last executing test programs: 4m25.138201749s ago: executing program 4 (id=193): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x81, 0x23d, &(0x7f0000001480)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0x0, 0x1}, {0xf, 0x1}]}]}}, &(0x7f0000000040)=""/36, 0x3e, 0x24, 0x1, 0x8000}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000000c0)={{0x1, 0x2, 0x4, 0x3, 0x8000}, 0x1ff, 0x10, 'id0\x00', 'timer1\x00', 0x0, 0x1, 0x5, 0x8000, 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x250, 0x700001b, 0x148, 0x0, 0x148, 0x350, 0x206, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'macvlan1\x00', {0xff}, {}, 0xff84}, 0x1ea, 0x1e8, 0x250, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0\x00', {0xff}, 'vxcan1\x00', {0xff}, 0x9}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x6e20, @broadcast}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2c42, 0x0) 4m22.778423437s ago: executing program 4 (id=199): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000001000001841"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000520001002bbd70000000000002000000080007"], 0x1c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x70}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 4m21.057859413s ago: executing program 4 (id=206): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(0xffffffffffffffff, 0x80186e82, &(0x7f0000000240)={&(0x7f0000000080)=[{0x0, 0x0, 0x8000000000000001, 0x0, 0x1ffc000, 0x0, 0xc, 0x4}, {0x1, 0x0, 0xffffffffffffffff, 0x7, 0x2, 0x2, 0x5, 0x7}], 0x2, 0x38, 0x0, 0x10000}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0x20, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x1000000}}}}}, 0x0) 4m19.781441565s ago: executing program 4 (id=208): socket(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) epoll_create1(0x0) gettid() r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x9e0000, 0x1, 0x4000006, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x7b, '\x00', @p_u32=0x0}}) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 4m17.394754926s ago: executing program 4 (id=210): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) acct(0x0) geteuid() socket(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 4m15.991639082s ago: executing program 4 (id=211): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x201, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f00001c1000)=[{0xa000006, 0x0, 0x0, 0x4, 0xffffffff}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0xc00, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688140032000103000aff3f000057fc5ad90200bb6a880000d6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3a5f7", 0xb8) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x7, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d3, &(0x7f0000000100)) (async) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000, 0x40000000}], 0x0) (async) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 4m0.8208317s ago: executing program 32 (id=211): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x201, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f00001c1000)=[{0xa000006, 0x0, 0x0, 0x4, 0xffffffff}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0xc00, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688140032000103000aff3f000057fc5ad90200bb6a880000d6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3a5f7", 0xb8) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x7, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d3, &(0x7f0000000100)) (async) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000, 0x40000000}], 0x0) (async) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 19.807568229s ago: executing program 5 (id=673): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 18.718302099s ago: executing program 2 (id=677): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x1, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[0x0]) mount(0x0, 0x0, 0x0, 0x800000, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000003000000850000008c0000009500000000000000faa040d07b3a079024d8fd52"], &(0x7f00000002c0)='GPL\x00', 0x2, 0xb1, &(0x7f0000000040)=""/177, 0x40f00, 0x28}, 0x94) 16.149878865s ago: executing program 5 (id=678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640), 0x600, 0x0) fallocate(r1, 0x1, 0x8001, 0x0) syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa, 0x9}]}) ioctl$DVB_DEMUX_DMX_GET_STC(r1, 0xc0106f32, &(0x7f0000000000)={0x81}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f00000005c0)={0x1df90, 0x340, 0x140, 0x0}) 14.882262133s ago: executing program 2 (id=680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRESHEX], 0x0, 0x7, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) msgget$private(0x0, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000003c0)={&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f00000002c0)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="3ee7d1da04000000050000000500000002000000a6a7b3a5d91011a8c8bf34211808000000000000002b16da7480770582335607f236e5dc64ce9c84b9defd26aa4883cae86a6d56a1892c79439e895f1973244471cba5e3116eb67a6ab16e420e577381b29f8390b797f552abc8f4fdd6bf4113fd03c4cd8a0c8d80c4212a1cc0d08dc3b76c218da932ec81ed726fdf93e508a28e29cbc68d8665af3fe3399b7a3df05bf5ded87f6a788e579d715335cf682365627433978a02ce073cf6842dbe884cd31176d592b90e020ade97e79bac7d39de18db91580b270b9512cfa419e008693c49605e2163", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, 0x0) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x208840) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000480)={{0x8, 0x2, 0xfffffc01, 0x2, 'syz1\x00', 0x2}, 0x1, [0x10001, 0xfffffffffffffffd, 0x3, 0x9, 0x4, 0x6, 0x0, 0x6, 0x5, 0x8, 0x6, 0x99, 0x7, 0x8000000000000000, 0x8000001000, 0x101, 0x5, 0x4, 0x8, 0x18, 0xfffffffffffffffe, 0xfffffffffffffff6, 0x5, 0x9, 0x1000000, 0x9, 0x3, 0x6, 0xfffffffbfffffbff, 0x8, 0x3, 0x7, 0x9, 0x200, 0x8, 0x1, 0x4, 0x27, 0x10000, 0xfffffffffffffffd, 0x8, 0x3, 0x800, 0x0, 0x9, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffff7f, 0x5, 0xfc, 0x2, 0x2, 0x3, 0xffffffff8b2fe5d4, 0x6, 0x7, 0x5, 0x9, 0x6, 0x9, 0x4, 0xffffffffffffff00, 0x2, 0x8, 0x4, 0xa, 0x1, 0x1, 0x40, 0x2, 0x4, 0x1, 0x10, 0x1, 0x3, 0x100000000, 0x3ff, 0x80000000, 0x2, 0x4, 0x61, 0x4c2a644c, 0x5564, 0x5, 0x7fff, 0x4531, 0x400, 0x5, 0x7fffffffffffffff, 0x13b, 0x401, 0x7, 0x8, 0x8001, 0x3, 0x100000001, 0x6, 0x6, 0xc35, 0xf31e, 0x1, 0xffffffffffffff5f, 0x8, 0x8, 0x306dc643, 0x9, 0xffffffffffffffff, 0x8000000000000001, 0x1, 0x3, 0x3, 0x1ff, 0x9, 0x8, 0x1ff, 0x2, 0x7, 0x2, 0x34, 0x1f, 0x2, 0x9, 0x5c4, 0x4, 0x789, 0x9]}) 11.55995636s ago: executing program 5 (id=686): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, r1, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141082, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000440)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40)={0x2000000b}) r7 = socket$phonet(0x23, 0x2, 0x1) setuid(0xee00) ioctl$SIOCPNDELRESOURCE(r7, 0x89ef, &(0x7f0000000040)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) keyctl$update(0x2, r0, &(0x7f0000000140)="c4", 0x1) ioperm(0x5, 0x9, 0x80) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000000e40)=[{0x5, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001200), 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x800040, &(0x7f00000000c0)=ANY=[@ANYBLOB="77882f3d", @ANYRESHEX=0x0, @ANYBLOB="2c626172726965722c756d61736b3d30303030303030303030303030303030303030303030312c6e6f6465636f6d706f73652c747970653de481e91c2c6e6c733d69736f383835392d31352c63726561746f723d7f0e5bc82c747970653d590389e52c00"], 0x1, 0x5e5, &(0x7f0000000680)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x103000) mknod$loop(&(0x7f0000000040)='./file1\x00', 0x40, 0x0) 11.509954352s ago: executing program 2 (id=687): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4004, &(0x7f00000000c0)={[{@part={'part', 0x3d, 0x60d2}}, {@umask={'umask', 0x3d, 0x7ff}}, {@codepage={'codepage', 0x3d, 'cp950'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@file_umask={'file_umask', 0x3d, 0x6}}]}, 0x1, 0x347, &(0x7f0000000480)="$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") socket$inet6_sctp(0xa, 0x801, 0x84) socket$packet(0x11, 0xa, 0x300) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r4], 0x7) r5 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x4000000}) preadv(r5, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000300)=""/193, 0xc1}], 0x2, 0x6, 0x7ffb) 10.313931789s ago: executing program 3 (id=688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c0001400000000000000101080004400073"], 0xf4}}, 0x0) (fail_nth: 2) 10.071827392s ago: executing program 5 (id=690): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @window={0x3, 0x9, 0x9}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x8) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 9.899019588s ago: executing program 3 (id=691): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semget(0x3, 0x4, 0x205) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0xb, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0xe, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x892}, 0x8800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20004004}, 0x20008000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) readv(0xffffffffffffffff, &(0x7f0000001dc0)=[{&(0x7f00000008c0)=""/150, 0x96}], 0x1) r7 = socket$packet(0x11, 0x3, 0x300) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffff8) setsockopt$sock_int(r7, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa400064003033f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb291400001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e003e0db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6", 0xb3}], 0x1, 0x0, 0x0, 0x7400}, 0x404000d) write$proc_mixer(r0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x33) 9.779114626s ago: executing program 0 (id=692): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2000e8, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000095c0)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}], 0x1}, 0x0) 9.12012677s ago: executing program 2 (id=693): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000180)={r3, 0x0, 0x0, 0x4000}) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x82, &(0x7f0000000100)=@assoc_value={r5, 0x7fff}, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) fcntl$setlease(r6, 0x400, 0x1) fcntl$getflags(r6, 0x401) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x30, 0x1e, 0x1, 0xfffffffc, 0x7fff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24001090}, 0x44004) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r8, 0x400, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r10 = fanotify_init(0x1, 0x101801) fanotify_mark(r10, 0x105, 0x40001032, r9, 0x0) read$FUSE(r10, &(0x7f0000000b00)={0x2020}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000000000000731173000000000085100000020000000219562f441f2073bb000000000000009500a50500000000", @ANYRES32=r0, @ANYRESOCT=r4], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 8.385244734s ago: executing program 3 (id=694): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') read$FUSE(r0, &(0x7f0000002e00)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/16, 0x10}], 0x1, 0x12c, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x80005, 0x1, 0x40, "ec00000180dc1da0c618918b1b4d0700", 0x3031334d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="a733cd5301800000010000000000000020040000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010c00a09107fbb170e38b7b6affffffffffffe600a97b435f551ea638bd86deca6e88566134bd94992be5f7ede6cda335c4c0fe062b56020b4594404a35708a3d6030473a3bab79"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'/11, @ANYRES32, @ANYBLOB="92ef7f63455bfc9d8eec6682c02ecdde8ebf27db29cf10ec3dac6608daf730c70a19e9014dbc57db4d7d392bd46de095339442b29c5656", @ANYRES64=0x0], 0x20) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='/'], 0x20) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f00000000c0), 0x80800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000"], 0x0, 0x37}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000970000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000540)='syzkaller\x00'}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 8.344582038s ago: executing program 0 (id=695): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003100)=@newtaction={0x14, 0x30, 0xefff, 0x0, 0x4}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') geteuid() r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 8.187444609s ago: executing program 5 (id=696): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = syz_pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000080), 0x2, &(0x7f00000024c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x402280a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000180)='./file0\x00', r4, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c1242, 0x836d9fb164f926b1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x31835003, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) 6.198694495s ago: executing program 1 (id=697): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) acct(0x0) geteuid() socket(0x10, 0x3, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 5.72773418s ago: executing program 0 (id=698): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad", 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x1010000, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x21, 0x2fe, &(0x7f00000004c0)="$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") ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) io_uring_setup(0x7e4c, &(0x7f0000000140)={0x0, 0x48f0, 0x8, 0x2, 0x12d, 0x0, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000006060500d406def6000000000200002905000100070000000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000000) 4.552300002s ago: executing program 5 (id=699): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x6c}}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 4.534120415s ago: executing program 1 (id=700): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, r1, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141082, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000440)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40)={0x2000000b}) r7 = socket$phonet(0x23, 0x2, 0x1) setuid(0xee00) ioctl$SIOCPNDELRESOURCE(r7, 0x89ef, &(0x7f0000000040)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) keyctl$update(0x2, r0, &(0x7f0000000140)="c4", 0x1) ioperm(0x5, 0x9, 0x80) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000000e40)=[{0x5, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001200), 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x800040, &(0x7f00000000c0)=ANY=[@ANYBLOB="77882f3d", @ANYRESHEX=0x0, @ANYBLOB="2c626172726965722c756d61736b3d30303030303030303030303030303030303030303030312c6e6f6465636f6d706f73652c747970653de481e91c2c6e6c733d69736f383835392d31352c63726561746f723d7f0e5bc82c747970653d590389e52c00"], 0x1, 0x5e5, &(0x7f0000000680)="$eJzs3UFvHGcZB/D/bGLHDlK6SZOmICSscgA1IrG9kQkSElAKslCFKnHp1Uo2tZVNGtlb5PYAAXFuv0I5mDMHTihIOXDmKxj1iODum9HMzno3ydZZJ8a7Cb+fNPs+s+/MO8/7aHYys1a0Af5vrX6QmUfzyeqV97bL9d2dVmd3p3W3Hyc5k6SRzCUpyrf/kuTL5EF6S77e7xhqn1J8vnpz/eFnl3trc/VSbV8ctt94DnJp9nKt2uMab/mFxxvMcCHJhbqFidvv++fI7hf8XAIA06xITo16v5mcrW/Wy+eA3l1x7x77pfZg0gkAAADACXhtL3vZzrlJ5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvk/r3/4t6afTjhRT93/+frd9LHb/UHk06AQAAAAAAAAA4Bt/ay162c66/vl9Uf/N/q1q5WL1+LR9nK+1s5mq2s5ZuutnMUpLm0ECz22vd7ubSGHsuj9xz+WTmCwAAAAAAAACvqN9ndfD3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAZFcqrXVMvFftxM43SSuSSz5XYPkof9+GX2aNIJAAAAwAl4bS972c65/vp+UT3zv1E998/l49xLNxvpppN2blXfBfSe+hu7O63O7k7rbrk8Pe5P/nOkNKoR0/vuYfSRF6stLh3ssZqf51e5koW8n81s5NdZSzftLOTdKlpLkWb97UWzn+fofH/82Nr7z8r1zSqT+dzORpXb1dzMR+nkVhrVHKptDj/i78rqFD+qjVmjW3VbzugXdTsdmlVFZg4qsljXvqzG+cMrccTz5MkjLaVx8B3UxeOr+Zl+cLZuy1q/O801n1keOvveOLwSyeLyv++vd+7dWb+9dWV6pvScnjwnWkOVuHzkSuzv7//2xKdwTGbravSuoke7Wr5V7XsuG/llPsqttHMji7mRlVxPKyv5QVaG6nppjM9a42jXt29/tw5mkvysbqdDWdfzQ3UdvtI1q77hdwZVunD8/wqc/kYdlCfrO1N3RTr/xLW5X4nXD6/EH/fL163OvTub62v3xzzed+q2rMBPn68Sp4++yzjK8+XCwfCPnx1l3+sj+5aqvosHfY2n+i4d9D3rkzpb38M9PdJy1Xd5ZF+r6ntzqG/UXQ4AU+/s22dn5/81/4/5L+b/ML8+/97cO2dunPnmbGb+fvqvp/7c+FPjh8Xb+SK/GTz/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz2/rk0/vrHU67U2BYPLBXJJxN+7/7tOkc35FgwlfmID/uWvdu/evbX3y6fc27q592P6wfe/60sry9euLK9+/ce32Rqe92HuddJoAwDEa3PRPOhMAAAAAAAAAAAAAAOCrnMR/J570HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFfb6geZeZQiS4tXF8v13Z1Wp1z68WDLuSRFGfwtyZfJg/SWNIeGK77qOMXnqzfXH352eTDWXH/74rD9xvNYLo0ncnrR8ZZfeLzBDBeSXKhbmLj/BgAA//9gDAG4") truncate(&(0x7f0000000000)='./file1\x00', 0x103000) mknod$loop(&(0x7f0000000040)='./file1\x00', 0x40, 0x0) 4.247490937s ago: executing program 1 (id=701): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, 0x0) setrlimit(0x0, &(0x7f0000000040)={0x1, 0xcb6}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x200000000000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000b40)={0x12, 0x10, 0xfa00, {&(0x7f0000000b00), r8, r7}}, 0x18) 4.085130449s ago: executing program 3 (id=702): mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x103802, 0x20) io_setup(0x5, &(0x7f0000000480)=0x0) io_submit(r1, 0x1, &(0x7f00000035c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xd755, r0, 0x0, 0x0, 0x8}]) 2.588902218s ago: executing program 2 (id=703): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRESHEX], 0x0, 0x7, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) msgget$private(0x0, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000003c0)={&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f00000002c0)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="3ee7d1da04000000050000000500000002000000a6a7b3a5d91011a8c8bf34211808000000000000002b16da7480770582335607f236e5dc64ce9c84b9defd26aa4883cae86a6d56a1892c79439e895f1973244471cba5e3116eb67a6ab16e420e577381b29f8390b797f552abc8f4fdd6bf4113fd03c4cd8a0c8d80c4212a1cc0d08dc3b76c218da932ec81ed726fdf93e508a28e29cbc68d8665af3fe3399b7a3df05bf5ded87f6a788e579d715335cf682365627433978a02ce073cf6842dbe884cd31176d592b90e020ade97e79bac7d39de18db91580b270b9512cfa419e008693c49605e2163", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) timer_settime(0x0, 