910 [ 674.037351][T20068] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 674.037376][T20068] ? kasan_quarantine_put+0xbb/0x1f0 [ 674.037403][T20068] ? tomoyo_path_number_perm+0x219/0x5f0 [ 674.037429][T20068] ? tomoyo_path_number_perm+0x219/0x5f0 [ 674.037456][T20068] ? do_vfs_ioctl+0x116f/0x1530 [ 674.037481][T20068] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 674.037514][T20068] ? do_futex+0x3e7/0x4e0 [ 674.037554][T20068] blkdev_ioctl+0x4c1/0x740 [ 674.037573][T20068] ? __pfx_blkdev_ioctl+0x10/0x10 [ 674.037591][T20068] ? bpf_lsm_file_ioctl+0x9/0x20 [ 674.037613][T20068] ? __pfx_blkdev_ioctl+0x10/0x10 [ 674.037629][T20068] __se_sys_ioctl+0xfc/0x170 [ 674.037658][T20068] do_syscall_64+0x166/0x520 [ 674.037679][T20068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.037697][T20068] ? clear_bhb_loop+0x70/0xc0 [ 674.037717][T20068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.037734][T20068] RIP: 0033:0x7f4d84f9e159 [ 674.037751][T20068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.037766][T20068] RSP: 002b:00007f4d831f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 674.037785][T20068] RAX: ffffffffffffffda RBX: 00007f4d85225fa0 RCX: 00007f4d84f9e159 [ 674.037797][T20068] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000003 [ 674.037809][T20068] RBP: 00007f4d8503506b R08: 0000000000000000 R09: 0000000000000000 [ 674.037820][T20068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.037830][T20068] R13: 00007f4d85226038 R14: 00007f4d85225fa0 R15: 00007ffd82d6f528 [ 674.037855][T20068] [ 674.553835][ T5728] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 674.553931][ T5728] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 674.584776][ T5728] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 674.630730][ T5728] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 674.668477][ T5728] usb 7-1: USB disconnect, device number 30 [ 675.198166][T20085] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off. [ 675.436642][T20090] CIFS: Attempting to mount //127.0.0.1/share [ 675.495800][T20092] CIFS: VFS: Invalid response size 0 for command 0 [ 675.506006][T20090] CIFS: VFS: cifs_mount failed w/return code = -5 [ 676.208589][ T5728] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 676.360330][ T5728] usb 7-1: New USB device found: idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 676.364044][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.364080][ T5728] usb 7-1: Product: syz [ 676.364092][ T5728] usb 7-1: Manufacturer: syz [ 676.364104][ T5728] usb 7-1: SerialNumber: syz [ 676.366507][ T5728] usb 7-1: config 0 descriptor?? [ 676.407075][ T5728] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 677.396625][ T5728] gspca_sunplus: reg_w_riv err -71 [ 677.396717][ T5728] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 677.428920][ T5728] usb 7-1: USB disconnect, device number 31 [ 677.481664][T20131] FAULT_INJECTION: forcing a failure. [ 677.481664][T20131] name failslab, interval 1, probability 0, space 0, times 0 [ 677.481704][T20131] CPU: 0 UID: 0 PID: 20131 Comm: syz.4.4395 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 677.481740][T20131] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 677.481751][T20131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 677.481767][T20131] Call Trace: [ 677.481777][T20131] [ 