last executing test programs: 7m24.710636113s ago: executing program 0 (id=87): rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x200) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x9) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4038587a, &(0x7f00000006c0)={{0xffffffffffffffff, &(0x7f0000000040)=',}#})$\x00', 0x440400, &(0x7f00000000c0)={@align=0x80000000, {0xd7, 0x8, 0x8, 0x8000000000000001}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, 0x0}, {[0xffffffff, 0x5, 0x6, 0x5]}, 0x800000, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r6, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x1000000000000000, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, 0x0, &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000800)=0xc) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r8, &(0x7f0000000880), 0x4001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x96, 0x0, &(0x7f0000000740)="0b8039e04bf51763d5f104f9b329e0d38621cb1e23c55e9b4f02287bc46c4eb026389be53e006a3d32b4b53d59283c097411b9781e405594ed733dc347dc3644ac43da8a17f1d569c49ab04bf727663e85e46a72fa8bcc361f042d0d48a1623633d3090000003c8c798bbea5be8e32ecf0e098fb063ca46e10c57b5b9097afd1d28b74cd9b7cdc7748a8d7f0b046836291eaf29c8603", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x118, 0x30, 0x12f, 0x0, 0x25dfdbfd, {}, [{0x104, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}, @m_connmark={0xd0, 0x6, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xa4e1, 0x20000000, 0x62a9286a, 0x6}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x5, 0x4, 0x8001}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x8, 0x3, 0x6}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1, 0xffffffffffffffff, 0x1, 0x3a4}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0xffffffff, 0x3, 0x4, 0xffff}, 0x7a0e}}]}, {0x12, 0x6, "6dfdbe62d8c26224f9caf760c5e1"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x118}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$nl_netfilter(r4, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0xe, 0x3, 0x101, 0x70bd2b, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a", 0x23}], 0x1}, 0x8000) 7m21.151363424s ago: executing program 0 (id=95): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000100), &(0x7f00000000c0)=@buf='kz'}, 0x20) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004e80)=@setlink={0x19c, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_MASTER={0x8}, @IFLA_PROTO_DOWN={0x5}, @IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MASTER={0x8}, @IFLA_AF_SPEC={0x130, 0x1a, 0x0, 0x1, [@AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x19}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x24}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_INET6={0x50, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_EXT_MASK={0x8}, @IFLA_PROMISCUITY={0x8}]}, 0x19c}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000400)={{}, "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"}) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x40, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfa, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="202228000000bcccbe19ec0b3b834ae1280583efb930f0187ff0478fa22a61a54607b71e530a3094091bb08c656777"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7m16.383058392s ago: executing program 0 (id=102): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x32, 0x34, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccc7eeff00112233445566778999aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x34, 0x62, 0x35, 0x30, 0x30, 0x66, 0x36, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 7m16.177189762s ago: executing program 0 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0x0104\n\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x101000, 0x0) 7m16.065839481s ago: executing program 0 (id=105): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60080, 0x0) r0 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x0, 0x30, 0x2e]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x22020600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r6, 0x1, 0x4, 0x0, &(0x7f00000007c0)) 7m5.667819408s ago: executing program 0 (id=121): rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x200) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x9) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4038587a, &(0x7f00000006c0)={{0xffffffffffffffff, &(0x7f0000000040)=',}#})$\x00', 0x440400, &(0x7f00000000c0)={@align=0x80000000, {0xd7, 0x8, 0x8, 0x8000000000000001}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, 0x0}, {[0xffffffff, 0x5, 0x6, 0x5]}, 0x800000, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r6, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x1000000000000000, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, 0x0, &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000800)=0xc) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r8, &(0x7f0000000880), 0x4001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x96, 0x0, &(0x7f0000000740)="0b8039e04bf51763d5f104f9b329e0d38621cb1e23c55e9b4f02287bc46c4eb026389be53e006a3d32b4b53d59283c097411b9781e405594ed733dc347dc3644ac43da8a17f1d569c49ab04bf727663e85e46a72fa8bcc361f042d0d48a1623633d3090000003c8c798bbea5be8e32ecf0e098fb063ca46e10c57b5b9097afd1d28b74cd9b7cdc7748a8d7f0b046836291eaf29c8603", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x118, 0x30, 0x12f, 0x0, 0x25dfdbfd, {}, [{0x104, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}, @m_connmark={0xd0, 0x6, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xa4e1, 0x20000000, 0x62a9286a, 0x6}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x5, 0x4, 0x8001}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x8, 0x3, 0x6}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1, 0xffffffffffffffff, 0x1, 0x3a4}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0xffffffff, 0x3, 0x4, 0xffff}, 0x7a0e}}]}, {0x12, 0x6, "6dfdbe62d8c26224f9caf760c5e1"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x118}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$nl_netfilter(r4, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0xe, 0x3, 0x101, 0x70bd2b, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 7m5.133226114s ago: executing program 32 (id=121): rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x200) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x9) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4038587a, &(0x7f00000006c0)={{0xffffffffffffffff, &(0x7f0000000040)=',}#})$\x00', 0x440400, &(0x7f00000000c0)={@align=0x80000000, {0xd7, 0x8, 0x8, 0x8000000000000001}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, 0x0}, {[0xffffffff, 0x5, 0x6, 0x5]}, 0x800000, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r6, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x1000000000000000, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, 0x0, &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000800)=0xc) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r8, &(0x7f0000000880), 0x4001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x96, 0x0, &(0x7f0000000740)="0b8039e04bf51763d5f104f9b329e0d38621cb1e23c55e9b4f02287bc46c4eb026389be53e006a3d32b4b53d59283c097411b9781e405594ed733dc347dc3644ac43da8a17f1d569c49ab04bf727663e85e46a72fa8bcc361f042d0d48a1623633d3090000003c8c798bbea5be8e32ecf0e098fb063ca46e10c57b5b9097afd1d28b74cd9b7cdc7748a8d7f0b046836291eaf29c8603", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x118, 0x30, 0x12f, 0x0, 0x25dfdbfd, {}, [{0x104, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}, @m_connmark={0xd0, 0x6, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xa4e1, 0x20000000, 0x62a9286a, 0x6}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x5, 0x4, 0x8001}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x8, 0x3, 0x6}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1, 0xffffffffffffffff, 0x1, 0x3a4}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0xffffffff, 0x3, 0x4, 0xffff}, 0x7a0e}}]}, {0x12, 0x6, "6dfdbe62d8c26224f9caf760c5e1"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x118}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$nl_netfilter(r4, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0xe, 0x3, 0x101, 0x70bd2b, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4m30.951903816s ago: executing program 4 (id=423): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="140000001300ff01000000000000000005"], 0x14}]}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') prlimit64(0x0, 0x5, &(0x7f0000000140)={0x1, 0x56}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x3, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000080)=@abs, 0x98) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x4044040) setresuid(0x0, 0xee01, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0xa850) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) lseek(r6, 0xffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x568, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x498, 0xffffffff, 0xffffffff, 0x498, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0xffffffff, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e1f, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0xffffffff], 'macvlan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x290, 0x2c0, 0x0, {}, [@common=@srh1={{0x90}, {0x2b, 0x8, 0x1, 0x3, 0x0, @empty, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffffff, 0x0, 0xff000000], [0xff, 0xff000000, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000], 0x230, 0x200}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x5, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x200000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c8) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r4, 0x1) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffc}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 4m26.480225275s ago: executing program 4 (id=429): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup(0x423d, &(0x7f00000000c0)={0x0, 0x8c6c, 0x1040, 0xffffffff, 0x20161}) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(0x0, 0xb, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x13}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000000)=[0x1, 0x3c], 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="24000000680001002abd7000fbdbdf270a0002e00300000004000b00060007"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x44, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x28c}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4m25.691799843s ago: executing program 4 (id=432): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x3, 0x0, 0x1, [@typed={0x4, 0x9e}, @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_GET_SECCOMP(0x15) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0xc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, &(0x7f0000000100)={0x2, 0x80000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x4000) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) write(r2, &(0x7f0000000080)='4', 0x1) 4m24.425675438s ago: executing program 4 (id=435): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0xfd, 0x236, &(0x7f0000000300)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000085100000060000001800d0ff", @ANYRES32, @ANYBLOB="00000000000000006608000000f9ffff170000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x23) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000780)={{0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3123, 0x10000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xd06c, 0x0, 0x4, 0x4f6c, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xa3, 0xd451, 0x0, 0x1ff, 0x6, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x400000000, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0xfffffeffffffffff, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x4, 0x200, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x200, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x4ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x9, 0x0, 0x0, 0x5, 0x0, 0x200, 0x0, 0x1, 0x7, 0x8000000000000001, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x20000000, 0x80000001]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000780)={{0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3123, 0x10000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xd06c, 0x0, 0x4, 0x4f6c, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xa3, 0xd451, 0x0, 0x1ff, 0x6, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x400000000, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0xfffffeffffffffff, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x4, 0x200, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x200, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x4ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x9, 0x0, 0x0, 0x5, 0x0, 0x200, 0x0, 0x1, 0x7, 0x8000000000000001, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x20000000, 0x80000001]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x201, 0xffffffffffffffff) (async) ptrace$getregset(0x4204, r2, 0x201, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0) read(r3, &(0x7f0000000500)=""/1024, 0x400) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000180)=[{}], &(0x7f0000000540)=0x8) ptrace$getsig(0x4202, r2, 0x5, &(0x7f0000000780)) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x21, 0x0, '\x00', @c}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/82, 0x52, 0x1, &(0x7f0000000600)=""/213, 0xd5}, &(0x7f0000000740)=0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4885) socket$netlink(0x10, 0x3, 0x0) r8 = syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r8, 0x0, 0x0) (async) ptrace$setopts(0x4206, r8, 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) wait4(r8, 0x0, 0x8, 0x0) (async) wait4(r8, 0x0, 0x8, 0x0) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) (async) setns(r10, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) 4m22.836012418s ago: executing program 4 (id=441): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x32, 0x34, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccc7eeff00112233445566778999aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x34, 0x62, 0x35, 0x30, 0x30, 0x66, 0x36, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccdd39390ad9489f00e666778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 4m16.554149662s ago: executing program 4 (id=452): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 4m14.970133997s ago: executing program 33 (id=452): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 1m21.236146534s ago: executing program 3 (id=800): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe6, 0x2}, {0xfff2, 0x10}, {0xd, 0x1a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8c1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="40010900050000008000d67d7ea3000353"], 0x87) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0800f67704acfe7495a07356581afe4f7f7ce31f7751d6fb9a5a18d33bd40c47676d968bdb9c8a6a6ca22d8f1a7c3e4dd61e69550afbf954932c6803f51b44563e5e94c9ab5519031a6ecc495956992effac5ede80db7c17baeb1455ab8b7d0d736f96a1df312ca00a1e49bbb51206b1010499cb82db56a8079948eb6d5307e991f1c372610dc6696945a25a5f", @ANYRES16=r2, @ANYBLOB="3f9d00000000000000000e00000008000300", @ANYRES32=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) nanosleep(&(0x7f0000000480)={0x0, 0x989680}, 0x0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r9) sendmsg$NL802154_CMD_DEL_SEC_KEY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002f00)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r10, @ANYBLOB="b00030800c00018008000100010000001400040006c23c949fa2a3989231b4efe4162d85480001800c00050001000000000000000800010002"], 0xcc}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r8, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0x8050) unshare(0x20000400) 1m16.107179379s ago: executing program 2 (id=805): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x3, 0x0, 0x1, [@typed={0x4, 0x9e}, @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_GET_SECCOMP(0x15) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0xc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, &(0x7f0000000100)={0x2, 0x80000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x4000) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) write(r2, &(0x7f0000000080)='4', 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) 1m12.34142924s ago: executing program 2 (id=811): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="140000", 0x3}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001180)={{r1}, &(0x7f0000001100)=0x18, &(0x7f0000001140)='%pS \x00'}, 0x20) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x259, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x40, 0x24, 0x6b, {0x6b, 0xc, "d227e40fa5196ddfac9bff6a5280c5bfebbeee1ca8862dd7bff213e465d4b63fea5b36ef1f731c5e1acc5b278ea94352d3b88fc3836cd0686eeedb47d508e93723a9ddc00c6c73413742318ce77a078e23682c2b52a5f4a43d65be843d2ce08182adea51bc62bf0da9"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}, &(0x7f00000000c0)={0x0, 0x22, 0x1b, {[@global=@item_4={0x3, 0x1, 0x4, "e5454261"}, @global=@item_4={0x3, 0x1, 0xb, "48838a3e"}, @local=@item_4={0x3, 0x2, 0x0, "14495be6"}, @global=@item_4={0x3, 0x1, 0x7, "fb3a232b"}, @global=@item_012={0x2, 0x1, 0x3, "df39"}, @local=@item_012={0x0, 0x2, 0xa}, @main=@item_012={0x2, 0x0, 0x8, 'qW'}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xcd, 0x1, {0x22, 0x675}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x0, 0x18, 0x65, "28c4857b955b3a6e76e48bbecc42b75653d4a64cfe0712db43504ec499d72e70e793f5231c112bef72919f0f0c44708bf48187d9bc5f215cce0055beb896cfe3ab2b727c65274cdf1aa0cbba9b102d7a896bf303cf2b38a8eb7a4e36100acb1eba3d52a41a"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000340)={0x20, 0x1, 0x67, "052284f8a22883678c38b18547ecfa63eed069c95f2cf162c5462a67834b100db8ba445e19ef24a6e7542785d2e51d8c2dbbffd1a67962ba793eaf656761514cf846088a1802860029f998149d0f4bc214d6ad4a55fe56f8044cc121c3d294948b46ef9f75b1ad"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x10}}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[], 0x1, 0x1c0, &(0x7f0000000640)="$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") llistxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000880)=""/166, 0xa6) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000002080)=ANY=[@ANYBLOB="000bff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m10.420376588s ago: executing program 2 (id=815): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x3, 0x0, 0x1, [@typed={0x4, 0x9e}, @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_GET_SECCOMP(0x15) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0xc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, &(0x7f0000000100)={0x2, 0x80000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x4000) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) write(r2, &(0x7f0000000080)='4', 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) 1m8.33218643s ago: executing program 3 (id=816): syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010", 0x5}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, 0x0, &(0x7f0000001a00)=""/122}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001180)={{}, &(0x7f0000001100)=0x18, &(0x7f0000001140)='%pS \x00'}, 0x20) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x259, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[], 0x1, 0x1c0, &(0x7f0000000640)="$eJzsmD9v00AYxp+z8wcjRFhhAYlIhAHHdgCRgSErDCCBQGxYxEQhDkGJhyRbPgUzHyNiyfeAATp1aCp16NThqrPP8dVqmqTKn0p9f8Pr53qv7957z3oqBQRBXFv2/h//01A0hL6FIvLy7/t6kqMp+ePCyeM/zTe/f1qHf8eT19X0egwA58vvnwEwqekI5Jjzs28X5fM9tFhn1fmPYDCl/gwNH6T2wPBJ6m+K7oh80/za9D3zS8evC2GJYIvgiFBJ1zcdMdQjGZbIlPneYNhyfd/rblAs6t+0puGlvCXRP/W+4t5YSf9gQ4MtdQUM76R+gXzcm6glyvnvZZL70S93fvElbb5ZS4jbsvbtbHq3sCAni512Y6vi1VHL9cWndEXqmStuxD6y8usMQhwYwIqbjuSWOz/7ekTiT/wXwyMk/pFR/KMctH+Ue4Phk2bbbXgN77vjVJ5bTy3rmVMOjSiKF/ifEfrTTWX97JzcHMuh7wZB147ibOz08wi6znmOG/mfhtLDqGrh/bnUuuH/gzvsgXiUdDlOZgiCIAiCIAiCIAiCIAiCINbEfbDwF0rODT6jCp7CeRtmnwYAAP//cExbew==") llistxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000880)=""/166, 