0x0, 0x0, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 2.57637877s ago: executing program 0 (id=704): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xf8, 0x117, 0x2, 0xe3, "8e66005ee1d62aa7d99fcc6e74a3b3a10f5d968f8928cede4a173e33cbe00132ce50f3dc8e153c5b11e5733280cacfb4d982d84eff590ac5621d958089159dc2444d94e0a4f6ab3b320b3d44fb0b62bf12df39a3559aff43a357f0a304113a308ca5cc7158e77aa237d62d60fe626fd511dc17af766c1e16d727527c9a5326f517194fe44094c86cb4c07f0942ccc3ac173292b14e6c78b0e6870d41867ad1dd73b7deb148e73cd9e905c2b8e90890a160d1f99fb08e8793add1358eed0f546f51d091d2723c8fe7aa46a82f03980782abcac14058e16f6f0cf3550335f06e46d2a3cc"}], 0x128, 0x4000000}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.528180647s ago: executing program 3 (id=705): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xf8, 0x117, 0x2, 0xe3, "8e66005ee1d62aa7d99fcc6e74a3b3a10f5d968f8928cede4a173e33cbe00132ce50f3dc8e153c5b11e5733280cacfb4d982d84eff590ac5621d958089159dc2444d94e0a4f6ab3b320b3d44fb0b62bf12df39a3559aff43a357f0a304113a308ca5cc7158e77aa237d62d60fe626fd511dc17af766c1e16d727527c9a5326f517194fe44094c86cb4c07f0942ccc3ac173292b14e6c78b0e6870d41867ad1dd73b7deb148e73cd9e905c2b8e90890a160d1f99fb08e8793add1358eed0f546f51d091d2723c8fe7aa46a82f03980782abcac14058e16f6f0cf3550335f06e46d2a3cc"}], 0x128, 0x4000000}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.482997641s ago: executing program 1 (id=706): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x0, 0x20}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 1.05317367s ago: executing program 2 (id=707): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003100)=@newtaction={0x14, 0x30, 0xefff, 0x0, 0x4}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) acct(0x0) geteuid() socket(0x10, 0x3, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 881.254888ms ago: executing program 3 (id=708): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003100)=@newtaction={0x14, 0x30, 0xefff, 0x0, 0x4}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') geteuid() r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 843.004963ms ago: executing program 0 (id=709): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000001000001841"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000520001002bbd7000"], 0x1c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x70}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0xf}, &(0x7f0000000580)=0x8) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 766.30081ms ago: executing program 1 (id=710): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a50e6877f1591200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800", 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x1a4124a1, 0x0, 0x7, 0x6, 0x56, 0x0, 0x0, 0x2, 0x40000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r0, 0x0) 636.724274ms ago: executing program 0 (id=711): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 0s ago: executing program 1 (id=712): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') read$FUSE(r0, &(0x7f0000002e00)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/16, 0x10}], 0x1, 0x12c, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x80005, 0x1, 0x40, "ec00000180dc1da0c618918b1b4d0700", 0x3031334d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="a733cd5301800000010000000000000020040000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010c00a09107fbb170e38b7b6affffffffffffe600a97b435f551ea638bd86deca6e88566134bd94992be5f7ede6cda335c4c0fe062b56020b4594404a35708a3d6030473a3bab79"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'/11, @ANYRES32, @ANYBLOB="92ef7f63455bfc9d8eec6682c02ecdde8ebf27db29cf10ec3dac6608daf730c70a19e9014dbc57db4d7d392bd46de095339442b29c5656", @ANYRES64=0x0], 0x20) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='/'], 0x20) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f00000000c0), 0x80800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000"], 0x0, 0x37}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000970000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000540)='syzkaller\x00'}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) kernel console output (not intermixed with test programs): T5621] usb 2-1: unable to get BOS descriptor or descriptor too short [ 171.747898][ T5621] usb 2-1: config 3 has an invalid interface number: 73 but max is 1 [ 171.748027][ T5621] usb 2-1: config 3 has no interface number 1 [ 171.932624][ T5621] usb 2-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 171.932655][ T5621] usb 2-1: config 3 interface 0 has no altsetting 0 [ 171.932671][ T5621] usb 2-1: config 3 interface 73 has no altsetting 0 [ 172.033077][ T6294] syz.2.124 (6294): drop_caches: 2 [ 172.195069][ T5621] usb 2-1: string descriptor 0 read error: -71 [ 172.195196][ T5621] usb 2-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7 [ 172.195217][ T5621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.250255][ T5621] usb 2-1: can't set config #3, error -71 [ 172.311205][ T5621] usb 2-1: USB disconnect, device number 6 [ 176.647026][ T6333] loop0: detected capacity change from 0 to 512 [ 177.303655][ T6333] EXT4-fs: test_dummy_encryption requires encrypt feature [ 181.632676][ T6377] syz.1.143 (6377): drop_caches: 2 [ 185.493937][ T6412] syz.2.149 (6412): drop_caches: 2 [ 186.298911][ T5621] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 186.448895][ T5621] usb 5-1: Using ep0 maxpacket: 32 [ 186.451159][ T5621] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.451181][ T5621] usb 5-1: config 0 has no interface number 0 [ 186.451223][ T5621] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.451244][ T5621] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.451278][ T5621] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 186.451298][ T5621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.597180][ T6416] syz.2.156 (6416): drop_caches: 2 [ 186.615234][ T5621] usb 5-1: config 0 descriptor?? [ 188.921081][ T5621] usbhid 5-1:0.1: can't add hid device: -71 [ 188.921195][ T5621] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 189.131512][ T5621] usb 5-1: USB disconnect, device number 5 [ 190.036300][ T6459] syz.3.164 (6459): drop_caches: 2 [ 190.601210][ T6460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.165'. [ 192.914481][ T6474] loop3: detected capacity change from 0 to 512 [ 192.931231][ T6474] EXT4-fs: test_dummy_encryption requires encrypt feature [ 193.622304][ T6484] loop2: detected capacity change from 0 to 512 [ 194.333293][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.333374][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.349228][ T6484] EXT4-fs: test_dummy_encryption requires encrypt feature [ 196.224979][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.179'. [ 196.262896][ T6498] syz.0.171 (6498): drop_caches: 2 [ 196.475325][ T6500] syz.2.181 (6500) used greatest stack depth: 19040 bytes left [ 197.071659][ T6511] loop3: detected capacity change from 0 to 512 [ 197.731807][ T6511] EXT4-fs: test_dummy_encryption requires encrypt feature [ 198.274567][ T6519] syz.3.186 (6519): drop_caches: 2 [ 198.986143][ T6532] loop2: detected capacity change from 0 to 512 [ 199.302602][ T6532] EXT4-fs: test_dummy_encryption requires encrypt feature [ 200.027374][ T6539] loop4: detected capacity change from 0 to 64 [ 200.197870][ T6540] loop0: detected capacity change from 0 to 512 [ 200.364004][ T6540] EXT4-fs: test_dummy_encryption requires encrypt feature [ 201.083862][ T6542] loop2: detected capacity change from 0 to 64 [ 201.114429][ T6539] minix: block size(59136) > page size(4096) not supported by filesystem [ 201.147444][ T6542] minix: block size(59136) > page size(4096) not supported by filesystem [ 201.546030][ T6543] syz.2.194: attempt to access beyond end of device [ 201.546030][ T6543] loop2: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 201.546153][ T6543] Buffer I/O error on dev loop2, logical block 4096, async page read [ 201.580957][ T6543] syz.2.194: attempt to access beyond end of device [ 201.580957][ T6543] loop2: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 201.580998][ T6543] Buffer I/O error on dev loop2, logical block 4096, async page read [ 201.841257][ T6552] syz.4.193: attempt to access beyond end of device [ 201.841257][ T6552] loop4: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 201.841379][ T6552] Buffer I/O error on dev loop4, logical block 4096, async page read [ 201.844497][ T6552] syz.4.193: attempt to access beyond end of device [ 201.844497][ T6552] loop4: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 201.844566][ T6552] Buffer I/O error on dev loop4, logical block 4096, async page read [ 202.125694][ T38] audit: type=1800 audit(1777620904.375:2): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.194" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 202.125737][ T38] audit: type=1800 audit(1777620904.645:3): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.193" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 202.438039][ T6559] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 202.695999][ T6563] loop3: detected capacity change from 0 to 256 [ 203.619565][ T6563] FAT-fs (loop3): Directory bread(block 64) failed [ 203.619598][ T6563] FAT-fs (loop3): Directory bread(block 65) failed [ 203.619693][ T6563] FAT-fs (loop3): Directory bread(block 66) failed [ 203.619714][ T6563] FAT-fs (loop3): Directory bread(block 67) failed [ 203.619805][ T6563] FAT-fs (loop3): Directory bread(block 68) failed [ 203.619826][ T6563] FAT-fs (loop3): Directory bread(block 69) failed [ 203.619916][ T6563] FAT-fs (loop3): Directory bread(block 70) failed [ 203.619938][ T6563] FAT-fs (loop3): Directory bread(block 71) failed [ 203.620030][ T6563] FAT-fs (loop3): Directory bread(block 72) failed [ 203.620052][ T6563] FAT-fs (loop3): Directory bread(block 73) failed [ 203.959008][ T5989] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 204.123130][ T5989] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 204.123166][ T5989] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 204.128698][ T5989] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 204.128723][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.128740][ T5989] usb 2-1: Product: syz [ 204.128753][ T5989] usb 2-1: Manufacturer: syz [ 204.128765][ T5989] usb 2-1: SerialNumber: syz [ 205.184284][ T5989] usb 2-1: config 0 descriptor?? [ 205.186205][ T6571] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.186316][ T6571] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.195627][ T6573] loop0: detected capacity change from 0 to 32768 [ 205.224142][ T6573] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.204 (6573) [ 205.419783][ T6571] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.419884][ T6571] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.460860][ T6573] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 205.460889][ T6573] BTRFS info (device loop0): using sha256 checksum algorithm [ 206.813943][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.208'. [ 207.516130][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 207.523377][ T6580] Bluetooth: hci3: command 0x0406 tx timeout [ 207.544900][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 207.549149][ T6580] Bluetooth: hci2: command 0x0406 tx timeout [ 207.549180][ T6580] Bluetooth: hci1: command 0x0406 tx timeout [ 207.625573][ T5989] Error reading MAC address [ 208.943006][ T6611] loop3: detected capacity change from 0 to 4096 [ 209.141306][ T10] usb 2-1: USB disconnect, device number 7 [ 209.415151][ T6573] BTRFS error (device loop0): open_ctree failed: -4 [ 209.542720][ T6622] loop1: detected capacity change from 0 to 4096 [ 210.176814][ T6628] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.227480][ T6631] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.532492][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.214'. [ 211.093276][ T5343] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 211.300394][ T5343] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 211.300422][ T5343] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 211.302970][ T5343] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 211.302994][ T5343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.303010][ T5343] usb 1-1: Product: syz [ 211.303023][ T5343] usb 1-1: Manufacturer: syz [ 211.303035][ T5343] usb 1-1: SerialNumber: syz [ 211.400227][ T5343] usb 1-1: config 0 descriptor?? [ 211.402054][ T6624] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 211.402239][ T6624] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 211.681473][ T6624] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 211.681821][ T6624] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 212.411571][ T5343] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 212.630534][ T5343] usb 1-1: USB disconnect, device number 5 [ 212.826338][ T5979] udevd[5979]: setting owner of /dev/bus/usb/001/005 to uid=0, gid=0 failed: No such file or directory [ 212.921664][ T6644] ALSA: mixer_oss: invalid OSS volume '' [ 215.183176][ T6668] syz.2.221 (6668): drop_caches: 2 [ 216.519421][ T6681] loop2: detected capacity change from 0 to 256 [ 216.558721][ T6681] FAT-fs (loop2): Directory bread(block 64) failed [ 216.558750][ T6681] FAT-fs (loop2): Directory bread(block 65) failed [ 216.574853][ T6681] FAT-fs (loop2): Directory bread(block 66) failed [ 216.574980][ T6681] FAT-fs (loop2): Directory bread(block 67) failed [ 216.575076][ T6681] FAT-fs (loop2): Directory bread(block 68) failed [ 216.575096][ T6681] FAT-fs (loop2): Directory bread(block 69) failed [ 216.575194][ T6681] FAT-fs (loop2): Directory bread(block 70) failed [ 216.575214][ T6681] FAT-fs (loop2): Directory bread(block 71) failed [ 216.575303][ T6681] FAT-fs (loop2): Directory bread(block 72) failed [ 216.575323][ T6681] FAT-fs (loop2): Directory bread(block 73) failed [ 216.686335][ T6682] loop3: detected capacity change from 0 to 256 [ 216.710651][ T5621] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 216.818467][ T6682] FAT-fs (loop3): Directory bread(block 64) failed [ 216.818496][ T6682] FAT-fs (loop3): Directory bread(block 65) failed [ 216.818582][ T6682] FAT-fs (loop3): Directory bread(block 66) failed [ 216.818600][ T6682] FAT-fs (loop3): Directory bread(block 67) failed [ 216.818669][ T6682] FAT-fs (loop3): Directory bread(block 68) failed [ 216.818682][ T6682] FAT-fs (loop3): Directory bread(block 69) failed [ 216.818754][ T6682] FAT-fs (loop3): Directory bread(block 70) failed [ 216.824528][ T6682] FAT-fs (loop3): Directory bread(block 71) failed [ 216.824647][ T6682] FAT-fs (loop3): Directory bread(block 72) failed [ 216.824666][ T6682] FAT-fs (loop3): Directory bread(block 73) failed [ 216.858976][ T5621] usb 1-1: Using ep0 maxpacket: 32 [ 216.884944][ T5621] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 216.884968][ T5621] usb 1-1: config 0 has no interface number 0 [ 216.885010][ T5621] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.885032][ T5621] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.885065][ T5621] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 216.885085][ T5621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.994422][ T5621] usb 1-1: config 0 descriptor?? [ 217.040793][ T6682] syz.3.227: attempt to access beyond end of device [ 217.040793][ T6682] loop3: rw=2049, sector=1224, nr_sectors = 32 limit=256 [ 217.060175][ T6682] syz.3.227: attempt to access beyond end of device [ 217.060175][ T6682] loop3: rw=2049, sector=1288, nr_sectors = 32 limit=256 [ 217.060351][ T6682] syz.3.227: attempt to access beyond end of device [ 217.060351][ T6682] loop3: rw=2049, sector=1352, nr_sectors = 32 limit=256 [ 217.064493][ T6682] syz.3.227: attempt to access beyond end of device [ 217.064493][ T6682] loop3: rw=2049, sector=1416, nr_sectors = 40 limit=256 [ 217.174000][ T6685] syz.2.228 (6685): drop_caches: 2 [ 217.214635][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 218.163657][ T6694] syz.1.231 (6694): drop_caches: 2 [ 219.816968][ T5734] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 219.991302][ T5734] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 219.991331][ T5734] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 219.994767][ T5734] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 219.994793][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.994810][ T5734] usb 4-1: Product: syz [ 219.994822][ T5734] usb 4-1: Manufacturer: syz [ 219.994834][ T5734] usb 4-1: SerialNumber: syz [ 220.260907][ T5734] usb 4-1: config 0 descriptor?? [ 220.261749][ T6695] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 220.261919][ T6695] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 220.555709][ T6695] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 220.557066][ T6695] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 221.171272][ T5621] usbhid 1-1:0.1: can't add hid device: -71 [ 221.171385][ T5621] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 221.203843][ T5734] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 221.254508][ T5621] usb 1-1: USB disconnect, device number 6 [ 221.349255][ T5734] usb 4-1: USB disconnect, device number 2 [ 222.513241][ T6724] syz.3.238 (6724): drop_caches: 2 [ 223.587739][ T6729] loop1: detected capacity change from 0 to 4096 [ 223.721699][ T6733] loop2: detected capacity change from 0 to 64 [ 223.736167][ T6734] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.792754][ T6729] FAULT_INJECTION: forcing a failure. [ 223.792754][ T6729] name failslab, interval 1, probability 0, space 0, times 0 [ 223.792807][ T6729] CPU: 0 UID: 0 PID: 6729 Comm: syz.1.240 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 223.792831][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.792844][ T6729] Call Trace: [ 223.792850][ T6729] [ 