677.481788][T20131] dump_stack_lvl+0xe8/0x150 [ 677.481837][T20131] should_fail_ex+0x3eb/0x540 [ 677.481869][T20131] ? __alloc_skb+0x1db/0x7a0 [ 677.481895][T20131] should_failslab+0xa8/0x100 [ 677.481930][T20131] ? __alloc_skb+0x1db/0x7a0 [ 677.481950][T20131] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 677.481976][T20131] ? __alloc_skb+0x18d/0x7a0 [ 677.482006][T20131] ? __alloc_skb+0x1db/0x7a0 [ 677.482036][T20131] __alloc_skb+0x1db/0x7a0 [ 677.482063][T20131] fdb_notify+0xa6/0x160 [ 677.482090][T20131] fdb_add_local+0x14e/0x250 [ 677.482133][T20131] br_fdb_changeaddr+0x3bc/0x470 [ 677.482180][T20131] br_device_event+0x693/0x9b0 [ 677.482213][T20131] ? net_generic+0x1e/0x240 [ 677.482251][T20131] ? __pfx_br_device_event+0x10/0x10 [ 677.482290][T20131] ? lockdep_rtnl_is_held+0x26/0x40 [ 677.482328][T20131] notifier_call_chain+0x1a5/0x3d0 [ 677.482363][T20131] call_netdevice_notifiers+0x90/0xd0 [ 677.482400][T20131] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 677.482437][T20131] ? __pfx___mutex_lock+0x10/0x10 [ 677.482465][T20131] ? full_name_hash+0x92/0xe0 [ 677.482489][T20131] ? dev_ifsioc+0x645/0x1360 [ 677.482513][T20131] ? netdev_need_ops_lock+0xbe/0xf0 [ 677.482541][T20131] dev_ifsioc+0x65a/0x1360 [ 677.482568][T20131] ? dev_load+0x21/0x1f0 [ 677.482594][T20131] dev_ioctl+0x7b4/0x1150 [ 677.482623][T20131] sock_do_ioctl+0x23e/0x320 [ 677.482659][T20131] ? __pfx_sock_do_ioctl+0x10/0x10 [ 677.482689][T20131] ? do_futex+0x3e7/0x4e0 [ 677.482741][T20131] sock_ioctl+0x57a/0x7e0 [ 677.482772][T20131] ? __fget_files+0x2a/0x420 [ 677.482798][T20131] ? __pfx_sock_ioctl+0x10/0x10 [ 677.482829][T20131] ? __fget_files+0x2a/0x420 [ 677.482855][T20131] ? __fget_files+0x2a/0x420 [ 677.482885][T20131] ? bpf_lsm_file_ioctl+0x9/0x20 [ 677.482916][T20131] ? __pfx_sock_ioctl+0x10/0x10 [ 677.482958][T20131] __se_sys_ioctl+0xfc/0x170 [ 677.483002][T20131] do_syscall_64+0x166/0x520 [ 677.483030][T20131] ? trace_irq_disable+0x3b/0x140 [ 677.483069][T20131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.483095][T20131] ? clear_bhb_loop+0x70/0xc0 [ 677.483126][T20131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.483150][T20131] RIP: 0033:0x7f163bb9e159 [ 677.483176][T20131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.483197][T20131] RSP: 002b:00007f163ca12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 677.483224][T20131] RAX: ffffffffffffffda RBX: 00007f163be25fa0 RCX: 00007f163bb9e159 [ 677.483243][T20131] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000005 [ 677.483260][T20131] RBP: 00007f163bc3506b R08: 0000000000000000 R09: 0000000000000000 [ 677.483276][T20131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.483291][T20131] R13: 00007f163be26038 R14: 00007f163be25fa0 R15: 00007ffeda170a18 [ 677.483329][T20131] [ 678.207246][T20141] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 679.148576][T15381] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 679.299190][T15381] usb 5-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 679.300310][T15381] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 679.301517][T15381] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 679.305984][T15381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.306013][T15381] usb 5-1: Product: syz [ 679.306031][T15381] usb 5-1: Manufacturer: syz [ 