last executing test programs: 14m23.411285144s ago: executing program 3 (id=1571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, 0x0, 0x4004040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x18000000) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0xf) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000380), 0x1, 0x2) pread64(r4, &(0x7f00000003c0)=""/115, 0x73, 0x5) r5 = syz_open_dev$swradio(&(0x7f0000000440), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000480)=0xe) r6 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000100)={0xc, 0x8, 0x144, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x8001}, r7}}, 0x30) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}}}, 0x30) 14m22.380569529s ago: executing program 3 (id=1575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getaffinity(r0, 0x8, &(0x7f0000000240)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x2, 0x0) ptrace$poke(0x1b, r3, 0x0, 0xe) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x0, 0x103, 0x9, 0x0, 0xffff}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000040, &(0x7f0000000600), 0x4, 0x524, &(0x7f0000001900)="$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") syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)) symlink(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) io_setup(0x4, &(0x7f0000000080)=0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000640)=""/137) io_submit(r6, 0x3, &(0x7f00000005c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r5, 0x0, 0x0, 0x8}, 0x0, 0x0]) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 14m21.237187606s ago: executing program 3 (id=1576): clock_gettime(0x7, &(0x7f00000009c0)) io_getevents(0x0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000003c0)={0x2, &(0x7f0000000400)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x8) sendmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000200025a729bd7000fcdbdf250a000000fe0000010200010008000600fe7f00008682636150c0b11afb75bc5b20385df7b50a3556dbe017ed0457ed4d07000000b4b01caab588906de708db96ade492b4fb83fcf9de6dcf8bb7"], 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000004cc0)=@newlink={0x38, 0x10, 0x801, 0x70bd29, 0x3, {0x0, 0x0, 0x0, 0x0, 0x8108}, [@IFLA_MTU={0x8, 0x4, 0x8044}, @IFLA_GROUP={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe0000010000000008000100000101000800040001"], 0x2c}}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x4b, "25bbc0834ec51a41c20a4fe34f94ee68e8a02d31450b050da0de2cf8fb33290a33254201c2edebe6725757979253295aae50d41ca164d67cd0b0e95767d50854775dffec166646fafb7241"}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01300134b1ff"}) socket$igmp(0x2, 0x3, 0x2) 14m19.82654519s ago: executing program 3 (id=1577): sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x70, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3a, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}], "01a1"}}}}}}}, 0x0) 14m18.746396381s ago: executing program 3 (id=1584): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='atkbd', 0x5) 14m17.290256339s ago: executing program 3 (id=1589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x80c80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000d80)={0x0}, 0x1, 0x0, 0x0, 0x20045081}, 0x20004004) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000c00)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000c40)={&(0x7f0000000c80)=@xdp={0x2c, 0x7, r4, 0x3d}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000d40)="5b9d6d112901364495", 0x9}], 0x1}, 0x5) 14m1.863118746s ago: executing program 32 (id=1589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x80c80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000d80)={0x0}, 0x1, 0x0, 0x0, 0x20045081}, 0x20004004) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000c00)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000c40)={&(0x7f0000000c80)=@xdp={0x2c, 0x7, r4, 0x3d}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000d40)="5b9d6d112901364495", 0x9}], 0x1}, 0x5) 12m22.347088892s ago: executing program 1 (id=1826): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xeb) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x10, 0x2, 0x6, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x3, 0x0, 0xa, 0x0, 0xffd, 0x200010, 0xaf, 0x0, 0x9, 0x0, 0x6]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) 12m17.165565531s ago: executing program 1 (id=1829): getrandom(&(0x7f0000000780)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 12m14.54399957s ago: executing program 1 (id=1837): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xeb) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x10, 0x2, 0x6, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x3, 0x0, 0xa, 0x0, 0xffd, 0x200010, 0xaf, 0x0, 0x9, 0x0, 0x6]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) 12m12.674237791s ago: executing program 1 (id=1840): mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000001c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wrr\x00', 0x1, 0x400000, 0x5e}, 0x2c) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x36}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000006c0)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x0, 0x244, 0x12d5c, 0x12d5c}}, 0x44) 12m11.772112523s ago: executing program 1 (id=1842): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[], 0x48}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="63812bbd7000fcdbdf250300000008000100000000"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4020000}, 0x4000000) 12m11.427128008s ago: executing program 1 (id=1844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000c40)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x20a201, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000e00)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x7, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f80)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000fc0), 0x56) sendmsg$kcm(r4, &(0x7f0000001000)={&(0x7f0000001040)=@xdp={0x2c, 0x0, r6, 0x36}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001100)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000001140)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 11m56.099336706s ago: executing program 33 (id=1844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000c40)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x20a201, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000e00)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x7, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f80)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000fc0), 0x56) sendmsg$kcm(r4, &(0x7f0000001000)={&(0x7f0000001040)=@xdp={0x2c, 0x0, r6, 0x36}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001100)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000001140)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 59.255152191s ago: executing program 4 (id=4037): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r1, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xd50, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 58.175862451s ago: executing program 4 (id=4040): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ptrace(0x4206, 0x0) tkill(0x0, 0x12) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0x9) bind$inet(r1, &(0x7f0000000300)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000180)={0x81, 0x0, 0x4000, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000001640)=""/4101, 0xffffffffffffffd6) listen(0xffffffffffffffff, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d000000000000"], 0x0, 0x34}, 0x28) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x111) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000400), 0x6e, &(0x7f0000000480), 0x0, &(0x7f0000000500)=[@rights={{0xc}}, @cred={{0x18}}, @rights={{0xc}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x78}, 0x40) openat$vicodec0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) 55.091884436s ago: executing program 4 (id=4043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x240, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000fc0)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000001080)=@xdp={0x2c, 0xdd86, r3, 0x3e}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001140)='\'', 0x1}], 0x1}, 0x80) 12.13102731s ago: executing program 5 (id=4104): clock_gettime(0x7, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000340)=0x80000006, 0x4) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x24000005) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000400)={0xffffffffffffffb0, 0x0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x3, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000480)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)={0x14, r4, 0x800, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) ioprio_set$uid(0x3, 0x0, 0x2007) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r5, 0x100}, &(0x7f0000000280)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)) r7 = fsopen(&(0x7f0000000600)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x8) unlinkat(r8, &(0x7f0000000640)='./bus\x00', 0x200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0xc) 11.071546928s ago: executing program 5 (id=4106): gettid() ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) bind$inet(0xffffffffffffffff, 0x0, 0x0) 10.947957811s ago: executing program 2 (id=4107): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000003c0)=""/205, 0xcd, 0x0, 0x3, 0x2}}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'veth1_macvtap\x00', 0x2000}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="03000800010000000000140020eadf07003414000000000190780a010100ac1414aa070347000400907800000000450000000000001100"], 0xfdef) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x110009, 0x3, 0xfffffffc, 0x6000, 0x0, r2, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) 9.58784154s ago: executing program 2 (id=4109): syz_mount_image$squashfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x200802, &(0x7f00000003c0)=ANY=[], 0x1, 0x212, &(0x7f0000000400)="$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") 9.576762711s ago: executing program 5 (id=4110): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2$9p(&(0x7f0000000040), 0x80080) 9.263427583s ago: executing program 2 (id=4112): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000680)={0x0, 0x0, 0xd, 0x0, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x5) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) 7.33815723s ago: executing program 0 (id=4113): clock_gettime(0x7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000340)=0x80000006, 0x4) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x24000005) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000400)={0xffffffffffffffb0, 0x0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x3, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000480)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)={0x14, r4, 0x800, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) ioprio_set$uid(0x3, 0x0, 0x2007) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r5, 0x100}, &(0x7f0000000280)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)) r7 = fsopen(&(0x7f0000000600)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x8) unlinkat(r8, &(0x7f0000000640)='./bus\x00', 0x200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0xc) 6.825577572s ago: executing program 0 (id=4114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x101, 0x60, 0x8}}}}, 0x30}}, 0x4009004) 6.74845339s ago: executing program 4 (id=4049): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000a00462000000407ff0200000000000000000000000000017f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/140], 0x90) sysfs$3(0x3) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8}}, './sys/bus/pci/rescan\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0xa}}, 0x20) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2) unshare(0x20000) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='measure #', 0x9) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) write(r5, &(0x7f00000000c0)='1', 0x1) 6.491903877s ago: executing program 0 (id=4115): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$usbfs(0x0, 0x4, 