223.792858][ T6729] dump_stack_lvl+0xe8/0x150 [ 223.792888][ T6729] should_fail_ex+0x46b/0x600 [ 223.792909][ T6729] should_failslab+0xa8/0x100 [ 223.792934][ T6729] __kmalloc_noprof+0xdf/0x7b0 [ 223.792955][ T6729] ? tomoyo_encode+0x28b/0x550 [ 223.792982][ T6729] tomoyo_encode+0x28b/0x550 [ 223.793009][ T6729] tomoyo_realpath_from_path+0x58d/0x5d0 [ 223.793042][ T6729] ? tomoyo_path_number_perm+0x219/0x630 [ 223.793060][ T6729] tomoyo_path_number_perm+0x246/0x630 [ 223.793082][ T6729] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 223.793100][ T6729] ? __lock_acquire+0x6b5/0x2d10 [ 223.793126][ T6729] ? do_raw_spin_lock+0x12b/0x2f0 [ 223.793174][ T6729] ? __fget_files+0x2a/0x420 [ 223.793196][ T6729] ? __fget_files+0x2a/0x420 [ 223.793211][ T6729] ? __fget_files+0x3a6/0x420 [ 223.793228][ T6729] ? __fget_files+0x2a/0x420 [ 223.793249][ T6729] security_file_ioctl+0xc3/0x2a0 [ 223.793270][ T6729] __se_sys_ioctl+0x47/0x170 [ 223.793300][ T6729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.793319][ T6729] do_syscall_64+0x15f/0xf80 [ 223.793342][ T6729] ? trace_irq_disable+0x3b/0x140 [ 223.793364][ T6729] ? clear_bhb_loop+0x40/0x90 [ 223.793385][ T6729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.793401][ T6729] RIP: 0033:0x7fb41448cdd9 [ 223.793423][ T6729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.793435][ T6729] RSP: 002b:00007fb4126de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.793460][ T6729] RAX: ffffffffffffffda RBX: 00007fb414705fa0 RCX: 00007fb41448cdd9 [ 223.793472][ T6729] RDX: 0000200000000540 RSI: 00000000c020660b RDI: 0000000000000004 [ 223.793483][ T6729] RBP: 00007fb4126de090 R08: 0000000000000000 R09: 0000000000000000 [ 223.793493][ T6729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.793503][ T6729] R13: 00007fb414706038 R14: 00007fb414705fa0 R15: 00007ffc54da7458 [ 223.793531][ T6729] [ 223.798721][ T6729] ERROR: Out of memory at tomoyo_realpath_from_path. [ 224.562557][ T6731] loop3: detected capacity change from 0 to 32768 [ 224.726780][ T4927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.733328][ T6731] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.241 (6731) [ 224.782138][ T4927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.804217][ T4927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.827353][ T4927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.832446][ T4927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 224.900071][ T6731] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 224.900101][ T6731] BTRFS info (device loop3): using sha256 checksum algorithm [ 225.037630][ T60] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 225.037654][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 225.037677][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.037690][ T60] Workqueue: hci4 hci_rx_work [ 225.037723][ T60] Call Trace: [ 225.037730][ T60] [ 225.037740][ T60] dump_stack_lvl+0xe8/0x150 [ 225.037767][ T60] sysfs_create_dir_ns+0x271/0x2a0 [ 225.037789][ T60] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 225.037814][ T60] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 225.037837][ T60] ? rt_spin_unlock+0x160/0x200 [ 225.037862][ T60] kobject_add_internal+0x631/0xd10 [ 225.037888][ T60] kobject_add+0x163/0x240 [ 225.037909][ T60] ? __pfx_kobject_add+0x10/0x10 [ 225.037934][ T60] ? get_device_parent+0x370/0x3a0 [ 225.037960][ T60] device_add+0x408/0xbb0 [ 225.037986][ T60] hci_conn_add_sysfs+0xd5/0x210 [ 225.038015][ T60] le_conn_complete_evt+0x10e6/0x16b0 [ 225.038047][ T60] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 225.038068][ T60] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 225.038097][ T60] ? lockdep_hardirqs_on+0x7a/0x110 [ 225.038128][ T60] ? skb_pull_data+0xfb/0x200 [ 225.038160][ T60] hci_le_conn_complete_evt+0x187/0x470 [ 225.038187][ T60] hci_event_packet+0x659/0xef0 [ 225.038219][ T60] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 225.038241][ T60] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 225.038260][ T60] ? __pfx_hci_event_packet+0x10/0x10 [ 225.038284][ T60] ? rt_spin_unlock+0x14f/0x200 [ 225.038310][ T60] ? hci_send_to_monitor+0xe2/0x590 [ 225.038332][ T60] hci_rx_work+0x3ee/0x1040 [ 225.038365][ T60] ? process_one_work+0x8b7/0x1710 [ 225.038384][ T60] process_one_work+0x9a3/0x1710 [ 225.038423][ T60] ? __pfx_process_one_work+0x10/0x10 [ 225.038439][ T60] ? do_raw_spin_lock+0x12b/0x2f0 [ 225.038474][ T60] worker_thread+0xba8/0x11e0 [ 225.038516][ T60] kthread+0x388/0x470 [ 225.038539][ T60] ? __pfx_worker_thread+0x10/0x10 [ 225.038556][ T60] ? __pfx_kthread+0x10/0x10 [ 225.038580][ T60] ret_from_fork+0x514/0xb70 [ 225.038603][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 225.038620][ T60] ? __switch_to+0xc79/0x1410 [ 225.038641][ T60] ? __pfx_kthread+0x10/0x10 [ 225.038663][ T60] ret_from_fork_asm+0x1a/0x30 [ 225.038699][ T60] [ 225.038885][ T60] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 225.038922][ T60] Bluetooth: hci4: failed to register connection device [ 225.594945][ T6731] BTRFS info (device loop3): turning off barriers [ 225.594968][ T6731] BTRFS info (device loop3): enabling free space tree [ 225.858303][ T5734] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 226.035371][ T5734] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 226.035401][ T5734] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 226.070454][ T5734] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 226.070481][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.070499][ T5734] usb 1-1: Product: syz [ 226.070511][ T5734] usb 1-1: Manufacturer: syz [ 226.070524][ T5734] usb 1-1: SerialNumber: syz [ 226.157337][ T5734] usb 1-1: config 0 descriptor?? [ 226.158349][ T6764] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.158531][ T6764] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.385482][ T6764] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.385826][ T6764] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.410176][ T5615] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 226.950112][ T6785] loop2: detected capacity change from 0 to 512 [ 226.995403][ T60] Bluetooth: hci5: command tx timeout [ 227.087957][ T5734] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 227.330928][ T6785] EXT4-fs: test_dummy_encryption requires encrypt feature [ 227.772065][ T5734] usb 1-1: USB disconnect, device number 7 [ 229.238197][ T60] Bluetooth: hci5: command tx timeout [ 231.236752][ T6800] loop0: detected capacity change from 0 to 32768 [ 231.311152][ T6800] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.255 (6800) [ 231.314641][ T6810] syz.2.258 (6810): drop_caches: 2 [ 231.686035][ T6800] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.686067][ T6800] BTRFS info (device loop0): using sha256 checksum algorithm [ 231.837861][ T60] Bluetooth: hci5: command tx timeout [ 232.983135][ T6800] BTRFS info (device loop0): enabling ssd optimizations [ 232.983160][ T6800] BTRFS info (device loop0): turning on async discard [ 232.983175][ T6800] BTRFS info (device loop0): enabling free space tree [ 233.339078][ T5621] kernel read not supported for file /143/net/if_inet6 (pid: 5621 comm: kworker/0:3) [ 233.883934][ T6830] loop3: detected capacity change from 0 to 32768 [ 233.938969][ T60] Bluetooth: hci5: command tx timeout [ 234.247118][ T6830] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.260 (6830) [ 234.746228][ T5616] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.808952][ T6830] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 234.808983][ T6830] BTRFS info (device loop3): using sha256 checksum algorithm [ 235.445677][ T6865] loop1: detected capacity change from 0 to 512 [ 236.038731][ T6865] EXT4-fs: test_dummy_encryption requires encrypt feature [ 236.214062][ T6861] loop2: detected capacity change from 0 to 512 [ 236.609778][ T6861] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 236.610099][ T6861] EXT4-fs: failed to create workqueue [ 236.610111][ T6861] EXT4-fs (loop2): mount failed [ 237.936841][ T6830] BTRFS error (device loop3): open_ctree failed: -4 [ 237.955075][ T6743] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.765027][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.765337][ T6743] bridge_slave_0: entered allmulticast mode [ 238.768655][ T6743] bridge_slave_0: entered promiscuous mode [ 239.097760][ T6880] syz.0.262 (6880): drop_caches: 2 [ 239.277280][ T6743] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.277583][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.277883][ T6743] bridge_slave_1: entered allmulticast mode [ 239.368064][ T6743] bridge_slave_1: entered promiscuous mode [ 241.304431][ T6884] loop2: detected capacity change from 0 to 32768 [ 241.308612][ T6884] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.266 (6884) [ 241.319110][ T6884] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.319139][ T6884] BTRFS info (device loop2): using crc32c checksum algorithm [ 241.457351][ T6884] BTRFS info (device loop2): enabling ssd optimizations [ 241.457374][ T6884] BTRFS info (device loop2): turning on flush-on-commit [ 241.457388][ T6884] BTRFS info (device loop2): enabling free space tree [ 241.457401][ T6884] BTRFS info (device loop2): enabling auto defrag [ 241.457415][ T6884] BTRFS info (device loop2): use lzo compression, level 1 [ 241.457430][ T6884] BTRFS info (device loop2): max_inline set to 4096 [ 241.597455][ T6883] BTRFS info (device loop2 state M): max_inline set to 4096 [ 241.626944][ T6743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.655524][ T6743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.961809][ T5614] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.587530][ T6743] team0: Port device team_slave_0 added [ 242.779334][ T6916] loop0: detected capacity change from 0 to 2048 [ 242.931264][ T6743] team0: Port device team_slave_1 added [ 243.117020][ T6922] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.659935][ T6743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.659949][ T6743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.659968][ T6743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.662606][ T6743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.662618][ T6743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.662637][ T6743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.714505][ T6926] syz.2.271 (6926): drop_caches: 2 [ 244.416995][ T6932] loop1: detected capacity change from 0 to 512 [ 244.745012][ T6932] EXT4-fs: test_dummy_encryption requires encrypt feature [ 245.219663][ T822] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 245.331057][ T6743] hsr_slave_0: entered promiscuous mode [ 245.393469][ T6743] hsr_slave_1: entered promiscuous mode [ 245.399435][ T6743] debugfs: 'hsr0' already exists in 'hsr' [ 245.399459][ T6743] Cannot create hsr debugfs directory [ 245.419648][ T822] usb 1-1: Using ep0 maxpacket: 32 [ 245.423979][ T822] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 245.424001][ T822] usb 1-1: config 0 has no interface number 0 [ 245.447299][ T822] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 245.447325][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.447343][ T822] usb 1-1: Product: syz [ 245.447355][ T822] usb 1-1: Manufacturer: syz [ 245.447367][ T822] usb 1-1: SerialNumber: syz [ 245.650493][ T822] usb 1-1: config 0 descriptor?? [ 245.656279][ T822] usb 1-1: can't set config #0, error -71 [ 245.678741][ T822] usb 1-1: USB disconnect, device number 8 [ 247.882867][ T6945] loop3: detected capacity change from 0 to 8 [ 247.948248][ T6945] SQUASHFS error: xz decompression failed, data probably corrupt [ 247.948283][ T6945] SQUASHFS error: Failed to read block 0x108: -5 [ 247.948299][ T6945] SQUASHFS error: Unable to read metadata cache entry [106] [ 247.948319][ T6945] SQUASHFS error: Unable to read inode 0x11f [ 248.295399][ T6956] syz.0.276 (6956): drop_caches: 2 [ 248.596931][ T6945] loop3: detected capacity change from 0 to 8192 [ 248.898267][ T6966] loop2: detected capacity change from 0 to 512 [ 249.792747][ T6966] EXT4-fs: test_dummy_encryption requires encrypt feature [ 251.564139][ T6984] loop2: detected capacity change from 0 to 512 [ 252.263498][ T6984] EXT4-fs: test_dummy_encryption requires encrypt feature [ 252.607903][ T6987] loop0: detected capacity change from 0 to 64 [ 252.927402][ T6987] MINIX-fs: bad superblock [ 255.888690][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.888876][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.327156][ T6743] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 256.396330][ T37] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 256.496962][ T6743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 256.500202][ T6743] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 256.606889][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 256.698377][ T37] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.698402][ T37] usb 3-1: config 0 has no interface number 0 [ 256.698560][ T37] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.698631][ T37] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.717177][ T37] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 256.717205][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.627293][ T37] usb 3-1: config 0 descriptor?? [ 257.806104][ T6743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.933614][ T6743] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 258.248672][ T7002] syz.3.290 (7002): drop_caches: 2 [ 258.258111][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.286'. [ 258.399154][ T6743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 258.422419][ T6743] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 258.914577][ T6743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 259.066741][ T7009] syz.0.291 (7009): drop_caches: 2 [ 260.978697][ T37] usbhid 3-1:0.1: can't add hid device: -71 [ 260.985101][ T37] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 261.019616][ T37] usb 3-1: USB disconnect, device number 3 [ 261.679920][ T7031] loop2: detected capacity change from 0 to 512 [ 261.829779][ T7031] EXT4-fs: test_dummy_encryption requires encrypt feature [ 262.816464][ T38] audit: type=1326 audit(1777620965.595:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.297" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1624cdd9 code=0x7ffc0000 [ 262.818568][ T38] audit: type=1326 audit(1777620965.605:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.297" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1624cdd9 code=0x7ffc0000 [ 262.831742][ T7040] loop0: detected capacity change from 0 to 4096 [ 262.837915][ T7040] EXT4-fs: Ignoring removed orlov option [ 262.841221][ T7040] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 263.254798][ T7047] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 263.970205][ T7060] syz.0.303 (7060): drop_caches: 2 [ 264.701965][ T6743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.808096][ T6743] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.880865][ T1299] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.881108][ T1299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.983011][ T3375] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.983174][ T3375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.175552][ T7066] syz.1.306 (7066): drop_caches: 2 [ 266.338930][ T821] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 266.494815][ T821] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 266.494844][ T821] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 266.520136][ T821] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 266.520161][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.520179][ T821] usb 2-1: Product: syz [ 266.520191][ T821] usb 2-1: Manufacturer: syz [ 266.520203][ T821] usb 2-1: SerialNumber: syz [ 266.568433][ T821] usb 2-1: config 0 descriptor?? [ 266.576361][ T7070] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.584313][ T7070] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.903690][ T7070] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.915272][ T7070] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 267.189193][ T7082] loop3: detected capacity change from 0 to 512 [ 267.310089][ T7082] EXT4-fs: test_dummy_encryption requires encrypt feature [ 268.148162][ T821] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 268.171549][ T821] usb 2-1: USB disconnect, device number 8 [ 269.982941][ T7097] loop3: detected capacity change from 0 to 64 [ 270.024949][ T7097] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 270.024990][ T7097] hfs: get root inode failed [ 270.295331][ T7085] ALSA: mixer_oss: invalid OSS volume '' [ 270.707142][ T60] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 270.947274][ T7110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.317'. [ 271.904508][ T7108] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 271.944070][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 272.399452][ T37] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 272.957710][ T7132] loop2: detected capacity change from 0 to 512 [ 273.022878][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.326'. [ 273.288095][ T7132] EXT4-fs: test_dummy_encryption requires encrypt feature [ 273.535107][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 273.572207][ T37] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 273.572230][ T37] usb 1-1: config 0 has no interface number 0 [ 273.572272][ T37] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 273.572293][ T37] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 273.609368][ T37] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 273.609394][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.609411][ T37] usb 1-1: Product: syz [ 273.609423][ T37] usb 1-1: Manufacturer: syz [ 273.609435][ T37] usb 1-1: SerialNumber: syz [ 273.688203][ T37] usb 1-1: config 0 descriptor?? [ 273.689390][ T7116] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 