679.306046][T15381] usb 5-1: SerialNumber: syz [ 679.376404][T15381] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 679.411941][T15381] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 679.428908][T15381] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 679.970436][ T5810] hid_parser_main: 30 callbacks suppressed [ 679.970464][ T5810] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 679.973415][ T5810] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 680.395809][T20203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4425'. [ 680.395841][T20203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4425'. [ 681.236137][T20222] FAULT_INJECTION: forcing a failure. [ 681.236137][T20222] name failslab, interval 1, probability 0, space 0, times 0 [ 681.236177][T20222] CPU: 0 UID: 0 PID: 20222 Comm: syz.6.4433 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 681.236213][T20222] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 681.236224][T20222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 681.236240][T20222] Call Trace: [ 681.236250][T20222] [ 681.236262][T20222] dump_stack_lvl+0xe8/0x150 [ 681.236301][T20222] should_fail_ex+0x3eb/0x540 [ 681.236334][T20222] should_failslab+0xa8/0x100 [ 681.236370][T20222] __kmalloc_cache_noprof+0x9e/0x600 [ 681.236400][T20222] ? __kmalloc_cache_noprof+0x148/0x600 [ 681.236426][T20222] ? snd_seq_prioq_new+0x47/0xa0 [ 681.236456][T20222] ? snd_seq_prioq_new+0x47/0xa0 [ 681.236494][T20222] snd_seq_prioq_new+0x47/0xa0 [ 681.236525][T20222] snd_seq_queue_alloc+0x13b/0x740 [ 681.236562][T20222] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 681.236603][T20222] snd_seq_ioctl+0x292/0x490 [ 681.236634][T20222] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 681.236680][T20222] ? __fget_files+0x2a/0x420 [ 681.236711][T20222] ? bpf_lsm_file_ioctl+0x9/0x20 [ 681.236747][T20222] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 681.236774][T20222] __se_sys_ioctl+0xfc/0x170 [ 681.236809][T20222] do_syscall_64+0x166/0x520 [ 681.236839][T20222] ? trace_irq_disable+0x3b/0x140 [ 681.236867][T20222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.236892][T20222] ? clear_bhb_loop+0x70/0xc0 [ 681.236921][T20222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.236946][T20222] RIP: 0033:0x7fdc24d9e159 [ 681.236969][T20222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.236991][T20222] RSP: 002b:00007fdc25d08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.237026][T20222] RAX: ffffffffffffffda RBX: 00007fdc25025fa0 RCX: 00007fdc24d9e159 [ 681.237045][T20222] RDX: 0000200000000380 RSI: 00000000c08c5332 RDI: 0000000000000004 [ 681.237061][T20222] RBP: 00007fdc24e3506b R08: 0000000000000000 R09: 0000000000000000 [ 681.237077][T20222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.237093][T20222] R13: 00007fdc25026038 R14: 00007fdc25025fa0 R15: 00007ffe15edab18 [ 681.237131][T20222] [ 681.502843][T20158] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 681.519143][ T5810] usb 5-1: USB disconnect, device number 32 [ 681.602408][ T5810] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 681.632732][ T5810] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 681.656747][ T5810] ti_usb_3410_5052 5-1:2.0: device disconnected [ 682.667602][T20246] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 684.998979][T20299] fuse: fd is not a fuse device [ 685.648490][ T2240] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 685.809393][ T2240] usb 4-1: Using ep0 maxpacket: 16 [ 685.810183][ T2240] usb 4-1: New USB device found: idVendor=046d, idProduct=c51b, bcdDevice=0.00 [ 685.811831][ T2240] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 685.811881][ T2240] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 685.811912][ T2240] usb 4-1: config 0 interface 0 has no altsetting 0 [ 685.811949][ T2240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.815826][ T2240] usb 4-1: config 0 descriptor?? [ 685.902625][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.034373][T20320] netlink: 'syz.3.4474': attribute type 32 has an invalid length. [ 686.034401][T20320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4474'. [ 686.116400][T20336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4481'. [ 686.116434][T20336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4481'. [ 686.261698][ T2240] logitech-djreceiver 0003:046D:C51B.001E: ignoring exceeding usage max [ 686.449512][ T5350] usb 4-1: USB disconnect, device number 46 [ 687.247896][T20358] ceph: No mds server is up or the cluster is laggy [ 687.685796][T20373] FAULT_INJECTION: forcing a failure. [ 687.685796][T20373] name failslab, interval 1, probability 0, space 0, times 0 [ 687.685828][T20373] CPU: 0 UID: 0 PID: 20373 Comm: syz.3.4494 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 687.685855][T20373] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 687.685863][T20373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 687.685875][T20373] Call Trace: [ 687.685883][T20373] [ 687.685891][T20373] dump_stack_lvl+0xe8/0x150 [ 687.685921][T20373] should_fail_ex+0x3eb/0x540 [ 687.685946][T20373] should_failslab+0xa8/0x100 [ 687.685975][T20373] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 687.686000][T20373] ? _RNvMs_NtNtCswPamI0U300_11rust_binder7process6freezeNtB4_13FreezeMessage3new+0x39/0x130 [ 687.686047][T20373] ? _RNvMs_NtNtCswPamI0U300_11rust_binder7process6freezeNtB4_13FreezeMessage3new+0x39/0x130 [ 687.686082][T20373] ? _RNvMs_NtNtCswPamI0U300_11rust_binder7process6freezeNtB4_13FreezeMessage3new+0x39/0x130 [ 687.686116][T20373] krealloc_node_align_noprof+0x19a/0x390 [ 687.686140][T20373] ? __might_fault+0xaf/0x130 [ 687.686171][T20373] _RNvMs_NtNtCswPamI0U300_11rust_binder7process6freezeNtB4_13FreezeMessage3new+0x39/0x130 [ 687.686208][T20373] _RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread5write+0x121b/0xd1f0 [ 687.686306][T20373] ? __pfx__RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread5write+0x10/0x10 [ 687.686539][T20373] ? __lock_acquire+0x747/0x2de0 [ 687.686581][T20373] ? lock_acquire+0x115/0x350 [ 687.686602][T20373] ? __kfree_rcu_sheaf+0x21/0x690 [ 687.686633][T20373] ? __kfree_rcu_sheaf+0x21/0x690 [ 687.686654][T20373] ? __kfree_rcu_sheaf+0x21/0x690 [ 687.686677][T20373] ? ma_leaf_max_gap+0x39c/0x500 [ 687.686710][T20373] ? mas_update_gap+0x39a/0x510 [ 687.686738][T20373] ? mas_wr_store_entry+0x5fc2/0x7cf0 [ 687.686790][T20373] ? __pfx_mas_wr_store_entry+0x10/0x10 [ 687.686825][T20373] ? mas_wr_store_entry+0x5fc2/0x7cf0 [ 687.686861][T20373] ? __lock_acquire+0x747/0x2de0 [ 687.686884][T20373] ? __lock_acquire+0x747/0x2de0 [ 687.686908][T20373] ? __lock_acquire+0x747/0x2de0 [ 