0xa6) 1m6.595952993s ago: executing program 3 (id=818): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f0000000140)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', r6, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)) 1m4.181733398s ago: executing program 2 (id=822): r0 = socket$alg(0x26, 0x5, 0x0) mmap$IORING_OFF_SQES(0x0, 0x0, 0x2, 0x810, 0xffffffffffffffff, 0x10000000) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170479a60f60eb8dc258ded60aee45b04a15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_mount_image$xfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x18088, &(0x7f0000000000), 0x1, 0xb912, &(0x7f0000019680)="$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") r3 = openat(r2, &(0x7f00000002c0)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x80442, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f0000000240)={0x26, 0x0, 0x0, 0x0, 0xaf, 0x2, 0x0, &(0x7f0000000200)=[{0xb, 0x101, 0x40}, {0xb, 0x0, 0x770}]}) sendmmsg$inet(r1, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000740)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000b40)="614adb1697a3", 0x6}, {0x0}], 0x2}}], 0x2, 0x2000c0c1) r4 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0) syz_usb_ep_read(r4, 0x3, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f00000001c0)={0x3, 0x33424752, 0x3, @stepwise={0x2, 0x0, 0x1, 0xc, 0x9, 0x3}}) syz_usb_ep_write(r4, 0x84, 0xc, &(0x7f0000000100)="0000000c0000000100070001") r6 = inotify_init1(0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write(r7, &(0x7f0000000000)='5', 0x1) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000040)={0x2001}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r6, &(0x7f0000000080)={0x20000008}) syz_usb_ep_read(r4, 0x3, 0x0, 0x0) syz_usb_ep_write(r4, 0x84, 0x0, 0x0) 1m2.229929493s ago: executing program 3 (id=824): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="120000000600000004"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000100), &(0x7f00000000c0)=@buf='kzn'}, 0x20) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r5, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004e80)=@setlink={0x70, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_MASTER={0x8}, @IFLA_PROTO_DOWN={0x5}, @IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MASTER={0x8}, @IFLA_AF_SPEC={0x4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_EXT_MASK={0x8}, @IFLA_PROMISCUITY={0x8}]}, 0x70}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000400)={{r7}, "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"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="202228000000bcccbe19ec0b3b834ae1280583efb930f0187ff0478fa22a61a54607b71e530a3094091bb08c656777"], 0x0, 0x0, 0x0, 0x0}, 0x0) 58.940950469s ago: executing program 3 (id=830): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000010280)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRES32, @ANYRES16], 0x1, 0x105c9, &(0x7f0000020bc0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x24088, 0x0, 0xbe, 0x0, &(0x7f0000000000)) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 57.63113355s ago: executing program 2 (id=832): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x3, 0x0, 0x1, [@typed={0x4, 0x9e}, @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_GET_SECCOMP(0x15) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0xc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, &(0x7f0000000100)={0x2, 0x80000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x4000) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) write(r2, &(0x7f0000000080)='4', 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) 57.575086004s ago: executing program 3 (id=833): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f0000000140)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', r6, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)) 53.03835775s ago: executing program 2 (id=838): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010", 0x5}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001180)={{r1}, &(0x7f0000001100)=0x18, &(0x7f0000001140)='%pS \x00'}, 0x20) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x259, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x40, 0x24, 0x6b, {0x6b, 0xc, "d227e40fa5196ddfac9bff6a5280c5bfebbeee1ca8862dd7bff213e465d4b63fea5b36ef1f731c5e1acc5b278ea94352d3b88fc3836cd0686eeedb47d508e93723a9ddc00c6c73413742318ce77a078e23682c2b52a5f4a43d65be843d2ce08182adea51bc62bf0da9"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}, 0x0, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xcd, 0x1, {0x22, 0x675}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x0, 0x18, 0x65, "28c4857b955b3a6e76e48bbecc42b75653d4a64cfe0712db43504ec499d72e70e793f5231c112bef72919f0f0c44708bf48187d9bc5f215cce0055beb896cfe3ab2b727c65274cdf1aa0cbba9b102d7a896bf303cf2b38a8eb7a4e36100acb1eba3d52a41a"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000340)={0x20, 0x1, 0x67, "052284f8a22883678c38b18547ecfa63eed069c95f2cf162c5462a67834b100db8ba445e19ef24a6e7542785d2e51d8c2dbbffd1a67962ba793eaf656761514cf846088a1802860029f998149d0f4bc214d6ad4a55fe56f8044cc121c3d294948b46ef9f75b1ad"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x10}}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[], 0x1, 0x1c0, &(0x7f0000000640)="$eJzsmD9v00AYxp+z8wcjRFhhAYlIhAHHdgCRgSErDCCBQGxYxEQhDkGJhyRbPgUzHyNiyfeAATp1aCp16NThqrPP8dVqmqTKn0p9f8Pr53qv7957z3oqBQRBXFv2/h//01A0hL6FIvLy7/t6kqMp+ePCyeM/zTe/f1qHf8eT19X0egwA58vvnwEwqekI5Jjzs28X5fM9tFhn1fmPYDCl/gwNH6T2wPBJ6m+K7oh80/za9D3zS8evC2GJYIvgiFBJ1zcdMdQjGZbIlPneYNhyfd/rblAs6t+0puGlvCXRP/W+4t5YSf9gQ4MtdQUM76R+gXzcm6glyvnvZZL70S93fvElbb5ZS4jbsvbtbHq3sCAni512Y6vi1VHL9cWndEXqmStuxD6y8usMQhwYwIqbjuSWOz/7ekTiT/wXwyMk/pFR/KMctH+Ue4Phk2bbbXgN77vjVJ5bTy3rmVMOjSiKF/ifEfrTTWX97JzcHMuh7wZB147ibOz08wi6znmOG/mfhtLDqGrh/bnUuuH/gzvsgXiUdDlOZgiCIAiCIAiCIAiCIAiCINbEfbDwF0rODT6jCp7CeRtmnwYAAP//cExbew==") llistxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000880)=""/166, 0xa6) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000002080)=ANY=[@ANYBLOB="000bff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 51.635892779s ago: executing program 34 (id=838): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010", 0x5}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001180)={{r1}, &(0x7f0000001100)=0x18, &(0x7f0000001140)='%pS \x00'}, 0x20) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x259, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x40, 0x24, 0x6b, {0x6b, 0xc, "d227e40fa5196ddfac9bff6a5280c5bfebbeee1ca8862dd7bff213e465d4b63fea5b36ef1f731c5e1acc5b278ea94352d3b88fc3836cd0686eeedb47d508e93723a9ddc00c6c73413742318ce77a078e23682c2b52a5f4a43d65be843d2ce08182adea51bc62bf0da9"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}, 0x0, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xcd, 0x1, {0x22, 0x675}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x0, 0x18, 0x65, "28c4857b955b3a6e76e48bbecc42b75653d4a64cfe0712db43504ec499d72e70e793f5231c112bef72919f0f0c44708bf48187d9bc5f215cce0055beb896cfe3ab2b727c65274cdf1aa0cbba9b102d7a896bf303cf2b38a8eb7a4e36100acb1eba3d52a41a"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000340)={0x20, 0x1, 0x67, "052284f8a22883678c38b18547ecfa63eed069c95f2cf162c5462a67834b100db8ba445e19ef24a6e7542785d2e51d8c2dbbffd1a67962ba793eaf656761514cf846088a1802860029f998149d0f4bc214d6ad4a55fe56f8044cc121c3d294948b46ef9f75b1ad"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x10}}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[], 0x1, 0x1c0, &(0x7f0000000640)="$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") llistxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000880)=""/166, 0xa6) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000002080)=ANY=[@ANYBLOB="000bff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 39.675354792s ago: executing program 35 (id=833): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f0000000140)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', r6, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)) 16.783221243s ago: executing program 5 (id=888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000340)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'veth0_macvtap\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r4, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x2}}, 0x30) creat(0x0, 0x109) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000001140)='2', 0x1, 0x8000c61) lseek(r5, 0x595e, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="660a00000000000061115800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_control_io$sierra_net(r1, &(0x7f00000001c0)={0x14, 0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000fc0)={0x1c, &(0x7f0000000540)={0x20, 0xf, 0x74, "881ead46d1067e1a748e80c0b4091521e9cdf3500fd9908ab9f56c619dcac38e9453438a31744f06951e17264dad283f282509e8cc66d32a0aac9bb22667007fe39154c1d70aba413bbb9c5cff78938fab0f07918a6f7045bda213d62959f436cf170ee52cd3ca9edda7c098fa25741c8fd9f293"}, &(0x7f0000000b40)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000f80)}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f00000005c0)={0xc9, 0x0, 0xc}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x7ff, @mcast1, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)="04", 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r8], 0x1000f) 12.91857397s ago: executing program 5 (id=894): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x3, 0x0, 0x1, [@typed={0x4, 0x9e}, @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_GET_SECCOMP(0x15) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0xc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) write(r2, &(0x7f0000000080)='4', 0x1) 9.932765662s ago: executing program 5 (id=896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x20c}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000300)={0x2, 0x0, [{0x8, 0x2, 0x1, 0x0, @irqchip={0x85, 0x2ff317ca}}, {0x3, 0x2, 0x1, 0x0, @msi={0x4000000, 0xff, 0x8, 0xdf9a}}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r2, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="3716b43d3bc546b51baa10736241e45d9fd2d15ce580b82dde608061793aea9a493edc47da0d2501690e1addf8c859c3aa503814836868b53f3371824e0385b0ea509888ee35b7907ae2b847d8d1c57cb5f54385a28d5914017c6d3e6a0b981d5293681577e5d56ffe0342c720a23e11075474699bee7094507de04aaf47016f0451bd2c907ac505f141463ee369aaaadcb2edfe07d617e5a7bbb7"], 0x2, 0xa1a, &(0x7f0000003d40)="$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") r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x4004000) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000b40), 0x901, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r6, 0x8004500f, &(0x7f0000000000)) openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="180800000000000fc08000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b5090800000100007baaf0ff00000000be9800000000000004080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf9100000000000076080000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.882558149s ago: executing program 6 (id=897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x2, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$FE_GET_EVENT(r3, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r3, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(0x0, 0x2a) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r9 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000009b80)={0x40000012}) epoll_pwait(r9, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r10, 0x560a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000100001080000000000000000000000008d60e8e0a9d412fb6d5a1bdb9cc5909837375368cea87bdccc49706e45fb9ccfff6aa7aadf62d929f604a51a56c62ac55de715fcf151612645845a5c41aeef08a734f3185344d791db0894fdb969e80bdb6580658536063cd044b84a90b2cb6fbac98831fa954953f51ac5057c362bcae0a5a40caf07c307641219022c43df5729bb0d3a8710e3acb885461f6f85a28f54a518eeba694d092b0b94befed8cc82cb1cf2c19f0f21339ea6788b9cc9214d92bce7", @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101b43, 0x19) 9.162827985s ago: executing program 1 (id=899): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) 8.726486746s ago: executing program 1 (id=900): socket$inet6_sctp(0xa, 0x5, 0x84) memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f00000002c0)={[{@nombcache}, {@resgid}, {@nojournal_checksum}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0xa, 0x607, &(0x7f0000000ac0)="$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") setpriority(0x0, 0x0, 0x3) r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x1, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000000c0)={0x9, 0x30314247, 0x3, @stepwise={0x5, 0x2140, 0x2, 0x5, 0x0, 0x80000000}}) setresuid(0x0, 0xee01, 0xee00) setpriority(0x1, 0x0, 0x80000000) sched_setattr(0x0, &(0x7f0000000280)={0x4c, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x8, 0xfa11, 0xffffffff}, 0x0) mq_timedreceive(r1, &(0x7f00000000c0)=""/72, 0x48, 0x1, 0x0) 8.458708733s ago: executing program 6 (id=901): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x2, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r4, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(0x0, 0x2a) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r9 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000009b80)={0x40000012}) epoll_pwait(r9, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r10, 0x560a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000100001080000000000000000000000008d60e8e0a9d412fb6d5a1bdb9cc5909837375368cea87bdccc49706e45fb9ccfff6aa7aadf62d929f604a51a56c62ac55de715fcf151612645845a5c41aeef08a734f3185344d791db0894fdb969e80bdb6580658536063cd044b84a90b2cb6fbac98831fa954953f51ac5057c362bcae0a5a40caf07c307641219022c43df5729bb0d3a8710e3acb885461f6f85a28f54a518eeba694d092b0b94befed8cc82cb1cf2c19f0f21339ea6788b9cc9214d92bce7", @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101b43, 0x19) 7.746752454s ago: executing program 1 (id=902): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x3, 0x0, 0x1, [@typed={0x4, 0x9e}, @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_GET_SECCOMP(0x15) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0xc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, &(0x7f0000000100)={0x2, 0x80000001}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) write(r2, &(0x7f0000000080)='4', 0x1) 7.061310537s ago: executing program 6 (id=903): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="120000000600000004"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000100), &(0x7f00000000c0)=@buf='kzn'}, 0x20) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r5, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004e80)=@setlink={0x198, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_MASTER={0x8}, @IFLA_PROTO_DOWN={0x5}, @IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MASTER={0x8}, @IFLA_AF_SPEC={0x12c, 0x1a, 0x0, 0x1, [@AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x19}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x24}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_INET6={0x50, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_EXT_MASK={0x8}, @IFLA_PROMISCUITY={0x8}]}, 0x198}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000400)={{r7}, "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"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="202228000000bcccbe19ec0b3b834ae1280583efb930f0187ff0478fa22a61a54607b71e530a3094091bb08c656777"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.212166773s ago: executing program 1 (id=904): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x40, 0xe, 0x1, ';'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x5c, {0x5c, 0x23, "77a5c7c368ac8c96567ea1cbb601ac82c12c17ade4141f63207f297422457013a36a88158b58a2b93196a9f7e9c0d19bf858158a71faf367042042a7cd2b1252dc9c7f1767ab78a921af270b43281a1d465e81714b1b6a66e939"}}, &(0x7f0000000140)={0x0, 0x3, 0xe7, @string={0xe7, 0x3, "d10063393f1065ea6ff790d8b66103194c2ab2f0662b54c372026b3f681287d9ab6e8bfece5fd420daa1b78c29a09e8c9fae8cb86a456bc507cde51cc1829418b41e0bb5f2a036dd168995fbc420ad7e616f0b2d61458222f88faf5c20414a280d6beb12a9f0055810eea31acf01af7366e371473d50d41b3deefb2d3b3eb14270b9550d39c0982eaae3018ec8808bfec7b87280cb853303c62cdc1ce81eb8c1fedccc85f4c1bf01d0ceae677a8c015b8fc189d01f47509c2636d179510761f50ec5f6fa296fccc294411d74c0de4c293b04071439a1392cfc1b4262a697dce96a91afedca"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x40, 0x15, 0x2e, "a9ddbbed8c624869413c873da2d65d320e60829fc72fe4f160c547e7ff1b5542596dd80d0b69eece400aab7e7f43"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x81, 0x2, 'G?'