273.689628][ T7116] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 274.021090][ T6743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.482151][ T7116] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 274.531192][ T7116] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 274.867791][ T7139] capability: warning: `syz.1.327' uses 32-bit capabilities (legacy support in use) [ 275.365023][ T37] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 275.365051][ T37] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 275.365314][ T37] asix 1-1:0.34: probe with driver asix failed with error -71 [ 275.418879][ T37] usb 1-1: USB disconnect, device number 9 [ 275.870653][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 276.020789][ T7152] syz.3.330 (7152): drop_caches: 2 [ 276.353841][ T7172] FAULT_INJECTION: forcing a failure. [ 276.353841][ T7172] name failslab, interval 1, probability 0, space 0, times 0 [ 276.353871][ T7172] CPU: 0 UID: 0 PID: 7172 Comm: syz.0.337 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 276.353889][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.353898][ T7172] Call Trace: [ 276.353904][ T7172] [ 276.353912][ T7172] dump_stack_lvl+0xe8/0x150 [ 276.353938][ T7172] should_fail_ex+0x46b/0x600 [ 276.353962][ T7172] should_failslab+0xa8/0x100 [ 276.353986][ T7172] __kmalloc_noprof+0xdf/0x7b0 [ 276.354007][ T7172] ? tomoyo_encode+0x28b/0x550 [ 276.354034][ T7172] tomoyo_encode+0x28b/0x550 [ 276.354060][ T7172] tomoyo_realpath_from_path+0x58d/0x5d0 [ 276.354092][ T7172] ? tomoyo_path_number_perm+0x219/0x630 [ 276.354112][ T7172] tomoyo_path_number_perm+0x246/0x630 [ 276.354134][ T7172] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 276.354152][ T7172] ? __lock_acquire+0x6b5/0x2d10 [ 276.354178][ T7172] ? do_raw_spin_lock+0x12b/0x2f0 [ 276.354230][ T7172] ? __fget_files+0x2a/0x420 [ 276.354250][ T7172] ? __fget_files+0x2a/0x420 [ 276.354265][ T7172] ? __fget_files+0x3a6/0x420 [ 276.354281][ T7172] ? __fget_files+0x2a/0x420 [ 276.354301][ T7172] security_file_ioctl+0xc3/0x2a0 [ 276.354320][ T7172] __se_sys_ioctl+0x47/0x170 [ 276.354340][ T7172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.354359][ T7172] do_syscall_64+0x15f/0xf80 [ 276.354381][ T7172] ? trace_irq_disable+0x3b/0x140 [ 276.354402][ T7172] ? clear_bhb_loop+0x40/0x90 [ 276.354423][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.354439][ T7172] RIP: 0033:0x7f6a1624cdd9 [ 276.354455][ T7172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.354468][ T7172] RSP: 002b:00007f6a1449e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.354487][ T7172] RAX: ffffffffffffffda RBX: 00007f6a164c5fa0 RCX: 00007f6a1624cdd9 [ 276.354499][ T7172] RDX: 0000000000000005 RSI: 0000000000004c06 RDI: 0000000000000007 [ 276.354509][ T7172] RBP: 00007f6a1449e090 R08: 0000000000000000 R09: 0000000000000000 [ 276.354519][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.354529][ T7172] R13: 00007f6a164c6038 R14: 00007f6a164c5fa0 R15: 00007ffff9b34908 [ 276.354562][ T7172] [ 276.354602][ T7172] ERROR: Out of memory at tomoyo_realpath_from_path. [ 276.676166][ T7175] syz.1.335 (7175): drop_caches: 2 [ 276.836505][ T6743] veth0_vlan: entered promiscuous mode [ 276.956944][ T6743] veth1_vlan: entered promiscuous mode [ 277.080211][ T7180] loop0: detected capacity change from 0 to 128 [ 277.301985][ T7182] syz.3.338 (7182): drop_caches: 2 [ 277.340387][ T6743] veth0_macvtap: entered promiscuous mode [ 277.351775][ T7180] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.388346][ T7180] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.437113][ T6743] veth1_macvtap: entered promiscuous mode [ 277.582364][ T6743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.668215][ T6743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.747640][ T3375] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.776318][ T5616] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.907196][ T3375] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.928857][ T3375] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.930644][ T3375] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.449447][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.449465][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.473249][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 279.617333][ T7217] bridge_slave_1: left allmulticast mode [ 279.617366][ T7217] bridge_slave_1: left promiscuous mode [ 279.648608][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.180815][ T7225] syz.0.350 (7225): drop_caches: 2 [ 281.071641][ T7217] bridge_slave_0: left allmulticast mode [ 281.071674][ T7217] bridge_slave_0: left promiscuous mode [ 281.072001][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.648247][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.648265][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.024881][ T7243] syz.3.355 (7243): drop_caches: 2 [ 283.169409][ T7242] loop2: detected capacity change from 0 to 1024 [ 283.229189][ T7242] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 283.230810][ T7242] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 283.289819][ T7242] JBD2: no valid journal superblock found [ 283.369045][ T7242] EXT4-fs (loop2): Could not load journal inode [ 285.973425][ T7260] capability: warning: `syz.3.363' uses deprecated v2 capabilities in a way that may be insecure [ 285.976516][ T7260] FAULT_INJECTION: forcing a failure. [ 285.976516][ T7260] name failslab, interval 1, probability 0, space 0, times 0 [ 285.976545][ T7260] CPU: 0 UID: 0 PID: 7260 Comm: syz.3.363 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 285.976564][ T7260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.976574][ T7260] Call Trace: [ 285.976581][ T7260] [ 285.976588][ T7260] dump_stack_lvl+0xe8/0x150 [ 285.976615][ T7260] should_fail_ex+0x46b/0x600 [ 285.976640][ T7260] should_failslab+0xa8/0x100 [ 285.976671][ T7260] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 285.976694][ T7260] ? __get_vm_area_node+0x171/0x350 [ 285.976719][ T7260] __get_vm_area_node+0x171/0x350 [ 285.976743][ T7260] __vmalloc_node_range_noprof+0x36a/0x1750 [ 285.976765][ T7260] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 285.976792][ T7260] ? __lock_acquire+0x6b5/0x2d10 [ 285.976839][ T7260] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 285.976860][ T7260] ? __lock_acquire+0x6b5/0x2d10 [ 285.976886][ T7260] ? _parse_integer_limit+0x192/0x1e0 [ 285.976917][ T7260] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 285.976937][ T7260] __vmalloc_noprof+0xd2/0x120 [ 285.976958][ T7260] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 285.976982][ T7260] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 285.977010][ T7260] bpf_prog_alloc+0x3c/0x1a0 [ 285.977034][ T7260] bpf_prog_load+0x779/0x1a10 [ 285.977069][ T7260] ? __pfx_bpf_prog_load+0x10/0x10 [ 285.977092][ T7260] ? __might_fault+0xaf/0x130 [ 285.977127][ T7260] ? bpf_lsm_bpf+0x9/0x20 [ 285.977143][ T7260] ? security_bpf+0x7e/0x2d0 [ 285.977165][ T7260] __sys_bpf+0x618/0x950 [ 285.977189][ T7260] ? __pfx___sys_bpf+0x10/0x10 [ 285.977208][ T7260] ? rt_mutex_slowunlock+0x1cb/0x300 [ 285.977243][ T7260] ? ksys_write+0x248/0x270 [ 285.977266][ T7260] ? __pfx_ksys_write+0x10/0x10 [ 285.977291][ T7260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.977311][ T7260] __x64_sys_bpf+0x7c/0x90 [ 285.977332][ T7260] do_syscall_64+0x15f/0xf80 [ 285.977356][ T7260] ? trace_irq_disable+0x3b/0x140 [ 285.977378][ T7260] ? clear_bhb_loop+0x40/0x90 [ 285.977399][ T7260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.977416][ T7260] RIP: 0033:0x7ff66538cdd9 [ 285.977432][ T7260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.977446][ T7260] RSP: 002b:00007ff6635de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.977464][ T7260] RAX: ffffffffffffffda RBX: 00007ff665605fa0 RCX: 00007ff66538cdd9 [ 285.977477][ T7260] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 285.977488][ T7260] RBP: 00007ff6635de090 R08: 0000000000000000 R09: 0000000000000000 [ 285.977498][ T7260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.977509][ T7260] R13: 00007ff665606038 R14: 00007ff665605fa0 R15: 00007ffcd896a468 [ 285.977537][ T7260] [ 285.977742][ T7260] syz.3.363: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 286.053480][ T7260] CPU: 0 UID: 0 PID: 7260 Comm: syz.3.363 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 286.053501][ T7260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.053511][ T7260] Call Trace: [ 286.053518][ T7260] [ 286.053525][ T7260] dump_stack_lvl+0xe8/0x150 [ 286.053552][ T7260] warn_alloc+0x263/0x3e0 [ 286.053582][ T7260] ? __pfx_warn_alloc+0x10/0x10 [ 286.053601][ T7260] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 286.053623][ T7260] ? __get_vm_area_node+0x171/0x350 [ 286.053646][ T7260] ? __get_vm_area_node+0x2e1/0x350 [ 286.053670][ T7260] __vmalloc_node_range_noprof+0x38f/0x1750 [ 286.053700][ T7260] ? __lock_acquire+0x6b5/0x2d10 [ 286.053743][ T7260] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 286.053764][ T7260] ? __lock_acquire+0x6b5/0x2d10 [ 286.053788][ T7260] ? _parse_integer_limit+0x192/0x1e0 [ 286.053818][ T7260] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 286.053838][ T7260] __vmalloc_noprof+0xd2/0x120 [ 286.053857][ T7260] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 286.053880][ T7260] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 286.053904][ T7260] bpf_prog_alloc+0x3c/0x1a0 [ 286.053927][ T7260] bpf_prog_load+0x779/0x1a10 [ 286.053959][ T7260] ? __pfx_bpf_prog_load+0x10/0x10 [ 286.053980][ T7260] ? __might_fault+0xaf/0x130 [ 286.054014][ T7260] ? bpf_lsm_bpf+0x9/0x20 [ 286.054030][ T7260] ? security_bpf+0x7e/0x2d0 [ 286.054049][ T7260] __sys_bpf+0x618/0x950 [ 286.054071][ T7260] ? __pfx___sys_bpf+0x10/0x10 [ 286.054090][ T7260] ? rt_mutex_slowunlock+0x1cb/0x300 [ 286.054124][ T7260] ? ksys_write+0x248/0x270 [ 286.054146][ T7260] ? __pfx_ksys_write+0x10/0x10 [ 286.054170][ T7260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.054187][ T7260] __x64_sys_bpf+0x7c/0x90 [ 286.054211][ T7260] do_syscall_64+0x15f/0xf80 [ 286.054233][ T7260] ? trace_irq_disable+0x3b/0x140 [ 286.054254][ T7260] ? clear_bhb_loop+0x40/0x90 [ 286.054274][ T7260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.054290][ T7260] RIP: 0033:0x7ff66538cdd9 [ 286.054306][ T7260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.054319][ T7260] RSP: 002b:00007ff6635de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.054335][ T7260] RAX: ffffffffffffffda RBX: 00007ff665605fa0 RCX: 00007ff66538cdd9 [ 286.054348][ T7260] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 286.054358][ T7260] RBP: 00007ff6635de090 R08: 0000000000000000 R09: 0000000000000000 [ 286.054368][ T7260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.054377][ T7260] R13: 00007ff665606038 R14: 00007ff665605fa0 R15: 00007ffcd896a468 [ 286.054417][ T7260] [ 286.054526][ T7260] Mem-Info: [ 286.054538][ T7260] active_anon:6220 inactive_anon:0 isolated_anon:0 [ 286.054538][ T7260] active_file:14676 inactive_file:40024 isolated_file:0 [ 286.054538][ T7260] unevictable:768 dirty:85 writeback:8 [ 286.054538][ T7260] slab_reclaimable:7021 slab_unreclaimable:101594 [ 286.054538][ T7260] mapped:31087 shmem:1295 pagetables:1193 [ 286.054538][ T7260] sec_pagetables:0 bounce:0 [ 286.054538][ T7260] kernel_misc_reclaimable:0 [ 286.054538][ T7260] free:1310560 free_pcp:4351 free_cma:0 [ 286.054582][ T7260] Node 0 active_anon:24880kB inactive_anon:0kB active_file:58704kB inactive_file:159888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124348kB dirty:336kB writeback:32kB shmem:3644kB kernel_stack:13464kB pagetables:4640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 286.054625][ T7260] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 286.054665][ T7260] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.057785][ T7260] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 286.057826][ T7260] Node 0 DMA32 free:1301732kB boost:0kB min:3916kB low:6440kB high:8964kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24880kB inactive_anon:0kB active_file:58704kB inactive_file:159888kB unevictable:1536kB writepending:368kB zspages:0kB present:3129332kB managed:2555316kB mlocked:0kB bounce:0kB free_pcp:17384kB local_pcp:7848kB free_cma:0kB [ 286.057880][ T7260] lowmem_reserve[]: 0 0 1 1 1 [ 286.057907][ T7260] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1200kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 286.057954][ T7260] lowmem_reserve[]: 0 0 0 0 0 [ 286.057981][ T7260] Node 1 Normal free:3925148kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.058030][ T7260] lowmem_reserve[]: 0 0 0 0 0 [ 286.058056][ T7260] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 286.058152][ T7260] Node 0 DMA32: 785*4kB (UME) 466*8kB (UME) 569*16kB (UME) 303*32kB (UME) 257*64kB (UME) 142*128kB (UME) 101*256kB (ME) 20*512kB (UME) 9*1024kB (ME) 4*2048kB (UME) 290*4096kB (M) = 1301636kB [ 286.058280][ T7260] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 286.058361][ T7260] Node 1 Normal: 3*4kB (UM) 2*8kB (M) 8*16kB (UM) 10*32kB (UM) 9*64kB (UM) 5*128kB (UM) 2*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 957*4096kB (M) = 3925148kB [ 286.058491][ T7260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.058505][ T7260] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 286.058518][ T7260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.058531][ T7260] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 286.058544][ T7260] 55984 total pagecache pages [ 286.058554][ T7260] 0 pages in swap cache [ 286.058559][ T7260] Free swap = 124996kB [ 286.058566][ T7260] Total swap = 124996kB [ 286.058572][ T7260] 2097051 pages RAM [ 286.058578][ T7260] 0 pages HighMem/MovableOnly [ 286.058583][ T7260] 426308 pages reserved [ 286.058589][ T7260] 0 pages cma reserved [ 286.661880][ T7274] syz.0.362 (7274): drop_caches: 2 [ 288.016893][ T4927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 288.056193][ T4927] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 288.060238][ T4927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 288.103857][ T4927] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 288.105281][ T4927] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 288.111264][ T7282] syz.2.368 (7282): drop_caches: 2 [ 288.228576][ T7288] syz.3.369 (7288): drop_caches: 2 [ 289.262631][ T38] audit: type=1326 audit(1777620992.045:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.1.373" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb41448cdd9 code=0x0 [ 289.418380][ T7301] loop1: detected capacity change from 0 to 128 [ 289.653930][ T7304] loop2: detected capacity change from 0 to 512 [ 290.325995][ T7304] EXT4-fs: test_dummy_encryption requires encrypt feature [ 290.921041][ T7293] ALSA: mixer_oss: invalid OSS volume '' [ 291.150656][ T4927] Bluetooth: hci6: command tx timeout [ 291.553451][ T822] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 292.062366][ T7324] syz.3.376 (7324): drop_caches: 2 [ 292.350901][ T822] usb 3-1: Using ep0 maxpacket: 32 [ 292.367679][ T822] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.367703][ T822] usb 3-1: config 0 has no interface number 0 [ 292.367745][ T822] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.367768][ T822] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.367801][ T822] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 292.367821][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.498983][ T822] usb 3-1: config 0 descriptor?? [ 293.092299][ T7330] syz.3.378 (7330): drop_caches: 2 [ 293.560664][ T4927] Bluetooth: hci6: command tx timeout [ 294.460421][ T7338] loop0: detected capacity change from 0 to 512 [ 295.221034][ T7338] EXT4-fs: test_dummy_encryption requires encrypt feature [ 295.259366][ T821] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 295.421153][ T821] usb 4-1: Using ep0 maxpacket: 32 [ 295.433923][ T821] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.433947][ T821] usb 4-1: config 0 has no interface number 0 [ 295.433988][ T821] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.434009][ T821] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.434044][ T821] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 295.434064][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.582257][ T821] usb 4-1: config 0 descriptor?? [ 295.618907][ T4927] Bluetooth: hci6: command tx timeout [ 296.481084][ T822] usbhid 3-1:0.1: can't add hid device: -71 [ 296.481194][ T822] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 296.646752][ T822] usb 3-1: USB disconnect, device number 4 [ 296.662661][ T821] usbhid 4-1:0.1: can't add hid device: -71 [ 296.662767][ T821] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 298.014529][ T4927] Bluetooth: hci6: command tx timeout [ 298.136276][ T7343] loop1: detected capacity change from 0 to 128 [ 298.234619][ T7343] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 298.237612][ T7343] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.264333][ T821] usb 4-1: USB disconnect, device number 3 [ 298.560530][ T5612] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.010277][ T1760] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.050197][ T7364] syz.1.388 (7364): drop_caches: 2 [ 299.512070][ T7356] loop3: detected capacity change from 0 to 32768 [ 299.552955][ T7356] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.385 (7356) [ 299.617754][ T7356] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 299.617784][ T7356] BTRFS info (device loop3): using sha256 checksum algorithm [ 300.064483][ T7356] BTRFS info (device loop3): turning off barriers [ 300.064505][ T7356] BTRFS info (device loop3): enabling free space tree [ 300.374453][ T1760] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.608077][ T7398] loop2: detected capacity change from 0 to 512 [ 300.813364][ T7398] EXT4-fs: test_dummy_encryption requires encrypt feature [ 301.484609][ T5615] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 