687.686935][T20373] ? __lock_acquire+0x747/0x2de0 [ 687.686962][T20373] ? lock_acquire+0x115/0x350 [ 687.686986][T20373] ? lock_acquire+0x115/0x350 [ 687.687012][T20373] ? lock_acquire+0x115/0x350 [ 687.687042][T20373] ? is_bpf_text_address+0x26/0x2b0 [ 687.687074][T20373] ? is_bpf_text_address+0x292/0x2b0 [ 687.687101][T20373] ? is_bpf_text_address+0x26/0x2b0 [ 687.687130][T20373] ? kernel_text_address+0xa5/0xe0 [ 687.687152][T20373] ? __kernel_text_address+0xd/0x30 [ 687.687173][T20373] ? unwind_get_return_address+0x4d/0x90 [ 687.687192][T20373] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 687.687215][T20373] ? arch_stack_walk+0xfb/0x150 [ 687.687242][T20373] ? stack_trace_save+0xa9/0x100 [ 687.687262][T20373] ? __pfx_stack_trace_save+0x10/0x10 [ 687.687286][T20373] ? stack_depot_save_flags+0x33/0x7f0 [ 687.687307][T20373] ? kasan_save_track+0x4f/0x80 [ 687.687328][T20373] ? kasan_save_track+0x3e/0x80 [ 687.687352][T20373] ? kasan_save_track+0x4f/0x80 [ 687.687373][T20373] ? kasan_save_track+0x3e/0x80 [ 687.687393][T20373] ? __kasan_kmalloc+0x93/0xb0 [ 687.687416][T20373] ? __kmalloc_node_track_caller_noprof+0x4af/0x720 [ 687.687437][T20373] ? krealloc_node_align_noprof+0x19a/0x390 [ 687.687459][T20373] ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x765/0x1390 [ 687.687491][T20373] ? _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x36b/0x3dc0 [ 687.687528][T20373] ? __se_sys_ioctl+0xfc/0x170 [ 687.687553][T20373] ? do_syscall_64+0x166/0x520 [ 687.687574][T20373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.687612][T20373] ? __lock_acquire+0x747/0x2de0 [ 687.687646][T20373] ? rcu_is_watching+0x16/0xb0 [ 687.687672][T20373] ? trace_kmalloc+0x2a/0xf0 [ 687.687693][T20373] ? __lock_acquire+0x747/0x2de0 [ 687.687723][T20373] ? do_raw_spin_unlock+0xf5/0x200 [ 687.687755][T20373] ? _raw_spin_unlock+0x28/0x50 [ 687.687772][T20373] ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0xd65/0x1390 [ 687.687808][T20373] ? lock_acquire+0x115/0x350 [ 687.687840][T20373] ? __might_fault+0xaf/0x130 [ 687.687868][T20373] ? _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x18b4/0x3dc0 [ 687.687912][T20373] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x1901/0x3dc0 [ 687.687951][T20373] ? stack_depot_save_flags+0x33/0x7f0 [ 687.687971][T20373] ? __lock_acquire+0x747/0x2de0 [ 687.687995][T20373] ? kasan_save_track+0x4f/0x80 [ 687.688016][T20373] ? kasan_save_track+0x3e/0x80 [ 687.688040][T20373] ? kasan_save_free_info+0x40/0x50 [ 687.688056][T20373] ? __kasan_slab_free+0x5c/0x80 [ 687.688078][T20373] ? kfree+0x1c5/0x650 [ 687.688093][T20373] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 687.688120][T20373] ? security_file_ioctl+0xc3/0x2a0 [ 687.688150][T20373] ? __pfx__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 687.688219][T20373] ? kasan_quarantine_put+0xbb/0x1f0 [ 687.688248][T20373] ? tomoyo_path_number_perm+0x219/0x5f0 [ 687.688278][T20373] ? tomoyo_path_number_perm+0x219/0x5f0 [ 687.688313][T20373] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 687.688381][T20373] ? do_futex+0x3e7/0x4e0 [ 687.688438][T20373] ? __fget_files+0x2a/0x420 [ 687.688468][T20373] ? __fget_files+0x2a/0x420 [ 687.688495][T20373] ? __fget_files+0x2a/0x420 [ 687.688536][T20373] ? bpf_lsm_file_ioctl+0x9/0x20 [ 687.688572][T20373] ? __pfx__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 