}, &(0x7f00000003c0)={0x20, 0x82, 0x2, "487f"}, &(0x7f0000000400)={0x20, 0x83, 0x3, "cded39"}, &(0x7f0000000440)={0x20, 0x84, 0x1, 'E'}, &(0x7f0000000480)={0x20, 0x85, 0x3, "5364b1"}}) 5.001076138s ago: executing program 6 (id=905): socket$pppoe(0x18, 0x1, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000080)=""/23, 0x17, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000b00)=""/4082, 0xff2, 0x0, 0x2, 0x3}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000500)={0x2, 0x0, {&(0x7f0000001c00)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000800)={0x2, 0x0, {&(0x7f0000000700)=""/82, 0x52, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000440)=""/168, 0xa8, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000880)={0x1, {0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r2, r2, 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="e186", 0x2}], 0x1}, 0x24044041) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) 4.64663309s ago: executing program 6 (id=906): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r1 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x7}], 0x1) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='nouser_xattr,heartbeat=none,dir_resv_level=00000000000000000250,barrier=00000000000000000004,dir_resv_level=00000000000000000002,localflocks,localalloc=00000000000000000004,coherency=buffered,nointr,acl,localalloc=00000000000022251008,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5e726f6c653d275e9b148af1147134daaeaad1251d12de0c417d242a2a252c2e2cb2a74084d068fa9b9038bf597c6fdafa6fadbea47b"], 0x1, 0x4431, &(0x7f0000008940)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000300)={0x20, 0x13, 0x4, "0d718785"}, 0x0, 0x0}) write(r0, &(0x7f00000000c0)="c234fdb43e199c0cbf62c529f3434e", 0xf) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) 4.249706539s ago: executing program 5 (id=907): r0 = io_uring_setup(0x423d, &(0x7f00000000c0)={0x0, 0x8c6c, 0x1040, 0xffffffff, 0x20161}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x1, 0x3c], 0x2) 3.64647951s ago: executing program 7 (id=839): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x3, 0x0, 0x1, [@typed={0x4, 0x9e}, @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_GET_SECCOMP(0x15) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0xc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) write(r2, &(0x7f0000000080)='4', 0x1) 3.566352975s ago: executing program 5 (id=908): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) 3.339757866s ago: executing program 8 (id=854): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000084c052f0400000000000109022400010000000009040000020300000009210000ff012218000905810300004100fe14d36f1bd6caba6adce006f1d865eb"], 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000100)={0x2, @meta={0x0, 0x357e1597, 0x2481, 0xa3f4, 0x79bcf92e}}) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='adfs\x00', 0x801800, &(0x7f00000002c0)='u%\x00') pread64(r2, &(0x7f0000001240)=""/102389, 0x18ff5, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x7, 0x288800) ioctl$FE_GET_FRONTEND(r4, 0x80246f4d, &(0x7f00000001c0)) setxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)=@ng={0x4, 0x8, "0c8851df854117ed376b573b"}, 0xe, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 3.264249115s ago: executing program 5 (id=909): syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010", 0x5}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001180)={{}, &(0x7f0000001100)=0x18, &(0x7f0000001140)='%pS \x00'}, 0x20) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x259, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[], 0x1, 0x1c0, &(0x7f0000000640)="$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") llistxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000880)=""/166, 0xa6) 1.92669243s ago: executing program 7 (id=910): r0 = io_uring_setup(0x423d, &(0x7f00000000c0)={0x0, 0x8c6c, 0x1040, 0xffffffff, 0x20161}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x1, 0x3c], 0x2) 1.789505731s ago: executing program 1 (id=911): r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$cgroup(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0), 0x814000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) 347.398062ms ago: executing program 7 (id=912): r0 = openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) setpriority(0x1, 0x0, 0x2) r2 = socket$inet_sctp(0x2, 0x0, 0x84) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = gettid() sched_setaffinity(r4, 0x8, &(0x7f0000000300)=0x2) ptrace$peek(0x2, r3, &(0x7f0000000340)) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x1, r3, 0x0, 0x8, 0x0) ioctl$UBLK_U_CMD_ADD_DEV(r0, 0xc0207504, &(0x7f0000000280)={0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@new_dev={0x3, 0xfd2, 0x0, 0x0, 0x1000, 0xffffffff, r3, 0x0, 0x80}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0xfd, 0x4b2, &(0x7f0000000a00)="$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") ioctl$XFS_IOC_OPEN_BY_HANDLE(r5, 0xc038586b, &(0x7f0000000140)={r5, &(0x7f0000000040)='udf\x00', 0x800, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x34]}, {0xfff, 0x9, 0x2e, 0x7}}, 0xaca, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x4}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r6, 0x5, 0x4) ptrace$ARCH_SHSTK_DISABLE(0x1e, r6, 0x1, 0x5002) 154.57015ms ago: executing program 1 (id=913): r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$cgroup(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0), 0x814000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) 0s ago: executing program 6 (id=914): socket$pppoe(0x18, 0x1, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000080)=""/23, 0x17, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000b00)=""/4082, 0xff2, 0x0, 0x2, 0x3}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000500)={0x2, 0x0, {&(0x7f0000001c00)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000800)={0x2, 0x0, {&(0x7f0000000700)=""/82, 0x52, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000440)=""/168, 0xa8, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000880)={0x1, {0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r2, r2, 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="e186", 0x2}], 0x1}, 0x24044041) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) kernel console output (not intermixed with test programs): 99][ T9] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice= 0.10 [ 418.246196][ T9] usb 6-1: no configurations [ 418.253262][ T9] usb 6-1: can't read configurations, error -22 [ 418.261265][ T9] usb usb6-port1: unable to enumerate USB device [ 418.536551][ T5716] usb 4-1: config 0 descriptor?? [ 418.954488][ T6089] udevd[6089]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 418.997937][ T5628] udevd[5628]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 419.013209][ T6091] udevd[6091]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 419.030186][ T5923] udevd[5923]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 419.053407][ T5623] udevd[5623]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 419.097181][ T5716] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 419.097235][ T5716] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 419.099674][ T5716] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 419.100271][ T5716] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 419.159074][ T5716] usb 4-1: USB disconnect, device number 17 [ 419.382103][ T8437] netlink: 'syz.2.630': attribute type 10 has an invalid length. [ 419.476507][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 419.664944][ T5716] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 420.704227][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 422.028678][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 422.284782][ T5716] usb 4-1: device descriptor read/all, error -71 [ 422.308582][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 422.308646][ T9] usb 2-1: can't read configurations, error -71 [ 423.054427][ T31] kauditd_printk_skb: 76 callbacks suppressed [ 423.054477][ T31] audit: type=1326 audit(1787112845.796:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.3.636" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f42d9e0d9 code=0x7ffc0000 [ 423.054534][ T31] audit: type=1326 audit(1787112845.796:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.3.636" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f42d9e0d9 code=0x7ffc0000 [ 423.073869][ T31] audit: type=1326 audit(1787112845.816:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.3.636" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3f42d9e0d9 code=0x7ffc0000 [ 423.074000][ T31] audit: type=1326 audit(1787112845.816:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f42d9e0d9 code=0x7ffc0000 [ 423.074102][ T31] audit: type=1326 audit(1787112845.816:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f42d9e0d9 code=0x7ffc0000 [ 423.081503][ T31] audit: type=1326 audit(1787112845.816:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f42d9e0d9 code=0x7ffc0000 [ 423.081641][ T31] audit: type=1326 audit(1787112845.816:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f42d9e0d9 code=0x7ffc0000 [ 423.094716][ T31] audit: type=1326 audit(1787112845.816:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f42d9e0d9 code=0x7ffc0000 [ 423.094858][ T31] audit: type=1326 audit(1787112845.816:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3f42d9e0d9 code=0x7ffc0000 [ 423.112889][ T31] audit: type=1326 audit(1787112845.856:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f42d9e0d9 code=0x7ffc0000 [ 423.435368][ T8452] Cannot find add_set index 0 as target [ 426.186564][ T864] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 426.219985][ T8471] syz.3.640 uses obsolete (PF_INET,SOCK_PACKET) [ 426.386382][ T864] usb 6-1: Using ep0 maxpacket: 8 [ 426.392334][ T864] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 426.405145][ T864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.405193][ T864] usb 6-1: config 0 has no interfaces? [ 426.590796][ T864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.590844][ T864] usb 6-1: Product: syz [ 426.590882][ T864] usb 6-1: Manufacturer: syz [ 426.590902][ T864] usb 6-1: SerialNumber: syz [ 426.659487][ T864] usb 6-1: config 0 descriptor?? [ 427.041340][ T8482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.643'. [ 427.406757][ T8485] loop3: detected capacity change from 0 to 8 [ 427.488128][ T8485] SQUASHFS error: lzo decompression failed, data probably corrupt [ 427.488191][ T8485] SQUASHFS error: Failed to read block 0x91: -5 [ 427.533306][ T8485] SQUASHFS error: Unable to read metadata cache entry [8f] [ 427.533433][ T8485] SQUASHFS error: Unable to read inode 0x11f [ 427.836357][ T5744] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 427.906339][ T864] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 427.954564][ T9] usb 6-1: USB disconnect, device number 27 [ 428.008390][ T5744] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 428.010792][ T5744] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 428.010858][ T5744] usb 4-1: config 0 has no interface number 0 [ 428.010893][ T5744] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 428.010916][ T5744] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 428.010940][ T5744] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 428.010996][ T5744] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 1656, setting to 8 [ 428.011049][ T5744] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 428.011156][ T5744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.059462][ T5744] usb 4-1: config 0 descriptor?? [ 428.068151][ T8485] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 428.068512][ T8485] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 428.113906][ T864] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice= 0.10 [ 428.113939][ T864] usb 7-1: no configurations [ 428.113951][ T864] usb 7-1: can't read configurations, error -22 [ 428.179544][ T5744] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 428.236318][ T864] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 428.269131][ T8497] loop5: detected capacity change from 0 to 1024 [ 428.293459][ T8497] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 428.318310][ T8497] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 428.334454][ T8497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.566874][ T864] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice= 0.10 [ 428.576285][ T864] usb 7-1: no configurations [ 428.580980][ T864] usb 7-1: can't read configurations, error -22 [ 428.587825][ T864] usb usb7-port1: attempt power cycle [ 428.625891][ T30] usb 4-1: USB disconnect, device number 20 [ 428.641753][ T30] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 428.730012][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.648'. [ 428.730112][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.648'. [ 428.996512][ T864] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 429.224240][ T864] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice= 0.10 [ 429.224301][ T864] usb 7-1: no configurations [ 429.224331][ T864] usb 7-1: can't read configurations, error -22 [ 429.345780][ T6301] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.384097][ T864] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 429.399326][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 429.445862][ T864] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice= 0.10 [ 429.445917][ T864] usb 7-1: no configurations [ 429.445942][ T864] usb 7-1: can't read configurations, error -22 [ 429.456772][ T864] usb usb7-port1: unable to enumerate USB device [ 429.586522][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 429.587240][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 429.588449][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 429.588477][ T9] usb 3-1: config 0 has no interface number 0 [ 429.590471][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.590504][ T9] usb 3-1: Product: syz [ 429.590525][ T9] usb 3-1: Manufacturer: syz [ 429.590545][ T9] usb 3-1: SerialNumber: syz [ 429.679201][ T9] usb 3-1: config 0 descriptor?? [ 429.813107][ T8511] FAULT_INJECTION: forcing a failure. [ 429.813107][ T8511] name failslab, interval 1, probability 0, space 0, times 0 [ 429.813157][ T8511] CPU: 1 UID: 0 PID: 8511 Comm: syz.5.650 Not tainted syzkaller #0 PREEMPT(full) [ 429.813179][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.813221][ T8511] Call Trace: [ 429.813245][ T8511] [ 429.813273][ T8511] dump_stack_lvl+0xe8/0x150 [ 429.813406][ T8511] should_fail_ex+0x410/0x560 [ 429.813490][ T8511] should_failslab+0xa8/0x100 [ 429.813574][ T8511] __kmalloc_noprof+0xfe/0x720 [ 429.813648][ T8511] ? tomoyo_encode+0x2ad/0x570 [ 429.813836][ T8511] ? tomoyo_encode+0x2ad/0x570 [ 429.813909][ T8511] tomoyo_encode+0x2ad/0x570 [ 429.813967][ T8511] tomoyo_realpath_from_path+0x5fa/0x640 [ 429.814048][ T8511] ? tomoyo_path_number_perm+0x219/0x5f0 [ 429.814128][ T8511] tomoyo_path_number_perm+0x246/0x5f0 [ 429.814207][ T8511] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 429.814279][ T8511] ? __lock_acquire+0x6df/0x2e50 [ 429.814387][ T8511] ? hook_file_ioctl+0x1f2/0x600 [ 429.814501][ T8511] ? __fget_files+0x2a/0x420 [ 429.814579][ T8511] ? __fget_files+0x2a/0x420 [ 429.814642][ T8511] ? __fget_files+0x3a2/0x420 [ 429.814707][ T8511] ? __fget_files+0x2a/0x420 [ 429.814782][ T8511] security_file_ioctl+0xc3/0x2a0 [ 429.814894][ T8511] __se_sys_ioctl+0x47/0x170 [ 429.814959][ T8511] do_syscall_64+0x166/0x520 [ 429.815033][ T8511] ? trace_irq_disable+0x3b/0x140 [ 429.815081][ T8511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.815134][ T8511] ? clear_bhb_loop+0x70/0xc0 [ 429.815196][ T8511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.815250][ T8511] RIP: 0033:0x7f1fd899e0d9 [ 429.815295][ T8511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.815332][ T8511] RSP: 002b:00007f1fd98e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.815385][ T8511] RAX: ffffffffffffffda RBX: 00007f1fd8c26090 RCX: 00007f1fd899e0d9 [ 429.815421][ T8511] RDX: 0000200000000b80 RSI: 00000000c4c85512 RDI: 0000000000000006 [ 429.815456][ T8511] RBP: 00007f1fd98e3090 R08: 0000000000000000 R09: 0000000000000000 [ 429.815485][ T8511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.815513][ T8511] R13: 00007f1fd8c26128 R14: 00007f1fd8c26090 R15: 00007ffe37c67238 [ 429.815582][ T8511] [ 429.815664][ T8511] ERROR: Out of memory at tomoyo_realpath_from_path. [ 429.828433][ T8511] netlink: 20 bytes leftover after parsing attributes in process `syz.5.650'. [ 430.186576][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 430.197789][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 430.207407][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 430.207661][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 430.236146][ T9] usb 3-1: USB disconnect, device number 24 [ 430.578942][ T8523] FAULT_INJECTION: forcing a failure. [ 430.578942][ T8523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.578990][ T8523] CPU: 0 UID: 0 PID: 8523 Comm: syz.5.654 Not tainted syzkaller #0 PREEMPT(full) [ 430.579012][ T8523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.579042][ T8523] Call Trace: [ 430.579067][ T8523] [ 430.579108][ T8523] dump_stack_lvl+0xe8/0x150 [ 430.579211][ T8523] should_fail_ex+0x410/0x560 [ 430.579298][ T8523] _copy_from_iter+0x1d3/0x1660 [ 430.579481][ T8523] ? __alloc_skb+0x27a/0x7a0 [ 430.579591][ T8523] ? rcu_is_watching+0x16/0xb0 [ 430.579662][ T8523] ? __alloc_skb+0x27a/0x7a0 [ 430.579723][ T8523] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 430.579791][ T8523] ? __pfx__copy_from_iter+0x10/0x10 [ 430.579858][ T8523] ? __alloc_skb+0x27a/0x7a0 [ 430.579885][ T8523] ? __alloc_skb+0x27a/0x7a0 [ 430.579956][ T8523] skb_copy_datagram_from_iter+0xe6/0x720 [ 430.580047][ T8523] ? __local_bh_enable_ip+0xd6/0x140 [ 430.580126][ T8523] ? iov_iter_single_seg_count+0xc9/0x2f0 [ 430.580205][ T8523] tun_get_user+0xc7f/0x44d0 [ 430.580454][ T8523] ? aa_file_perm+0x4ed/0x15f0 [ 430.580574][ T8523] ? __pfx_tun_get_user+0x10/0x10 [ 430.580684][ T8523] ? __lock_acquire+0x6df/0x2e50 [ 430.580756][ T8523] ? kstrtoull+0x137/0x1d0 [ 430.580882][ T8523] ? ref_tracker_alloc+0x341/0x4b0 [ 430.580961][ T8523] ? lock_acquire+0x115/0x350 [ 430.581023][ T8523] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 430.581092][ T8523] ? lock_acquire+0x115/0x350 [ 430.581146][ T8523] ? tun_get+0x1c/0x2f0 [ 430.581252][ T8523] ? tun_get+0x1c/0x2f0 [ 430.581332][ T8523] ? tun_get+0x1c/0x2f0 [ 430.581419][ T8523] tun_chr_write_iter+0x113/0x200 [ 430.581539][ T8523] vfs_write+0x612/0xba0 [ 430.581631][ T8523] ? __pfx_vfs_write+0x10/0x10 [ 430.581729][ T8523] ? __fget_files+0x2a/0x420 [ 430.581816][ T8523] ksys_write+0x150/0x270 [ 430.581894][ T8523] ? __pfx_ksys_write+0x10/0x10 [ 430.582005][ T8523] do_syscall_64+0x166/0x520 [ 430.582074][ T8523] ? trace_irq_disable+0x3b/0x140 [ 430.582118][ T8523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.582165][ T8523] ? clear_bhb_loop+0x70/0xc0 [ 430.582220][ T8523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.582270][ T8523] RIP: 0033:0x7f1fd899e0d9 [ 430.582315][ T8523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.582353][ T8523] RSP: 002b:00007f1fd9904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 430.582420][ T8523] RAX: ffffffffffffffda RBX: 00007f1fd8c25fa0 RCX: 00007f1fd899e0d9 [ 430.582456][ T8523] RDX: 000000000000009e RSI: 0000200000000280 RDI: 0000000000000003 [ 430.582478][ T8523] RBP: 00007f1fd9904090 R08: 0000000000000000 R09: 0000000000000000 [ 430.582506][ T8523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.582541][ T8523] R13: 00007f1fd8c26038 R14: 00007f1fd8c25fa0 R15: 00007ffe37c67238 [ 430.582613][ T8523] [ 430.626560][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 430.829471][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=105d, bcdDevice= 0.40 [ 430.840326][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 77, changing to 7 [ 430.902547][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.902623][ T9] usb 3-1: Product: Ђ [ 430.902663][ T9] usb 3-1: Manufacturer: á° [ 430.902701][ T9] usb 3-1: SerialNumber: syz [ 430.974698][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 430.976069][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 431.010177][ T8526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.027300][ T8526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.043053][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 431.044269][ T9] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 431.068078][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 431.239135][ T9] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 431.327554][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.407789][ T5744] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 432.915024][ T9] usb 3-1: USB disconnect, device number 25 [ 432.928296][ T5744] usb 7-1: Using ep0 maxpacket: 16 [ 432.932499][ T5744] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 432.934729][ T5744] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 432.934752][ T5744] usb 7-1: config 0 has no interface number 0 [ 432.934806][ T5744] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.934872][ T5744] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.934962][ T5744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.997618][ T5809] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 433.007938][ T5744] usb 7-1: config 0 descriptor?? [ 433.076372][ T864] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 433.156346][ T5809] usb 2-1: Using ep0 maxpacket: 8 [ 433.209507][ T5809] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 433.306572][ T864] usb 6-1: Using ep0 maxpacket: 16 [ 433.307745][ T864] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 433.309717][ T864] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 433.309898][ T864] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 433.309996][ T864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.382065][ T8550] loop2: detected capacity change from 0 to 2048 [ 433.627619][ T5744] usbhid 7-1:0.1: can't add hid device: -71 [ 433.726942][ T5744] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 433.832897][ T5809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.832947][ T5809] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 434.232786][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.232828][ T5809] usb 2-1: Product: syz [ 434.232856][ T5809] usb 