301.800306][ T5343] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 302.243578][ T7403] syz.1.393 (7403): drop_caches: 2 [ 303.008851][ T5343] usb 1-1: Using ep0 maxpacket: 32 [ 303.011152][ T5343] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 303.011173][ T5343] usb 1-1: config 0 has no interface number 0 [ 303.011234][ T5343] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.011257][ T5343] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.011288][ T5343] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 303.011308][ T5343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.039106][ T5343] usb 1-1: config 0 descriptor?? [ 303.295874][ T5343] usbhid 1-1:0.1: can't add hid device: -71 [ 303.295985][ T5343] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 303.346701][ T7418] loop2: detected capacity change from 0 to 64 [ 303.355476][ T5343] usb 1-1: USB disconnect, device number 10 [ 303.403068][ T7418] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 303.403102][ T7418] hfs: get root inode failed [ 303.801291][ T1760] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.138811][ T7430] syz.2.400 (7430): drop_caches: 2 [ 305.672360][ T7450] syz.2.405 (7450): drop_caches: 2 [ 305.693399][ T1760] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.265600][ T7456] syz.3.406 (7456): drop_caches: 2 [ 307.919878][ T5995] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 308.070246][ T5995] usb 1-1: Using ep0 maxpacket: 32 [ 308.072216][ T5995] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 308.072237][ T5995] usb 1-1: config 0 has no interface number 0 [ 308.072278][ T5995] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.072301][ T5995] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.072351][ T5995] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 308.072372][ T5995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.092169][ T5995] usb 1-1: config 0 descriptor?? [ 308.268873][ T32] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 308.421446][ T32] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 308.421476][ T32] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 308.432212][ T32] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 308.432238][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.432255][ T32] usb 3-1: Product: syz [ 308.432267][ T32] usb 3-1: Manufacturer: syz [ 308.432295][ T32] usb 3-1: SerialNumber: syz [ 308.483532][ T32] usb 3-1: config 0 descriptor?? [ 308.487724][ T7465] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 308.487974][ T7465] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 308.697426][ T7465] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 308.697677][ T7465] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 309.687322][ T32] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 309.830303][ T32] dm9601 3-1:0.0 eth3: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 9a:26:63:1b:bb:b3 [ 309.864839][ T5995] usbhid 1-1:0.1: can't add hid device: -71 [ 309.864907][ T5995] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 309.945471][ T32] usb 3-1: USB disconnect, device number 5 [ 310.043333][ T5995] usb 1-1: USB disconnect, device number 11 [ 310.061502][ T32] dm9601 3-1:0.0 eth3: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 314.139486][ T7497] ALSA: mixer_oss: invalid OSS volume '' [ 314.199773][ T7505] syz.0.418 (7505): drop_caches: 2 [ 315.300850][ T7521] syz.1.422 (7521): drop_caches: 2 [ 315.537142][ T7281] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.538007][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.538592][ T7281] bridge_slave_0: entered allmulticast mode [ 315.562608][ T7281] bridge_slave_0: entered promiscuous mode [ 315.580701][ T7281] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.581611][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.581862][ T7281] bridge_slave_1: entered allmulticast mode [ 315.615695][ T7281] bridge_slave_1: entered promiscuous mode [ 316.289909][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.428'. [ 316.320011][ T1760] bridge_slave_1: left allmulticast mode [ 316.320161][ T1760] bridge_slave_1: left promiscuous mode [ 316.356017][ T1760] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.439053][ T5621] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 316.718815][ T5621] usb 4-1: Using ep0 maxpacket: 32 [ 316.732723][ T5621] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.732782][ T5621] usb 4-1: config 0 has no interface number 0 [ 316.732938][ T5621] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.733127][ T5621] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.733163][ T5621] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 316.733182][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.191745][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.202632][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.455111][ T5621] usb 4-1: config 0 descriptor?? [ 317.686000][ T7546] ALSA: mixer_oss: invalid OSS volume '' [ 317.946954][ T1760] bridge_slave_0: left allmulticast mode [ 317.946988][ T1760] bridge_slave_0: left promiscuous mode [ 317.947240][ T1760] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.547250][ T1760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.630492][ T1760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.675297][ T1760] bond0 (unregistering): Released all slaves [ 319.694591][ T5621] usbhid 4-1:0.1: can't add hid device: -71 [ 319.694683][ T5621] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 319.716965][ T5621] usb 4-1: USB disconnect, device number 4 [ 320.070816][ T7570] syz.2.432 (7570): drop_caches: 2 [ 320.245188][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 320.293685][ T7281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.314372][ T7281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.569418][ T7281] team0: Port device team_slave_0 added [ 320.643690][ T7281] team0: Port device team_slave_1 added [ 321.512633][ T7584] syz.3.435 (7584): drop_caches: 2 [ 323.519317][ T7590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.437'. [ 324.091362][ T7598] syz.2.438 (7598): drop_caches: 2 [ 324.891225][ T7595] ALSA: mixer_oss: invalid OSS volume '' [ 325.246131][ T7281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.246147][ T7281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.246170][ T7281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.348365][ T7281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.348381][ T7281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.348401][ T7281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.618529][ T7281] hsr_slave_0: entered promiscuous mode [ 326.626655][ T7281] hsr_slave_1: entered promiscuous mode [ 326.630250][ T7281] debugfs: 'hsr0' already exists in 'hsr' [ 326.630273][ T7281] Cannot create hsr debugfs directory [ 327.153518][ T32] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 327.969011][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 327.971945][ T32] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 327.971967][ T32] usb 1-1: config 0 has no interface number 0 [ 327.972003][ T32] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.972025][ T32] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.972058][ T32] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 327.972077][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.056096][ T32] usb 1-1: config 0 descriptor?? [ 328.723333][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 329.890654][ T7650] ALSA: mixer_oss: invalid OSS volume '' [ 330.838298][ T32] usbhid 1-1:0.1: can't add hid device: -71 [ 330.838413][ T32] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 331.696065][ T32] usb 1-1: USB disconnect, device number 12 [ 332.174276][ T1760] hsr_slave_0: left promiscuous mode [ 332.236775][ T7668] syz.3.453 (7668): drop_caches: 2 [ 332.256768][ T1760] hsr_slave_1: left promiscuous mode [ 332.258205][ T1760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.258285][ T1760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.274250][ T1760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.274277][ T1760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.483642][ T1760] veth1_macvtap: left promiscuous mode [ 333.508086][ T1760] veth0_macvtap: left promiscuous mode [ 333.519242][ T1760] veth1_vlan: left promiscuous mode [ 333.519689][ T1760] veth0_vlan: left promiscuous mode [ 335.469483][ T1760] team0 (unregistering): Port device team_slave_1 removed [ 335.512381][ T1760] team0 (unregistering): Port device team_slave_0 removed [ 336.429070][ T5621] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 336.779035][ T5621] usb 2-1: Using ep0 maxpacket: 32 [ 336.846559][ T5621] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 336.846614][ T5621] usb 2-1: config 0 has no interface number 0 [ 336.914045][ T5621] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.914082][ T5621] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.914199][ T5621] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 336.914255][ T5621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.363020][ T7695] ALSA: mixer_oss: invalid OSS volume '' [ 337.388179][ T5621] usb 2-1: config 0 descriptor?? [ 337.919611][ T5621] usbhid 2-1:0.1: can't add hid device: -71 [ 337.919681][ T5621] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 337.948399][ T5621] usb 2-1: USB disconnect, device number 9 [ 339.840079][ T7730] syz.2.467 (7730): drop_caches: 2 [ 340.225887][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 342.247194][ T7748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.470'. [ 345.145953][ T7758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.473'. [ 345.209000][ T7763] syz.2.472 (7763): drop_caches: 2 [ 345.450271][ T7767] FAULT_INJECTION: forcing a failure. [ 345.450271][ T7767] name failslab, interval 1, probability 0, space 0, times 0 [ 345.450302][ T7767] CPU: 0 UID: 0 PID: 7767 Comm: syz.0.475 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 345.450322][ T7767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 345.450332][ T7767] Call Trace: [ 345.450339][ T7767] [ 345.450346][ T7767] dump_stack_lvl+0xe8/0x150 [ 345.450372][ T7767] should_fail_ex+0x46b/0x600 [ 345.450395][ T7767] should_failslab+0xa8/0x100 [ 345.450419][ T7767] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 345.450440][ T7767] ? __alloc_skb+0x1d0/0x7d0 [ 345.450460][ T7767] ? lockdep_hardirqs_on+0x7a/0x110 [ 345.450489][ T7767] __alloc_skb+0x1d0/0x7d0 [ 345.450513][ T7767] netlink_sendmsg+0x5d4/0xb40 [ 345.450543][ T7767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.450570][ T7767] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 345.450597][ T7767] ? aa_sock_msg_perm+0x122/0x200 [ 345.450621][ T7767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.450640][ T7767] sock_sendmsg_nosec+0x112/0x150 [ 345.450661][ T7767] ____sys_sendmsg+0x55c/0x870 [ 345.450690][ T7767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.450721][ T7767] ? import_iovec+0x73/0xa0 [ 345.450744][ T7767] ___sys_sendmsg+0x2a5/0x360 [ 345.450765][ T7767] ? __lock_acquire+0x6b5/0x2d10 [ 345.450792][ T7767] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.450843][ T7767] ? __fget_files+0x2a/0x420 [ 345.450860][ T7767] ? __fget_files+0x3a6/0x420 [ 345.450887][ T7767] __x64_sys_sendmsg+0x1c3/0x2a0 [ 345.450914][ T7767] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.450945][ T7767] ? __pfx_ksys_write+0x10/0x10 [ 345.450975][ T7767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.450993][ T7767] do_syscall_64+0x15f/0xf80 [ 345.451015][ T7767] ? trace_irq_disable+0x3b/0x140 [ 345.451037][ T7767] ? clear_bhb_loop+0x40/0x90 [ 345.451064][ T7767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.451080][ T7767] RIP: 0033:0x7f6a1624cdd9 [ 345.451097][ T7767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.451110][ T7767] RSP: 002b:00007f6a1449e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.451129][ T7767] RAX: ffffffffffffffda RBX: 00007f6a164c5fa0 RCX: 00007f6a1624cdd9 [ 345.451141][ T7767] RDX: 0000000000000900 RSI: 0000200000000400 RDI: 0000000000000003 [ 345.451152][ T7767] RBP: 00007f6a1449e090 R08: 0000000000000000 R09: 0000000000000000 [ 345.451163][ T7767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.451173][ T7767] R13: 00007f6a164c6038 R14: 00007f6a164c5fa0 R15: 00007ffff9b34908 [ 345.451200][ T7767] [ 345.889755][ T5621] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 346.068977][ T5621] usb 4-1: Using ep0 maxpacket: 32 [ 346.070853][ T5621] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 346.070875][ T5621] usb 4-1: config 0 has no interface number 0 [ 346.070928][ T5621] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.070950][ T5621] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.070982][ T5621] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 346.071001][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.208547][ T7787] loop2: detected capacity change from 0 to 512 [ 346.513183][ T7787] EXT4-fs: test_dummy_encryption requires encrypt feature [ 346.901493][ T5621] usb 4-1: config 0 descriptor?? [ 348.000347][ T7797] loop2: detected capacity change from 0 to 512 [ 348.737269][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.748523][ T7797] EXT4-fs: test_dummy_encryption requires encrypt feature [ 349.483325][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 349.534864][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 349.562529][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 349.576665][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 352.101155][ T4927] Bluetooth: hci5: command tx timeout [ 352.145046][ T5621] usbhid 4-1:0.1: can't add hid device: -32 [ 352.145156][ T5621] usbhid 4-1:0.1: probe with driver usbhid failed with error -32 [ 352.378857][ T5995] usb 4-1: USB disconnect, device number 5 [ 353.138055][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.485'. [ 354.186495][ T4927] Bluetooth: hci5: command tx timeout [ 356.812322][ T7844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.488'. [ 356.939143][ T7837] syz.3.487 (7837): drop_caches: 2 [ 357.049254][ T4927] Bluetooth: hci5: command tx timeout [ 357.698449][ T7854] syz.1.490 (7854): drop_caches: 2 [ 358.229992][ T7866] loop0: detected capacity change from 0 to 512 [ 358.978798][ T7866] EXT4-fs: test_dummy_encryption requires encrypt feature [ 359.077796][ T4927] Bluetooth: hci5: command tx timeout [ 360.950010][ T7891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.496'. [ 361.789013][ T32] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 361.939139][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 361.941442][ T32] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.941464][ T32] usb 1-1: config 0 has no interface number 0 [ 361.941505][ T32] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.941527][ T32] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.941560][ T32] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 361.941580][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.951763][ T32] usb 1-1: config 0 descriptor?? [ 361.991650][ T3018] bridge_slave_1: left allmulticast mode [ 361.991681][ T3018] bridge_slave_1: left promiscuous mode [ 361.991956][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.286449][ T3018] bridge_slave_0: left allmulticast mode [ 362.286482][ T3018] bridge_slave_0: left promiscuous mode [ 362.286748][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.795845][ T7927] loop3: detected capacity change from 0 to 512 [ 363.821417][ T7927] EXT4-fs: test_dummy_encryption requires encrypt feature [ 364.757176][ T32] usbhid 1-1:0.1: can't add hid device: -71 [ 364.757249][ T32] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 364.823417][ T32] usb 1-1: USB disconnect, device number 13 [ 365.070633][ T7929] sctp: [Deprecated]: syz.0.504 (pid 7929) Use of int in max_burst socket option. [ 365.070633][ T7929] Use struct sctp_assoc_value instead [ 365.691321][ T3018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.483302][ T7947] syz.2.507 (7947): drop_caches: 2 [ 366.502458][ T3018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.581847][ T3018] bond0 (unregistering): Released all slaves [ 369.902853][ T7990] loop2: detected capacity change from 0 to 512 [ 370.108859][ T7990] EXT4-fs: test_dummy_encryption requires encrypt feature [ 370.590776][ T3018] hsr_slave_0: left promiscuous mode [ 370.669374][ T5621] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 370.703294][ T3018] hsr_slave_1: left promiscuous mode [ 370.708173][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.755970][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.909587][ T5621] usb 4-1: Using ep0 maxpacket: 32 [ 370.920528][ T5621] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.920551][ T5621] usb 4-1: config 0 has no interface number 0 [ 370.921253][ T5621] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.921279][ T5621] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.921312][ T5621] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 370.921332][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.936198][ T5621] usb 4-1: config 0 descriptor?? [ 371.192915][ T7986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 371.298696][ T8003] syz.2.518 (8003): drop_caches: 2 [ 371.894554][ T8016] syz.2.520 (8016): drop_caches: 2 [ 374.963918][ T3018] team0 (unregistering): Port device team_slave_1 removed [ 375.610417][ T3018] team0 (unregistering): Port device team_slave_0 removed [ 376.023959][ T5621] usbhid 4-1:0.1: can't add hid device: -32 [ 376.024031][ T5621] usbhid 4-1:0.1: probe with driver usbhid failed with error -32 [ 376.236740][ T5735] usb 4-1: USB disconnect, device number 6 [ 376.713797][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.529'. [ 376.745011][ T1029] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.745567][ T1029] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.746409][ T1029] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.748315][ T1029] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.915536][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 376.998787][ T8045] syz.1.526 (8045): drop_caches: 2 [ 377.193943][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 378.600943][ T8071] loop0: detected capacity change from 0 to 1024 [ 378.602019][ T8071] EXT4-fs: Ignoring removed bh option [ 378.603420][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.603496][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.793739][ T8071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.899206][ T8079] loop2: detected capacity change from 0 to 7 [ 379.152558][ T8079] Dev loop2: unable to read RDB block 7 [ 379.152576][ T8079] loop2: AHDI p2 p3 [ 379.152593][ T8079] loop2: partition table partially beyond EOD, truncated [ 379.194319][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.554683][ T7791] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.555234][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.555482][ T7791] bridge_slave_0: entered allmulticast mode [ 379.589976][ T7791] bridge_slave_0: entered promiscuous mode [ 379.597569][ T7791] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.597875][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.598129][ T7791] bridge_slave_1: entered allmulticast mode [ 379.630591][ T7791] bridge_slave_1: entered promiscuous mode [ 379.639068][ T5995] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 379.809008][ T5995] usb 2-1: Using ep0 maxpacket: 32 [ 379.813355][ T5995] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.813377][ T5995] usb 2-1: config 0 has no interface number 0 [ 379.813417][ T5995] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.813440][ T5995] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.813474][ T5995] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 379.813493][ T5995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.009154][ T5995] usb 2-1: config 0 descriptor?? [ 380.144153][ T7791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.161935][ T7791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.228586][ T7791] team0: Port device team_slave_0 added [ 380.256547][ T7791] team0: Port device team_slave_1 added [ 380.316280][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'. [ 380.329379][ T7791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.329392][ T7791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.329407][ T7791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.333369][ T7791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.333381][ T7791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.333404][ T7791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.782872][ T5995] usbhid 2-1:0.1: can't add hid device: -71 [ 380.782945][ T5995] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 380.793676][ T5995] usb 2-1: USB disconnect, device number 10 [ 381.787416][ T8112] loop3: detected capacity change from 0 to 512 [ 381.799678][ T8112] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 383.092541][ T822] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 383.176535][ T7791] hsr_slave_0: entered promiscuous mode [ 383.182555][ T7791] hsr_slave_1: entered promiscuous mode [ 383.186625][ T7791] debugfs: 'hsr0' already exists in 'hsr' [ 383.186648][ T7791] Cannot create hsr debugfs directory [ 383.420947][ T822] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 383.420963][ T822] usb 4-1: config 0 has no interface number 0 [ 383.422686][ T822] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 383.422700][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.422709][ T822] usb 4-1: Product: syz [ 383.422715][ T822] usb 4-1: Manufacturer: syz [ 383.422722][ T822] usb 4-1: SerialNumber: syz [ 383.426926][ T822] usb 4-1: config 0 descriptor?? [ 383.604205][ T8133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.550'. [ 384.410998][ T8129] loop2: detected capacity change from 0 to 7 [ 384.511528][ T8129] Dev loop2: unable to read RDB block 7 [ 384.511555][ T8129] loop2: AHDI p2 p3 [ 384.511582][ T8129] loop2: partition table partially beyond EOD, truncated [ 384.952134][ T822] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 385.220569][ T822] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 385.220716][ T822] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 385.220795][ T822] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 385.320389][ T8147] loop2: detected capacity change from 0 to 64 [ 385.331814][ T8147] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 385.331850][ T8147] hfs: get root inode failed [ 385.443847][ T822] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 385.650889][ T822] usb 4-1: USB disconnect, device number 7 [ 385.941530][ T32] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 386.022815][ T822] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 386.069576][ T822] keyspan 4-1:0.133: device disconnected [ 386.091513][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 386.097761][ T32] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 386.097782][ T32] usb 3-1: config 0 has no interface number 0 [ 386.097818][ T32] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.097842][ T32] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.097875][ T32] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 386.097895][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.172786][ T32] usb 3-1: config 0 descriptor?? [ 386.448506][ T8153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.558'. [ 386.867811][ T32] usbhid 3-1:0.1: can't add hid device: -71 [ 386.867922][ T32] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 386.995735][ T32] usb 3-1: USB disconnect, device number 6 [ 389.160814][ T8176] syz.2.564 (8176): drop_caches: 2 [ 389.270780][ T8181] loop0: detected capacity change from 0 to 64 [ 389.283996][ T8181] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 389.284029][ T8181] hfs: get root inode failed [ 389.601635][ T7791] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 389.653016][ T7791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.715853][ T7791] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 389.907723][ T7791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.925254][ T7791] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 390.021868][ T7791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.040006][ T7791] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 390.087020][ T7791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.457427][ T8214] loop1: detected capacity change from 0 to 1024 [ 392.814240][ T7791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.097820][ T7791] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.265985][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.266146][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.398391][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.402812][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.679176][ T8224] loop3: detected capacity change from 0 to 64 [ 393.781247][ T8224] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 393.781282][ T8224] hfs: get root inode failed [ 394.001674][ T8219] loop0: detected capacity change from 0 to 32768 [ 394.011549][ T8219] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.575 (8219) [ 394.191121][ T8219] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 394.191151][ T8219] BTRFS info (device loop0): using sha256 checksum algorithm [ 394.286043][ T4927] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 394.293500][ T8230] cgroup: name respecified [ 394.339679][ T8238] loop3: detected capacity change from 0 to 512 [ 394.423583][ T8238] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 394.498123][ T8219] BTRFS info (device loop0): turning off barriers [ 394.498139][ T8219] BTRFS info (device loop0): enabling free space tree [ 394.761952][ T5616] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 394.810785][ T8238] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.581: Invalid inode bitmap blk 4 in block_group 0 [ 394.810969][ T8238] loop3: lost filesystem error report for type 5 error -117 [ 394.818865][ C1] EXT4-fs (loop3): initial error at time 1777621097: ext4_read_inode_bitmap:139 [ 394.818892][ C1] EXT4-fs (loop3): last error at time 1777621097: ext4_read_inode_bitmap:139 [ 395.346295][ T8238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.075471][ T8270] bond0: option ad_select: unable to set because the bond device is up [ 396.181709][ T7791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.413279][ T8259] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 397.931399][ T7791] veth0_vlan: entered promiscuous mode [ 397.977329][ T7791] veth1_vlan: entered promiscuous mode [ 398.180028][ T7791] veth0_macvtap: entered promiscuous mode [ 398.225617][ T7791] veth1_macvtap: entered promiscuous mode [ 398.296049][ T7791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.364689][ T7791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.407981][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.441012][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.441074][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.441094][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.516520][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.718840][ T5989] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 399.873515][ T5989] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 399.873543][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.873561][ T5989] usb 3-1: Product: syz [ 399.873573][ T5989] usb 3-1: Manufacturer: syz [ 399.873586][ T5989] usb 3-1: SerialNumber: syz [ 399.911150][ T5989] usb 3-1: config 0 descriptor?? [ 400.124537][ T5989] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 400.393736][ T3375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.393756][ T3375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.542096][ T8302] loop3: detected capacity change from 0 to 64 [ 400.816502][ T3375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.816523][ T3375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.093018][ T8302] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 401.117325][ T8302] hfs: get root inode failed [ 401.712604][ T5989] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 401.747351][ T5989] usb 3-1: USB disconnect, device number 7 [ 401.850636][ T38] audit: type=1326 audit(1777621104.645:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.592" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66538cdd9 code=0x7ffc0000 [ 401.850682][ T38] audit: type=1326 audit(1777621104.645:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.592" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66538cdd9 code=0x7ffc0000 [ 401.877823][ T38] audit: type=1326 audit(1777621104.655:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.592" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66538cdd9 code=0x7ffc0000 [ 401.878353][ T38] audit: type=1326 audit(1777621104.665:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.592" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff66538cdd9 code=0x7ffc0000 [ 401.878393][ T38] audit: type=1326 audit(1777621104.665:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.592" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66538cdd9 code=0x7ffc0000 [ 401.885947][ T38] audit: type=1326 audit(1777621104.675:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.592" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66538cdd9 code=0x7ffc0000 [ 401.885988][ T38] audit: type=1326 audit(1777621104.675:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.592" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66538cdd9 code=0x7ffc0000 [ 401.886142][ T38] audit: type=1326 audit(1777621104.665:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.592" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66538cdd9 code=0x7ffc0000 [ 401.886412][ T38] audit: type=1326 audit(1777621104.675:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.592" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff66538cdd9 code=0x7ffc0000 [ 401.894095][ T38] audit: type=1326 audit(1777621104.675:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.3.592" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66538cdd9 code=0x7ffc0000 [ 402.201597][ T8306] loop1: detected capacity change from 0 to 32768 [ 402.244341][ T8306] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.591 (8306) [ 403.031715][ T8306] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 403.031746][ T8306] BTRFS info (device loop1): using sha256 checksum algorithm [ 403.679507][ T8338] loop5: detected capacity change from 0 to 512 [ 404.281055][ T8338] EXT4-fs: test_dummy_encryption requires encrypt feature [ 404.485818][ T4927] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 404.582385][ T8306] BTRFS error (device loop1): open_ctree failed: -4 [ 404.857606][ T8336] loop2: detected capacity change from 0 to 32768 [ 404.869748][ T8336] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 64809ad1-f666-4030-adb3-b4bfaa29bbd5 [ 404.869809][ T8336] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.595 (8336) [ 406.018919][ T8336] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 406.018950][ T8336] BTRFS info (device loop2): using sha256 checksum algorithm [ 406.426357][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'. [ 406.448819][ T5989] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 406.643138][ T5989] usb 4-1: config 0 has an invalid interface number: 50 but max is 1 [ 406.643164][ T5989] usb 4-1: config 0 has an invalid interface number: 233 but max is 1 [ 406.643183][ T5989] usb 4-1: config 0 has an invalid interface number: 193 but max is 1 [ 406.643200][ T5989] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 406.643220][ T5989] usb 4-1: config 0 has no interface number 0 [ 406.643235][ T5989] usb 4-1: config 0 has no interface number 1 [ 406.643249][ T5989] usb 4-1: config 0 has no interface number 2 [ 406.643307][ T5989] usb 4-1: config 0 interface 50 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 406.643325][ T5989] usb 4-1: config 0 interface 50 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 406.643356][ T5989] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 406.643382][ T5989] usb 4-1: config 0 interface 50 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 406.643403][ T5989] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 406.643426][ T5989] usb 4-1: config 0 interface 50 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 406.643446][ T5989] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 406.643465][ T5989] usb 4-1: config 0 interface 50 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 406.643486][ T5989] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 406.643510][ T5989] usb 4-1: config 0 interface 50 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 406.643530][ T5989] usb 4-1: config 0 interface 50 altsetting 0 has 10 endpoint descriptors, different from the interface descriptor's value: 11 [ 406.643555][ T5989] usb 4-1: too many endpoints for config 0 interface 233 altsetting 108: 119, using maximum allowed: 30 [ 406.643589][ T5989] usb 4-1: config 0 interface 233 altsetting 108 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 406.643609][ T5989] usb 4-1: config 0 interface 233 altsetting 108 has 1 endpoint descriptor, different from the interface descriptor's value: 119 [ 406.643637][ T5989] usb 4-1: config 0 interface 193 altsetting 9 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 406.643657][ T5989] usb 4-1: config 0 interface 193 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 32 [ 406.643787][ T5989] usb 4-1: config 0 interface 233 has no altsetting 0 [ 406.643810][ T5989] usb 4-1: config 0 interface 193 has no altsetting 0 [ 406.646588][ T5989] usb 4-1: New USB device found, idVendor=1608, idProduct=0207, bcdDevice=ca.9f [ 406.646612][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.646629][ T5989] usb 4-1: Product: చ [ 406.646642][ T5989] usb 4-1: Manufacturer: 䠊 [ 406.828840][ T821] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 406.979949][ T5989] usb 4-1: config 0 descriptor?? [ 407.003351][ T8336] BTRFS error (device loop2): open_ctree failed: -4 [ 407.023012][ T821] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 407.023110][ T821] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 407.027966][ T821] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 407.027992][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.028009][ T821] usb 1-1: Product: syz [ 407.028073][ T821] usb 1-1: Manufacturer: syz [ 407.028086][ T821] usb 1-1: SerialNumber: syz [ 407.148480][ T8382] loop5: detected capacity change from 0 to 512 [ 407.205027][ T821] usb 1-1: config 0 descriptor?? [ 407.207843][ T8374] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 407.207953][ T8374] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 407.237735][ T8382] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 407.256557][ T5989] io_ti 4-1:0.50: required endpoints missing [ 407.295736][ T822] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 407.339446][ T5989] io_ti 4-1:0.233: required endpoints missing [ 407.419151][ T8374] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 407.419332][ T8374] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 407.492733][ T5989] io_ti 4-1:0.193: required endpoints missing [ 407.501265][ T822] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 407.501300][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.501317][ T822] usb 2-1: Product: syz [ 407.501330][ T822] usb 2-1: Manufacturer: syz [ 407.501343][ T822] usb 2-1: SerialNumber: syz [ 407.555013][ T822] usb 2-1: config 0 descriptor?? [ 407.582452][ T5989] usb 4-1: USB disconnect, device number 8 [ 407.660095][ T8382] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.606: Invalid inode