687.688617][T20373] __se_sys_ioctl+0xfc/0x170 [ 687.688654][T20373] do_syscall_64+0x166/0x520 [ 687.688686][T20373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.688715][T20373] ? clear_bhb_loop+0x70/0xc0 [ 687.688748][T20373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.688773][T20373] RIP: 0033:0x7f4d84f9e159 [ 687.688800][T20373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.688824][T20373] RSP: 002b:00007f4d831f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.688853][T20373] RAX: ffffffffffffffda RBX: 00007f4d85225fa0 RCX: 00007f4d84f9e159 [ 687.688874][T20373] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004 [ 687.688892][T20373] RBP: 00007f4d8503506b R08: 0000000000000000 R09: 0000000000000000 [ 687.688906][T20373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.688919][T20373] R13: 00007f4d85226038 R14: 00007f4d85225fa0 R15: 00007ffd82d6f528 [ 687.688950][T20373] [ 687.768641][T20373] binder: Write failure ENOMEM in pid:307 [ 687.981283][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 688.513726][T20379] ================================================================== [ 688.513746][T20379] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0 [ 688.513794][T20379] Read of size 1 at addr ffff8880258616e0 by task syz.3.4497/20379 [ 688.513814][T20379] [ 688.513830][T20379] CPU: 1 UID: 0 PID: 20379 Comm: syz.3.4497 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 688.513865][T20379] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 688.513875][T20379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 688.513890][T20379] Call Trace: [ 688.513900][T20379] [ 688.513910][T20379] dump_stack_lvl+0xe8/0x150 [ 688.513942][T20379] print_address_description+0x55/0x1e0 [ 688.513983][T20379] ? string+0x216/0x2d0 [ 688.514015][T20379] print_report+0x58/0x70 [ 688.514045][T20379] kasan_report+0x117/0x150 [ 688.514079][T20379] ? string+0x216/0x2d0 [ 688.514116][T20379] string+0x216/0x2d0 [ 688.514158][T20379] vsnprintf+0x74a/0xef0 [ 688.514198][T20379] seq_printf+0x188/0x290 [ 688.514238][T20379] ? __pfx_seq_printf+0x10/0x10 [ 688.514272][T20379] ? seq_put_decimal_ull_width+0x290/0x370 [ 688.514299][T20379] irq_seq_show+0x5f3/0x860 [ 688.514339][T20379] traverse+0x229/0x620 [ 688.514378][T20379] seq_lseek+0x134/0x260 [ 688.514414][T20379] proc_reg_llseek+0x1bc/0x290 [ 688.514481][T20379] __x64_sys_lseek+0x14f/0x1e0 [ 688.514510][T20379] do_syscall_64+0x166/0x520 [ 688.514543][T20379] ? trace_irq_disable+0x3b/0x140 [ 688.514572][T20379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.514596][T20379] ? clear_bhb_loop+0x70/0xc0 [ 688.514622][T20379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.514646][T20379] RIP: 0033:0x7f4d84f9e159 [ 688.514666][T20379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.514688][T20379] RSP: 002b:00007f4d831f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 688.514721][T20379] RAX: ffffffffffffffda RBX: 00007f4d85225fa0 RCX: 00007f4d84f9e159 [ 688.514740][T20379] RDX: 0000000000000001 RSI: 7fffffffffffffff RDI: 0000000000000003 [ 688.514756][T20379] RBP: 00007f4d8503506b R08: 0000000000000000 R09: 0000000000000000 [ 688.514772][T20379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.514786][T20379] R13: 00007f4d85226038 R14: 00007f4d85225fa0 R15: 00007ffd82d6f528 [ 688.514814][T20379] [ 