0x2581) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x80005520, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(r2, &(0x7f0000000400)='wusb3801 ', 0x9) 6.447966811s ago: executing program 5 (id=4116): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000003c0)=""/205, 0xcd, 0x0, 0x3, 0x2}}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'veth1_macvtap\x00', 0x2000}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="03000800010000000000140020eadf07003414000000000190780a010100ac1414aa070347000400907800000000450000000000001100"], 0xfdef) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x110009, 0x3, 0xfffffffc, 0x6000, 0x0, r2, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) 4.468214994s ago: executing program 2 (id=4117): fcntl$notify(0xffffffffffffffff, 0x402, 0x8) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000940)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000040)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x1, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x200080, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000580)={0x1d, 0x29, 0x4, 0x15, 0x9, 0x2, 0x6, 0x10a, 0x1}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000005c0)=0x4f4e, 0x4) connect$inet(r4, &(0x7f0000000600)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000000640), 0x800001d, 0x0) 3.613825351s ago: executing program 0 (id=4118): bpf$MAP_CREATE(0x0, &(0x7f0000011c40)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000011cc0)={0x6, 0x8, &(0x7f0000011d80)=ANY=[], &(0x7f0000011dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000011e00)={r0, 0x0, 0x2100, 0x0, &(0x7f0000011e80), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.64807422s ago: executing program 2 (id=4119): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10) 2.604288734s ago: executing program 5 (id=4120): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xeb) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x10, 0x2, 0x6, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x3, 0x0, 0xa, 0x0, 0xffd, 0x200010, 0xaf, 0x0, 0x9, 0x0, 0x6]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000380)=[0x0]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.585059926s ago: executing program 4 (id=4121): clock_gettime(0x7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000340)=0x80000006, 0x4) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x24000005) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000400)={0xffffffffffffffb0, 0x0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x3, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000480)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)={0x14, r4, 0x800, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) ioprio_set$uid(0x3, 0x0, 0x2007) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r5, 0x100}, &(0x7f0000000280)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)) r7 = fsopen(&(0x7f0000000600)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x8) unlinkat(r8, &(0x7f0000000640)='./bus\x00', 0x200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0xc) 2.495997225s ago: executing program 0 (id=4122): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000200)="ea61", 0x2}], 0x1, 0x1, 0xad) 606.443358ms ago: executing program 2 (id=4123): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x24000800) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) gettid() ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 122.565478ms ago: executing program 4 (id=4124): gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000600)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000740)=0x2) recvmmsg(r2, &(0x7f0000000780), 0x80002c1, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000080)={[{@dmask={'dmask', 0x3d, 0x2263}}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@umask={'umask', 0x3d, 0x4}}, {@namecase}, {@utf8}, {@discard}, {@errors_remount}, {}]}, 0x1, 0x1533, &(0x7f0000000780)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI") mkdir(&(0x7f0000001cc0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001d00)='./config\x00', &(0x7f0000001d40)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001d80)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000001dc0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r3, &(0x7f0000001e40)='file0', 0x5) 70.671133ms ago: executing program 5 (id=4125): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000daffffffb702000008000000b7030000000000008500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x10, 0x10, &(0x7f0000000400)="0000000212000000", &(0x7f0000000440)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 0 (id=4126): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$usbfs(0x0, 0x4, 0x2581) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x80005520, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(r2, &(0x7f0000000400)='wusb3801 ', 0x9) kernel console output (not intermixed with test programs): IG_RAX: 0000000000000010 [ 974.212710][T17596] RAX: ffffffffffffffda RBX: 00007fa34ea26180 RCX: 00007fa34e79fb19 [ 974.220707][T17596] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 974.228702][T17596] RBP: 00007fa34e837af8 R08: 0000000000000000 R09: 0000000000000000 [ 974.236692][T17596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 974.244682][T17596] R13: 00007fa34ea26218 R14: 00007fa34ea26180 R15: 00007fffca2edb18 [ 974.252698][T17596] [ 974.257720][T17596] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 975.788937][T17591] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 976.544904][T17615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2927'. [ 976.670507][T17618] fuse: Bad value for 'fd' [ 976.902968][T17625] overlayfs: missing 'lowerdir' [ 979.211261][T17635] overlayfs: failed to resolve './bus': -2 [ 979.239420][T17635] overlayfs: failed to resolve 'upper': -2 [ 979.321586][T17643] fuse: Bad value for 'fd' [ 979.432346][T17647] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2937'. [ 979.468055][T17647] nbd: must specify a device to reconfigure [ 979.678028][T17659] netlink: 'syz.2.2940': attribute type 1 has an invalid length. [ 979.800638][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2939'. [ 979.970448][T17668] overlayfs: missing 'lowerdir' [ 982.326057][T17679] fuse: Bad value for 'fd' [ 982.424087][T17684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2948'. [ 982.433428][T17684] nbd: must specify a device to reconfigure [ 982.439380][T17685] ip6tnl1: entered promiscuous mode [ 983.574938][T17706] overlayfs: failed to resolve 'upper': -2 [ 983.690000][T17714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 983.902301][T17722] fuse: Bad value for 'fd' [ 984.077147][T17727] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2958'. [ 984.087452][T17727] nbd: must specify a device to reconfigure [ 984.418526][T17741] fuse: Bad value for 'fd' [ 985.396109][T17752] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2967'. [ 985.475101][T17752] nbd: must specify a device to reconfigure [ 985.538091][T17761] overlayfs: failed to resolve 'upper': -2 [ 986.632209][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2970'. [ 986.729278][T17778] fuse: Bad value for 'fd' [ 986.851119][ T27] audit: type=1326 audit(1793671124.931:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17779 comm="syz.0.2975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbbe39fb19 code=0x0 [ 988.093896][T17812] fuse: Invalid rootmode [ 988.140682][T17814] overlayfs: failed to resolve 'upper': -2 [ 988.386010][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2986'. [ 990.476037][T17846] fuse: Invalid rootmode [ 990.566658][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 990.628430][ T8] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 990.656723][T17856] overlayfs: failed to resolve 'upper': -2 [ 992.343069][T17874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3001'. [ 992.472021][T17883] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 993.090111][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.101146][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.306367][T17894] fuse: Invalid rootmode [ 993.932287][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3010'. [ 994.249916][T17909] overlayfs: failed to resolve 'upper': -2 [ 995.102410][T17924] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3014'. [ 995.111422][T17924] nbd: couldn't find a device at index 0 [ 995.307497][T17931] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 996.055011][T17936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3016'. [ 996.904269][T17939] fuse: Bad value for 'rootmode' [ 997.379667][T17958] overlayfs: failed to resolve 'upper': -2 [ 998.215758][T17968] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3026'. [ 998.225746][T17968] nbd: couldn't find a device at index 0 [ 998.411275][T17978] fuse: Bad value for 'rootmode' [ 998.462409][T17980] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 999.318753][T17985] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 999.327972][T17985] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1000.127939][T17986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3030'. [ 1000.308315][ T27] audit: type=1326 audit(1793671138.391:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.4.3034" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f459fb19 code=0x7ffc0000 [ 1000.362159][ T27] audit: type=1326 audit(1793671138.391:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.4.3034" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb2f459fb19 code=0x7ffc0000 [ 1000.431912][ T27] audit: type=1326 audit(1793671138.391:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm=05 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f459fb19 code=0x7ffc0000 [ 1000.472083][ T27] audit: type=1326 audit(1793671138.391:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm=05 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f459fb19 code=0x7ffc0000 [ 1000.526020][ T27] audit: type=1326 audit(1793671138.391:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm=05 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb2f459fb19 code=0x7ffc0000 [ 1000.577828][ T27] audit: type=1326 audit(1793671138.481:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm=05 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f459fb19 code=0x7ffc0000 [ 1000.602322][ T27] audit: type=1326 audit(1793671138.481:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm=05 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f459fb19 code=0x7ffc0000 [ 1000.626043][ T27] audit: type=1326 audit(1793671138.511:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm=05 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb2f459fb19 code=0x7ffc0000 [ 1000.659262][T18002] overlayfs: missing 'lowerdir' [ 1000.683510][T18002] overlayfs: failed to resolve 'upper': -2 [ 1000.699005][ T27] audit: type=1326 audit(1793671138.511:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm=05 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f459fb19 code=0x7ffc0000 [ 1000.724889][ T27] audit: type=1326 audit(1793671138.511:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm=05 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f459fb19 code=0x7ffc0000 [ 1001.786082][T18015] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3038'. [ 1001.796349][T18015] nbd: couldn't find a device at index 0 [ 1001.965998][T18023] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1001.975167][T18023] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1002.752312][T18028] fuse: Bad value for 'rootmode' [ 1002.981228][T18038] overlayfs: missing 'lowerdir' [ 1003.142365][T18041] loop0: detected capacity change from 0 to 512 [ 1003.411257][T18035] overlayfs: failed to resolve 'upper': -2 [ 1003.744589][T18041] EXT4-fs (loop0): 1 orphan inode deleted [ 1003.751583][T18041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.764683][T18041] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1003.952919][T18036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3045'. [ 1003.968864][T18049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3049'. [ 1004.014874][T18049] nbd: couldn't find a device at index 0 [ 1004.313213][T15171] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.457859][T18061] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 