bitmap blk 4 in block_group 0 [ 407.660126][ T8382] loop5: lost filesystem error report for type 5 error -117 [ 407.670531][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 407.670549][ C1] EXT4-fs (loop5): initial error at time 1777621110: ext4_read_inode_bitmap:139 [ 407.670565][ C1] EXT4-fs (loop5): last error at time 1777621110: ext4_read_inode_bitmap:139 [ 407.822040][ T822] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 408.057923][ T8382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.299537][ T821] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 408.439770][ T821] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 9a:26:63:1b:bb:b3 [ 408.456164][ T821] usb 1-1: USB disconnect, device number 14 [ 408.467181][ T821] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 410.568191][ T822] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 411.280335][ T822] usb 2-1: USB disconnect, device number 11 [ 411.298400][ T7791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.438957][ T822] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 412.677458][ T8406] loop0: detected capacity change from 0 to 32768 [ 412.733081][ T8406] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.612 (8406) [ 412.753431][ T8421] syz.5.615 (8421): drop_caches: 2 [ 412.781058][ T8406] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 412.781088][ T8406] BTRFS info (device loop0): using sha256 checksum algorithm [ 413.008051][ T8434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.620'. [ 413.657829][ T822] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 413.686991][ T822] usb 4-1: config index 0 descriptor too short (expected 65505, got 72) [ 413.688258][ T822] usb 4-1: config index 1 descriptor too short (expected 65505, got 72) [ 413.697607][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 413.708851][ T5735] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 413.754729][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 413.755065][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 413.755396][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 413.755704][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 413.756025][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 413.816760][ T822] usb 4-1: config index 2 descriptor too short (expected 65505, got 72) [ 413.829257][ T822] usb 4-1: config index 3 descriptor too short (expected 65505, got 72) [ 413.830451][ T822] usb 4-1: config index 4 descriptor too short (expected 65505, got 72) [ 413.831739][ T822] usb 4-1: config index 5 descriptor too short (expected 65505, got 72) [ 413.834431][ T822] usb 4-1: config index 6 descriptor too short (expected 65505, got 72) [ 413.874484][ T822] usb 4-1: config index 7 descriptor too short (expected 65505, got 72) [ 413.898905][ T822] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 413.898933][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.898949][ T822] usb 4-1: Product: syz [ 413.898962][ T822] usb 4-1: Manufacturer: syz [ 413.898975][ T822] usb 4-1: SerialNumber: syz [ 413.919396][ T5735] usb 2-1: config 0 has an invalid interface number: 193 but max is 0 [ 413.919421][ T5735] usb 2-1: config 0 has no interface number 0 [ 413.919494][ T5735] usb 2-1: config 0 interface 193 altsetting 9 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 413.919520][ T5735] usb 2-1: config 0 interface 193 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 32 [ 413.919540][ T5735] usb 2-1: config 0 interface 193 has no altsetting 0 [ 413.989882][ T5735] usb 2-1: New USB device found, idVendor=1608, idProduct=0207, bcdDevice=ca.9f [ 413.989909][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.989927][ T5735] usb 2-1: Product: చ [ 413.989940][ T5735] usb 2-1: Manufacturer: 䠊 [ 414.040277][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 414.052865][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 414.055167][ T8406] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 414.096957][ T822] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 414.178480][ T5735] usb 2-1: config 0 descriptor?? [ 414.184413][ T8428] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 414.191348][ T8406] BTRFS error (device loop0): open_ctree failed: -12 [ 414.418828][ T5343] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 414.457409][ T5735] io_ti 2-1:0.193: required endpoints missing [ 414.516957][ T5735] usb 2-1: USB disconnect, device number 12 [ 414.612452][ T5343] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 414.612484][ T5343] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 414.615455][ T5343] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 414.615481][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.615499][ T5343] usb 3-1: Product: syz [ 414.615513][ T5343] usb 3-1: Manufacturer: syz [ 414.615524][ T5343] usb 3-1: SerialNumber: syz [ 414.703127][ T5343] usb 3-1: config 0 descriptor?? [ 414.704124][ T8444] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 414.704315][ T8444] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 414.731641][ T5621] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 414.907239][ T8444] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 414.907504][ T8444] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 414.918987][ T821] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 414.990059][ T8424] random: crng reseeded on system resumption [ 415.090263][ T821] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 415.090300][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.090558][ T821] usb 6-1: Product: syz [ 415.090572][ T821] usb 6-1: Manufacturer: syz [ 415.090585][ T821] usb 6-1: SerialNumber: syz [ 415.422606][ T821] usb 6-1: config 0 descriptor?? [ 415.540618][ T5734] usb 4-1: USB disconnect, device number 9 [ 415.707169][ T821] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 415.781313][ T5343] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 416.018791][ T5621] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 416.044312][ T5621] ath9k_htc: Failed to initialize the device [ 416.081079][ T5734] usb 4-1: ath9k_htc: USB layer deinitialized [ 417.713524][ T821] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 417.996728][ T5343] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 9a:26:63:1b:bb:b3 [ 418.055323][ T5343] usb 3-1: USB disconnect, device number 8 [ 418.075726][ T5343] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 418.472956][ T8454] syz.1.624 (8454): drop_caches: 2 [ 418.828088][ T5735] usb 6-1: USB disconnect, device number 2 [ 419.067170][ T8472] netlink: 52 bytes leftover after parsing attributes in process `syz.5.629'. [ 419.169357][ T8468] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 419.247683][ T4927] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 419.661360][ T8485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.631'. [ 421.000865][ T8495] loop3: detected capacity change from 0 to 64 [ 421.016139][ T8495] hfs: request for non-existent node 134217729 in B*Tree [ 421.016159][ T8495] hfs: request for non-existent node 134217729 in B*Tree [ 421.016184][ T8495] hfs: get root inode failed [ 421.329160][ T8497] syz.2.635 (8497): drop_caches: 2 [ 421.432141][ T8482] loop0: detected capacity change from 0 to 32768 [ 421.500314][ T8482] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.633 (8482) [ 421.614366][ T8482] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 421.614387][ T8482] BTRFS info (device loop0): using sha256 checksum algorithm [ 421.864545][ T3018] wlan1: Trigger new scan to find an IBSS to join [ 422.255710][ T8482] BTRFS info (device loop0): turning off barriers [ 422.255735][ T8482] BTRFS info (device loop0): enabling free space tree [ 422.650395][ T5616] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 423.068849][ T822] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 423.225373][ T822] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 423.225403][ T822] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 423.255125][ T822] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 423.255153][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.255170][ T822] usb 2-1: Product: syz [ 423.255184][ T822] usb 2-1: Manufacturer: syz [ 423.255196][ T822] usb 2-1: SerialNumber: syz [ 423.333205][ T822] usb 2-1: config 0 descriptor?? [ 423.334228][ T8520] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 423.353319][ T8520] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 424.367551][ T8520] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 424.367701][ T8520] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 424.988843][ T5621] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 425.764855][ T8533] loop3: detected capacity change from 0 to 131072 [ 425.826788][ T822] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 425.875470][ T56] wlan1: Trigger new scan to find an IBSS to join [ 425.885638][ T822] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 9a:26:63:1b:bb:b3 [ 425.910154][ T822] usb 2-1: USB disconnect, device number 13 [ 425.912062][ T5621] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 425.912087][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.912103][ T5621] usb 1-1: Product: syz [ 425.912116][ T5621] usb 1-1: Manufacturer: syz [ 425.912128][ T5621] usb 1-1: SerialNumber: syz [ 425.967131][ T822] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 425.967262][ T5621] usb 1-1: config 0 descriptor?? [ 426.057270][ T8533] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 426.135416][ T8533] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 426.200129][ T5621] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 427.773582][ T8533] F2FS-fs (loop3): recover xattr in inode (7), error(0) [ 427.773651][ T8533] F2FS-fs (loop3): set inode (7) has corrupted xattr [ 427.964281][ T8532] F2FS-fs (loop3): set inode (7) has corrupted xattr [ 428.096851][ T38] kauditd_printk_skb: 164 callbacks suppressed [ 428.096868][ T38] audit: type=1326 audit(1777621130.885:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8554 comm="syz.5.645" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f82bc1ccbd7 code=0x7ffc0000 [ 428.097823][ T38] audit: type=1326 audit(1777621130.885:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8554 comm="syz.5.645" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f82bc189ad1 code=0x7ffc0000 [ 428.098334][ T38] audit: type=1326 audit(1777621130.885:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8554 comm="syz.5.645" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc1ccdd9 code=0x7ffc0000 [ 428.098375][ T38] audit: type=1326 audit(1777621130.885:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8554 comm="syz.5.645" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f82bc1cdbc9 code=0x7ffc0000 [ 428.104795][ T38] audit: type=1326 audit(1777621130.885:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8554 comm="syz.5.645" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc1ccdd9 code=0x7ffc0000 [ 428.107451][ T38] audit: type=1326 audit(1777621130.895:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8554 comm="syz.5.645" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f82bc189b3b code=0x7ffc0000 [ 428.107496][ T38] audit: type=1326 audit(1777621130.895:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8554 comm="syz.5.645" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc1ccdd9 code=0x7ffc0000 [ 428.107534][ T38] audit: type=1326 audit(1777621130.895:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8554 comm="syz.5.645" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc1ccdd9 code=0x7ffc0000 [ 428.108430][ T38] audit: type=1326 audit(1777621130.895:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8554 comm="syz.5.645" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f82bc18922c code=0x7ffc0000 [ 428.109738][ T38] audit: type=1326 audit(1777621130.895:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8554 comm="syz.5.645" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f82bc18928e code=0x7ffc0000 [ 428.410003][ T782] wlan1: Creating new IBSS network, BSSID b2:18:70:1f:0a:f8 [ 428.452983][ T5621] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 428.544913][ T5621] usb 1-1: USB disconnect, device number 15 [ 428.561367][ T8557] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 430.361759][ T8572] veth1_macvtap: left promiscuous mode [ 430.361782][ T8572] macsec0: entered allmulticast mode [ 431.291625][ T8570] loop1: detected capacity change from 0 to 32768 [ 431.516100][ T8570] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.649 (8570) [ 431.594894][ T8570] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 431.594916][ T8570] BTRFS info (device loop1): using sha256 checksum algorithm [ 431.859858][ T8579] loop2: detected capacity change from 0 to 4096 [ 433.040222][ T8592] ALSA: mixer_oss: invalid OSS volume '' [ 433.197198][ T8598] syz.0.653 (8598): drop_caches: 2 [ 433.579962][ T8570] BTRFS error (device loop1): open_ctree failed: -4 [ 433.869458][ T8579] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 434.387968][ T38] kauditd_printk_skb: 256 callbacks suppressed [ 434.387985][ T38] audit: type=1326 audit(1777621137.175:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.1.656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41448cdd9 code=0x7ffc0000 [ 434.388031][ T38] audit: type=1326 audit(1777621137.175:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.1.656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41448cdd9 code=0x7ffc0000 [ 434.444233][ T38] audit: type=1326 audit(1777621137.225:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.1.656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41448cdd9 code=0x7ffc0000 [ 434.444281][ T38] audit: type=1326 audit(1777621137.225:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.1.656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41448cdd9 code=0x7ffc0000 [ 434.449435][ T38] audit: type=1326 audit(1777621137.245:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.1.656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb41448cdd9 code=0x7ffc0000 [ 434.466092][ T8579] ntfs3(loop2): Failed to load $Bitmap (-2). [ 434.483006][ T38] audit: type=1326 audit(1777621137.275:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.1.656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41448cdd9 code=0x7ffc0000 [ 434.483053][ T38] audit: type=1326 audit(1777621137.275:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.1.656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41448cdd9 code=0x7ffc0000 [ 434.483092][ T38] audit: type=1326 audit(1777621137.275:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.1.656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41448cdd9 code=0x7ffc0000 [ 434.483130][ T38] audit: type=1326 audit(1777621137.275:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.1.656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41448cdd9 code=0x7ffc0000 [ 434.483863][ T38] audit: type=1326 audit(1777621137.275:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.1.656" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41448cdd9 code=0x7ffc0000 [ 434.518645][ T8610] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 438.105404][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 438.482602][ T8630] syz.3.647 (8630): drop_caches: 2 [ 438.975125][ T4927] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 439.194403][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 439.194433][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.194450][ T9] usb 3-1: Product: syz [ 439.194463][ T9] usb 3-1: Manufacturer: syz [ 439.194475][ T9] usb 3-1: SerialNumber: syz [ 439.259476][ T9] usb 3-1: config 0 descriptor?? [ 439.352847][ T8635] netlink: 96 bytes leftover after parsing attributes in process `syz.3.661'. [ 439.505378][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 440.694387][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.709727][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.916361][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 440.933121][ T9] usb 3-1: USB disconnect, device number 9 [ 440.968178][ T8647] loop0: detected capacity change from 0 to 256 [ 440.977927][ T8647] exfat: Unknown parameter '4' [ 440.984355][ T8650] loop1: detected capacity change from 0 to 128 [ 441.289165][ T8654] binder: 8652:8654 ioctl 541b 0 returned -22 [ 442.325303][ T8650] vxfs: unsupported VxFS version (2066843062) [ 442.722864][ T8668] syz.0.669 (8668): drop_caches: 2 [ 443.606050][ T38] kauditd_printk_skb: 259 callbacks suppressed [ 443.606066][ T38] audit: type=1326 audit(1777621146.395:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.2.671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57123acdd9 code=0x7ffc0000 [ 443.606460][ T38] audit: type=1326 audit(1777621146.395:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.2.671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57123acdd9 code=0x7ffc0000 [ 443.606801][ T38] audit: type=1326 audit(1777621146.395:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.2.671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57123acdd9 code=0x7ffc0000 [ 443.607589][ T38] audit: type=1326 audit(1777621146.395:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.2.671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57123acdd9 code=0x7ffc0000 [ 443.608027][ T38] audit: type=1326 audit(1777621146.395:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.2.671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57123acdd9 code=0x7ffc0000 [ 443.608068][ T38] audit: type=1326 audit(1777621146.395:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.2.671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f57123acdd9 code=0x7ffc0000 [ 443.608459][ T38] audit: type=1326 audit(1777621146.395:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.2.671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57123acdd9 code=0x7ffc0000 [ 443.610794][ T38] audit: type=1326 