688.514823][T20379] [ 688.514836][T20379] Allocated by task 5728: [ 688.514848][T20379] kasan_save_track+0x3e/0x80 [ 688.514881][T20379] __kasan_kmalloc+0x93/0xb0 [ 688.514907][T20379] __kmalloc_node_track_caller_noprof+0x4af/0x720 [ 688.514932][T20379] kstrdup+0x42/0x100 [ 688.514950][T20379] __kernfs_new_node+0xa9/0x980 [ 688.514977][T20379] kernfs_create_dir_ns+0xf7/0x220 [ 688.515007][T20379] sysfs_create_dir_ns+0x12f/0x2a0 [ 688.515033][T20379] kobject_add_internal+0x622/0xcd0 [ 688.515062][T20379] kobject_add+0x163/0x240 [ 688.515094][T20379] device_add+0x3fa/0xb80 [ 688.515120][T20379] usb_create_ep_devs+0x12c/0x230 [ 688.515148][T20379] usb_new_device+0xa9d/0x1690 [ 688.515180][T20379] hub_event+0x28e8/0x4d30 [ 688.515208][T20379] process_scheduled_works+0xc3d/0x1630 [ 688.515236][T20379] worker_thread+0xa47/0xfb0 [ 688.515265][T20379] kthread+0x38b/0x480 [ 688.515284][T20379] ret_from_fork+0x514/0xb70 [ 688.515321][T20379] ret_from_fork_asm+0x1a/0x30 [ 688.515350][T20379] [ 688.515356][T20379] Freed by task 15: [ 688.515367][T20379] kasan_save_track+0x3e/0x80 [ 688.515391][T20379] kasan_save_free_info+0x40/0x50 [ 688.515411][T20379] __kasan_slab_free+0x5c/0x80 [ 688.515448][T20379] kfree+0x1c5/0x650 [ 688.515466][T20379] kernfs_free_rcu+0x3b/0xd0 [ 688.515493][T20379] rcu_core+0x926/0x1260 [ 688.515517][T20379] handle_softirqs+0x223/0x840 [ 688.515543][T20379] run_ksoftirqd+0x36/0x60 [ 688.515576][T20379] smpboot_thread_fn+0x565/0xa70 [ 688.515607][T20379] kthread+0x38b/0x480 [ 688.515627][T20379] ret_from_fork+0x514/0xb70 [ 688.515655][T20379] ret_from_fork_asm+0x1a/0x30 [ 688.515684][T20379] [ 688.515696][T20379] The buggy address belongs to the object at ffff8880258616e0 [ 688.515696][T20379] which belongs to the cache kmalloc-8 of size 8 [ 688.515716][T20379] The buggy address is located 0 bytes inside of [ 688.515716][T20379] freed 8-byte region [ffff8880258616e0, ffff8880258616e8) [ 688.515739][T20379] [ 688.515745][T20379] The buggy address belongs to the physical page: [ 688.515758][T20379] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888025861d40 pfn:0x25861 [ 688.515781][T20379] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 688.515803][T20379] page_type: f5(slab) [ 688.515825][T20379] raw: 00fff00000000200 ffff88813ff22500 ffffea0001dfc790 ffffea000118e390 [ 688.515847][T20379] raw: ffff888025861d40 0000000000800065 00000000f5000000 0000000000000000 [ 688.515860][T20379] page dumped because: kasan: bad access detected [ 688.515878][T20379] page_owner tracks the page as allocated [ 688.515888][T20379] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5985624507 [ 688.515924][T20379] post_alloc_hook+0x1f9/0x250 [ 688.515944][T20379] get_page_from_freelist+0x220f/0x2280 [ 688.515977][T20379] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 688.516003][T20379] allocate_slab+0x7d/0x5e0 [ 688.516039][T20379] refill_objects+0x2d5/0x350 [ 688.516070][T20379] __pcs_replace_empty_main+0x2c8/0x6c0 [ 688.516100][T20379] __kmalloc_node_track_caller_noprof+0x543/0x720 [ 688.516135][T20379] kstrdup+0x42/0x100 [ 688.516154][T20379] __kernfs_new_node+0xa9/0x980 [ 688.516183][T20379] kernfs_new_node+0xeb/0x140 [ 688.516211][T20379] kernfs_create_link+0xe3/0x240 [ 688.516238][T20379] sysfs_do_create_link_sd+0x83/0x110 [ 688.516264][T20379] device_add_class_symlinks+0x1cf/0x240 [ 688.516294][T20379] device_add+0x467/0xb80 [ 688.516319][T20379] tty_register_device_attr+0x425/0x990 [ 688.516346][T20379] tty_register_driver+0x868/0xe50 [ 688.516371][T20379] page_owner free stack trace missing [ 688.516380][T20379] [ 688.516387][T20379] Memory state around the buggy address: [ 688.516399][T20379] ffff888025861580: 06 fc fc fc 06 fc fc fc fa fc fc fc fa fc fc fc [ 688.516415][T20379] ffff888025861600: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 688.516432][T20379] >ffff888025861680: fa fc fc fc fa fc fc fc 05 fc fc fc fa fc fc fc [ 688.516451][T20379] ^ [ 688.516465][T20379] ffff888025861700: fa fc fc fc fa fc fc fc 00 fc fc fc fa fc fc fc [ 688.516480][T20379] ffff888025861780: 00 fc fc fc fa fc fc fc 04 fc fc fc 04 fc fc fc [ 688.516493][T20379] ================================================================== [ 688.516518][T20379] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 689.170434][T20379] CPU: 1 UID: 0 PID: 20379 Comm: syz.3.4497 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 689.181491][T20379] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 689.187316][T20379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 689.197390][T20379] Call Trace: [ 689.200716][T20379] [ 689.203699][T20379] vpanic+0x26f/0x710 [ 689.207805][T20379] panic+0xc5/0xd0 [ 689.211568][T20379] ? __pfx_panic+0x10/0x10 [ 689.216048][T20379] ? string+0x216/0x2d0 [ 689.220329][T20379] ? rcu_is_watching+0x16/0xb0 [ 689.225136][T20379] ? string+0x216/0x2d0 [ 689.229324][T20379] ? string+0x216/0x2d0 [ 689.233525][T20379] check_panic_on_warn+0x89/0xb0 [ 689.238499][T20379] ? string+0x216/0x2d0 [ 689.242711][T20379] end_report+0x73/0x170 [ 689.246988][T20379] ? string+0x216/0x2d0 [ 689.251176][T20379] kasan_report+0x128/0x150 [ 689.255710][T20379] ? string+0x216/0x2d0 [ 689.259899][T20379] string+0x216/0x2d0 [ 689.263913][T20379] vsnprintf+0x74a/0xef0 [ 689.268196][T20379] seq_printf+0x188/0x290 [ 689.272569][T20379] ? __pfx_seq_printf+0x10/0x10 [ 689.277461][T20379] ? seq_put_decimal_ull_width+0x290/0x370 [ 689.283298][T20379] irq_seq_show+0x5f3/0x860 [ 689.287837][T20379] traverse+0x229/0x620 [ 689.292077][T20379] seq_lseek+0x134/0x260 [ 689.296353][T20379] proc_reg_llseek+0x1bc/0x290 [ 689.301158][T20379] __x64_sys_lseek+0x14f/0x1e0 [ 689.305950][T20379] do_syscall_64+0x166/0x520 [ 689.310572][T20379] ? trace_irq_disable+0x3b/0x140 [ 689.315624][T20379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.321808][T20379] ? clear_bhb_loop+0x70/0xc0 [ 689.326522][T20379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.332465][T20379] RIP: 0033:0x7f4d84f9e159 [ 689.336902][T20379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.356536][T20379] RSP: 002b:00007f4d831f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 689.364982][T20379] RAX: ffffffffffffffda RBX: 00007f4d85225fa0 RCX: 00007f4d84f9e159 [ 689.372989][T20379] RDX: 0000000000000001 RSI: 7fffffffffffffff RDI: 0000000000000003 [ 689.380994][T20379] RBP: 00007f4d8503506b R08: 0000000000000000 R09: 0000000000000000 [ 689.388995][T20379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.396990][T20379] R13: 00007f4d85226038 R14: 00007f4d85225fa0 R15: 00007ffd82d6f528 [ 689.405002][T20379] [ 689.408665][T20379] Kernel Offset: disabled [ 689.413004][T20379] Rebooting in 86400 seconds..