1004.466927][T18061] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1005.373261][T18068] fuse: Unknown parameter 'use00000000000000000000' [ 1005.705242][T18081] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3061'. [ 1007.152190][T18091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3062'. [ 1007.432139][T18096] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1007.441129][T18096] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1008.321776][T18101] fuse: Unknown parameter 'use00000000000000000000' [ 1008.542630][T18112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3071'. [ 1008.964765][T18121] overlayfs: cannot append lower layer [ 1009.314135][T18124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3074'. [ 1010.124072][T18135] fuse: Unknown parameter 'use00000000000000000000' [ 1010.376312][T18146] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3081'. [ 1010.467991][T18149] loop5: detected capacity change from 0 to 1024 [ 1011.371661][T18157] overlayfs: cannot append lower layer [ 1012.455355][T18172] fuse: Unknown parameter 'user_i00000000000000000000' [ 1012.530359][T18176] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3091'. [ 1012.551197][T18180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3088'. [ 1012.659804][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 1012.659820][ T27] audit: type=1807 audit(1793671150.741:120): action=measure UNKNOWN=# res=0 [ 1012.786783][ T27] audit: type=1802 audit(1793671150.741:121): pid=18183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.3090" res=0 errno=0 [ 1014.252888][T18189] netlink: 'syz.4.3093': attribute type 1 has an invalid length. [ 1014.280703][T18175] ima: policy update failed [ 1014.307496][ T27] audit: type=1802 audit(1793671152.391:122): pid=18175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3090" res=0 errno=0 [ 1014.509196][T18194] overlayfs: missing 'lowerdir' [ 1015.310446][T18199] overlayfs: cannot append lower layer [ 1015.400191][T18203] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3099'. [ 1016.533244][T18217] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3101'. [ 1016.668379][T18225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3102'. [ 1017.033398][T18236] loop2: detected capacity change from 0 to 512 [ 1017.817682][T18236] EXT4-fs (loop2): 1 orphan inode deleted [ 1017.824342][T18236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1017.842164][T18236] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1017.863119][ T3006] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1017.892672][ T3006] EXT4-fs error (device loop2): ext4_release_dquot:6994: comm kworker/u4:13: Failed to release dquot type 1 [ 1017.907434][T18233] overlayfs: missing 'lowerdir' [ 1017.922070][ T27] audit: type=1807 audit(1793671155.941:123): action=measure UNKNOWN=# res=0 [ 1017.963916][ T27] audit: type=1802 audit(1793671155.941:124): pid=18243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.3107" res=0 errno=0 [ 1018.067741][T18247] overlayfs: cannot append lower layer [ 1018.196916][T18230] ima: policy update failed [ 1018.208880][T15552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.212117][ T27] audit: type=1802 audit(1793671156.301:125): pid=18230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3107" res=0 errno=0 [ 1019.398673][T18271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3115'. [ 1019.577233][T18274] loop0: detected capacity change from 0 to 1024 [ 1020.805208][T18281] loop2: detected capacity change from 0 to 512 [ 1021.265848][T18290] overlayfs: cannot append lower layer [ 1021.336237][T18292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3118'. [ 1021.529182][T18281] EXT4-fs (loop2): 1 orphan inode deleted [ 1021.536287][T18281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.550155][T18281] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.639951][T18297] overlayfs: missing 'lowerdir' [ 1022.211701][T15552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.666574][T18308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3124'. [ 1023.193539][T18331] loop0: detected capacity change from 0 to 1024 [ 1023.891549][T18348] overlayfs: cannot append lower layer [ 1024.209311][T18358] overlayfs: missing 'lowerdir' [ 1025.670982][T18366] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3135'. [ 1025.810266][T18365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3134'. [ 1026.037646][T18380] sch_tbf: burst 0 is lower than device veth1_to_batadv mtu (1514) ! [ 1026.093292][T18381] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3139'. [ 1029.043426][T18398] overlayfs: missing 'lowerdir' [ 1030.181748][T18406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3146'. [ 1031.466180][T18427] sch_tbf: burst 0 is lower than device veth1_to_batadv mtu (1514) ! [ 1031.479064][T18427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3156'. [ 1033.382340][T18434] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3159'. [ 1033.441035][T18437] overlayfs: missing 'lowerdir' [ 1033.464218][T18437] overlayfs: failed to resolve 'lower1': -2 [ 1035.746802][T18462] overlayfs: missing 'lowerdir' [ 1035.787974][T18462] overlayfs: failed to resolve 'lower1': -2 [ 1035.905669][T18473] sch_tbf: burst 0 is lower than device veth1_to_batadv mtu (1514) ! [ 1035.963557][T18474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3173'. [ 1040.616933][ T27] audit: type=1807 audit(1793671177.671:126): action=measure UNKNOWN=# res=0 [ 1040.843879][ T27] audit: type=1802 audit(1793671177.671:127): pid=18505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.3178" res=0 errno=0 [ 1041.882094][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3179'. [ 1041.893138][T18501] ima: policy update failed [ 1041.897845][ T27] audit: type=1802 audit(1793671179.981:128): pid=18501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3178" res=0 errno=0 [ 1041.938406][T18514] dummy1: entered promiscuous mode [ 1041.943993][T18514] dummy1: entered allmulticast mode [ 1043.862125][T18523] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1043.871045][T18523] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1043.971252][T18531] overlayfs: missing 'lowerdir' [ 1043.995010][T18531] overlayfs: failed to resolve 'lower1': -2 [ 1044.753801][T18547] netlink: 'syz.0.3188': attribute type 1 has an invalid length. [ 1044.839327][T18547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1046.056218][T18570] loop5: detected capacity change from 0 to 512 [ 1046.671543][T18570] EXT4-fs (loop5): 1 orphan inode deleted [ 1046.678479][T18570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.699255][T18570] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.699569][ T3006] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1046.720011][ T3006] EXT4-fs error (device loop5): ext4_release_dquot:6994: comm kworker/u4:13: Failed to release dquot type 1 [ 1047.026876][T18588] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 1047.036294][T18588] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1047.054702][T13203] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.148948][T18593] overlayfs: missing 'lowerdir' [ 1047.200331][T18593] overlayfs: failed to resolve 'lower1': -2 [ 1047.330551][T18600] fuse: Unknown parameter 'fd00000000000000000000004' [ 1047.417766][T18604] netlink: 'syz.2.3204': attribute type 1 has an invalid length. [ 1048.299866][T18604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1048.668180][T18623] loop4: detected capacity change from 0 to 1024 [ 1048.784826][T18626] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 1049.491765][T18635] fuse: Unknown parameter 'fd00000000000000000000004' [ 1050.488082][T18644] overlayfs: missing 'lowerdir' [ 1050.500647][T18645] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1050.510067][T18645] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1050.560220][T18644] overlayfs: failed to resolve 'lower1': -2 [ 1050.596981][T18650] netlink: 'syz.5.3218': attribute type 1 has an invalid length. [ 1050.646319][T18650] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1052.462158][T18687] netlink: 'syz.5.3229': attribute type 1 has an invalid length. [ 1052.538497][T18687] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1052.980370][T18705] overlayfs: missing 'lowerdir' [ 1053.004186][T18705] overlayfs: failed to resolve 'lower1': -2 [ 1053.056941][T18709] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1053.066015][T18709] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1053.282078][ T27] audit: type=1807 audit(1793671191.361:129): action=measure UNKNOWN=# res=0 [ 1054.877854][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.883037][ T27] audit: type=1802 audit(1793671191.371:130): pid=18714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.3235" res=0 errno=0 [ 1054.884979][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.027853][T18711] ima: policy update failed [ 1055.080446][ T27] audit: type=1802 audit(1793671193.161:131): pid=18711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3235" res=0 errno=0 [ 1055.906263][T18723] sch_tbf: burst 0 is lower than device veth1_to_batadv mtu (1514) ! [ 1056.047749][T18732] netlink: 'syz.2.3240': attribute type 1 has an invalid length. [ 1056.123265][T18732] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1056.185644][T18742] overlayfs: missing 'lowerdir' [ 1056.209867][T18742] overlayfs: failed to resolve 'lower1': -2 [ 1059.270497][ T27] audit: type=1807 audit(1793671197.091:132): action=measure UNKNOWN=# res=0 [ 1059.418459][ T27] audit: type=1802 audit(1793671197.091:133): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.3249" res=0 errno=0 [ 1060.802691][T18754] ima: policy update failed [ 1060.819293][T18767] netlink: 'syz.0.3253': attribute type 1 has an invalid length. [ 1060.827363][ T27] audit: type=1802 audit(1793671198.901:134): pid=18754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3249" res=0 errno=0 [ 1060.880559][T18767] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1061.103945][T18782] overlayfs: missing 'lowerdir' [ 1061.226684][T18782] overlayfs: failed to resolve 'lower1': -2 [ 1064.170914][T18809] netlink: 'syz.0.3265': attribute type 1 has an invalid length. [ 1064.214784][T18809] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1064.226865][T18816] overlayfs: missing 'lowerdir' [ 1064.246026][T18816] overlayfs: failed to resolve 'lower1': -2 [ 1066.742772][T18841] netlink: 'syz.2.3278': attribute type 1 has an invalid length. [ 1066.819799][T18841] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1066.842604][T18844] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3279'. [ 1066.988651][T18854] overlayfs: missing 'lowerdir' [ 1067.018846][T18854] overlayfs: failed to resolve 'lower1': -2 [ 1068.110835][T18867] overlayfs: missing 'lowerdir' [ 1069.967973][T18886] netlink: 'syz.4.3291': attribute type 1 has an invalid length. [ 1070.017353][T18891] overlayfs: missing 'lowerdir' [ 1070.020583][T18886] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1070.112854][T18891] overlayfs: failed to resolve 'lower1': -2 [ 1072.131566][T18907] overlayfs: missing 'lowerdir' [ 1073.730154][T18928] overlayfs: missing 'lowerdir' [ 1075.277875][T18939] fuse: Bad value for 'fd' [ 1075.830451][T18948] overlayfs: missing 'lowerdir' [ 1076.604989][T18955] syz_tun: entered allmulticast mode [ 1076.626225][T18951] syz_tun: left allmulticast mode [ 1076.713594][T18960] overlayfs: missing 'lowerdir' [ 1077.031102][T18972] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1077.040185][T18972] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1078.943771][T18984] loop4: detected capacity change from 0 to 1024 [ 1079.120874][T18983] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 1079.903340][T18997] overlayfs: missing 'lowerdir' [ 1080.627266][T19000] syz_tun: entered allmulticast mode [ 1080.639267][T18999] syz_tun: left allmulticast mode [ 1080.900728][T19011] overlayfs: missing 'lowerdir' [ 1081.115940][T19019] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1081.125018][T19019] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1082.273690][T19026] syz_tun: entered allmulticast mode [ 1082.320444][T19026] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.436423][T19024] syz_tun: left allmulticast mode [ 1082.485399][T19033] overlayfs: missing 'lowerdir' [ 1084.728585][T19074] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1084.737721][T19074] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1085.623206][T19079] syz_tun: entered allmulticast mode [ 1085.654802][T19077] syz_tun: left allmulticast mode [ 1085.824991][T19089] overlayfs: missing 'lowerdir' [ 1087.807369][T19121] syz_tun: entered allmulticast mode [ 1087.905318][T19120] syz_tun: left allmulticast mode [ 1087.974989][T19126] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1087.984367][T19126] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1088.822820][T19131] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3361'. [ 1089.029102][T19137] overlayfs: missing 'lowerdir' [ 1091.496334][T19175] syz_tun: entered allmulticast mode [ 1091.719891][T19174] syz_tun: left allmulticast mode [ 1091.896867][T19182] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1091.905939][T19182] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1093.180404][T19189] overlayfs: missing 'lowerdir' [ 1095.049694][T19208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3376'. [ 1095.168318][T19210] loop4: detected capacity change from 0 to 512 [ 1095.359999][T19210] EXT4-fs (loop4): 1 orphan inode deleted [ 1095.371861][T19210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.396675][ T2893] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1095.414284][T19210] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1095.668225][ T2893] EXT4-fs error (device loop4): ext4_release_dquot:6994: comm kworker/u4:6: Failed to release dquot type 1 [ 1095.979583][T11891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.169929][T19232] syz_tun: entered allmulticast mode [ 1096.183320][T19231] syz_tun: left allmulticast mode [ 1099.174377][T19264] overlayfs: missing 'lowerdir' [ 1099.823753][T19276] syz_tun: entered allmulticast mode [ 1099.847963][T19275] syz_tun: left allmulticast mode [ 1101.359135][T19308] overlayfs: missing 'lowerdir' [ 1103.203528][T19315] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1103.212795][T19315] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1104.324726][T19334] loop0: detected capacity change from 0 to 512 [ 1104.925593][T19334] EXT4-fs (loop0): 1 orphan inode deleted [ 1104.932809][T19334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1104.946020][T19334] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.976983][ T11] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1105.030633][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6994: comm kworker/u4:0: Failed to release dquot type 1 [ 1105.521189][T15171] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.382582][T19373] overlayfs: missing 'lowerdir' [ 1106.821175][T19374] syz_tun: entered allmulticast mode [ 1107.289651][T19367] syz_tun: left allmulticast mode [ 1107.509849][T19387] netlink: 'syz.4.3416': attribute type 6 has an invalid length. [ 1108.847176][T19417] overlayfs: missing 'lowerdir' [ 1109.167960][T19419] syz_tun: entered allmulticast mode [ 1109.557687][T19414] syz_tun: left allmulticast mode [ 1109.952713][T19440] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3430'. [ 1110.289439][T19460] overlayfs: missing 'lowerdir' [ 1110.660053][T19462] syz_tun: entered allmulticast mode [ 1111.047126][T19456] syz_tun: left allmulticast mode [ 1111.716501][T19495] netlink: 'syz.5.3446': attribute type 13 has an invalid length. [ 1111.724347][ T27] audit: type=1807 audit(1793671249.711:135): action=measure UNKNOWN=# res=0 [ 1111.724391][ T27] audit: type=1802 audit(1793671249.711:136): pid=19492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.3444" res=0 errno=0 [ 1113.402287][T19501] syz_tun: entered allmulticast mode [ 1113.860525][T19499] syz_tun: left allmulticast mode [ 1114.620500][T19509] overlayfs: missing 'lowerdir' [ 1114.654972][T19492] ima: policy update failed [ 1115.537357][ T27] audit: type=1802 audit(1793671252.861:137): pid=19492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3444" res=0 errno=0 [ 1115.950247][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.959086][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.179647][T19529] syz_tun: entered allmulticast mode [ 1116.212066][T19528] syz_tun: left allmulticast mode [ 1116.494813][ T27] audit: type=1807 audit(1793671254.491:138): action=measure UNKNOWN=# res=0 [ 1116.567826][ T27] audit: type=1802 audit(1793671254.491:139): pid=19537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.3460" res=0 errno=0 [ 1116.614940][T19542] overlayfs: missing 'lowerdir' [ 1117.572190][T19536] ima: policy update failed [ 1117.576910][ T27] audit: type=1802 audit(1793671255.661:140): pid=19536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3460" res=0 errno=0 [ 1117.859329][T19559] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3470'. [ 1117.980585][T19566] syz_tun: entered allmulticast mode [ 1117.998852][T19564] syz_tun: left allmulticast mode [ 1118.377054][T19574] overlayfs: missing 'lowerdir' [ 1120.115309][ T27] audit: type=1807 audit(1793671258.201:141): action=measure UNKNOWN=# res=0 [ 1120.235956][ T27] audit: type=1802 audit(1793671258.201:142): pid=19578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.3473" res=0 errno=0 [ 1120.342220][T19565] ima: policy update failed [ 1120.360285][ T27] audit: type=1802 audit(1793671258.431:143): pid=19565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3473" res=0 errno=0 [ 1120.568700][T19598] syz_tun: entered allmulticast mode [ 1120.616809][T19597] syz_tun: left allmulticast mode [ 1122.481861][T19607] overlayfs: missing 'lowerdir' [ 1123.669639][T19621] netlink: 'syz.0.3490': attribute type 19 has an invalid length. [ 1123.712303][T19621] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.3490'. [ 1124.085467][ T27] audit: type=1807 audit(1793671262.141:144): action=measure UNKNOWN=# res=0 [ 1124.238004][ T27] audit: type=1802 audit(1793671262.141:145): pid=19633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.3494" res=0 errno=0 [ 1124.457053][T19634] syz_tun: entered allmulticast mode [ 1124.849368][T19630] syz_tun: left allmulticast mode [ 1126.947208][T19633] ima: policy update failed [ 1126.967941][ T27] audit: type=1802 audit(1793671265.051:146): pid=19633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3494" res=0 errno=0 [ 1127.238521][T19646] overlayfs: missing 'lowerdir' [ 1130.919871][T19669] syz_tun: entered allmulticast mode [ 1130.952371][T19667] syz_tun: left allmulticast mode [ 1131.368212][ T27] audit: type=1807 audit(1793671269.341:147): action=measure UNKNOWN=# res=0 [ 1133.778523][ T27] audit: type=1802 audit(1793671269.341:148): pid=19681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.3508" res=0 errno=0 [ 1134.562379][T19675] ima: policy update failed [ 1134.587112][ T27] audit: type=1802 audit(1793671272.651:149): pid=19675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3508" res=0 errno=0 [ 1135.169794][T19691] overlayfs: missing 'lowerdir' [ 1135.439513][T19706] syz_tun: entered allmulticast mode [ 1135.480463][T19705] syz_tun: left allmulticast mode [ 1135.607919][T19713] netlink: 'syz.2.3521': attribute type 29 has an invalid length. [ 1135.695875][T19713] netlink: 'syz.2.3521': attribute type 29 has an invalid length. [ 1135.821646][T19716] netlink: 'syz.2.3521': attribute type 29 has an invalid length. [ 1136.750550][T19733] overlayfs: missing 'lowerdir' [ 1136.951116][T19739] syz_tun: entered allmulticast mode [ 1136.966061][T19738] syz_tun: left allmulticast mode [ 1137.070234][T19741] random: crng reseeded on system resumption [ 1138.579624][T19762] overlayfs: missing 'lowerdir' [ 1138.785685][T19770] syz_tun: entered allmulticast mode [ 1138.802090][ T42] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1138.807859][T19769] syz_tun: left allmulticast mode [ 1139.562011][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 1139.599093][ T42] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1139.621727][ T42] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1139.735790][ T42] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1139.763670][ T42] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1139.791279][ T42] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1139.812885][ T42] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1139.825832][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.078908][ T42] usb 1-1: usb_control_msg returned -71 [ 1140.092520][ T42] usbtmc 1-1:16.0: can't read capabilities [ 1140.128823][ T42] usb 1-1: USB disconnect, device number 15 [ 1141.293881][T19808] syz_tun: entered allmulticast mode [ 1141.305792][T19807] syz_tun: left allmulticast mode [ 1142.456685][T19827] random: crng reseeded on system resumption [ 1143.203496][T19836] syz_tun: entered allmulticast mode [ 1143.424153][T19835] syz_tun: left allmulticast mode [ 1143.500555][T19841] overlayfs: cannot append lower layer [ 1143.942132][T19686] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1144.262084][T19686] usb 5-1: Using ep0 maxpacket: 8 [ 1144.701732][T19686] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1144.716957][T19686] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1144.727509][T19686] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1144.737790][T19686] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1144.752100][T19686] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1144.765462][T19686] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1144.774860][T19686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.111068][T19686] usb 5-1: usb_control_msg returned -71 [ 1145.204187][T19686] usbtmc 5-1:16.0: can't read capabilities [ 1145.414909][T19686] usb 5-1: USB disconnect, device number 10 [ 1145.838078][T19866] syz_tun: entered allmulticast mode [ 1145.849613][T19865] syz_tun: left allmulticast mode [ 1145.858853][T19869] overlayfs: cannot append lower layer [ 1145.888160][T19870] overlay: Unknown parameter '/' [ 1147.383984][T19895] syz_tun: entered allmulticast mode [ 1147.411738][T19892] syz_tun: left allmulticast mode [ 1147.422890][T19897] overlay: Unknown parameter '/' [ 1147.486986][T19899] overlayfs: cannot append lower layer [ 1147.634320][T19906] random: crng reseeded on system resumption [ 1148.726598][T19923] syz_tun: entered allmulticast mode [ 1148.746836][T19922] syz_tun: left allmulticast mode [ 1148.823439][T19925] overlay: Unknown parameter '/' [ 1148.912210][T19927] overlayfs: cannot append lower layer [ 1149.202019][ T5170] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1149.443205][ T5170] usb 1-1: Using ep0 maxpacket: 8 [ 1149.561819][ T5170] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1149.600983][ T5170] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1149.694707][ T5170] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1149.783706][ T5170] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1149.878469][ T5170] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1149.999407][ T5170] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1150.080386][ T5170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.172477][ T5170] usb 1-1: usb_control_msg returned -71 [ 1151.178115][ T5170] usbtmc 1-1:16.0: can't read capabilities [ 1151.191996][ T5170] usb 1-1: USB disconnect, device number 16 [ 1151.310171][T19946] syz_tun: entered allmulticast mode [ 1151.322476][T19944] syz_tun: left allmulticast mode [ 1152.130724][T19953] overlayfs: cannot append lower layer [ 1153.301766][T19974] syz_tun: entered allmulticast mode [ 1153.315108][T19973] syz_tun: left allmulticast mode [ 1154.303940][T19989] overlayfs: cannot append lower layer [ 1155.522666][T19997] random: crng reseeded on system resumption [ 1156.638655][T20008] syz_tun: entered allmulticast mode [ 1156.660127][T20007] syz_tun: left allmulticast mode [ 1156.716338][ T42] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1156.932182][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 1156.960957][ T42] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1156.969443][ T42] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1156.980130][ T42] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1156.991771][ T42] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1157.002325][ T42] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1157.015921][ T42] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1157.344180][T20025] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1157.357085][T20025] CPU: 0 PID: 20025 Comm: syz.0.3632 Not tainted syzkaller #0 [ 1157.364611][T20025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1157.374690][T20025] Call Trace: [ 1157.377991][T20025] [ 1157.380932][T20025] dump_stack_lvl+0x18c/0x250 [ 1157.385643][T20025] ? show_regs_print_info+0x20/0x20 [ 1157.390868][T20025] ? load_image+0x420/0x420 [ 1157.395422][T20025] sysfs_create_dir_ns+0x26e/0x2a0 [ 1157.400566][T20025] ? __lock_acquire+0x7eb0/0x7eb0 [ 1157.405613][T20025] ? sysfs_warn_dup+0xa0/0xa0 [ 1157.410314][T20025] ? rcu_is_watching+0x15/0xb0 [ 1157.415168][T20025] ? do_raw_spin_unlock+0x121/0x230 [ 1157.420411][T20025] kobject_add_internal+0x617/0xc90 [ 1157.421399][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.425621][T20025] kobject_add+0x164/0x240 [ 1157.425695][T20025] ? kobject_init+0x1d0/0x1d0 [ 1157.425720][T20025] ? get_device_parent+0x366/0x390 [ 1157.425749][T20025] device_add+0x3fa/0xc40 [ 1157.425773][T20025] tty_register_device_attr+0x42b/0x9a0 [ 1157.425802][T20025] ? tty_register_device+0x30/0x30 [ 1157.425830][T20025] ? tty_port_init+0x132/0x1a0 [ 1157.467729][T20025] ? gsm_dlci_alloc+0x32a/0x630 [ 1157.472578][T20025] ? __might_fault+0xaa/0x120 [ 1157.477296][T20025] gsm_activate_mux+0x110/0x2a0 [ 1157.482175][T20025] gsmld_ioctl+0x12ca/0x1900 [ 1157.486779][T20025] ? gsmld_write+0x120/0x120 [ 1157.491386][T20025] ? __init_ldsem+0x150/0x150 [ 1157.496061][T20025] ? __fget_files+0x28/0x460 [ 1157.500691][T20025] ? gsmld_write+0x120/0x120 [ 1157.505329][T20025] tty_ioctl+0x9b5/0xdc0 [ 1157.509581][T20025] ? tty_get_icount+0xb0/0xb0 [ 1157.514266][T20025] __se_sys_ioctl+0xfd/0x170 [ 1157.518855][T20025] do_syscall_64+0x55/0xb0 [ 1157.523270][T20025] ? clear_bhb_loop+0x40/0x90 [ 1157.527944][T20025] ? clear_bhb_loop+0x40/0x90 [ 1157.532665][T20025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1157.538562][T20025] RIP: 0033:0x7fbbbe39fb19 [ 1157.543004][T20025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.562610][T20025] RSP: 002b:00007fbbbf2a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1157.571058][T20025] RAX: ffffffffffffffda RBX: 00007fbbbe626180 RCX: 00007fbbbe39fb19 [ 1157.579111][T20025] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 1157.587081][T20025] RBP: 00007fbbbe437af8 R08: 0000000000000000 R09: 0000000000000000 [ 1157.595046][T20025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.603460][T20025] R13: 00007fbbbe626218 R14: 00007fbbbe626180 R15: 00007ffd78ce6718 [ 1157.611444][T20025] [ 1157.812000][T20025] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1158.025346][T20031] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3635'. [ 1158.123727][ T42] usb 3-1: usb_control_msg returned -71 [ 1158.129436][ T42] usbtmc 3-1:16.0: can't read capabilities [ 1158.186784][ T42] usb 3-1: USB disconnect, device number 11 [ 1161.920923][T20074] random: crng reseeded on system resumption [ 1162.023683][T20078] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1162.074531][T20078] CPU: 1 PID: 20078 Comm: syz.5.3650 Not tainted syzkaller #0 [ 1162.082054][T20078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1162.092130][T20078] Call Trace: [ 1162.095485][T20078] [ 1162.098474][T20078] dump_stack_lvl+0x18c/0x250 [ 1162.103186][T20078] ? show_regs_print_info+0x20/0x20 [ 1162.108412][T20078] ? load_image+0x420/0x420 [ 1162.112939][T20078] sysfs_create_dir_ns+0x26e/0x2a0 [ 1162.118054][T20078] ? __lock_acquire+0x7eb0/0x7eb0 [ 1162.123101][T20078] ? sysfs_warn_dup+0xa0/0xa0 [ 1162.127817][T20078] ? rcu_is_watching+0x15/0xb0 [ 1162.132603][T20078] ? do_raw_spin_unlock+0x121/0x230 [ 1162.137809][T20078] kobject_add_internal+0x617/0xc90 [ 1162.143014][T20078] kobject_add+0x164/0x240 [ 1162.147431][T20078] ? kobject_init+0x1d0/0x1d0 [ 1162.152107][T20078] ? get_device_parent+0x366/0x390 [ 1162.157232][T20078] device_add+0x3fa/0xc40 [ 1162.161566][T20078] tty_register_device_attr+0x42b/0x9a0 [ 1162.167116][T20078] ? tty_register_device+0x30/0x30 [ 1162.172237][T20078] ? tty_port_init+0x132/0x1a0 [ 1162.177003][T20078] ? gsm_dlci_alloc+0x32a/0x630 [ 1162.181854][T20078] ? __might_fault+0xaa/0x120 [ 1162.186531][T20078] gsm_activate_mux+0x110/0x2a0 [ 1162.191384][T20078] gsmld_ioctl+0x12ca/0x1900 [ 1162.195984][T20078] ? gsmld_write+0x120/0x120 [ 1162.200578][T20078] ? __init_ldsem+0x150/0x150 [ 1162.205256][T20078] ? __fget_files+0x28/0x460 [ 1162.209856][T20078] ? gsmld_write+0x120/0x120 [ 1162.214445][T20078] tty_ioctl+0x9b5/0xdc0 [ 1162.218687][T20078] ? tty_get_icount+0xb0/0xb0 [ 1162.223448][T20078] __se_sys_ioctl+0xfd/0x170 [ 1162.228042][T20078] do_syscall_64+0x55/0xb0 [ 1162.232459][T20078] ? clear_bhb_loop+0x40/0x90 [ 1162.237166][T20078] ? clear_bhb_loop+0x40/0x90 [ 1162.241848][T20078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1162.247744][T20078] RIP: 0033:0x7f3e6059fb19 [ 1162.252159][T20078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.271764][T20078] RSP: 002b:00007f3e61395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1162.280185][T20078] RAX: ffffffffffffffda RBX: 00007f3e60826180 RCX: 00007f3e6059fb19 [ 1162.288165][T20078] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 1162.296136][T20078] RBP: 00007f3e60637af8 R08: 0000000000000000 R09: 0000000000000000 [ 1162.304112][T20078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1162.312101][T20078] R13: 00007f3e60826218 R14: 00007f3e60826180 R15: 00007ffddb4848b8 [ 1162.320091][T20078] [ 1162.402083][T20078] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1164.006173][ T27] audit: type=1807 audit(1793671302.091:150): action=measure UNKNOWN=# res=0 [ 1164.108264][ T27] audit: type=1802 audit(1793671302.101:151): pid=20096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.3653" res=0 errno=0 [ 1164.276302][T20087] ima: policy update failed [ 1164.281406][ T27] audit: type=1802 audit(1793671302.361:152): pid=20087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3653" res=0 errno=0 [ 1164.612208][T20027] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1164.792033][T20027] usb 1-1: Using ep0 maxpacket: 8 [ 1164.799852][T20027] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1164.835070][T20027] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1164.893910][T20027] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1164.958588][T20027] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1164.978936][T20027] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1165.092709][T20122] loop2: detected capacity change from 0 to 512 [ 1165.313421][T20122] EXT4-fs (loop2): 1 orphan inode deleted [ 1165.325261][T20122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1165.352396][T20122] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1165.485058][T20027] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1165.601988][T20027] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.785806][T20027] usb 1-1: can't set config #16, error -71 [ 1165.804109][ T27] audit: type=1807 audit(1793671303.851:153): action=measure UNKNOWN=# res=0 [ 1166.006206][ T27] audit: type=1802 audit(1793671303.851:154): pid=20133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.3666" res=0 errno=0 [ 1166.049194][T20027] usb 1-1: USB disconnect, device number 17 [ 1166.100423][T20123] ima: policy update failed [ 1166.110144][ T27] audit: type=1802 audit(1793671304.191:155): pid=20123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3666" res=0 errno=0 [ 1166.122635][T15552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.378845][T20144] overlayfs: cannot append lower layer [ 1166.588517][T20153] random: crng reseeded on system resumption [ 1166.622942][T20151] rxe_eth0 speed is unknown, defaulting to 1000 [ 1166.679918][T20156] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3675'. [ 1167.292062][ T5170] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1167.313109][ T27] audit: type=1807 audit(1793671305.381:156): action=measure UNKNOWN=# res=0 [ 1167.404567][ T27] audit: type=1802 audit(1793671305.381:157): pid=20167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.3678" res=0 errno=0 [ 1168.007045][T20163] ima: policy update failed [ 1168.036071][ T27] audit: type=1802 audit(1793671306.101:158): pid=20163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3678" res=0 errno=0 [ 1168.192202][ T5170] usb 3-1: Using ep0 maxpacket: 8 [ 1168.197529][T20175] overlayfs: cannot append lower layer [ 1168.205301][ T5170] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1168.226135][ T5170] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1168.254879][ T5170] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1168.274624][ T5170] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1168.285946][ T5170] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1168.321899][ T5170] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1168.340913][ T5170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.377297][T20181] loop5: detected capacity change from 0 to 256 [ 1168.575850][ T5170] usb 3-1: usb_control_msg returned -71 [ 1168.590508][ T5170] usbtmc 3-1:16.0: can't read capabilities [ 1169.286432][ T5170] usb 3-1: USB disconnect, device number 12 [ 1169.292552][T19686] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1169.512688][T19686] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1169.522754][T19686] usb 6-1: not running at top speed; connect to a high speed hub [ 1169.532716][T19686] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.547116][T19686] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1169.556904][T19686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1169.565224][T19686] usb 6-1: Product: syz [ 1169.569412][T19686] usb 6-1: Manufacturer: syz [ 1169.632177][T19686] usb 6-1: Found UVC 1.00 device syz (8086:0ad2) [ 1169.638819][T19686] usb 6-1: No streaming interface found for terminal 2. [ 1169.652385][ T5933] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1169.810660][T19686] usb 6-1: USB disconnect, device number 4 [ 1169.855132][ T5933] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.882101][ T5933] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1169.902067][ T5933] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 1169.921412][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.137359][ T27] audit: type=1807 audit(1793671308.221:159): action=measure UNKNOWN=# res=0 [ 1170.387294][ T5933] usb 5-1: cannot find UAC_HEADER [ 1170.417899][ T27] audit: type=1802 audit(1793671308.241:160): pid=20202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.3689" res=0 errno=0 [ 1173.006582][ T5933] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1173.015573][ T5933] usb 5-1: USB disconnect, device number 11 [ 1173.052740][T20206] overlayfs: cannot append lower layer [ 1173.089059][T20202] ima: policy update failed [ 1173.102381][ T27] audit: type=1802 audit(1793671311.181:161): pid=20202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3689" res=0 errno=0 [ 1173.481388][T20225] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.3700'. [ 1173.602382][T20226] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1173.611028][T20226] CPU: 1 PID: 20226 Comm: syz.0.3698 Not tainted syzkaller #0 [ 1173.618514][T20226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1173.628594][T20226] Call Trace: [ 1173.631896][T20226] [ 1173.634838][T20226] dump_stack_lvl+0x18c/0x250 [ 1173.639545][T20226] ? show_regs_print_info+0x20/0x20 [ 1173.644756][T20226] ? load_image+0x420/0x420 [ 1173.649292][T20226] sysfs_create_dir_ns+0x26e/0x2a0 [ 1173.654428][T20226] ? __lock_acquire+0x7eb0/0x7eb0 [ 1173.659518][T20226] ? sysfs_warn_dup+0xa0/0xa0 [ 1173.664206][T20226] ? rcu_is_watching+0x15/0xb0 [ 1173.669002][T20226] ? do_raw_spin_unlock+0x121/0x230 [ 1173.674230][T20226] kobject_add_internal+0x617/0xc90 [ 1173.679474][T20226] kobject_add+0x164/0x240 [ 1173.683919][T20226] ? kobject_init+0x1d0/0x1d0 [ 1173.688611][T20226] ? get_device_parent+0x366/0x390 [ 1173.693733][T20226] device_add+0x3fa/0xc40 [ 1173.698153][T20226] tty_register_device_attr+0x42b/0x9a0 [ 1173.703712][T20226] ? tty_register_device+0x30/0x30 [ 1173.708825][T20226] ? tty_port_init+0x132/0x1a0 [ 1173.713593][T20226] ? gsm_dlci_alloc+0x32a/0x630 [ 1173.718446][T20226] ? __might_fault+0xaa/0x120 [ 1173.723122][T20226] gsm_activate_mux+0x110/0x2a0 [ 1173.727975][T20226] gsmld_ioctl+0x12ca/0x1900 [ 1173.732567][T20226] ? gsmld_write+0x120/0x120 [ 1173.737164][T20226] ? __init_ldsem+0x150/0x150 [ 1173.741844][T20226] ? __fget_files+0x28/0x460 [ 1173.746453][T20226] ? gsmld_write+0x120/0x120 [ 1173.751038][T20226] tty_ioctl+0x9b5/0xdc0 [ 1173.755277][T20226] ? tty_get_icount+0xb0/0xb0 [ 1173.759963][T20226] __se_sys_ioctl+0xfd/0x170 [ 1173.764572][T20226] do_syscall_64+0x55/0xb0 [ 1173.768993][T20226] ? clear_bhb_loop+0x40/0x90 [ 1173.774188][T20226] ? clear_bhb_loop+0x40/0x90 [ 1173.778867][T20226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1173.784801][T20226] RIP: 0033:0x7fbbbe39fb19 [ 1173.789241][T20226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.808865][T20226] RSP: 002b:00007fbbbf2a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1173.817286][T20226] RAX: ffffffffffffffda RBX: 00007fbbbe626180 RCX: 00007fbbbe39fb19 [ 1173.825258][T20226] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 1173.833230][T20226] RBP: 00007fbbbe437af8 R08: 0000000000000000 R09: 0000000000000000 [ 1173.841217][T20226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.849229][T20226] R13: 00007fbbbe626218 R14: 00007fbbbe626180 R15: 00007ffd78ce6718 [ 1173.857218][T20226] [ 1174.088615][T20226] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1174.191273][T20235] loop5: detected capacity change from 0 to 512 [ 1176.038558][T20235] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1178.015356][T20235] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1178.017045][T20235] EXT4-fs: failed to create workqueue [ 1178.022702][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.026827][T20235] EXT4-fs (loop5): mount failed [ 1178.041874][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.506858][ T27] audit: type=1807 audit(1793671316.591:162): action=measure UNKNOWN=# res=0 [ 1180.152412][ T27] audit: type=1802 audit(1793671316.601:163): pid=20244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.3703" res=0 errno=0 [ 1180.175682][T20249] overlayfs: cannot append lower layer [ 1180.299943][T20237] ima: policy update failed [ 1180.323018][ T27] audit: type=1802 audit(1793671318.401:164): pid=20237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3703" res=0 errno=0 [ 1181.038668][T20273] overlayfs: cannot append lower layer [ 1181.088924][T20277] loop5: detected capacity change from 0 to 256 [ 1181.114043][T20277] exfat: Deprecated parameter 'utf8' [ 1181.164045][T20277] exfat: Deprecated parameter 'utf8' [ 1181.169532][T20277] exfat: Deprecated parameter 'utf8' [ 1181.215240][T20279] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1181.240227][T20279] CPU: 1 PID: 20279 Comm: syz.2.3715 Not tainted syzkaller #0 [ 1181.247755][T20279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1181.257810][T20279] Call Trace: [ 1181.261087][T20279] [ 1181.264019][T20279] dump_stack_lvl+0x18c/0x250 [ 1181.268710][T20279] ? show_regs_print_info+0x20/0x20 [ 1181.273910][T20279] ? load_image+0x420/0x420 [ 1181.278417][T20279] sysfs_create_dir_ns+0x26e/0x2a0 [ 1181.283525][T20279] ? __lock_acquire+0x7eb0/0x7eb0 [ 1181.288546][T20279] ? sysfs_warn_dup+0xa0/0xa0 [ 1181.293214][T20279] ? rcu_is_watching+0x15/0xb0 [ 1181.297977][T20279] ? do_raw_spin_unlock+0x121/0x230 [ 1181.303176][T20279] kobject_add_internal+0x617/0xc90 [ 1181.308371][T20279] kobject_add+0x164/0x240 [ 1181.312784][T20279] ? kobject_init+0x1d0/0x1d0 [ 1181.317459][T20279] ? get_device_parent+0x366/0x390 [ 1181.322565][T20279] device_add+0x3fa/0xc40 [ 1181.326911][T20279] tty_register_device_attr+0x42b/0x9a0 [ 1181.332480][T20279] ? tty_register_device+0x30/0x30 [ 1181.337592][T20279] ? tty_port_init+0x132/0x1a0 [ 1181.342377][T20279] ? gsm_dlci_alloc+0x32a/0x630 [ 1181.347220][T20279] ? __might_fault+0xaa/0x120 [ 1181.351901][T20279] gsm_activate_mux+0x110/0x2a0 [ 1181.356763][T20279] gsmld_ioctl+0x12ca/0x1900 [ 1181.361357][T20279] ? gsmld_write+0x120/0x120 [ 1181.365951][T20279] ? __init_ldsem+0x150/0x150 [ 1181.370716][T20279] ? __fget_files+0x28/0x460 [ 1181.375336][T20279] ? gsmld_write+0x120/0x120 [ 1181.379921][T20279] tty_ioctl+0x9b5/0xdc0 [ 1181.384161][T20279] ? tty_get_icount+0xb0/0xb0 [ 1181.388835][T20279] __se_sys_ioctl+0xfd/0x170 [ 1181.393425][T20279] do_syscall_64+0x55/0xb0 [ 1181.397838][T20279] ? clear_bhb_loop+0x40/0x90 [ 1181.402511][T20279] ? clear_bhb_loop+0x40/0x90 [ 1181.407182][T20279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1181.413072][T20279] RIP: 0033:0x7fa34e79fb19 [ 1181.417482][T20279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.437101][T20279] RSP: 002b:00007fa34f5cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1181.445515][T20279] RAX: ffffffffffffffda RBX: 00007fa34ea26180 RCX: 00007fa34e79fb19 [ 1181.453567][T20279] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 1181.461531][T20279] RBP: 00007fa34e837af8 R08: 0000000000000000 R09: 0000000000000000 [ 1181.469501][T20279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1181.477470][T20279] R13: 00007fa34ea26218 R14: 00007fa34ea26180 R15: 00007fffca2edb18 [ 1181.485457][T20279] [ 1181.517191][T20279] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1181.608719][T20277] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 1183.619959][ T27] audit: type=1807 audit(1793671321.701:165): action=measure UNKNOWN=# res=0 [ 1185.234554][ T27] audit: type=1802 audit(1793671321.721:166): pid=20294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.3721" res=0 errno=0 [ 1185.258112][T20291] ima: policy update failed [ 1185.264787][ T27] audit: type=1802 audit(1793671323.351:167): pid=20291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3721" res=0 errno=0 [ 1185.538752][T20307] overlayfs: cannot append lower layer [ 1186.794439][T20308] loop0: detected capacity change from 0 to 40427 [ 1186.844595][T20308] F2FS-fs (loop0): invalid crc value [ 1186.935036][T20308] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1187.037214][T20326] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1187.074850][T20326] CPU: 0 PID: 20326 Comm: syz.4.3733 Not tainted syzkaller #0 [ 1187.082372][T20326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1187.092459][T20326] Call Trace: [ 1187.095760][T20326] [ 1187.098713][T20326] dump_stack_lvl+0x18c/0x250 [ 1187.103429][T20326] ? show_regs_print_info+0x20/0x20 [ 1187.108658][T20326] ? load_image+0x420/0x420 [ 1187.113232][T20326] sysfs_create_dir_ns+0x26e/0x2a0 [ 1187.118364][T20326] ? __lock_acquire+0x7eb0/0x7eb0 [ 1187.123449][T20326] ? sysfs_warn_dup+0xa0/0xa0 [ 1187.128135][T20326] ? rcu_is_watching+0x15/0xb0 [ 1187.132909][T20326] ? do_raw_spin_unlock+0x121/0x230 [ 1187.138118][T20326] kobject_add_internal+0x617/0xc90 [ 1187.143324][T20326] kobject_add+0x164/0x240 [ 1187.147741][T20326] ? kobject_init+0x1d0/0x1d0 [ 1187.152420][T20326] ? get_device_parent+0x366/0x390 [ 1187.157556][T20326] device_add+0x3fa/0xc40 [ 1187.161910][T20326] tty_register_device_attr+0x42b/0x9a0 [ 1187.167463][T20326] ? tty_register_device+0x30/0x30 [ 1187.172581][T20326] ? tty_port_init+0x132/0x1a0 [ 1187.177372][T20326] ? gsm_dlci_alloc+0x32a/0x630 [ 1187.182220][T20326] ? __might_fault+0xaa/0x120 [ 1187.186897][T20326] gsm_activate_mux+0x110/0x2a0 [ 1187.191780][T20326] gsmld_ioctl+0x12ca/0x1900 [ 1187.196387][T20326] ? gsmld_write+0x120/0x120 [ 1187.200984][T20326] ? __init_ldsem+0x150/0x150 [ 1187.205659][T20326] ? __fget_files+0x28/0x460 [ 1187.210270][T20326] ? gsmld_write+0x120/0x120 [ 1187.214856][T20326] tty_ioctl+0x9b5/0xdc0 [ 1187.219100][T20326] ? tty_get_icount+0xb0/0xb0 [ 1187.223775][T20326] __se_sys_ioctl+0xfd/0x170 [ 1187.228373][T20326] do_syscall_64+0x55/0xb0 [ 1187.232809][T20326] ? clear_bhb_loop+0x40/0x90 [ 1187.237487][T20326] ? clear_bhb_loop+0x40/0x90 [ 1187.242163][T20326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1187.248058][T20326] RIP: 0033:0x7fb2f459fb19 [ 1187.252476][T20326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.272102][T20326] RSP: 002b:00007fb2f53d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1187.280535][T20326] RAX: ffffffffffffffda RBX: 00007fb2f4826180 RCX: 00007fb2f459fb19 [ 1187.288536][T20326] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 1187.296683][T20326] RBP: 00007fb2f4637af8 R08: 0000000000000000 R09: 0000000000000000 [ 1187.304655][T20326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.312629][T20326] R13: 00007fb2f4826218 R14: 00007fb2f4826180 R15: 00007ffe96ffb9b8 [ 1187.320624][T20326] [ 1187.332242][T20326] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1187.410348][T20325] FAULT_INJECTION: forcing a failure. [ 1187.410348][T20325] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1187.455012][T20325] CPU: 1 PID: 20325 Comm: syz.5.3732 Not tainted syzkaller #0 [ 1187.462571][T20325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1187.472655][T20325] Call Trace: [ 1187.475960][T20325] [ 1187.478910][T20325] dump_stack_lvl+0x18c/0x250 [ 1187.483615][T20325] ? verify_lock_unused+0x140/0x140 [ 1187.488837][T20325] ? show_regs_print_info+0x20/0x20 [ 1187.494058][T20325] ? load_image+0x420/0x420 [ 1187.498608][T20325] should_fail_ex+0x394/0x4c0 [ 1187.503329][T20325] get_futex_key+0x134/0xf40 [ 1187.507948][T20325] ? futex_setup_timer+0xc0/0xc0 [ 1187.512904][T20325] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1187.518909][T20325] ? __lock_acquire+0x7eb0/0x7eb0 [ 1187.523957][T20325] ? lock_chain_count+0x20/0x20 [ 1187.528836][T20325] futex_wait_setup+0xbc/0x270 [ 1187.533637][T20325] ? futex_wait_multiple+0x970/0x970 [ 1187.538946][T20325] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1187.544850][T20325] ? _raw_spin_unlock+0x40/0x40 [ 1187.549709][T20325] futex_wait+0x1cf/0x640 [ 1187.554066][T20325] ? futex_wait_setup+0x270/0x270 [ 1187.559089][T20325] ? task_mm_cid_work+0x31d/0x770 [ 1187.564127][T20325] do_futex+0x2ff/0x3e0 [ 1187.568280][T20325] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1187.574162][T20325] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 1187.580255][T20325] ? _raw_spin_unlock_irq+0x23/0x50 [ 1187.585471][T20325] __se_sys_futex+0x3a9/0x440 [ 1187.590174][T20325] ? __x64_sys_futex+0xf0/0xf0 [ 1187.594972][T20325] ? __x64_sys_futex+0x21/0xf0 [ 1187.599776][T20325] do_syscall_64+0x55/0xb0 [ 1187.604206][T20325] ? clear_bhb_loop+0x40/0x90 [ 1187.608877][T20325] ? clear_bhb_loop+0x40/0x90 [ 1187.613553][T20325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1187.619459][T20325] RIP: 0033:0x7f3e6059fb19 [ 1187.623880][T20325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.643491][T20325] RSP: 002b:00007f3e613d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1187.651908][T20325] RAX: ffffffffffffffda RBX: 00007f3e60825fa8 RCX: 00007f3e6059fb19 [ 1187.659904][T20325] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3e60825fa8 [ 1187.667897][T20325] RBP: 00007f3e60825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.675866][T20325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.684190][T20325] R13: 00007f3e60826038 R14: 00007ffddb4847d0 R15: 00007ffddb4848b8 [ 1187.692192][T20325] [ 1187.713712][T20308] F2FS-fs (loop0): Start checkpoint disabled! [ 1187.900789][T20308] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1188.664417][T16077] kworker/u4:11: attempt to access beyond end of device [ 1188.664417][T16077] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1188.711259][T16077] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1188.726698][T16077] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1188.824005][T20340] loop4: detected capacity change from 0 to 2048 [ 1188.982174][T20340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1189.145624][T20340] ext4 filesystem being mounted at /522/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.328182][T20356] overlayfs: cannot append lower layer [ 1190.450282][T20360] loop0: detected capacity change from 0 to 128 [ 1190.503812][T20360] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1190.563738][T20360] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.595786][ T2929] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm kworker/u4:8: bg 0: block 345: padding at end of block bitmap is not set [ 1190.632729][T20367] loop5: detected capacity change from 0 to 512 [ 1190.667495][ T2929] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 127 with error 117 [ 1190.711968][ T2929] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1190.711968][ T2929] [ 1190.750874][ T2929] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 773 with error 28 [ 1190.801863][ T2929] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1190.801863][ T2929] [ 1190.811544][ T2929] EXT4-fs (loop4): Total free blocks count 0 [ 1190.832124][ T2929] EXT4-fs (loop4): Free/Dirty block details [ 1190.838076][ T2929] EXT4-fs (loop4): free_blocks=0 [ 1190.843190][ T2929] EXT4-fs (loop4): dirty_blocks=800 [ 1190.848408][ T2929] EXT4-fs (loop4): Block reservation details [ 1191.064968][T20027] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1191.329372][T15171] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1191.442446][T20378] loop2: detected capacity change from 0 to 512 [ 1191.498598][T20027] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 80 [ 1191.658360][T20378] EXT4-fs (loop2): 1 orphan inode deleted [ 1191.670265][T20378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1191.687142][T20378] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1191.764685][T20027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 168, changing to 7 [ 1191.914390][T20027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 26356, setting to 1024 [ 1191.948566][T20027] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1192.001913][T20027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.011271][T20027] usb 6-1: Product: syz [ 1192.022831][T20027] usb 6-1: Manufacturer: syz [ 1192.032302][T20027] usb 6-1: SerialNumber: syz [ 1192.053495][T20027] usb 6-1: config 0 descriptor?? [ 1192.087892][T15552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.088653][T20367] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1192.117689][T20027] usb 6-1: 0:0 : invalid sync pipe. bmAttributes cd, bLength 9, bSynchAddress ac [ 1192.936636][T20388] overlayfs: cannot append lower layer [ 1193.305965][T20027] usb 6-1: USB disconnect, device number 5 [ 1193.397319][T20033] udevd[20033]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1195.903194][T20419] fuse: Bad value for 'rootmode' [ 1197.487383][T20429] overlayfs: cannot append lower layer [ 1198.459148][T20446] fuse: Unknown parameter 'use00000000000000000000' [ 1198.987222][T20452] loop0: detected capacity change from 0 to 512 [ 1199.593180][T20452] EXT4-fs (loop0): 1 orphan inode deleted [ 1199.600186][T20452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1199.612952][T16083] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1199.624910][T20452] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1199.688282][T16083] EXT4-fs error (device loop0): ext4_release_dquot:6994: comm kworker/u4:20: Failed to release dquot type 1 [ 1199.969071][T15171] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.180617][T20462] overlayfs: cannot append lower layer [ 1200.768796][T20476] fuse: Unknown parameter 'use00000000000000000000' [ 1201.282527][T20479] FAULT_INJECTION: forcing a failure. [ 1201.282527][T20479] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.295519][T20479] CPU: 1 PID: 20479 Comm: syz.5.3783 Not tainted syzkaller #0 [ 1201.303004][T20479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1201.313071][T20479] Call Trace: [ 1201.316358][T20479] [ 1201.319297][T20479] dump_stack_lvl+0x18c/0x250 [ 1201.324015][T20479] ? show_regs_print_info+0x20/0x20 [ 1201.329246][T20479] ? load_image+0x420/0x420 [ 1201.333783][T20479] ? __might_sleep+0xe0/0xe0 [ 1201.338404][T20479] ? __lock_acquire+0x7eb0/0x7eb0 [ 1201.343469][T20479] should_fail_ex+0x394/0x4c0 [ 1201.348182][T20479] should_failslab+0x9/0x20 [ 1201.352707][T20479] slab_pre_alloc_hook+0x59/0x300 [ 1201.357779][T20479] ? sk_prot_alloc+0xe7/0x210 [ 1201.362484][T20479] ? sk_prot_alloc+0xe7/0x210 [ 1201.367187][T20479] __kmem_cache_alloc_node+0x53/0x260 [ 1201.372589][T20479] ? sk_prot_alloc+0xe7/0x210 [ 1201.377289][T20479] __kmalloc+0xa7/0x240 [ 1201.381480][T20479] ? bpf_lsm_inode_alloc_security+0x9/0x10 [ 1201.387296][T20479] sk_prot_alloc+0xe7/0x210 [ 1201.391803][T20479] ? sk_alloc+0x24/0x350 [ 1201.396054][T20479] sk_alloc+0x3a/0x350 [ 1201.400124][T20479] __netlink_create+0x6c/0x290 [ 1201.404979][T20479] __netlink_kernel_create+0x148/0x7b0 [ 1201.410440][T20479] ? netlink_set_err+0x3b0/0x3b0 [ 1201.415384][T20479] ? genl_pernet_init+0xa8/0x170 [ 1201.420324][T20479] genl_pernet_init+0xba/0x170 [ 1201.425084][T20479] ? ctrl_dumppolicy_put_op+0xa00/0xa00 [ 1201.430629][T20479] ? genl_pernet_exit+0x60/0x60 [ 1201.435470][T20479] ? genl_rcv+0x40/0x40 [ 1201.439617][T20479] ? __raw_spin_lock_init+0x45/0x100 [ 1201.444906][T20479] ? debug_mutex_init+0x38/0x70 [ 1201.449757][T20479] ops_init+0x391/0x640 [ 1201.453917][T20479] setup_net+0x3b6/0xa20 [ 1201.458157][T20479] ? copy_net_ns+0x530/0x530 [ 1201.462758][T20479] ? copy_net_ns+0x347/0x530 [ 1201.467343][T20479] ? down_read_killable+0x1d0/0x340 [ 1201.472539][T20479] copy_net_ns+0x361/0x530 [ 1201.476953][T20479] create_new_namespaces+0x3ce/0x700 [ 1201.482247][T20479] unshare_nsproxy_namespaces+0x11a/0x160 [ 1201.487965][T20479] ksys_unshare+0x4fa/0x8f0 [ 1201.492470][T20479] ? sighand_ctor+0x50/0x50 [ 1201.496971][T20479] ? lock_chain_count+0x20/0x20 [ 1201.501825][T20479] ? syscall_enter_from_user_mode+0x25/0x80 [ 1201.507722][T20479] __x64_sys_unshare+0x38/0x40 [ 1201.512509][T20479] do_syscall_64+0x55/0xb0 [ 1201.516923][T20479] ? clear_bhb_loop+0x40/0x90 [ 1201.521603][T20479] ? clear_bhb_loop+0x40/0x90 [ 1201.526280][T20479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1201.532180][T20479] RIP: 0033:0x7f3e6059fb19 [ 1201.536592][T20479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.556195][T20479] RSP: 002b:00007f3e613d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1201.564613][T20479] RAX: ffffffffffffffda RBX: 00007f3e60825fa0 RCX: 00007f3e6059fb19 [ 1201.572582][T20479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1201.580546][T20479] RBP: 00007f3e60637af8 R08: 0000000000000000 R09: 0000000000000000 [ 1201.588508][T20479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1201.596474][T20479] R13: 00007f3e60826038 R14: 00007f3e60825fa0 R15: 00007ffddb4848b8 [ 1201.604456][T20479] [ 1201.848796][T20491] overlayfs: cannot append lower layer [ 1202.155264][T20502] fuse: Unknown parameter 'use00000000000000000000' [ 1204.706157][T20519] overlayfs: cannot append lower layer [ 1205.106063][T20528] fuse: Unknown parameter 'user_i00000000000000000000' [ 1205.534458][T20541] loop0: detected capacity change from 0 to 512 [ 1205.814869][T20541] EXT4-fs (loop0): 1 orphan inode deleted [ 1205.828174][T20541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1205.848593][T20541] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1206.307352][T15171] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.326154][T20549] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 1207.116657][T20551] overlayfs: cannot append lower layer [ 1209.515028][T20564] netlink: 'syz.4.3815': attribute type 1 has an invalid length. [ 1209.550181][T20566] fuse: Unknown parameter 'user_i00000000000000000000' [ 1209.710870][T20572] loop0: detected capacity change from 0 to 256 [ 1209.789024][T20572] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1209.819567][T20572] FAT-fs (loop0): Filesystem has been set read-only [ 1209.862536][T20572] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1209.910910][T20572] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1209.933432][T20579] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 1210.043369][T20572] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 1210.055348][ T27] audit: type=1800 audit(1793671348.101:168): pid=20572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3819" name="file1" dev="loop0" ino=1048997 res=0 errno=0 [ 1211.777178][T20588] netlink: 'syz.2.3826': attribute type 1 has an invalid length. [ 1213.636589][T20607] fuse: Unknown parameter 'user_i00000000000000000000' [ 1214.061242][T20619] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 1215.835211][T20636] loop2: detected capacity change from 0 to 512 [ 1215.907610][T20636] EXT4-fs: Mount option(s) incompatible with ext2 [ 1217.556481][T20650] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 1220.352383][T20696] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1220.760507][ T5170] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1221.199541][ T5170] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1221.293534][ T5170] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1221.392456][ T5170] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1221.400618][ T5170] rtc rtc0: __rtc_set_alarm: err=-22 [ 1222.700795][T20727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3870'. [ 1225.205964][T20749] random: crng reseeded on system resumption [ 1226.603053][ T5170] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1226.822068][ T5170] usb 3-1: Using ep0 maxpacket: 8 [ 1226.830248][ T5170] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1226.846151][ T5170] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1226.870398][ T5170] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1226.911327][ T5170] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1226.959604][ T5170] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1226.996493][ T5170] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1227.112263][ T5170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.609013][ T5170] usb 3-1: usb_control_msg returned -71 [ 1227.709201][ T5170] usbtmc 3-1:16.0: can't read capabilities [ 1227.722501][ T5170] usb 3-1: USB disconnect, device number 13 [ 1228.982990][T20794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3888'. [ 1229.657338][T20823] random: crng reseeded on system resumption [ 1230.844521][T20835] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3900'. [ 1231.221975][T19686] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1231.446042][T19686] usb 5-1: Using ep0 maxpacket: 8 [ 1231.473081][T19686] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1231.482106][T19686] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1231.507558][T19686] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1231.519937][T19686] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1231.536088][T19686] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1231.550649][T19686] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1231.563708][T19686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.805380][T19686] usb 5-1: usb_control_msg returned -71 [ 1231.826249][T19686] usbtmc 5-1:16.0: can't read capabilities [ 1231.868925][T19686] usb 5-1: USB disconnect, device number 12 [ 1231.992309][T20868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3909'. [ 1233.332545][T20897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3920'. [ 1233.642358][T20908] random: crng reseeded on system resumption [ 1235.037483][T20935] loop5: detected capacity change from 0 to 512 [ 1235.079718][T20935] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1235.101478][T20935] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 1235.123122][T20935] System zones: 1-12 [ 1235.151980][ T1189] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1235.168328][T20935] EXT4-fs (loop5): 1 truncate cleaned up [ 1235.183502][T20935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1235.351953][ T1189] usb 1-1: Using ep0 maxpacket: 8 [ 1235.363386][ T1189] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1235.371646][ T1189] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1235.397653][ T1189] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1235.418890][ T1189] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1235.440240][ T1189] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1235.470183][ T1189] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1235.490309][ T1189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.746430][ T1189] usb 