audit(1777621146.405:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.2.671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57123acdd9 code=0x7ffc0000 [ 443.610836][ T38] audit: type=1326 audit(1777621146.395:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.2.671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57123acdd9 code=0x7ffc0000 [ 443.611157][ T38] audit: type=1326 audit(1777621146.405:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.2.671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f57123acdd9 code=0x7ffc0000 [ 446.725114][ T5343] kernel write not supported for file /snd/midiC2D0 (pid: 5343 comm: kworker/1:3) [ 448.400727][ T8696] syz.0.675 (8696): drop_caches: 2 [ 449.950736][ T8703] loop0: detected capacity change from 0 to 512 [ 450.103647][ T8691] ALSA: mixer_oss: invalid OSS volume '' [ 450.216963][ T8703] EXT4-fs: test_dummy_encryption requires encrypt feature [ 452.662906][ T8718] syz.0.682 (8718): drop_caches: 2 [ 455.011335][ T8728] loop2: detected capacity change from 0 to 64 [ 455.036932][ T8728] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 455.036961][ T8728] hfs: get root inode failed [ 455.055079][ T8732] FAULT_INJECTION: forcing a failure. [ 455.055079][ T8732] name failslab, interval 1, probability 0, space 0, times 0 [ 455.055120][ T8732] CPU: 0 UID: 0 PID: 8732 Comm: syz.3.688 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 455.055141][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 455.055156][ T8732] Call Trace: [ 455.055163][ T8732] [ 455.055171][ T8732] dump_stack_lvl+0xe8/0x150 [ 455.055198][ T8732] should_fail_ex+0x46b/0x600 [ 455.055223][ T8732] should_failslab+0xa8/0x100 [ 455.055248][ T8732] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 455.055269][ T8732] ? __alloc_skb+0x1d0/0x7d0 [ 455.055289][ T8732] ? lockdep_hardirqs_on+0x7a/0x110 [ 455.055316][ T8732] __alloc_skb+0x1d0/0x7d0 [ 455.055339][ T8732] netlink_sendmsg+0x5d4/0xb40 [ 455.055371][ T8732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.055394][ T8732] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 455.055423][ T8732] ? aa_sock_msg_perm+0x122/0x200 [ 455.055446][ T8732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.055467][ T8732] sock_sendmsg_nosec+0x112/0x150 [ 455.055489][ T8732] ____sys_sendmsg+0x55c/0x870 [ 455.055518][ T8732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.055557][ T8732] ? import_iovec+0x73/0xa0 [ 455.055581][ T8732] ___sys_sendmsg+0x2a5/0x360 [ 455.055603][ T8732] ? __lock_acquire+0x6b5/0x2d10 [ 455.055631][ T8732] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.055689][ T8732] ? __fget_files+0x2a/0x420 [ 455.055707][ T8732] ? __fget_files+0x3a6/0x420 [ 455.055734][ T8732] __x64_sys_sendmsg+0x1c3/0x2a0 [ 455.055760][ T8732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.055791][ T8732] ? __pfx_ksys_write+0x10/0x10 [ 455.055821][ T8732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.055840][ T8732] do_syscall_64+0x15f/0xf80 [ 455.055863][ T8732] ? trace_irq_disable+0x3b/0x140 [ 455.055886][ T8732] ? clear_bhb_loop+0x40/0x90 [ 455.055907][ T8732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.055924][ T8732] RIP: 0033:0x7ff66538cdd9 [ 455.055940][ T8732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.055955][ T8732] RSP: 002b:00007ff6635de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.055974][ T8732] RAX: ffffffffffffffda RBX: 00007ff665605fa0 RCX: 00007ff66538cdd9 [ 455.055987][ T8732] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 455.055998][ T8732] RBP: 00007ff6635de090 R08: 0000000000000000 R09: 0000000000000000 [ 455.056008][ T8732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.056017][ T8732] R13: 00007ff665606038 R14: 00007ff665605fa0 R15: 00007ffcd896a468 [ 455.056041][ T8732] [ 456.674482][ T8735] ALSA: mixer_oss: invalid OSS volume '' [ 457.338598][ T8751] syz.0.695 (8751): drop_caches: 2 [ 458.904532][ T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 459.844171][ T8763] syz.1.697 (8763): drop_caches: 2 [ 460.489483][ T8749] netlink: 'syz.2.693': attribute type 7 has an invalid length. [ 460.777586][ T8762] loop0: detected capacity change from 0 to 64 [ 461.013131][ T8762] hfs: bad catalog namelength [ 461.013160][ T8762] hfs: get root inode failed [ 461.883647][ T8776] binder: 8769:8776 ioctl 541b 0 returned -22 [ 462.469582][ T9] IPVS: starting estimator thread 0... [ 462.684576][ T4927] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 463.940524][ T8778] IPVS: using max 15 ests per chain, 36000 per kthread [ 463.995230][ T4927] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 464.729039][ T8802] overlayfs: statfs failed on './file0' [ 465.067921][ T8807] syz.0.711 (8807): drop_caches: 2 [ 465.188886][ T8806] ================================================================== [ 465.188904][ T8806] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 465.188939][ T8806] Read of size 1 at addr ffff88803fbbc0d0 by task syz.3.708/8806 [ 465.188955][ T8806] [ 465.188970][ T8806] CPU: 0 UID: 0 PID: 8806 Comm: syz.3.708 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 465.188992][ T8806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 465.189004][ T8806] Call Trace: [ 465.189012][ T8806] [ 465.189020][ T8806] dump_stack_lvl+0xe8/0x150 [ 465.189045][ T8806] print_address_description+0x55/0x1e0 [ 465.189069][ T8806] ? _raw_spin_lock_irqsave+0x40/0x60 [ 465.189092][ T8806] print_report+0x58/0x70 [ 465.189111][ T8806] kasan_report+0x117/0x150 [ 465.189134][ T8806] ? _raw_spin_lock_irqsave+0x40/0x60 [ 465.189161][ T8806] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 465.189181][ T8806] __kasan_check_byte+0x2a/0x40 [ 465.189206][ T8806] lock_acquire+0x84/0x350 [ 465.189231][ T8806] ? preempt_schedule_common+0x82/0xd0 [ 465.189254][ T8806] ? preempt_schedule_thunk+0x16/0x30 [ 465.189272][ T8806] ? rcu_is_watching+0x15/0xb0 [ 465.189291][ T8806] _raw_spin_lock_irqsave+0x40/0x60 [ 465.189315][ T8806] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 465.189335][ T8806] rt_mutex_slowunlock+0xbf/0x8b0 [ 465.189358][ T8806] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 465.189380][ T8806] ? __rcu_read_unlock+0x83/0xe0 [ 465.189402][ T8806] ? rt_spin_unlock+0x160/0x200 [ 465.189423][ T8806] shrink_dentry_list+0x2e3/0x5e0 [ 465.189443][ T8806] ? __pfx_dentry_lru_isolate+0x10/0x10 [ 465.189464][ T8806] prune_dcache_sb+0x119/0x180 [ 465.189483][ T8806] ? __pfx_prune_dcache_sb+0x10/0x10 [ 465.189504][ T8806] ? list_lru_count_one+0x27/0x2d0 [ 465.189531][ T8806] ? list_lru_count_one+0x26b/0x2d0 [ 465.189556][ T8806] super_cache_scan+0x369/0x4b0 [ 465.189583][ T8806] do_shrink_slab+0x6fb/0x1150 [ 465.189609][ T8806] shrink_slab+0x835/0x11f0 [ 465.189628][ T8806] ? shrink_slab+0x1ef/0x11f0 [ 465.189648][ T8806] ? __pfx_shrink_slab+0x10/0x10 [ 465.189665][ T8806] ? percpu_ref_put+0x19/0x180 [ 465.189686][ T8806] ? percpu_ref_put+0x19/0x180 [ 465.189708][ T8806] ? percpu_ref_put+0xf9/0x180 [ 465.189731][ T8806] ? mem_cgroup_iter+0x420/0x450 [ 465.189747][ T8806] ? mem_cgroup_iter+0x3b/0x450 [ 465.189764][ T8806] drop_slab+0x14a/0x290 [ 465.189783][ T8806] drop_caches_sysctl_handler+0xc7/0x170 [ 465.189809][ T8806] proc_sys_call_handler+0x4c9/0x830 [ 465.189842][ T8806] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 465.189870][ T8806] do_iter_readv_writev+0x62b/0x8d0 [ 465.189895][ T8806] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 465.189926][ T8806] vfs_writev+0x345/0x9a0 [ 465.189947][ T8806] ? __pfx_vfs_writev+0x10/0x10 [ 465.189971][ T8806] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 465.189998][ T8806] ? mutex_lock_nested+0x152/0x1d0 [ 465.190017][ T8806] ? fdget_pos+0x252/0x320 [ 465.190039][ T8806] do_writev+0x15a/0x2e0 [ 465.190056][ T8806] ? __pfx_do_writev+0x10/0x10 [ 465.190076][ T8806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.190095][ T8806] do_syscall_64+0x15f/0xf80 [ 465.190118][ T8806] ? trace_irq_disable+0x3b/0x140 [ 465.190141][ T8806] ? clear_bhb_loop+0x40/0x90 [ 465.190162][ T8806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.190180][ T8806] RIP: 0033:0x7ff66538cdd9 [ 465.190196][ T8806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.190211][ T8806] RSP: 002b:00007ff663179028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 465.190231][ T8806] RAX: ffffffffffffffda RBX: 00007ff665606270 RCX: 00007ff66538cdd9 [ 465.190246][ T8806] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 465.190258][ T8806] RBP: 00007ff665422d69 R08: 0000000000000000 R09: 0000000000000000 [ 465.190270][ T8806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.190281][ T8806] R13: 00007ff665606308 R14: 00007ff665606270 R15: 00007ffcd896a468 [ 465.190301][ T8806] [ 465.190307][ T8806] [ 465.190312][ T8806] Allocated by task 8797: [ 465.190321][ T8806] kasan_save_track+0x3e/0x80 [ 465.190341][ T8806] __kasan_slab_alloc+0x6c/0x80 [ 465.190359][ T8806] kmem_cache_alloc_lru_noprof+0x33c/0x680 [ 465.190379][ T8806] __d_alloc+0x37/0x6f0 [ 465.190397][ T8806] d_alloc_parallel+0xe6/0x1610 [ 465.190415][ T8806] __lookup_slow+0x152/0x440 [ 465.190431][ T8806] lookup_slow+0x53/0x70 [ 465.190447][ T8806] link_path_walk+0x1273/0x18d0 [ 465.190463][ T8806] path_openat+0x2d5/0x38a0 [ 465.190481][ T8806] do_file_open+0x23e/0x4a0 [ 465.190498][ T8806] do_sys_openat2+0x113/0x200 [ 465.190514][ T8806] __x64_sys_openat+0x138/0x170 [ 465.190529][ T8806] do_syscall_64+0x15f/0xf80 [ 465.190551][ T8806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.190566][ T8806] [ 465.190570][ T8806] Freed by task 29: [ 465.190578][ T8806] kasan_save_track+0x3e/0x80 [ 465.190594][ T8806] kasan_save_free_info+0x46/0x50 [ 465.190616][ T8806] __kasan_slab_free+0x5c/0x80 [ 465.190634][ T8806] kmem_cache_free+0x187/0x6c0 [ 465.190653][ T8806] rcu_cpu_kthread+0x99e/0x1470 [ 465.190676][ T8806] smpboot_thread_fn+0x541/0xa50 [ 465.190697][ T8806] kthread+0x388/0x470 [ 465.190719][ T8806] ret_from_fork+0x514/0xb70 [ 465.190737][ T8806] ret_from_fork_asm+0x1a/0x30 [ 465.190758][ T8806] [ 465.190762][ T8806] Last potentially related work creation: [ 465.190769][ T8806] kasan_save_stack+0x3e/0x60 [ 465.190786][ T8806] kasan_record_aux_stack+0xbd/0xd0 [ 465.190808][ T8806] call_rcu+0xee/0x890 [ 465.190823][ T8806] __dentry_kill+0x4a9/0x690 [ 465.190850][ T8806] finish_dput+0xc9/0x480 [ 465.190865][ T8806] proc_invalidate_siblings_dcache+0x3db/0x6c0 [ 465.190886][ T8806] release_task+0x1207/0x16f0 [ 465.190910][ T8806] wait_consider_task+0x1966/0x2e30 [ 465.190927][ T8806] __do_wait+0x155/0x740 [ 465.190941][ T8806] do_wait+0x1e7/0x510 [ 465.190954][ T8806] kernel_wait4+0x232/0x2b0 [ 465.190970][ T8806] __x64_sys_wait4+0x166/0x240 [ 465.190984][ T8806] do_syscall_64+0x15f/0xf80 [ 465.191006][ T8806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.191021][ T8806] [ 465.191025][ T8806] The buggy address belongs to the object at ffff88803fbbc000 [ 465.191025][ T8806] which belongs to the cache dentry of size 376 [ 465.191041][ T8806] The buggy address is located 208 bytes inside of [ 465.191041][ T8806] freed 376-byte region [ffff88803fbbc000, ffff88803fbbc178) [ 465.191059][ T8806] [ 465.191064][ T8806] The buggy address belongs to the physical page: [ 465.191083][ T8806] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3fbbc [ 465.191103][ T8806] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 465.191118][ T8806] memcg:ffff888031715101 [ 465.191126][ T8806] flags: 0x80000000000040(head|node=0|zone=1) [ 465.191140][ T8806] page_type: f5(slab) [ 465.191156][ T8806] raw: 0080000000000040 ffff88801baf7640 dead000000000100 dead000000000122 [ 465.191171][ T8806] raw: 0000000000000000 0000000800120012 00000000f5000000 ffff888031715101 [ 465.191187][ T8806] head: 0080000000000040 ffff88801baf7640 dead000000000100 dead000000000122 [ 465.191202][ T8806] head: 0000000000000000 0000000800120012 00000000f5000000 ffff888031715101 [ 465.191218][ T8806] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 465.191232][ T8806] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 465.191241][ T8806] page dumped because: kasan: bad access detected [ 465.191255][ T8806] page_owner tracks the page as allocated [ 465.191262][ T8806] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5612, tgid 5612 (syz-executor), ts 87226097369, free_ts 0 [ 465.191295][ T8806] post_alloc_hook+0x1f9/0x250 [ 465.191316][ T8806] get_page_from_freelist+0x27d6/0x2850 [ 465.191339][ T8806] __alloc_frozen_pages_noprof+0x18d/0x380 [ 465.191361][ T8806] allocate_slab+0x74/0x5e0 [ 465.191376][ T8806] refill_objects+0x33c/0x3d0 [ 465.191398][ T8806] __pcs_replace_empty_main+0x373/0x720 [ 465.191413][ T8806] kmem_cache_alloc_lru_noprof+0x433/0x680 [ 465.191430][ T8806] __d_alloc+0x37/0x6f0 [ 465.191446][ T8806] d_alloc+0x4b/0x190 [ 465.191463][ T8806] lookup_one_qstr_excl+0xd8/0x360 [ 465.191480][ T8806] start_dirop+0x5c/0x90 [ 465.191495][ T8806] simple_start_creating+0xcc/0x110 [ 465.191514][ T8806] debugfs_start_creating+0xdb/0x1a0 [ 465.191529][ T8806] __debugfs_create_file+0x6f/0x400 [ 465.191544][ T8806] debugfs_create_file_unsafe+0x3a/0x50 [ 465.191559][ T8806] nsim_fib_create+0x2ce/0x9f0 [ 465.191574][ T8806] page_owner free stack trace missing [ 465.191580][ T8806] [ 465.191584][ T8806] Memory state around the buggy address: [ 465.191593][ T8806] ffff88803fbbbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 465.191606][ T8806] ffff88803fbbc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 465.191618][ T8806] >ffff88803fbbc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 465.191627][ T8806] ^ [ 465.191637][ T8806] ffff88803fbbc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc [ 465.191648][ T8806] ffff88803fbbc180: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb [ 465.191658][ T8806] ================================================================== [ 465.191679][ T8806] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 465.191697][ T8806] CPU: 0 UID: 0 PID: 8806 Comm: syz.3.708 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 465.191718][ T8806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 465.191729][ T8806] Call Trace: [ 465.191736][ T8806] [ 465.191744][ T8806] vpanic+0x56c/0xa60 [ 465.191770][ T8806] ? __pfx_vpanic+0x10/0x10 [ 465.191799][ T8806] panic+0xc5/0xd0 [ 465.191821][ T8806] ? __pfx_panic+0x10/0x10 [ 465.191850][ T8806] ? _raw_spin_lock_irqsave+0x40/0x60 [ 465.191875][ T8806] ? rcu_is_watching+0x15/0xb0 [ 465.191895][ T8806] ? _raw_spin_lock_irqsave+0x40/0x60 [ 465.191919][ T8806] ? _raw_spin_lock_irqsave+0x40/0x60 [ 465.191943][ T8806] check_panic_on_warn+0x89/0xb0 [ 465.191970][ T8806] ? _raw_spin_lock_irqsave+0x40/0x60 [ 465.191993][ T8806] end_report+0x73/0x170 [ 465.192014][ T8806] ? _raw_spin_lock_irqsave+0x40/0x60 [ 465.192037][ T8806] kasan_report+0x128/0x150 [ 465.192059][ T8806] ? _raw_spin_lock_irqsave+0x40/0x60 [ 465.192086][ T8806] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 465.192106][ T8806] __kasan_check_byte+0x2a/0x40 [ 465.192128][ T8806] lock_acquire+0x84/0x350 [ 465.192151][ T8806] ? preempt_schedule_common+0x82/0xd0 [ 465.192175][ T8806] ? preempt_schedule_thunk+0x16/0x30 [ 465.192193][ T8806] ? rcu_is_watching+0x15/0xb0 [ 465.192212][ T8806] _raw_spin_lock_irqsave+0x40/0x60 [ 465.192235][ T8806] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 465.192255][ T8806] rt_mutex_slowunlock+0xbf/0x8b0 [ 465.192278][ T8806] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 465.192299][ T8806] ? __rcu_read_unlock+0x83/0xe0 [ 465.192321][ T8806] ? rt_spin_unlock+0x160/0x200 [ 465.192342][ T8806] shrink_dentry_list+0x2e3/0x5e0 [ 465.192362][ T8806] ? __pfx_dentry_lru_isolate+0x10/0x10 [ 465.192384][ T8806] prune_dcache_sb+0x119/0x180 [ 465.192403][ T8806] ? __pfx_prune_dcache_sb+0x10/0x10 [ 465.192424][ T8806] ? list_lru_count_one+0x27/0x2d0 [ 465.192450][ T8806] ? list_lru_count_one+0x26b/0x2d0 [ 465.192476][ T8806] super_cache_scan+0x369/0x4b0 [ 465.192503][ T8806] do_shrink_slab+0x6fb/0x1150 [ 465.192529][ T8806] shrink_slab+0x835/0x11f0 [ 465.192549][ T8806] ? shrink_slab+0x1ef/0x11f0 [ 465.192569][ T8806] ? __pfx_shrink_slab+0x10/0x10 [ 465.192586][ T8806] ? percpu_ref_put+0x19/0x180 [ 465.192608][ T8806] ? percpu_ref_put+0x19/0x180 [ 465.192631][ T8806] ? percpu_ref_put+0xf9/0x180 [ 465.192655][ T8806] ? mem_cgroup_iter+0x420/0x450 [ 465.192671][ T8806] ? mem_cgroup_iter+0x3b/0x450 [ 465.192690][ T8806] drop_slab+0x14a/0x290 [ 465.192710][ T8806] drop_caches_sysctl_handler+0xc7/0x170 [ 465.192736][ T8806] proc_sys_call_handler+0x4c9/0x830 [ 465.192761][ T8806] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 465.192788][ T8806] do_iter_readv_writev+0x62b/0x8d0 [ 465.192812][ T8806] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 465.192848][ T8806] vfs_writev+0x345/0x9a0 [ 465.192868][ T8806] ? __pfx_vfs_writev+0x10/0x10 [ 465.192890][ T8806] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 465.192915][ T8806] ? mutex_lock_nested+0x152/0x1d0 [ 465.192933][ T8806] ? fdget_pos+0x252/0x320 [ 465.192954][ T8806] do_writev+0x15a/0x2e0 [ 465.192971][ T8806] ? __pfx_do_writev+0x10/0x10 [ 465.192991][ T8806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.193009][ T8806] do_syscall_64+0x15f/0xf80 [ 465.193032][ T8806] ? trace_irq_disable+0x3b/0x140 [ 465.193056][ T8806] ? clear_bhb_loop+0x40/0x90 [ 465.193076][ T8806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.193095][ T8806] RIP: 0033:0x7ff66538cdd9 [ 465.193111][ T8806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.193125][ T8806] RSP: 002b:00007ff663179028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 465.193145][ T8806] RAX: ffffffffffffffda RBX: 00007ff665606270 RCX: 00007ff66538cdd9 [ 465.193159][ T8806] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 465.193171][ T8806] RBP: 00007ff665422d69 R08: 0000000000000000 R09: 0000000000000000 [ 465.193183][ T8806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.193195][ T8806] R13: 00007ff665606308 R14: 00007ff665606270 R15: 00007ffcd896a468 [ 465.193216][ T8806] [ 465.193899][ T8806] Kernel Offset: disabled