2-1: Manufacturer: syz [ 434.232873][ T5809] usb 2-1: SerialNumber: syz [ 434.303682][ T864] usb 6-1: config 0 descriptor?? [ 434.521908][ T5744] usb 7-1: USB disconnect, device number 15 [ 434.541978][ T864] usbhid 6-1:0.0: can't add hid device: -71 [ 434.542778][ T864] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 434.782140][ T8550] Alternate GPT is invalid, using primary GPT. [ 434.789361][ T8550] loop2: p2 p3 p7 [ 434.892992][ T5809] usb 2-1: config 0 descriptor?? [ 434.933884][ T864] usb 6-1: USB disconnect, device number 28 [ 434.994835][ T5809] usb 2-1: can't set config #0, error -71 [ 435.011397][ T5809] usb 2-1: USB disconnect, device number 40 [ 435.123015][ T52] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 435.134609][ T52] Bluetooth: hci4: Injecting HCI hardware error event [ 435.148564][ T5637] Bluetooth: hci4: hardware error 0x00 [ 435.526516][ T5809] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 435.642632][ T6089] udevd[6089]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 435.668226][ T7271] udevd[7271]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 435.766175][ T5923] udevd[5923]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 436.257154][ T5809] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice= 0.10 [ 436.257217][ T5809] usb 2-1: no configurations [ 436.257245][ T5809] usb 2-1: can't read configurations, error -22 [ 436.422644][ T8568] xt_connbytes: Forcing CT accounting to be enabled [ 436.476341][ T5809] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 436.582546][ T8571] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 436.598802][ T8571] netlink: 'syz.3.670': attribute type 10 has an invalid length. [ 436.721832][ T5809] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice= 0.10 [ 436.721888][ T5809] usb 2-1: no configurations [ 436.721916][ T5809] usb 2-1: can't read configurations, error -22 [ 436.802519][ T5809] usb usb2-port1: attempt power cycle [ 437.340797][ T5637] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 437.506377][ T5809] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 437.539300][ T5809] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice= 0.10 [ 437.548647][ T5809] usb 2-1: no configurations [ 437.553354][ T5809] usb 2-1: can't read configurations, error -22 [ 437.596443][ T864] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 437.598294][ T8578] loop3: detected capacity change from 0 to 64 [ 437.744659][ T8578] hfs: unable to load codepage "iso8859-(" [ 437.746393][ T864] usb 3-1: Using ep0 maxpacket: 32 [ 437.802192][ T864] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 437.816383][ T864] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 437.816423][ T864] usb 3-1: config 0 has no interface number 0 [ 437.835959][ T864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.836002][ T864] usb 3-1: Product: syz [ 437.836023][ T864] usb 3-1: Manufacturer: syz [ 437.836044][ T864] usb 3-1: SerialNumber: syz [ 437.884727][ T864] usb 3-1: config 0 descriptor?? [ 438.573245][ T8581] loop6: detected capacity change from 0 to 131072 [ 438.577183][ T5809] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 438.604448][ T8581] F2FS-fs (loop6): invalid crc value [ 438.631690][ T864] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 438.631732][ T864] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 438.638706][ T864] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 438.639358][ T864] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 438.708940][ T8581] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 438.722494][ T8581] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 438.738134][ T864] usb 3-1: USB disconnect, device number 26 [ 438.897111][ T5809] usb 2-1: device descriptor read/8, error -71 [ 439.008795][ T5809] usb usb2-port1: unable to enumerate USB device [ 439.097171][ T8592] loop5: detected capacity change from 0 to 1024 [ 439.120808][ T8592] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 439.146350][ T864] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 439.233923][ T8592] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.663: lblock 2 mapped to illegal pblock 2 (length 1) [ 439.254178][ T8592] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 439.256245][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 439.256283][ C1] EXT4-fs (loop5): initial error at time 1787112861: ext4_map_blocks:790: inode 3: block 2 [ 439.256331][ C1] EXT4-fs (loop5): last error at time 1787112861: ext4_map_blocks:790: inode 3: block 2 [ 439.302607][ T8592] __quota_error: 145 callbacks suppressed [ 439.302656][ T8592] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 439.302705][ T8592] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.663: lblock 0 mapped to illegal pblock 48 (length 1) [ 439.302745][ T8592] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 439.317909][ T8592] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 439.317933][ T8592] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.663: Failed to acquire dquot type 0 [ 439.317957][ T8592] loop5: lost filesystem error report for type 5 error -117 [ 439.369211][ T864] usb 3-1: New USB device found, idVendor=0499, idProduct=105d, bcdDevice= 0.40 [ 439.393174][ T8592] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 439.404074][ T8592] loop5: lost filesystem error report for type 5 error -117 [ 439.404726][ T864] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 77, changing to 7 [ 439.429513][ T8592] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.663: mark_inode_dirty error [ 439.429646][ T8592] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 439.441736][ T8592] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 439.441851][ T8592] EXT4-fs (loop5): 1 orphan inode deleted [ 439.476949][ T864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.488700][ T864] usb 3-1: Product: Ђ [ 439.488742][ T864] usb 3-1: Manufacturer: á° [ 439.488761][ T864] usb 3-1: SerialNumber: syz [ 439.512677][ T8592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.579734][ T5828] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 439.655144][ T864] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 439.655588][ T864] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 439.681416][ T5828] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 439.748509][ T5828] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:13: Failed to release dquot type 0 [ 439.774005][ T864] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 439.789571][ T864] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 439.819964][ T864] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 439.898372][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.898449][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.112409][ T864] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 440.126332][ T5809] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 440.229522][ T7271] udevd[7271]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.276506][ T5809] usb 2-1: Using ep0 maxpacket: 8 [ 440.289023][ T5809] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 440.300170][ T5809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.300214][ T5809] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 440.320729][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.320776][ T5809] usb 2-1: Product: syz [ 440.320794][ T5809] usb 2-1: Manufacturer: syz [ 440.320837][ T5809] usb 2-1: SerialNumber: syz [ 440.350869][ T5809] usb 2-1: config 0 descriptor?? [ 440.449898][ T864] usb 3-1: USB disconnect, device number 27 [ 440.671996][ T8607] loop3: detected capacity change from 0 to 512 [ 440.685437][ T8607] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 440.699876][ T8607] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 440.733867][ T8607] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.678: bad orphan inode 131083 [ 440.733910][ T8607] loop3: lost filesystem error report for type 5 error -117 [ 440.744437][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 440.744452][ C1] EXT4-fs (loop3): initial error at time 1787112863: ext4_orphan_get:1429 [ 440.744471][ C1] EXT4-fs (loop3): last error at time 1787112863: ext4_orphan_get:1429 [ 440.815701][ T6301] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.822404][ T5832] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 440.822444][ T5832] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 440.827307][ T5832] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 440.827406][ T5832] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:15: Failed to release dquot type 0 [ 440.827455][ T5832] loop5: lost filesystem error report for type 5 error -117 [ 440.877411][ T5637] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 440.879300][ T5637] Bluetooth: hci0: Injecting HCI hardware error event [ 440.883760][ T5637] Bluetooth: hci0: hardware error 0x00 [ 440.932576][ T8607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.953519][ T8607] fscrypt (loop3, inode 18): Mutually exclusive encryption flags (0x0c) [ 440.963032][ T6301] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 440.963140][ T6301] loop5: lost filesystem error report for type 5 error -117 [ 441.016438][ T6301] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 441.016491][ T6301] loop5: lost filesystem error report for type 5 error -117 [ 441.031408][ T6301] EXT4-fs error (device loop5): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 441.031516][ T6301] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 441.037541][ T6301] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 441.037656][ T6301] loop5: lost filesystem error report for type 5 error -117 [ 441.458211][ T8614] loop2: detected capacity change from 0 to 2048 [ 442.126169][ T8614] Alternate GPT is invalid, using primary GPT. [ 442.134213][ T8614] loop2: p2 p3 p7 [ 442.983281][ T864] usb 2-1: USB disconnect, device number 45 [ 443.018620][ T5637] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 443.043997][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.206519][ T8625] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 443.223498][ T8625] netlink: 'syz.1.682': attribute type 10 has an invalid length. [ 443.419405][ T8624] netlink: 600 bytes leftover after parsing attributes in process `syz.5.681'. [ 444.483017][ T5809] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 444.689611][ T5809] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.692316][ T5809] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.692463][ T5809] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 444.692528][ T5809] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 444.692633][ T5809] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 444.732458][ T5809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.732526][ T5809] usb 6-1: Product: syz [ 444.732567][ T5809] usb 6-1: Manufacturer: syz [ 444.732607][ T5809] usb 6-1: SerialNumber: syz [ 444.790139][ T8624] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 444.799213][ T8637] loop2: detected capacity change from 0 to 1024 [ 444.820812][ T8637] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 444.852518][ T8637] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 444.867596][ T8637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.068361][ T864] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 445.151609][ T7271] udevd[7271]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 445.168789][ T6089] udevd[6089]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 445.224416][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 445.224510][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 445.246580][ T864] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 445.317750][ T864] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 445.326629][ T864] usb 2-1: can't read configurations, error -61 [ 445.476951][ T864] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 445.773641][ T5923] udevd[5923]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 445.949389][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.971786][ T864] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 445.985519][ T864] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 445.985572][ T864] usb 2-1: can't read configurations, error -61 [ 445.994012][ T864] usb usb2-port1: attempt power cycle [ 446.081513][ T8624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.107257][ T8650] FAULT_INJECTION: forcing a failure. [ 446.107257][ T8650] name failslab, interval 1, probability 0, space 0, times 0 [ 446.107313][ T8650] CPU: 0 UID: 0 PID: 8650 Comm: syz.3.687 Not tainted syzkaller #0 PREEMPT(full) [ 446.107336][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 446.107348][ T8650] Call Trace: [ 446.107356][ T8650] [ 446.107364][ T8650] dump_stack_lvl+0xe8/0x150 [ 446.107398][ T8650] should_fail_ex+0x410/0x560 [ 446.107435][ T8650] should_failslab+0xa8/0x100 [ 446.107461][ T8650] __kmalloc_cache_noprof+0xa3/0x600 [ 446.107482][ T8650] ? binder_get_thread+0x1c6/0x6d0 [ 446.107630][ T8650] ? binder_get_thread+0x1c6/0x6d0 [ 446.107663][ T8650] binder_get_thread+0x1c6/0x6d0 [ 446.107705][ T8650] binder_ioctl+0x2b8/0x1b00 [ 446.107755][ T8650] ? tomoyo_path_number_perm+0x219/0x5f0 [ 446.107794][ T8650] ? tomoyo_path_number_perm+0x219/0x5f0 [ 446.107827][ T8650] ? do_vfs_ioctl+0x116f/0x1530 [ 446.107848][ T8650] ? __pfx_binder_ioctl+0x10/0x10 [ 446.107874][ T8650] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 446.107905][ T8650] ? hook_file_ioctl+0x1f2/0x600 [ 446.107942][ T8650] ? __fget_files+0x2a/0x420 [ 446.107972][ T8650] ? __fget_files+0x2a/0x420 [ 446.107996][ T8650] ? __fget_files+0x3a2/0x420 [ 446.108022][ T8650] ? __fget_files+0x2a/0x420 [ 446.108068][ T8650] ? bpf_lsm_file_ioctl+0x9/0x20 [ 446.108109][ T8650] ? __pfx_binder_ioctl+0x10/0x10 [ 446.108137][ T8650] __se_sys_ioctl+0xfc/0x170 [ 446.108161][ T8650] do_syscall_64+0x166/0x520 [ 446.108190][ T8650] ? trace_irq_disable+0x3b/0x140 [ 446.108211][ T8650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.108233][ T8650] ? clear_bhb_loop+0x70/0xc0 [ 446.108259][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.108280][ T8650] RIP: 0033:0x7f3f42d9e0d9 [ 446.108300][ T8650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.108318][ T8650] RSP: 002b:00007f3f43ba0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.108341][ T8650] RAX: ffffffffffffffda RBX: 00007f3f43025fa0 RCX: 00007f3f42d9e0d9 [ 446.108356][ T8650] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000003 [ 446.108370][ T8650] RBP: 00007f3f43ba0090 R08: 0000000000000000 R09: 0000000000000000 [ 446.108383][ T8650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.108395][ T8650] R13: 00007f3f43026038 R14: 00007f3f43025fa0 R15: 00007ffe234fb138 [ 446.108426][ T8650] [ 446.131324][ T8650] binder: 8647:8650 ioctl c0306201 200000004a40 returned -12 [ 446.148840][ T8624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.180000][ T5809] cdc_ncm 6-1:1.0: bind() failure [ 446.237365][ T5809] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 446.237474][ T5809] cdc_ncm 6-1:1.1: bind() failure [ 446.280903][ T5809] usb 6-1: USB disconnect, device number 29 [ 446.383824][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.6.677'. [ 446.383856][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.6.677'. [ 446.494565][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.677'. [ 446.520829][ T864] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 446.574636][ T8658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.384458][ T864] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 449.919947][ T864] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 449.920013][ T864] usb 2-1: can't read configurations, error -71 [ 449.950469][ T8661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.330381][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.691'. [ 450.681801][ T8666] loop1: detected capacity change from 0 to 256 [ 451.039151][ T8666] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 451.226436][ T8666] fuse: Unknown parameter 'd°o{<’KQ îvcü”÷w ÎÐX·CÄûcÓÈ6°KdZÞ°Z€Á[þÉ5‡°Äª@+)Q}×ÐWE쌈3âuŽ“òÚ¾PÖg"ð:  0x0000000000000007' [ 452.316338][ T864] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 452.447105][ T864] usb 2-1: device descriptor read/64, error -71 [ 452.827492][ T864] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 453.416357][ T864] usb 2-1: device descriptor read/64, error -71 [ 453.531343][ T864] usb usb2-port1: attempt power cycle [ 453.678055][ T8680] loop2: detected capacity change from 0 to 4096 [ 453.695189][ T8680] ntfs3: Unknown parameter 'spe' [ 453.813104][ T8690] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 453.831552][ T8690] netlink: 'syz.3.696': attribute type 10 has an invalid length. [ 454.750042][ T8683] loop5: detected capacity change from 0 to 2048 [ 454.925475][ T8683] Alternate GPT is invalid, using primary GPT. [ 454.925641][ T8683] loop5: p2 p3 p7 [ 455.109191][ T8700] loop1: detected capacity change from 0 to 1024 [ 455.149257][ T8700] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 455.182871][ T8700] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 455.184053][ T8700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.291253][ T8676] loop6: detected capacity change from 0 to 32768 [ 455.571764][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.701'. [ 455.571858][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.701'. [ 456.082301][ T8676] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.694 (8676) [ 456.189312][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.849242][ T8709] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 457.736869][ T5637] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 457.737007][ T5637] Bluetooth: hci1: Injecting HCI hardware error event [ 457.748501][ T52] Bluetooth: hci1: hardware error 0x00 [ 458.335292][ T8721] loop5: detected capacity change from 0 to 512 [ 458.352356][ T8721] ext4: Unknown parameter 'measure' [ 458.718273][ T8734] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 458.792970][ T8735] netlink: 'syz.3.711': attribute type 10 has an invalid length. [ 458.989599][ T8727] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 459.024375][ T8737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.597516][ T8725] udc dummy_udc.0: failed to start g1: -4 [ 459.597760][ T8725] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -4 [ 459.987026][ T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 460.127199][ T8727] bond1: (slave lo): Enslaving as an active interface with an up link [ 460.173288][ T8727] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 460.197068][ T8725] UDC core: g1: couldn't find an available UDC or it's busy [ 460.571293][ T8744] netlink: 52 bytes leftover after parsing attributes in process `syz.1.714'. [ 460.689906][ T8745] netlink: 16 bytes leftover after parsing attributes in process `syz.5.713'. [ 460.762317][ T8745] loop5: detected capacity change from 0 to 256 [ 460.819461][ T8745] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 460.836547][ T5809] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 460.890222][ T8745] fuse: Unknown parameter 'd°o{<’KQ îvcü”÷w ÎÐX·CÄûcÓÈ6°KdZÞ°Z€Á[þÉ5‡°Äª@+)Q}×ÐWE쌈3âuŽ“òÚ¾PÖg"ð:  0x0000000000000007' [ 460.987628][ T5809] usb 2-1: not running at top speed; connect to a high speed hub [ 460.987677][ T5809] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 461.007273][ T5809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.007355][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.039081][ T5809] gspca_main: spca501-2.14.0 probing 0000:0000 [ 461.219243][ T8753] loop3: detected capacity change from 0 to 1024 [ 461.234308][ T5809] gspca_spca501: reg write: error -71 [ 461.234337][ T5809] spca501 2-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 461.234422][ T5809] spca501 2-1:1.0: probe with driver spca501 failed with error -22 [ 461.235437][ T5809] uvcvideo 2-1:1.0: Found UVC 1.00 device (0000:0000) [ 461.246718][ T864] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 461.273840][ T5809] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 461.287289][ T5809] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 461.287384][ T5809] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 461.297074][ T8753] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 461.324688][ T8753] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 461.332615][ T5809] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -71 [ 461.350684][ T5809] usb 2-1: USB disconnect, device number 53 [ 461.357405][ T8753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.376773][ T864] usb 6-1: device descriptor read/64, error -71 [ 461.514082][ T8757] Bluetooth: MGMT ver 1.23 [ 461.703622][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.716'. [ 461.703723][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.716'. [ 461.732569][ T864] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 461.966554][ T864] usb 6-1: device descriptor read/64, error -71 [ 462.251088][ T864] usb usb6-port1: attempt power cycle [ 462.427459][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.449621][ T8764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.607705][ T864] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 462.639236][ T864] usb 6-1: device descriptor read/8, error -71 [ 462.890701][ T864] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 462.909573][ T864] usb 6-1: device descriptor read/8, error -71 [ 463.023334][ T864] usb usb6-port1: unable to enumerate USB device [ 464.896576][ T8789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.813079][ T8779] loop6: detected capacity change from 0 to 32768 [ 466.910246][ T8779] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 467.310365][ T8813] loop2: detected capacity change from 0 to 2048 [ 467.648087][ T8779] XFS (loop6): Ending clean mount [ 468.032561][ T8813] Alternate GPT is invalid, using primary GPT. [ 468.033440][ T8813] loop2: p2 p3 p7 [ 468.869210][ T7613] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 469.307007][ T8822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.392954][ T8825] loop3: detected capacity change from 0 to 8192 [ 471.539142][ T8845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.961243][ T8850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.234644][ T31] audit: type=1326 audit(1787112895.976:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.2.742" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8576d9e0d9 code=0x7ffc0000 [ 473.269669][ T31] audit: type=1326 audit(1787112895.976:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.2.742" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8576d9e0d9 code=0x7ffc0000 [ 473.643991][ T8856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.881053][ T31] audit: type=1326 audit(1787112896.336:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.2.742" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8576d9e0d9 code=0x7ffc0000 [ 473.907122][ T31] audit: type=1326 audit(1787112896.366:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8576d9e0d9 code=0x7ffc0000 [ 473.907294][ T31] audit: type=1326 audit(1787112896.376:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8576d9e0d9 code=0x7ffc0000 [ 473.989923][ T31] audit: type=1326 audit(1787112896.716:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8576d9e0d9 code=0x7ffc0000 [ 474.068806][ T31] audit: type=1326 audit(1787112896.786:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8576d9e0d9 code=0x7ffc0000 [ 474.068851][ T31] audit: type=1326 audit(1787112896.816:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8576d9e0d9 code=0x7ffc0000 [ 474.127424][ T31] audit: type=1326 audit(1787112896.876:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8576d9e0d9 code=0x7ffc0000 [ 474.175217][ T31] audit: type=1326 audit(1787112896.916:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8576d9e0d9 code=0x7ffc0000 [ 475.586310][ T8875] loop2: detected capacity change from 0 to 512 [ 475.604331][ T8875] EXT4-fs: Ignoring removed bh option [ 475.610195][ T8875] EXT4-fs: Ignoring removed mblk_io_submit option [ 475.610232][ T8875] EXT4-fs: Ignoring removed orlov option [ 475.668088][ T8875] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 475.776638][ T8875] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 475.779516][ T8875] EXT4-fs (loop2): orphan cleanup on readonly fs [ 475.834473][ T8875] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.747: Failed to acquire dquot type 1 [ 475.834658][ T8875] loop2: lost filesystem error report for type 5 error -5 [ 475.846135][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 475.846159][ C0] EXT4-fs (loop2): last error at time 1787112898: ext4_acquire_dquot:7069 [ 475.874208][ T8875] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.747: Invalid block bitmap block 0 in block_group 0 [ 475.874299][ T8875] loop2: lost filesystem error report for type 5 error -117 [ 475.895173][ T8875] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.747: Invalid block bitmap block 0 in block_group 0 [ 475.895218][ T8875] loop2: lost filesystem error report for type 5 error -117 [ 475.934632][ T8875] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.747: Invalid block bitmap block 0 in block_group 0 [ 475.934770][ T8875] loop2: lost filesystem error report for type 5 error -117 [ 475.962820][ T8875] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.747: Failed to acquire dquot type 1 [ 475.962985][ T8875] loop2: lost filesystem error report for type 5 error -28 [ 476.004433][ T8875] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.747: Failed to acquire dquot type 1 [ 476.004497][ T8875] loop2: lost filesystem error report for type 5 error -28 [ 476.045689][ T8875] EXT4-fs (loop2): 1 orphan inode deleted [ 476.108826][ T8875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 476.190728][ T8875] netlink: 52 bytes leftover after parsing attributes in process `syz.2.747'. [ 476.732482][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.142534][ T8881] netlink: 28 bytes leftover after parsing attributes in process `syz.5.749'. [ 477.153440][ T8892] netlink: 'syz.6.752': attribute type 10 has an invalid length. [ 477.688151][ T8882] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 477.699767][ T8882] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 477.710983][ T8882] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 478.421568][ T8900] loop2: detected capacity change from 0 to 16 [ 479.013159][ T8900] erofs (device loop2): mounted with root inode @ nid 36. [ 479.268330][ T8902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.243387][ T8882] syz.3.751 (8882) used greatest stack depth: 17504 bytes left [ 480.522938][ T8912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.047603][ T8921] loop6: detected capacity change from 0 to 2048 [ 481.439653][ T8914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.759'. [ 483.536157][ T8928] loop5: detected capacity change from 0 to 131072 [ 483.586377][ T8928] F2FS-fs (loop5): invalid crc value [ 483.697656][ T8928] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 483.719329][ T8928] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 484.434318][ T8921] Alternate GPT is invalid, using primary GPT. [ 484.440998][ T8921] loop6: p2 p3 p7 [ 484.797310][ T5723] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 484.920984][ T5923] udevd[5923]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 484.948077][ T7271] udevd[7271]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 484.962318][ T6089] udevd[6089]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 484.970320][ T5723] usb 3-1: Using ep0 maxpacket: 32 [ 484.973267][ T5723] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 484.979090][ T5723] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 484.979161][ T5723] usb 3-1: config 0 has no interface number 0 [ 484.979275][ T5723] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 484.979337][ T5723] usb 3-1: config 0 interface 85 has no altsetting 0 [ 485.021810][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.021854][ T5723] usb 3-1: Product: syz [ 485.021895][ T5723] usb 3-1: Manufacturer: syz [ 485.021948][ T5723] usb 3-1: SerialNumber: syz [ 485.054217][ T5723] usb 3-1: config 0 descriptor?? [ 485.066420][ T5805] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 485.190840][ T30] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 485.244773][ T5805] usb 7-1: Using ep0 maxpacket: 32 [ 485.251155][ T5805] usb 7-1: New USB device found, idVendor=040d, idProduct=3801, bcdDevice=8c.2c [ 485.259506][ T5805] usb 7-1: config 5 has an invalid interface number: 236 but max is 0 [ 485.259627][ T5805] usb 7-1: config 5 has no interface number 0 [ 485.259693][ T5805] usb 7-1: config 5 interface 236 has no altsetting 0 [ 485.289713][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.289784][ T5805] usb 7-1: Product: syz [ 485.289815][ T5805] usb 7-1: Manufacturer: syz [ 485.289835][ T5805] usb 7-1: SerialNumber: syz [ 485.370045][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 485.375078][ T30] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 485.390829][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.390883][ T30] usb 2-1: Product: syz [ 485.390985][ T30] usb 2-1: Manufacturer: syz [ 485.391048][ T30] usb 2-1: SerialNumber: syz [ 485.421982][ T30] usb 2-1: config 0 descriptor?? [ 485.430782][ T8946] FAULT_INJECTION: forcing a failure. [ 485.430782][ T8946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.444490][ T8946] CPU: 0 UID: 0 PID: 8946 Comm: syz.3.767 Not tainted syzkaller #0 PREEMPT(full) [ 485.444537][ T8946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.444553][ T8946] Call Trace: [ 485.444562][ T8946] [ 485.444572][ T8946] dump_stack_lvl+0xe8/0x150 [ 485.444613][ T8946] should_fail_ex+0x410/0x560 [ 485.444655][ T8946] _copy_from_user+0x2d/0xb0 [ 485.444682][ T8946] restore_altstack+0xae/0x4f0 [ 485.444706][ T8946] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 485.444748][ T8946] ? __pfx_restore_altstack+0x10/0x10 [ 485.444784][ T8946] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.444903][ T8946] __ia32_sys_rt_sigreturn+0x2bd/0x8c0 [ 485.444956][ T8946] ? __lock_acquire+0x6df/0x2e50 [ 485.444985][ T8946] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 485.445017][ T8946] ? _raw_spin_unlock_irq+0x2e/0x50 [ 485.445042][ T8946] ? signal_setup_done+0x22f/0x310 [ 485.445079][ T8946] ? arch_do_signal_or_restart+0x4f4/0x860 [ 485.445120][ T8946] ? lock_acquire+0x115/0x350 [ 485.445152][ T8946] ? __task_pid_nr_ns+0x28/0x470 [ 485.445195][ T8946] do_syscall_64+0x166/0x520 [ 485.445228][ T8946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.445250][ T8946] ? clear_bhb_loop+0x70/0xc0 [ 485.445278][ T8946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.445301][ T8946] RIP: 0033:0x7f3f42d3f459 [ 485.445322][ T8946] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 485.445342][ T8946] RSP: 002b:00007f3f43b9fa40 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 485.445367][ T8946] RAX: ffffffffffffffda RBX: 00007f3f43ba06c0 RCX: 00007f3f42d3f459 [ 485.445384][ T8946] RDX: 00007f3f43b9fa40 RSI: 00007f3f43b9fb70 RDI: 0000000000000021 [ 485.445399][ T8946] RBP: 00007f3f43ba0090 R08: 0000000000000000 R09: 0000000000000000 [ 485.445417][ T8946] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 485.445439][ T8946] R13: 00007f3f43026038 R14: 00007f3f43025fa0 R15: 00007ffe234fb138 [ 485.445473][ T8946] [ 485.652559][ T8939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.663641][ T8939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.689445][ T30] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 485.712937][ T8939] ALSA: mixer_oss: invalid OSS volume '' [ 485.744783][ T5805] usb 7-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 485.760437][ T5805] usb 7-1: USB disconnect, device number 16 [ 485.780334][ T5723] appletouch 3-1:0.85: Geyser mode initialized. [ 485.812995][ T5723] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input17 [ 486.066573][ T8949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.762'. [ 486.123911][ T30] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 486.152528][ T5708] usb 3-1: USB disconnect, device number 28 [ 486.234922][ T8951] loop3: detected capacity change from 0 to 16 [ 486.343179][ T8951] erofs (device loop3): mounted with root inode @ nid 36. [ 486.837820][ T5708] appletouch 3-1:0.85: input: appletouch disconnected [ 487.187188][ T8957] loop6: detected capacity change from 0 to 16 [ 487.196512][ T8957] erofs (device loop6): mounted with root inode @ nid 36. [ 488.129296][ T8965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.770'. [ 488.589412][ T8964] syzkaller1: entered promiscuous mode [ 488.589451][ T8964] syzkaller1: entered allmulticast mode [ 488.671114][ T8984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.754694][ T5805] usb 2-1: USB disconnect, device number 54 [ 489.830127][ T8989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.975076][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.778'. [ 491.615809][ T8975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.667717][ T9006] loop5: detected capacity change from 0 to 64 [ 492.140368][ T9017] netlink: 28 bytes leftover after parsing attributes in process `syz.6.783'. [ 492.324787][ T31] kauditd_printk_skb: 64 callbacks suppressed [ 492.331326][ T31] audit: type=1326 audit(1787112915.066:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.5.784" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 492.386072][ T31] audit: type=1326 audit(1787112915.126:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.5.784" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 492.430353][ T31] audit: type=1326 audit(1787112915.176:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.5.784" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 492.456838][ T31] audit: type=1326 audit(1787112915.176:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 492.483294][ T31] audit: type=1326 audit(1787112915.176:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 492.508602][ T31] audit: type=1326 audit(1787112915.206:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 492.508666][ T31] audit: type=1326 audit(1787112915.206:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 492.508709][ T31] audit: type=1326 audit(1787112915.236:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 492.508747][ T31] audit: type=1326 audit(1787112915.236:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 492.970079][ T31] audit: type=1326 audit(1787112915.496:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 493.174936][ T9024] Cannot find add_set index 0 as target [ 493.315960][ T9028] loop6: detected capacity change from 0 to 4096 [ 493.510161][ T9033] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer. [ 493.608598][ T9033] loop5: detected capacity change from 0 to 1764 [ 493.670169][ T9033] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 493.822110][ T9034] loop3: detected capacity change from 0 to 1764 [ 493.838180][ T9040] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 493.873655][ T9034] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 494.405284][ T9042] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 496.447993][ T9051] loop6: detected capacity change from 0 to 128 [ 496.538485][ T9051] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 496.545169][ T9051] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 496.743864][ T9051] netlink: 24 bytes leftover after parsing attributes in process `syz.6.791'. [ 496.907111][ T7613] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 497.400001][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.793'. [ 500.026849][ T5805] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 500.192842][ T5805] usb 4-1: Using ep0 maxpacket: 16 [ 500.201378][ T5805] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 500.213133][ T5805] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 500.213190][ T5805] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 500.213265][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.252683][ T5805] usb 4-1: config 0 descriptor?? [ 500.681560][ T5805] hid_parser_main: 430 callbacks suppressed [ 500.688923][ T5805] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 500.696864][ T5805] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 500.696938][ T5805] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 500.696970][ T5805] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 500.696992][ T5805] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 500.697013][ T5805] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 500.697034][ T5805] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 500.713480][ T5805] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 500.713507][ T5805] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 500.713527][ T5805] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 500.780507][ T5805] dragonrise 0003:0079:0011.0006: hidraw0: USB HID v0.01 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 500.869409][ T9] usb 4-1: USB disconnect, device number 21 [ 500.966005][ T9082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.339891][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.339965][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.854385][ T9085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.943087][ T9079] fido_id[9079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 505.879117][ T9094] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer. [ 505.948674][ T9094] loop6: detected capacity change from 0 to 1764 [ 505.996519][ T9094] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 506.216648][ T5805] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 506.396369][ T5805] usb 2-1: Using ep0 maxpacket: 8 [ 506.397823][ T5805] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 506.413841][ T5805] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 506.429667][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.429706][ T5805] usb 2-1: Product: syz [ 506.429735][ T5805] usb 2-1: Manufacturer: syz [ 506.429753][ T5805] usb 2-1: SerialNumber: syz [ 506.454724][ T5805] usb 2-1: config 0 descriptor?? [ 506.887209][ T9106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.309976][ T5805] usb 2-1: USB disconnect, device number 55 [ 509.690914][ T9126] loop6: detected capacity change from 0 to 16 [ 509.744567][ T9126] erofs (device loop6): mounted with root inode @ nid 36. [ 510.921255][ T9138] loop2: detected capacity change from 0 to 16 [ 511.473939][ T9136] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 511.473939][ T9136] Please contact the netfilter-devel mailing list or update your nftables rules. [ 511.539773][ T9138] erofs (device loop2): mounted with root inode @ nid 36. [ 511.732068][ T9130] netlink: 68 bytes leftover after parsing attributes in process `syz.3.800'. [ 511.732134][ T9130] netlink: 48 bytes leftover after parsing attributes in process `syz.3.800'. [ 512.021056][ T9141] loop1: detected capacity change from 0 to 32768 [ 512.420421][ T5805] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 512.576373][ T5805] usb 7-1: Using ep0 maxpacket: 8 [ 512.583462][ T5805] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 513.556386][ T5805] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.587175][ T5805] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.303636][ T5805] usb 7-1: config 0 descriptor?? [ 514.364826][ T5805] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 514.566988][ T5805] gspca_vc032x: reg_r err -32 [ 514.567082][ T5805] vc032x 7-1:0.0: probe with driver vc032x failed with error -32 [ 514.851645][ T9153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.957901][ T9155] loop3: detected capacity change from 0 to 16 [ 514.987950][ T9155] erofs (device loop3): mounted with root inode @ nid 36. [ 515.822563][ T5809] usb 7-1: USB disconnect, device number 17 [ 517.910654][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz.6.819'. [ 518.016691][ T9163] loop6: detected capacity change from 0 to 256 [ 518.050956][ T9163] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 518.105471][ T9163] fuse: Unknown parameter 'd°o{<’KQ îvcü”÷w ÎÐX·CÄûcÓÈ6°KdZÞ°Z€Á[þÉ5‡°Äª@+)Q}×ÐWE쌈3âuŽ“òÚ¾PÖg"ð:  0x0000000000000007' [ 518.119135][ T5730] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 518.277578][ T5730] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 518.287781][ T5730] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.287809][ T5730] usb 4-1: config 0 has no interfaces? [ 518.317059][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.317099][ T5730] usb 4-1: Product: syz [ 518.317128][ T5730] usb 4-1: Manufacturer: syz [ 518.317145][ T5730] usb 4-1: SerialNumber: syz [ 518.350123][ T5730] usb 4-1: config 0 descriptor?? [ 518.506410][ T30] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 518.636308][ T30] usb 7-1: device descriptor read/64, error -71 [ 519.427680][ T30] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 519.435912][ T31] kauditd_printk_skb: 67 callbacks suppressed [ 519.437332][ T31] audit: type=1326 audit(1787112942.176:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.1.817" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e0d9 code=0x7ffc0000 [ 519.439210][ T31] audit: type=1326 audit(1787112942.186:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.1.817" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e0d9 code=0x7ffc0000 [ 519.442580][ T31] audit: type=1326 audit(1787112942.186:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.1.817" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e0d9 code=0x7ffc0000 [ 519.443209][ T31] audit: type=1326 audit(1787112942.186:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.1.817" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f7bd9f9e0d9 code=0x7ffc0000 [ 519.443634][ T31] audit: type=1326 audit(1787112942.186:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.1.817" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e0d9 code=0x7ffc0000 [ 519.444139][ T31] audit: type=1326 audit(1787112942.186:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.1.817" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e0d9 code=0x7ffc0000 [ 519.444521][ T31] audit: type=1326 audit(1787112942.186:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.1.817" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e0d9 code=0x7ffc0000 [ 519.446029][ T31] audit: type=1326 audit(1787112942.186:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.1.817" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e0d9 code=0x7ffc0000 [ 519.448242][ T31] audit: type=1326 audit(1787112942.186:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.1.817" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e0d9 code=0x7ffc0000 [ 519.449073][ T31] audit: type=1326 audit(1787112942.196:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.1.817" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7bd9f9e0d9 code=0x7ffc0000 [ 519.688299][ T30] usb 7-1: device descriptor read/64, error -71 [ 519.811752][ T30] usb usb7-port1: attempt power cycle [ 520.191652][ T9180] loop2: detected capacity change from 0 to 65536 [ 520.250568][ T9180] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 520.353543][ T9180] XFS (loop2): Ending clean mount [ 520.492922][ T30] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 520.507278][ T5805] usb 4-1: USB disconnect, device number 22 [ 520.528778][ T30] usb 7-1: device descriptor read/8, error -71 [ 520.700725][ T9194] Context (ID=0x0) not attached to queue pair (handle=0x4df:0x0) [ 520.716939][ T9194] netlink: 'syz.6.825': attribute type 10 has an invalid length. [ 521.026365][ T864] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 521.762182][ T864] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 521.830524][ T864] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.976926][ T864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.976985][ T864] usb 3-1: Product: syz [ 521.977002][ T864] usb 3-1: Manufacturer: syz [ 521.977018][ T864] usb 3-1: SerialNumber: syz [ 522.765243][ T864] dvbdev: DVB: registering new adapter (DEC3000-s) [ 522.932749][ T864] usb 3-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 523.059635][ T864] usb 3-1: selecting invalid altsetting 8 [ 523.374696][ T9206] Cannot find add_set index 0 as target [ 523.419405][ T5809] usb 3-1: USB disconnect, device number 29 [ 523.436519][ T864] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 523.597963][ T864] usb 2-1: Using ep0 maxpacket: 32 [ 523.602551][ T864] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 523.626872][ T864] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 523.627785][ T864] usb 2-1: config 0 has no interface number 0 [ 523.652124][ T864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.652188][ T864] usb 2-1: Product: syz [ 523.652206][ T864] usb 2-1: Manufacturer: syz [ 523.652251][ T864] usb 2-1: SerialNumber: syz [ 523.683012][ T864] usb 2-1: config 0 descriptor?? [ 524.966354][ T9213] loop3: detected capacity change from 0 to 131072 [ 524.989961][ T9213] F2FS-fs (loop3): invalid crc value [ 525.073009][ T9213] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 525.086076][ T9213] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 525.170333][ T864] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 525.170390][ T864] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 525.182127][ T864] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 525.182775][ T864] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 525.237543][ T5809] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 [ 525.249064][ T5809] XFS (loop2): Unmount and run xfs_repair [ 525.255043][ T5809] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 525.271401][ T5809] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 525.282231][ T5809] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 525.291239][ T5809] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 525.300461][ T5809] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 525.309467][ T5809] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 525.319035][ T5809] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 525.329311][ T5809] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 525.338334][ T5809] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 525.347697][ T5809] XFS (loop2): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x1 len 1 error 74 [ 525.374776][ T864] usb 2-1: USB disconnect, device number 56 [ 525.454521][ T5809] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280). Shutting down filesystem. [ 525.454724][ T5809] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 525.745390][ T9223] loop1: detected capacity change from 0 to 32768 [ 526.832916][ T9227] loop6: detected capacity change from 0 to 2048 [ 529.488532][ T5629] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 530.095648][ T9234] loop5: detected capacity change from 0 to 2048 [ 530.330361][ T9234] Alternate GPT is invalid, using primary GPT. [ 530.330526][ T9234] loop5: p2 p3 p7 [ 530.369098][ T7128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.815464][ T9240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.835'. [ 530.955051][ T9240] loop1: detected capacity change from 0 to 256 [ 531.020436][ T9240] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 531.105481][ T9240] fuse: Unknown parameter 'd°o{<’KQ îvcü”÷w ÎÐX·CÄûcÓÈ6°KdZÞ°Z€Á[þÉ5‡°Äª@+)Q}×ÐWE쌈3âuŽ“òÚ¾PÖg"ð:  0x0000000000000007' [ 531.180697][ T7128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.497598][ T30] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 531.590884][ T9247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.738056][ T7128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.754780][ T30] usb 2-1: device descriptor read/64, error -71 [ 532.364606][ T30] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 532.669487][ T7128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.785291][ T30] usb 2-1: device descriptor read/64, error -71 [ 532.976074][ T30] usb usb2-port1: attempt power cycle [ 533.546766][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 533.572661][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 533.581935][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 533.591535][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 533.600933][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 533.836341][ T30] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 534.046290][ T30] usb 2-1: device not accepting address 59, error -71 [ 534.187067][ T5805] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 534.200015][ T9261] loop5: detected capacity change from 0 to 2048 [ 534.337110][ T5805] usb 7-1: Using ep0 maxpacket: 32 [ 534.346305][ T5805] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 534.377026][ T5805] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 534.377078][ T5805] usb 7-1: config 0 has no interface number 0 [ 534.405917][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.405971][ T5805] usb 7-1: Product: syz [ 534.405989][ T5805] usb 7-1: Manufacturer: syz [ 534.406004][ T5805] usb 7-1: SerialNumber: syz [ 534.510681][ T9266] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 534.511608][ T5805] usb 7-1: config 0 descriptor?? [ 534.770867][ T7128] bridge_slave_1: left allmulticast mode [ 534.770914][ T7128] bridge_slave_1: left promiscuous mode [ 534.771159][ T7128] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.851598][ T7128] bridge_slave_0: left allmulticast mode [ 534.859671][ T7128] bridge_slave_0: left promiscuous mode [ 534.868774][ T7128] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.022705][ T5805] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 535.022768][ T5805] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 535.026440][ T5805] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 535.027071][ T5805] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 535.102362][ T5805] usb 7-1: USB disconnect, device number 22 [ 535.625221][ T5805] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 535.661719][ T52] Bluetooth: hci2: command tx timeout [ 535.826823][ T5805] usb 7-1: New USB device found, idVendor=0499, idProduct=105d, bcdDevice= 0.40 [ 535.855954][ T5805] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 77, changing to 7 [ 535.914764][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.924903][ T5805] usb 7-1: Product: Ђ [ 535.929216][ T5805] usb 7-1: Manufacturer: á° [ 535.936001][ T5805] usb 7-1: SerialNumber: syz [ 536.565818][ T5805] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 536.567354][ T5805] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 536.656969][ T5805] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 536.659547][ T5805] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 536.739425][ T5805] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 537.736525][ T52] Bluetooth: hci2: command tx timeout [ 537.848703][ T9284] FAULT_INJECTION: forcing a failure. [ 537.848703][ T9284] name failslab, interval 1, probability 0, space 0, times 0 [ 537.848817][ T9284] CPU: 1 UID: 0 PID: 9284 Comm: syz.5.847 Not tainted syzkaller #0 PREEMPT(full) [ 537.848847][ T9284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 537.848862][ T9284] Call Trace: [ 537.848908][ T9284] [ 537.848960][ T9284] dump_stack_lvl+0xe8/0x150 [ 537.849090][ T9284] should_fail_ex+0x410/0x560 [ 537.849201][ T9284] should_failslab+0xa8/0x100 [ 537.849290][ T9284] __kmalloc_cache_noprof+0xa3/0x600 [ 537.849356][ T9284] ? aa_calc_hash+0x51/0x90 [ 537.849517][ T9284] ? aa_calc_hash+0x51/0x90 [ 537.849613][ T9284] aa_calc_hash+0x51/0x90 [ 537.849692][ T9284] aa_unpack+0x53f4/0x7500 [ 537.849896][ T9284] ? __pfx_aa_unpack+0x10/0x10 [ 537.850126][ T9284] ? __lock_acquire+0x6df/0x2e50 [ 537.850222][ T9284] ? __lock_acquire+0x6df/0x2e50 [ 537.850285][ T9284] ? rcu_is_watching+0x16/0xb0 [ 537.850371][ T9284] ? __lock_acquire+0x6df/0x2e50 [ 537.850492][ T9284] ? __lock_acquire+0x6df/0x2e50 [ 537.850581][ T9284] ? __lock_acquire+0x6df/0x2e50 [ 537.850666][ T9284] ? __lock_acquire+0x6df/0x2e50 [ 537.850734][ T9284] ? lock_acquire+0x115/0x350 [ 537.850821][ T9284] ? lock_acquire+0x115/0x350 [ 537.850899][ T9284] ? lock_acquire+0x115/0x350 [ 537.850973][ T9284] ? rcu_is_watching+0x16/0xb0 [ 537.851041][ T9284] ? __kasan_check_byte+0x12/0x40 [ 537.851117][ T9284] ? rcu_is_watching+0x16/0xb0 [ 537.851201][ T9284] ? rcu_is_watching+0x16/0xb0 [ 537.851267][ T9284] ? __kasan_check_byte+0x12/0x40 [ 537.851341][ T9284] ? rcu_is_watching+0x16/0xb0 [ 537.851410][ T9284] ? lock_release+0x4b/0x3c0 [ 537.851459][ T9284] ? lock_release+0x4b/0x3c0 [ 537.851535][ T9284] ? is_bpf_text_address+0x292/0x2b0 [ 537.851612][ T9284] ? is_bpf_text_address+0x26/0x2b0 [ 537.851698][ T9284] ? kernel_text_address+0xa5/0xe0 [ 537.851790][ T9284] ? __kernel_text_address+0xd/0x30 [ 537.851875][ T9284] ? unwind_get_return_address+0x4d/0x90 [ 537.851981][ T9284] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 537.852056][ T9284] ? arch_stack_walk+0xfb/0x150 [ 537.852166][ T9284] ? stack_trace_save+0xa9/0x100 [ 537.852223][ T9284] ? __pfx_stack_trace_save+0x10/0x10 [ 537.852277][ T9284] ? lock_acquire+0x115/0x350 [ 537.852351][ T9284] ? check_path+0x21/0x40 [ 537.852419][ T9284] ? check_noncircular+0xdb/0x150 [ 537.852492][ T9284] ? add_lock_to_list+0xc7/0x100 [ 537.852576][ T9284] ? rcu_is_watching+0x16/0xb0 [ 537.852641][ T9284] ? __kasan_check_byte+0x12/0x40 [ 537.852717][ T9284] ? rcu_is_watching+0x16/0xb0 [ 537.852802][ T9284] ? rcu_is_watching+0x16/0xb0 [ 537.852869][ T9284] ? __kasan_check_byte+0x12/0x40 [ 537.852956][ T9284] aa_replace_profiles+0x24a/0x2ab0 [ 537.853019][ T9284] ? lock_release+0x4b/0x3c0 [ 537.853074][ T9284] ? lock_release+0x4b/0x3c0 [ 537.853165][ T9284] ? is_bpf_text_address+0x292/0x2b0 [ 537.853249][ T9284] ? is_bpf_text_address+0x26/0x2b0 [ 537.853335][ T9284] ? __pfx_aa_replace_profiles+0x10/0x10 [ 537.853399][ T9284] ? __kernel_text_address+0xd/0x30 [ 537.853470][ T9284] ? unwind_get_return_address+0x4d/0x90 [ 537.853537][ T9284] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 537.853599][ T9284] ? arch_stack_walk+0xfb/0x150 [ 537.853699][ T9284] ? stack_trace_save+0xa9/0x100 [ 537.853754][ T9284] ? __pfx_stack_trace_save+0x10/0x10 [ 537.853822][ T9284] ? check_path+0x21/0x40 [ 537.853896][ T9284] ? check_noncircular+0xdb/0x150 [ 537.853984][ T9284] ? add_lock_to_list+0xc7/0x100 [ 537.854068][ T9284] ? lockdep_unlock+0x5c/0xd0 [ 537.854153][ T9284] ? __lock_acquire+0x14b9/0x2e50 [ 537.854277][ T9284] ? lock_acquire+0x115/0x350 [ 537.854409][ T9284] ? aa_simple_write_to_buffer+0x160/0x1f0 [ 537.854480][ T9284] policy_update+0x3a9/0x640 [ 537.854557][ T9284] ? __pfx_policy_update+0x10/0x10 [ 537.854622][ T9284] ? lock_acquire+0x115/0x350 [ 537.854741][ T9284] profile_load+0x1cb/0x320 [ 537.854831][ T9284] ? __pfx_profile_load+0x10/0x10 [ 537.854895][ T9284] vfs_write+0x296/0xba0 [ 537.855007][ T9284] ? __pfx_vfs_write+0x10/0x10 [ 537.855102][ T9284] ? __fget_files+0x2a/0x420 [ 537.855194][ T9284] ? __fget_files+0x3a2/0x420 [ 537.855278][ T9284] ? __fget_files+0x2a/0x420 [ 537.855377][ T9284] ksys_write+0x150/0x270 [ 537.855477][ T9284] ? __pfx_ksys_write+0x10/0x10 [ 537.855589][ T9284] do_syscall_64+0x166/0x520 [ 537.855686][ T9284] ? trace_irq_disable+0x3b/0x140 [ 537.855742][ T9284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.855806][ T9284] ? clear_bhb_loop+0x70/0xc0 [ 537.855881][ T9284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.855946][ T9284] RIP: 0033:0x7f1fd899e0d9 [ 537.856010][ T9284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.856057][ T9284] RSP: 002b:00007f1fd9904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 537.856137][ T9284] RAX: ffffffffffffffda RBX: 00007f1fd8c25fa0 RCX: 00007f1fd899e0d9 [ 537.856182][ T9284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 537.856231][ T9284] RBP: 00007f1fd9904090 R08: 0000000000000000 R09: 0000000000000000 [ 537.856265][ T9284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.856299][ T9284] R13: 00007f1fd8c26038 R14: 00007f1fd8c25fa0 R15: 00007ffe37c67238 [ 537.856396][ T9284] [ 538.446539][ T5805] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 538.475725][ T5805] usb 7-1: USB disconnect, device number 23 [ 538.550855][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.679389][ T5744] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 538.988139][ T9295] loop5: detected capacity change from 0 to 512 [ 539.001614][ T9295] EXT4-fs: Ignoring removed bh option [ 539.001804][ T9295] EXT4-fs: Ignoring removed mblk_io_submit option [ 539.001909][ T9295] EXT4-fs: Ignoring removed orlov option [ 539.020842][ T9295] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 539.083069][ T9295] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 539.087955][ T9295] EXT4-fs (loop5): orphan cleanup on readonly fs [ 539.137880][ T9295] __quota_error: 155 callbacks suppressed [ 539.137974][ T9295] Quota error (device loop5): do_insert_tree: Free block already used in tree: block 4 [ 539.138608][ T9295] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 539.138979][ T9295] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.853: Failed to acquire dquot type 1 [ 539.139020][ T9295] loop5: lost filesystem error report for type 5 error -5 [ 539.149338][ T5744] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 539.151483][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 539.151504][ C1] EXT4-fs (loop5): last error at time 1787112961: ext4_acquire_dquot:7069 [ 539.210001][ T9295] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.853: Invalid block bitmap block 0 in block_group 0 [ 539.210045][ T9295] loop5: lost filesystem error report for type 5 error -117 [ 539.298296][ T9295] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.853: Invalid block bitmap block 0 in block_group 0 [ 539.319332][ T9295] loop5: lost filesystem error report for type 5 error -117 [ 539.321011][ T9295] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.853: Invalid block bitmap block 0 in block_group 0 [ 539.321053][ T9295] loop5: lost filesystem error report for type 5 error -117 [ 539.323676][ T9295] Quota error (device loop5): write_blk: dquota write failed [ 539.324427][ T9295] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 539.324581][ T9295] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.853: Failed to acquire dquot type 1 [ 539.324614][ T9295] loop5: lost filesystem error report for type 5 error -28 [ 539.360263][ T9295] Quota error (device loop5): write_blk: dquota write failed [ 539.361278][ T9295] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 539.361354][ T9295] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.853: Failed to acquire dquot type 1 [ 539.361452][ T9295] loop5: lost filesystem error report for type 5 error -28 [ 539.373764][ T9296] loop1: detected capacity change from 0 to 2048 [ 539.425817][ T9295] EXT4-fs (loop5): 1 orphan inode deleted [ 539.462448][ T5744] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.462503][ T5744] usb 4-1: config 0 has no interfaces? [ 539.608030][ T5744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.608094][ T5744] usb 4-1: Product: syz [ 539.608128][ T5744] usb 4-1: Manufacturer: syz [ 539.608148][ T5744] usb 4-1: SerialNumber: syz [ 539.816354][ T52] Bluetooth: hci2: command tx timeout [ 539.853252][ T7128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.274681][ T9296] Alternate GPT is invalid, using primary GPT. [ 540.283005][ T9296] loop1: p2 p3 p7 [ 541.441252][ T5744] usb 4-1: config 0 descriptor?? [ 541.901651][ T52] Bluetooth: hci2: command tx timeout [ 542.947523][ T9295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 543.004469][ T7128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.043732][ T7128] bond0 (unregistering): Released all slaves [ 543.091265][ T5744] usb 4-1: can't set config #0, error -71 [ 543.127436][ T5744] usb 4-1: USB disconnect, device number 23 [ 543.375918][ T7271] udevd[7271]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 543.409485][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 543.428164][ T5623] udevd[5623]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 543.516467][ T9312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.628303][ T6301] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.803725][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 544.821854][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 544.840741][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 544.841306][ T31] audit: type=1326 audit(1787112967.586:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="syz.5.856" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 544.852389][ T31] audit: type=1326 audit(1787112967.606:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="syz.5.856" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 544.882389][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 544.913138][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 545.001612][ T31] audit: type=1326 audit(1787112967.746:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="syz.5.856" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 545.001659][ T31] audit: type=1326 audit(1787112967.746:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 545.001696][ T31] audit: type=1326 audit(1787112967.746:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 545.083503][ T31] audit: type=1326 audit(1787112967.816:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 545.083567][ T31] audit: type=1326 audit(1787112967.816:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 545.083624][ T31] audit: type=1326 audit(1787112967.816:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 545.147663][ T31] audit: type=1326 audit(1787112967.886:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 545.177949][ T31] audit: type=1326 audit(1787112967.926:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 545.302537][ T9321] Cannot find add_set index 0 as target [ 545.421694][ T9327] loop1: detected capacity change from 0 to 1024 [ 545.448822][ T9327] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 545.916693][ T7128] hsr_slave_0: left promiscuous mode [ 545.935940][ T7128] hsr_slave_1: left promiscuous mode [ 545.936866][ T7128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.936894][ T7128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.047052][ T7128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.047106][ T7128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.090999][ T7128] veth1_macvtap: left promiscuous mode [ 546.091068][ T7128] veth0_macvtap: left promiscuous mode [ 546.091382][ T7128] veth1_vlan: left promiscuous mode [ 546.091560][ T7128] veth0_vlan: left promiscuous mode [ 547.026121][ T5637] Bluetooth: hci5: command tx timeout [ 548.071515][ T7128] team0 (unregistering): Port device team_slave_1 removed [ 548.131498][ T7128] team0 (unregistering): Port device team_slave_0 removed [ 548.172409][ T9350] loop6: detected capacity change from 0 to 2048 [ 548.257303][ T9352] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 548.413413][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz.5.861'. [ 548.516079][ T9356] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer. [ 548.560829][ T7128] team0 (unregistering): Port device dummy0 removed [ 548.569248][ T9356] loop6: detected capacity change from 0 to 1764 [ 548.655055][ T9358] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 548.736853][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 549.096497][ T5637] Bluetooth: hci5: command tx timeout [ 549.340437][ T7128] IPVS: stop unused estimator thread 0... [ 549.340818][ T5805] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 549.507391][ T5805] usb 2-1: Using ep0 maxpacket: 32 [ 549.515660][ T5805] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 549.530636][ T5805] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.541848][ T5805] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.559599][ T5805] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 549.559641][ T5805] usb 2-1: Product: syz [ 549.559670][ T5805] usb 2-1: Manufacturer: syz [ 549.607621][ T5805] hub 2-1:4.0: USB hub found [ 549.961655][ T5805] hub 2-1:4.0: 2 ports detected [ 550.138555][ T9253] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.146515][ T9253] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.161065][ T9253] bridge_slave_0: entered allmulticast mode [ 550.168673][ T9253] bridge_slave_0: entered promiscuous mode [ 550.251658][ T9253] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.307958][ T9253] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.315363][ T9253] bridge_slave_1: entered allmulticast mode [ 550.693347][ T9253] bridge_slave_1: entered promiscuous mode [ 550.763648][ T9367] loop1: detected capacity change from 0 to 512 [ 550.823090][ T9367] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 550.823151][ T9367] EXT4-fs (loop1): inodes count not valid: 32 vs 800 [ 551.051131][ T9253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.176399][ T5637] Bluetooth: hci5: command tx timeout [ 551.187666][ T9367] loop1: detected capacity change from 0 to 4096 [ 551.197742][ T9253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.204032][ T9367] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 551.555150][ T7128] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.656617][ T5805] hub 2-1:4.0: config failed, can't get hub status (err -32) [ 551.812717][ T9394] netlink: 148 bytes leftover after parsing attributes in process `syz.5.866'. [ 551.822171][ T9367] netlink: 32 bytes leftover after parsing attributes in process `syz.1.863'. [ 551.881498][ T9253] team0: Port device team_slave_0 added [ 551.893272][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 551.928590][ T9253] team0: Port device team_slave_1 added [ 551.967980][ T5723] usb 2-1: USB disconnect, device number 61 [ 552.161185][ T7128] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.260173][ T5637] Bluetooth: hci5: command tx timeout [ 553.850343][ T9253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.860313][ T9253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.860374][ T9253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.922058][ T9253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.932481][ T9253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.956876][ T9253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.044658][ T9425] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 554.044658][ T9425] The task syz.5.870 (9425) triggered the difference, watch for misbehavior. [ 554.285308][ T9429] loop6: detected capacity change from 0 to 512 [ 554.299528][ T9429] EXT4-fs: Ignoring removed bh option [ 554.299740][ T9429] EXT4-fs: Ignoring removed mblk_io_submit option [ 554.299795][ T9429] EXT4-fs: Ignoring removed orlov option [ 554.313428][ T9429] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 554.416068][ T9429] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 554.417984][ T9429] EXT4-fs (loop6): orphan cleanup on readonly fs [ 554.500905][ T9429] __quota_error: 138 callbacks suppressed [ 554.500999][ T9429] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 4 [ 554.501612][ T9429] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 554.501896][ T9429] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.871: Failed to acquire dquot type 1 [ 554.501933][ T9429] loop6: lost filesystem error report for type 5 error -5 [ 554.509926][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 554.509950][ C1] EXT4-fs (loop6): last error at time 1787112977: ext4_acquire_dquot:7069 [ 554.603581][ T9429] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm syz.6.871: Invalid block bitmap block 0 in block_group 0 [ 554.617345][ T9429] loop6: lost filesystem error report for type 5 error -117 [ 554.627363][ T9429] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm syz.6.871: Invalid block bitmap block 0 in block_group 0 [ 554.627461][ T9429] loop6: lost filesystem error report for type 5 error -117 [ 554.637817][ T9429] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm syz.6.871: Invalid block bitmap block 0 in block_group 0 [ 554.637904][ T9429] loop6: lost filesystem error report for type 5 error -117 [ 554.651645][ T9429] Quota error (device loop6): write_blk: dquota write failed [ 554.652253][ T9429] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 554.652405][ T9429] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.871: Failed to acquire dquot type 1 [ 554.652437][ T9429] loop6: lost filesystem error report for type 5 error -28 [ 554.695999][ T9429] Quota error (device loop6): write_blk: dquota write failed [ 554.704336][ T9429] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 554.704473][ T9429] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.871: Failed to acquire dquot type 1 [ 554.704510][ T9429] loop6: lost filesystem error report for type 5 error -28 [ 554.822135][ T9429] EXT4-fs (loop6): 1 orphan inode deleted [ 555.625063][ T9429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 555.706962][ T9429] netlink: 52 bytes leftover after parsing attributes in process `syz.6.871'. [ 556.279530][ T7128] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.452160][ T7613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.229681][ T9440] loop6: detected capacity change from 0 to 131072 [ 557.255351][ T9440] F2FS-fs (loop6): invalid crc value [ 557.323756][ T9440] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 557.341853][ T9440] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 557.494016][ T7128] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.617718][ T9253] hsr_slave_0: entered promiscuous mode [ 557.627364][ T9253] hsr_slave_1: entered promiscuous mode [ 557.651718][ T9253] debugfs: 'hsr0' already exists in 'hsr' [ 557.651754][ T9253] Cannot create hsr debugfs directory [ 557.723138][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 557.950669][ T31] audit: type=1326 audit(1787112980.696:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.5.878" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 557.950735][ T31] audit: type=1326 audit(1787112980.696:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.5.878" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 558.014120][ T31] audit: type=1326 audit(1787112980.756:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.5.878" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 558.014191][ T31] audit: type=1326 audit(1787112980.756:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd899e0d9 code=0x7ffc0000 [ 558.153276][ T9455] Cannot find add_set index 0 as target [ 558.168786][ T9449] loop1: detected capacity change from 0 to 32768 [ 558.375010][ T9449] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 559.057044][ T9319] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.060960][ T9319] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.061345][ T9319] bridge_slave_0: entered allmulticast mode [ 559.079660][ T9319] bridge_slave_0: entered promiscuous mode [ 559.225967][ T9319] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.227247][ T9319] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.227760][ T9319] bridge_slave_1: entered allmulticast mode [ 559.250891][ T9319] bridge_slave_1: entered promiscuous mode [ 559.551660][ T7128] bridge_slave_1: left allmulticast mode [ 559.551736][ T7128] bridge_slave_1: left promiscuous mode [ 559.552449][ T7128] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.622185][ T7128] bridge_slave_0: left allmulticast mode [ 559.622253][ T7128] bridge_slave_0: left promiscuous mode [ 559.629581][ T7128] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.984226][ T9467] loop5: detected capacity change from 0 to 32768 [ 560.015881][ T9467] (syz.5.879,9467,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 560.055320][ T9467] (syz.5.879,9467,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 560.254485][ T5621] ocfs2: Unmounting device (7,1) on (node local) [ 560.363615][ T7128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.409431][ T7128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.448527][ T7128] bond0 (unregistering): Released all slaves [ 560.696732][ T9319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.730940][ T9319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.743909][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12 [ 561.215185][ T9491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.562143][ T9495] loop5: detected capacity change from 0 to 1024 [ 562.892297][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.892416][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.040171][ T9319] team0: Port device team_slave_0 added [ 563.191521][ T9319] team0: Port device team_slave_1 added [ 563.566684][ T9319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.566720][ T9319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.566774][ T9319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.581395][ T9319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.581446][ T9319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.581601][ T9319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.819110][ T7128] hsr_slave_0: left promiscuous mode [ 563.847586][ T7128] hsr_slave_1: left promiscuous mode [ 563.886307][ T7128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.886346][ T7128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.181001][ T7128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.181193][ T7128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.250934][ T7128] veth1_macvtap: left promiscuous mode [ 564.251003][ T7128] veth0_macvtap: left promiscuous mode [ 564.251291][ T7128] veth1_vlan: left promiscuous mode [ 564.251477][ T7128] veth0_vlan: left promiscuous mode [ 564.789142][ T9499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.884'. [ 564.863962][ T9514] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer. [ 564.950843][ T9514] loop6: detected capacity change from 0 to 1764 [ 565.054076][ T9517] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 565.310190][ T7128] team0 (unregistering): Port device team_slave_1 removed [ 565.349837][ T7128] team0 (unregistering): Port device team_slave_0 removed [ 565.612483][ T7128] team0 (unregistering): Port device dummy0 removed [ 565.896955][ T52] Bluetooth: hci5: command 0x0405 tx timeout [ 566.109222][ T9319] hsr_slave_0: entered promiscuous mode [ 566.112041][ T9319] hsr_slave_1: entered promiscuous mode [ 566.123840][ T9319] debugfs: 'hsr0' already exists in 'hsr' [ 566.123875][ T9319] Cannot create hsr debugfs directory [ 566.184991][ T9253] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 566.212048][ T9253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 566.260439][ T9253] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 566.302785][ T9253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 566.325114][ T9253] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 566.370868][ T9253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 566.445646][ T9253] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 566.465979][ T9253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 566.476261][ T30] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 566.530357][ T9530] loop1: detected capacity change from 0 to 128 [ 566.555352][ T9530] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 566.646798][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 566.655777][ T9530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 566.665834][ T30] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 566.700214][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.700269][ T30] usb 6-1: Product: syz [ 566.700287][ T30] usb 6-1: Manufacturer: syz [ 566.700367][ T30] usb 6-1: SerialNumber: syz [ 566.718656][ T30] usb 6-1: config 0 descriptor?? [ 566.954880][ T30] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 567.183241][ T30] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 567.504587][ T9319] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 567.525470][ T9319] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 567.533531][ T9319] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 567.579640][ T9319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 567.591624][ T9319] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 567.626672][ T9319] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 567.634185][ T9319] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 567.657470][ T9319] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 567.739271][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13 [ 567.760196][ T9253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.875270][ T9253] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.955771][ T9559] loop1: detected capacity change from 0 to 1024 [ 567.969706][ T9559] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 568.009687][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.009811][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.062748][ T7128] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.063035][ T7128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.280779][ T9561] FAULT_INJECTION: forcing a failure. [ 568.280779][ T9561] name failslab, interval 1, probability 0, space 0, times 0 [ 568.280843][ T9561] CPU: 1 UID: 0 PID: 9561 Comm: syz.1.892 Not tainted syzkaller #0 PREEMPT(full) [ 568.280869][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 568.280904][ T9561] Call Trace: [ 568.280935][ T9561] [ 568.280968][ T9561] dump_stack_lvl+0xe8/0x150 [ 568.281104][ T9561] should_fail_ex+0x410/0x560 [ 568.281221][ T9561] ? __alloc_skb+0x1db/0x7a0 [ 568.281283][ T9561] should_failslab+0xa8/0x100 [ 568.281370][ T9561] ? __alloc_skb+0x1db/0x7a0 [ 568.281417][ T9561] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 568.281511][ T9561] ? __alloc_skb+0x18d/0x7a0 [ 568.281559][ T9561] ? __alloc_skb+0x1db/0x7a0 [ 568.281627][ T9561] __alloc_skb+0x1db/0x7a0 [ 568.281686][ T9561] alloc_skb_with_frags+0xc6/0x760 [ 568.281738][ T9561] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 568.281818][ T9561] sock_alloc_send_pskb+0x878/0x990 [ 568.282013][ T9561] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 568.282080][ T9561] ? aa_file_perm+0x18b/0x15f0 [ 568.282150][ T9561] ? aa_sk_perm+0x713/0x900 [ 568.282206][ T9561] ? aa_file_perm+0x18b/0x15f0 [ 568.282279][ T9561] hci_sock_sendmsg+0x208/0xf50 [ 568.282429][ T9561] ? __pfx_aa_sk_perm+0x10/0x10 [ 568.282502][ T9561] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 568.282571][ T9561] ? apparmor_socket_sendmsg+0x98/0x360 [ 568.282650][ T9561] ? lock_acquire+0x115/0x350 [ 568.282703][ T9561] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 568.282759][ T9561] sock_sendmsg_nosec+0x13a/0x180 [ 568.282829][ T9561] sock_write_iter+0x2de/0x3e0 [ 568.282907][ T9561] ? __pfx_sock_write_iter+0x10/0x10 [ 568.283021][ T9561] ? bpf_lsm_file_permission+0x9/0x20 [ 568.283098][ T9561] ? security_file_permission+0x75/0x260 [ 568.283204][ T9561] vfs_write+0x612/0xba0 [ 568.283318][ T9561] ? __pfx_vfs_write+0x10/0x10 [ 568.283428][ T9561] ? __fget_files+0x2a/0x420 [ 568.283535][ T9561] ksys_write+0x150/0x270 [ 568.283630][ T9561] ? __pfx_ksys_write+0x10/0x10 [ 568.283748][ T9561] do_syscall_64+0x166/0x520 [ 568.283870][ T9561] ? trace_irq_disable+0x3b/0x140 [ 568.283940][ T9561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.283996][ T9561] ? clear_bhb_loop+0x70/0xc0 [ 568.284070][ T9561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.284132][ T9561] RIP: 0033:0x7f7bd9f9e0d9 [ 568.284195][ T9561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.284241][ T9561] RSP: 002b:00007f7bdadba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 568.284293][ T9561] RAX: ffffffffffffffda RBX: 00007f7bda225fa0 RCX: 00007f7bd9f9e0d9 [ 568.284342][ T9561] RDX: 000000000000000d RSI: 0000200000000000 RDI: 000000000000001a [ 568.284373][ T9561] RBP: 00007f7bdadba090 R08: 0000000000000000 R09: 0000000000000000 [ 568.284410][ T9561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.284441][ T9561] R13: 00007f7bda226038 R14: 00007f7bda225fa0 R15: 00007fffb4f13988 [ 568.284512][ T9561] [ 568.857386][ T9319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.954519][ T9319] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.470268][ T6708] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.470409][ T6708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.507948][ T6708] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.508173][ T6708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.587752][ T9574] capability: warning: `syz.1.893' uses 32-bit capabilities (legacy support in use) [ 569.799648][ T5708] usb 6-1: USB disconnect, device number 34 [ 570.050863][ T9588] 9p: Bad value for 'rfdno' [ 570.068133][ T9584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.936102][ T9599] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer. [ 573.125248][ T9599] loop5: detected capacity change from 0 to 1764 [ 573.218379][ T9599] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 573.634521][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14 [ 574.089912][ T9253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.195856][ T9319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.470020][ T9635] loop1: detected capacity change from 0 to 1024 [ 574.493411][ T9635] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 574.879224][ T9642] netlink: 28 bytes leftover after parsing attributes in process `syz.6.901'. [ 575.159987][ T9655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.914866][ T9253] veth0_vlan: entered promiscuous mode [ 577.052399][ T9253] veth1_vlan: entered promiscuous mode [ 577.116365][ T5723] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 577.133404][ T9319] veth0_vlan: entered promiscuous mode [ 577.170163][ T9319] veth1_vlan: entered promiscuous mode [ 577.223631][ T9253] veth0_macvtap: entered promiscuous mode [ 577.266452][ T5723] usb 2-1: Using ep0 maxpacket: 8 [ 577.270991][ T5723] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 577.291323][ T9253] veth1_macvtap: entered promiscuous mode [ 577.292319][ T5723] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.292442][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.341754][ T5723] usb 2-1: config 0 descriptor?? [ 577.363544][ T5723] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 577.393527][ T9319] veth0_macvtap: entered promiscuous mode [ 577.421964][ T9319] veth1_macvtap: entered promiscuous mode [ 577.434827][ T9253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.462184][ T9253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.497878][ T6708] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.497950][ T6708] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.497999][ T6708] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.498035][ T6708] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.577872][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15 [ 577.603871][ T9319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.679896][ T9319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.919823][ T159] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.929179][ T159] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.022022][ T5723] gspca_vc032x: reg_r err -32 [ 578.022175][ T5723] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 578.061321][ T6708] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.072721][ T159] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.106101][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.106144][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.433104][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.433145][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.516255][ T5744] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 578.639963][ T5826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.640000][ T5826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.679751][ T5744] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 578.688998][ T5744] usb 7-1: too many configurations: 13, using maximum allowed: 8 [ 578.697377][ T5744] usb 7-1: config 0 has no interfaces? [ 578.704537][ T5744] usb 7-1: config 0 has no interfaces? [ 578.714788][ T5744] usb 7-1: config 0 has no interfaces? [ 578.729186][ T5744] usb 7-1: config 0 has no interfaces? [ 578.735573][ T5744] usb 7-1: config 0 has no interfaces? [ 578.746620][ T5744] usb 7-1: config 0 has no interfaces? [ 578.754283][ T5744] usb 7-1: config 0 has no interfaces? [ 578.763427][ T5744] usb 7-1: config 0 has no interfaces? [ 578.788155][ T5744] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.788200][ T5744] usb 7-1: Product: syz [ 578.788231][ T5744] usb 7-1: Manufacturer: syz [ 578.788251][ T5744] usb 7-1: SerialNumber: syz [ 578.830409][ T5744] usb 7-1: config 0 descriptor?? [ 579.021758][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.021798][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.067400][ T5744] usb 7-1: USB disconnect, device number 24 [ 579.389951][ T9700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.816189][ T5744] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 580.011811][ T5744] usb 7-1: Using ep0 maxpacket: 32 [ 580.045729][ T5744] usb 7-1: unable to get BOS descriptor or descriptor too short [ 580.055210][ T5744] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 580.171498][ T5744] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 580.171606][ T5744] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 580.173451][ T5744] usb 7-1: config 14 has no interface number 0 [ 580.173588][ T5744] usb 7-1: config 14 has no interface number 1 [ 580.173961][ T5744] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 580.174038][ T5744] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 580.174135][ T5744] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 580.174176][ T5744] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 580.174275][ T5744] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 580.174318][ T5744] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.174356][ T5744] usb 7-1: config 14 interface 57 has no altsetting 0 [ 580.174445][ T5744] usb 7-1: config 14 interface 228 has no altsetting 0 [ 580.505236][ T5744] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.505323][ T5744] usb 7-1: Product: syz [ 580.518245][ T5744] usb 7-1: Manufacturer: syz [ 580.523074][ T5744] usb 7-1: SerialNumber: syz [ 580.817115][ T5277] 8021q: adding VLAN 0 to HW filter on device eth16 [ 580.920992][ T5708] usb 2-1: USB disconnect, device number 62 [ 581.178049][ T5716] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 581.251292][ T5744] legousbtower 7-1:14.57: interrupt endpoints not found [ 581.546256][ T5716] usb 9-1: Using ep0 maxpacket: 8 [ 581.675497][ T5716] usb 9-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 581.781846][ T5716] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 65, changing to 10 [ 581.782631][ T5716] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.782704][ T5716] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 581.782750][ T5716] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.337217][ T5716] usb 9-1: config 0 descriptor?? [ 582.665359][ T5744] legousbtower 7-1:14.228: get version request failed: -71 [ 582.665564][ T5744] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 582.744150][ T5744] usb 7-1: USB disconnect, device number 25 [ 583.396416][ T5716] sony 0003:054C:042F.0007: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 584.184566][ T5716] sony 0003:054C:042F.0007: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.8-1/input0 [ 584.196391][ T5716] sony 0003:054C:042F.0007: failed to claim input [ 584.543913][ T9733] ================================================================== [ 584.543937][ T9733] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 584.544051][ T9733] Read of size 24 at addr ffff88807d0143c0 by task fido_id/9733 [ 584.544095][ T9733] [ 584.544133][ T9733] CPU: 0 UID: 0 PID: 9733 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) [ 584.544191][ T9733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 584.544220][ T9733] Call Trace: [ 584.544229][ T9733] [ 584.544238][ T9733] dump_stack_lvl+0xe8/0x150 [ 584.544271][ T9733] print_address_description+0x55/0x1e0 [ 584.544310][ T9733] ? report_descriptor_read+0xb5/0x100 [ 584.544335][ T9733] print_report+0x58/0x70 [ 584.544360][ T9733] kasan_report+0x117/0x150 [ 584.544383][ T9733] ? lock_acquire+0x115/0x350 [ 584.544404][ T9733] ? report_descriptor_read+0xb5/0x100 [ 584.544433][ T9733] kasan_check_range+0x264/0x2c0 [ 584.544456][ T9733] ? report_descriptor_read+0xb5/0x100 [ 584.544482][ T9733] __asan_memcpy+0x29/0x70 [ 584.544512][ T9733] report_descriptor_read+0xb5/0x100 [ 584.544538][ T9733] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 584.544587][ T9733] kernfs_fop_read_iter+0x434/0x6a0 [ 584.544615][ T9733] vfs_read+0x595/0xa80 [ 584.544652][ T9733] ? __pfx_vfs_read+0x10/0x10 [ 584.544681][ T9733] ? do_sys_openat2+0x14e/0x200 [ 584.544704][ T9733] ? kmem_cache_free+0x182/0x650 [ 584.544733][ T9733] ksys_read+0x150/0x270 [ 584.544763][ T9733] ? __pfx_ksys_read+0x10/0x10 [ 584.544797][ T9733] do_syscall_64+0x166/0x520 [ 584.544825][ T9733] ? trace_irq_disable+0x3b/0x140 [ 584.544846][ T9733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.544867][ T9733] ? clear_bhb_loop+0x70/0xc0 [ 584.544890][ T9733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.544911][ T9733] RIP: 0033:0x7f639c7e1407 [ 584.544935][ T9733] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 584.544953][ T9733] RSP: 002b:00007ffd0b43fb60 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 584.544975][ T9733] RAX: ffffffffffffffda RBX: 00007f639c755880 RCX: 00007f639c7e1407 [ 584.544991][ T9733] RDX: 0000000000001000 RSI: 00007ffd0b43fbb0 RDI: 0000000000000004 [ 584.545004][ T9733] RBP: 000055ccfbb9e730 R08: 0000000000000000 R09: 0000000000000000 [ 584.545016][ T9733] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ccfbb9d930 [ 584.545029][ T9733] R13: 00007ffd0b43fbb0 R14: 0000000000000004 R15: 000055cce7e434d8 [ 584.545052][ T9733] [ 584.545059][ T9733] [ 584.545065][ T9733] Allocated by task 5716: [ 584.545107][ T9733] kasan_save_track+0x3e/0x80 [ 584.545126][ T9733] __kasan_kmalloc+0x93/0xb0 [ 584.545146][ T9733] __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 584.545177][ T9733] kmemdup_noprof+0x2b/0x70 [ 584.545206][ T9733] hid_open_report+0x1fa/0xf00 [ 584.545256][ T9733] sony_probe+0x1f3/0x6e0 [ 584.545342][ T9733] hid_device_probe+0x46a/0x870 [ 584.545375][ T9733] really_probe+0x254/0xae0 [ 584.545452][ T9733] __driver_probe_device+0x1e8/0x360 [ 584.545467][ T9733] driver_probe_device+0x4f/0x240 [ 584.545483][ T9733] __device_attach_driver+0x270/0x410 [ 584.545499][ T9733] bus_for_each_drv+0x258/0x2f0 [ 584.545541][ T9733] __device_attach+0x2c4/0x450 [ 584.545567][ T9733] device_initial_probe+0xa1/0xd0 [ 584.545593][ T9733] bus_probe_device+0x12a/0x220 [ 584.545613][ T9733] device_add+0x7d7/0xb80 [ 584.545695][ T9733] hid_add_device+0x272/0x3e0 [ 584.545713][ T9733] usbhid_probe+0x9d4/0xde0 [ 584.545764][ T9733] usb_probe_interface+0x788/0xe50 [ 584.545833][ T9733] really_probe+0x254/0xae0 [ 584.545849][ T9733] __driver_probe_device+0x1e8/0x360 [ 584.545864][ T9733] driver_probe_device+0x4f/0x240 [ 584.545880][ T9733] __device_attach_driver+0x270/0x410 [ 584.545897][ T9733] bus_for_each_drv+0x258/0x2f0 [ 584.545923][ T9733] __device_attach+0x2c4/0x450 [ 584.545949][ T9733] device_initial_probe+0xa1/0xd0 [ 584.545976][ T9733] bus_probe_device+0x12a/0x220 [ 584.545996][ T9733] device_add+0x7d7/0xb80 [ 584.546019][ T9733] usb_set_configuration+0x1ad8/0x2180 [ 584.546036][ T9733] usb_generic_driver_probe+0x8d/0x150 [ 584.546076][ T9733] usb_probe_device+0x1c3/0x3b0 [ 584.546093][ T9733] really_probe+0x254/0xae0 [ 584.546107][ T9733] __driver_probe_device+0x1e8/0x360 [ 584.546123][ T9733] driver_probe_device+0x4f/0x240 [ 584.546139][ T9733] __device_attach_driver+0x270/0x410 [ 584.546155][ T9733] bus_for_each_drv+0x258/0x2f0 [ 584.546175][ T9733] __device_attach+0x2c4/0x450 [ 584.546200][ T9733] device_initial_probe+0xa1/0xd0 [ 584.546227][ T9733] bus_probe_device+0x12a/0x220 [ 584.546247][ T9733] device_add+0x7d7/0xb80 [ 584.546270][ T9733] usb_new_device+0x9aa/0x1690 [ 584.546336][ T9733] hub_event+0x28e8/0x4d30 [ 584.546352][ T9733] process_scheduled_works+0xc3d/0x1630 [ 584.546374][ T9733] worker_thread+0xa47/0xfb0 [ 584.546398][ T9733] kthread+0x38b/0x480 [ 584.546413][ T9733] ret_from_fork+0x514/0xb70 [ 584.546429][ T9733] ret_from_fork_asm+0x1a/0x30 [ 584.546455][ T9733] [ 584.546460][ T9733] The buggy address belongs to the object at ffff88807d0143c0 [ 584.546460][ T9733] which belongs to the cache kmalloc-32 of size 32 [ 584.546476][ T9733] The buggy address is located 0 bytes inside of [ 584.546476][ T9733] freed 32-byte region [ffff88807d0143c0, ffff88807d0143e0) [ 584.546494][ T9733] [ 584.546499][ T9733] The buggy address belongs to the physical page: [ 584.546513][ T9733] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d014 [ 584.546531][ T9733] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 584.546546][ T9733] page_type: f5(slab) [ 584.546562][ T9733] raw: 00fff00000000000 ffff88801b041780 dead000000000100 dead000000000122 [ 584.546579][ T9733] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 584.546589][ T9733] page dumped because: kasan: bad access detected [ 584.546605][ T9733] page_owner tracks the page as allocated [ 584.546613][ T9733] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5365, tgid 5365 (dhcpcd-run-hook), ts 51302061988 [ 584.546659][ T9733] post_alloc_hook+0x1f9/0x250 [ 584.546686][ T9733] get_page_from_freelist+0x2209/0x2280 [ 584.546705][ T9733] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 584.546723][ T9733] allocate_slab+0x7d/0x620 [ 584.546746][ T9733] refill_objects+0x2d5/0x350 [ 584.546769][ T9733] __pcs_replace_empty_main+0x2c8/0x6c0 [ 584.546792][ T9733] __kmalloc_cache_noprof+0x39b/0x600 [ 584.546808][ T9733] kmem_cache_free+0x156/0x650 [ 584.546825][ T9733] vms_complete_munmap_vmas+0x897/0xbe0 [ 584.546856][ T9733] __mmap_complete+0xab/0x4b0 [ 584.546877][ T9733] mmap_region+0x11d0/0x2240 [ 584.546896][ T9733] do_mmap+0xe0a/0x1300 [ 584.546943][ T9733] vm_mmap_pgoff+0x272/0x4e0 [ 584.546961][ T9733] ksys_mmap_pgoff+0x4dc/0x760 [ 584.546985][ T9733] do_syscall_64+0x166/0x520 [ 584.547010][ T9733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.547029][ T9733] page last free pid 5364 tgid 5364 ts 51288864587 stack trace: [ 584.547043][ T9733] __free_frozen_pages+0xc93/0xd90 [ 584.547070][ T9733] tlb_remove_table_rcu+0x85/0x100 [ 584.547087][ T9733] rcu_core+0x926/0x1260 [ 584.547106][ T9733] handle_softirqs+0x226/0x860 [ 584.547130][ T9733] __irq_exit_rcu+0xcb/0x220 [ 584.547164][ T9733] irq_exit_rcu+0x9/0x30 [ 584.547186][ T9733] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 584.547267][ T9733] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 584.547286][ T9733] [ 584.547291][ T9733] Memory state around the buggy address: [ 584.547327][ T9733] ffff88807d014280: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 584.547341][ T9733] ffff88807d014300: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 584.547354][ T9733] >ffff88807d014380: fa fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 584.547364][ T9733] ^ [ 584.547374][ T9733] ffff88807d014400: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 584.547388][ T9733] ffff88807d014480: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 584.547398][ T9733] ================================================================== [ 584.548949][ T9733] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 585.332383][ T9733] CPU: 0 UID: 0 PID: 9733 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) [ 585.341407][ T9733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.351482][ T9733] Call Trace: [ 585.354771][ T9733] [ 585.357703][ T9733] vpanic+0x56d/0xa60 [ 585.361709][ T9733] ? __pfx_vpanic+0x10/0x10 [ 585.366215][ T9733] ? __pfx___schedule+0x10/0x10 [ 585.371094][ T9733] panic+0xc5/0xd0 [ 585.374830][ T9733] ? __pfx_panic+0x10/0x10 [ 585.379267][ T9733] ? preempt_schedule_common+0x7f/0xd0 [ 585.384735][ T9733] ? report_descriptor_read+0xb5/0x100 [ 585.390194][ T9733] check_panic_on_warn+0x89/0xb0 [ 585.395124][ T9733] ? report_descriptor_read+0xb5/0x100 [ 585.400578][ T9733] end_report+0x73/0x170 [ 585.404828][ T9733] ? report_descriptor_read+0xb5/0x100 [ 585.410292][ T9733] kasan_report+0x128/0x150 [ 585.414822][ T9733] ? lock_acquire+0x115/0x350 [ 585.419501][ T9733] ? report_descriptor_read+0xb5/0x100 [ 585.424967][ T9733] kasan_check_range+0x264/0x2c0 [ 585.429909][ T9733] ? report_descriptor_read+0xb5/0x100 [ 585.435378][ T9733] __asan_memcpy+0x29/0x70 [ 585.439795][ T9733] report_descriptor_read+0xb5/0x100 [ 585.445108][ T9733] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 585.450575][ T9733] kernfs_fop_read_iter+0x434/0x6a0 [ 585.455866][ T9733] vfs_read+0x595/0xa80 [ 585.460030][ T9733] ? __pfx_vfs_read+0x10/0x10 [ 585.464711][ T9733] ? do_sys_openat2+0x14e/0x200 [ 585.469580][ T9733] ? kmem_cache_free+0x182/0x650 [ 585.474537][ T9733] ksys_read+0x150/0x270 [ 585.478800][ T9733] ? __pfx_ksys_read+0x10/0x10 [ 585.483569][ T9733] do_syscall_64+0x166/0x520 [ 585.488164][ T9733] ? trace_irq_disable+0x3b/0x140 [ 585.493192][ T9733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.499276][ T9733] ? clear_bhb_loop+0x70/0xc0 [ 585.503966][ T9733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.509854][ T9733] RIP: 0033:0x7f639c7e1407 [ 585.514264][ T9733] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 585.533862][ T9733] RSP: 002b:00007ffd0b43fb60 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 585.542275][ T9733] RAX: ffffffffffffffda RBX: 00007f639c755880 RCX: 00007f639c7e1407 [ 585.550242][ T9733] RDX: 0000000000001000 RSI: 00007ffd0b43fbb0 RDI: 0000000000000004 [ 585.558207][ T9733] RBP: 000055ccfbb9e730 R08: 0000000000000000 R09: 0000000000000000 [ 585.566180][ T9733] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ccfbb9d930 [ 585.574189][ T9733] R13: 00007ffd0b43fbb0 R14: 0000000000000004 R15: 000055cce7e434d8 [ 585.582182][ T9733] [ 585.585945][ T9733] Kernel Offset: disabled [ 585.590281][ T9733] Rebooting in 86400 seconds..