1-1: usb_control_msg returned -71 [ 1235.766283][ T1189] usbtmc 1-1:16.0: can't read capabilities [ 1235.817028][ T1189] usb 1-1: USB disconnect, device number 18 [ 1236.879886][T13203] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1238.828186][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.838250][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.970925][T21020] syzkaller0: entered promiscuous mode [ 1238.982192][T21020] syzkaller0: entered allmulticast mode [ 1240.218189][T21046] random: crng reseeded on system resumption [ 1241.471313][T21063] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3972'. [ 1246.434377][T21131] rxe_eth0 speed is unknown, defaulting to 1000 [ 1246.474333][T21136] loop2: detected capacity change from 0 to 512 [ 1246.577094][T21136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1246.590083][T21136] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1247.442737][T15552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.005482][T21159] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1248.027571][T21159] CPU: 0 PID: 21159 Comm: syz.5.4002 Not tainted syzkaller #0 [ 1248.035120][T21159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1248.045179][T21159] Call Trace: [ 1248.048480][T21159] [ 1248.051406][T21159] dump_stack_lvl+0x18c/0x250 [ 1248.056094][T21159] ? show_regs_print_info+0x20/0x20 [ 1248.061296][T21159] ? load_image+0x420/0x420 [ 1248.065805][T21159] sysfs_create_dir_ns+0x26e/0x2a0 [ 1248.070922][T21159] ? __lock_acquire+0x7eb0/0x7eb0 [ 1248.075962][T21159] ? sysfs_warn_dup+0xa0/0xa0 [ 1248.080636][T21159] ? rcu_is_watching+0x15/0xb0 [ 1248.085402][T21159] ? do_raw_spin_unlock+0x121/0x230 [ 1248.090606][T21159] kobject_add_internal+0x617/0xc90 [ 1248.095810][T21159] kobject_add+0x164/0x240 [ 1248.100235][T21159] ? kobject_init+0x1d0/0x1d0 [ 1248.104942][T21159] ? get_device_parent+0x366/0x390 [ 1248.110057][T21159] device_add+0x3fa/0xc40 [ 1248.114389][T21159] tty_register_device_attr+0x42b/0x9a0 [ 1248.119946][T21159] ? tty_register_device+0x30/0x30 [ 1248.125074][T21159] ? tty_port_init+0x132/0x1a0 [ 1248.129843][T21159] ? gsm_dlci_alloc+0x32a/0x630 [ 1248.134703][T21159] ? __might_fault+0xaa/0x120 [ 1248.139399][T21159] gsm_activate_mux+0x110/0x2a0 [ 1248.144292][T21159] gsmld_ioctl+0x12ca/0x1900 [ 1248.148902][T21159] ? gsmld_write+0x120/0x120 [ 1248.153501][T21159] ? __init_ldsem+0x150/0x150 [ 1248.158179][T21159] ? __fget_files+0x28/0x460 [ 1248.162792][T21159] ? gsmld_write+0x120/0x120 [ 1248.167386][T21159] tty_ioctl+0x9b5/0xdc0 [ 1248.171636][T21159] ? tty_get_icount+0xb0/0xb0 [ 1248.176315][T21159] __se_sys_ioctl+0xfd/0x170 [ 1248.180914][T21159] do_syscall_64+0x55/0xb0 [ 1248.185375][T21159] ? clear_bhb_loop+0x40/0x90 [ 1248.190072][T21159] ? clear_bhb_loop+0x40/0x90 [ 1248.194752][T21159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1248.200646][T21159] RIP: 0033:0x7f3e6059fb19 [ 1248.205058][T21159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1248.224752][T21159] RSP: 002b:00007f3e613d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1248.233165][T21159] RAX: ffffffffffffffda RBX: 00007f3e60825fa0 RCX: 00007f3e6059fb19 [ 1248.241130][T21159] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 1248.249097][T21159] RBP: 00007f3e60637af8 R08: 0000000000000000 R09: 0000000000000000 [ 1248.257094][T21159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1248.265065][T21159] R13: 00007f3e60826038 R14: 00007f3e60825fa0 R15: 00007ffddb4848b8 [ 1248.273042][T21159] [ 1248.310216][T21159] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1249.295624][T21187] random: crng reseeded on system resumption [ 1250.554429][T21201] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1250.563075][T21201] CPU: 0 PID: 21201 Comm: syz.4.4016 Not tainted syzkaller #0 [ 1250.570566][T21201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1250.580644][T21201] Call Trace: [ 1250.583936][T21201] [ 1250.586878][T21201] dump_stack_lvl+0x18c/0x250 [ 1250.591588][T21201] ? show_regs_print_info+0x20/0x20 [ 1250.596811][T21201] ? load_image+0x420/0x420 [ 1250.601345][T21201] sysfs_create_dir_ns+0x26e/0x2a0 [ 1250.606477][T21201] ? __lock_acquire+0x7eb0/0x7eb0 [ 1250.611521][T21201] ? sysfs_warn_dup+0xa0/0xa0 [ 1250.616212][T21201] ? rcu_is_watching+0x15/0xb0 [ 1250.621003][T21201] ? do_raw_spin_unlock+0x121/0x230 [ 1250.626225][T21201] kobject_add_internal+0x617/0xc90 [ 1250.631446][T21201] kobject_add+0x164/0x240 [ 1250.635884][T21201] ? kobject_init+0x1d0/0x1d0 [ 1250.640585][T21201] ? get_device_parent+0x366/0x390 [ 1250.645727][T21201] device_add+0x3fa/0xc40 [ 1250.650082][T21201] tty_register_device_attr+0x42b/0x9a0 [ 1250.655670][T21201] ? tty_register_device+0x30/0x30 [ 1250.660809][T21201] ? tty_port_init+0x132/0x1a0 [ 1250.665599][T21201] ? gsm_dlci_alloc+0x32a/0x630 [ 1250.670473][T21201] gsm_activate_mux+0x110/0x2a0 [ 1250.675350][T21201] gsmld_ioctl+0x12ca/0x1900 [ 1250.679971][T21201] ? gsmld_write+0x120/0x120 [ 1250.684598][T21201] ? __init_ldsem+0x150/0x150 [ 1250.689300][T21201] ? __fget_files+0x28/0x460 [ 1250.693926][T21201] ? gsmld_write+0x120/0x120 [ 1250.698536][T21201] tty_ioctl+0x9b5/0xdc0 [ 1250.702807][T21201] ? tty_get_icount+0xb0/0xb0 [ 1250.707506][T21201] __se_sys_ioctl+0xfd/0x170 [ 1250.712152][T21201] do_syscall_64+0x55/0xb0 [ 1250.716593][T21201] ? clear_bhb_loop+0x40/0x90 [ 1250.721292][T21201] ? clear_bhb_loop+0x40/0x90 [ 1250.726002][T21201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1250.731919][T21201] RIP: 0033:0x7fb2f459fb19 [ 1250.736351][T21201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1250.755983][T21201] RSP: 002b:00007fb2f53d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1250.764424][T21201] RAX: ffffffffffffffda RBX: 00007fb2f4826180 RCX: 00007fb2f459fb19 [ 1250.772415][T21201] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 1250.780398][T21201] RBP: 00007fb2f4637af8 R08: 0000000000000000 R09: 0000000000000000 [ 1250.788394][T21201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1250.796381][T21201] R13: 00007fb2f4826218 R14: 00007fb2f4826180 R15: 00007ffe96ffb9b8 [ 1250.804391][T21201] [ 1250.808559][T21201] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1251.812329][ T5170] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1252.070750][ T5170] usb 6-1: Using ep0 maxpacket: 8 [ 1255.450495][ T5170] usb 6-1: device descriptor read/all, error -71 [ 1255.704586][T21228] loop2: detected capacity change from 0 to 256 [ 1255.732554][T21230] loop4: detected capacity change from 0 to 512 [ 1255.769924][T21230] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1255.792313][T21230] System zones: 1-12 [ 1255.805743][T21228] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1255.820091][T21230] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.4027: missing EA_INODE flag [ 1255.852290][T21230] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4027: error while reading EA inode 12 err=-117 [ 1255.852296][T21228] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1255.864801][T21228] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1255.886492][ T27] audit: type=1800 audit(1793671393.971:169): pid=21228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4026" name="file1" dev="loop2" ino=1049014 res=0 errno=0 [ 1255.926229][T21230] EXT4-fs (loop4): 1 orphan inode deleted [ 1255.938876][T21230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1257.587810][T11891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1257.729012][T21245] random: crng reseeded on system resumption [ 1258.929832][T21265] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1258.938526][T21265] CPU: 0 PID: 21265 Comm: syz.5.4035 Not tainted syzkaller #0 [ 1258.946012][T21265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1258.956098][T21265] Call Trace: [ 1258.959390][T21265] [ 1258.962337][T21265] dump_stack_lvl+0x18c/0x250 [ 1258.967045][T21265] ? show_regs_print_info+0x20/0x20 [ 1258.972271][T21265] ? load_image+0x420/0x420 [ 1258.976813][T21265] sysfs_create_dir_ns+0x26e/0x2a0 [ 1258.981947][T21265] ? __lock_acquire+0x7eb0/0x7eb0 [ 1258.986991][T21265] ? sysfs_warn_dup+0xa0/0xa0 [ 1258.991685][T21265] ? rcu_is_watching+0x15/0xb0 [ 1258.996476][T21265] ? do_raw_spin_unlock+0x121/0x230 [ 1259.001700][T21265] kobject_add_internal+0x617/0xc90 [ 1259.006928][T21265] kobject_add+0x164/0x240 [ 1259.011368][T21265] ? kobject_init+0x1d0/0x1d0 [ 1259.016066][T21265] ? get_device_parent+0x366/0x390 [ 1259.021203][T21265] device_add+0x3fa/0xc40 [ 1259.025563][T21265] tty_register_device_attr+0x42b/0x9a0 [ 1259.031139][T21265] ? tty_register_device+0x30/0x30 [ 1259.036275][T21265] ? tty_port_init+0x132/0x1a0 [ 1259.041057][T21265] ? gsm_dlci_alloc+0x32a/0x630 [ 1259.045920][T21265] ? __might_fault+0xaa/0x120 [ 1259.050616][T21265] gsm_activate_mux+0x110/0x2a0 [ 1259.055489][T21265] gsmld_ioctl+0x12ca/0x1900 [ 1259.060119][T21265] ? gsmld_write+0x120/0x120 [ 1259.064744][T21265] ? __init_ldsem+0x150/0x150 [ 1259.069442][T21265] ? __fget_files+0x28/0x460 [ 1259.074063][T21265] ? gsmld_write+0x120/0x120 [ 1259.078675][T21265] tty_ioctl+0x9b5/0xdc0 [ 1259.082945][T21265] ? tty_get_icount+0xb0/0xb0 [ 1259.087642][T21265] __se_sys_ioctl+0xfd/0x170 [ 1259.092261][T21265] do_syscall_64+0x55/0xb0 [ 1259.096698][T21265] ? clear_bhb_loop+0x40/0x90 [ 1259.101390][T21265] ? clear_bhb_loop+0x40/0x90 [ 1259.106094][T21265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1259.112045][T21265] RIP: 0033:0x7f3e6059fb19 [ 1259.116494][T21265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.136121][T21265] RSP: 002b:00007f3e61395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1259.144560][T21265] RAX: ffffffffffffffda RBX: 00007f3e60826180 RCX: 00007f3e6059fb19 [ 1259.152550][T21265] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1259.160534][T21265] RBP: 00007f3e60637af8 R08: 0000000000000000 R09: 0000000000000000 [ 1259.168521][T21265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1259.176508][T21265] R13: 00007f3e60826218 R14: 00007f3e60826180 R15: 00007ffddb4848b8 [ 1259.184523][T21265] [ 1259.189130][T21265] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1259.715110][ T5933] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1260.072400][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 1260.085675][ T5933] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1260.171629][T21277] 0ªX¹¦Dö»: left allmulticast mode [ 1260.211184][T21277] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1260.939824][ T5933] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1261.088458][ T5933] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1261.098361][ T5933] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1261.108378][ T5933] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1261.121416][ T5933] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1261.130837][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.773314][ T5933] usb 3-1: can't set config #16, error -71 [ 1262.785868][ T5933] usb 3-1: USB disconnect, device number 14 [ 1263.084371][T21287] syzkaller0: entered promiscuous mode [ 1263.089912][T21287] syzkaller0: entered allmulticast mode [ 1264.161265][T21301] overlayfs: missing 'lowerdir' [ 1265.083742][T21308] random: crng reseeded on system resumption [ 1266.238880][T21314] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1266.249218][T21314] CPU: 1 PID: 21314 Comm: syz.5.4052 Not tainted syzkaller #0 [ 1266.256710][T21314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1266.266784][T21314] Call Trace: [ 1266.270077][T21314] [ 1266.273021][T21314] dump_stack_lvl+0x18c/0x250 [ 1266.277723][T21314] ? show_regs_print_info+0x20/0x20 [ 1266.282942][T21314] ? load_image+0x420/0x420 [ 1266.287494][T21314] sysfs_create_dir_ns+0x26e/0x2a0 [ 1266.292648][T21314] ? __lock_acquire+0x7eb0/0x7eb0 [ 1266.297700][T21314] ? sysfs_warn_dup+0xa0/0xa0 [ 1266.302399][T21314] ? rcu_is_watching+0x15/0xb0 [ 1266.307213][T21314] ? do_raw_spin_unlock+0x121/0x230 [ 1266.312442][T21314] kobject_add_internal+0x617/0xc90 [ 1266.317670][T21314] kobject_add+0x164/0x240 [ 1266.322114][T21314] ? kobject_init+0x1d0/0x1d0 [ 1266.327262][T21314] ? get_device_parent+0x366/0x390 [ 1266.332400][T21314] device_add+0x3fa/0xc40 [ 1266.336760][T21314] tty_register_device_attr+0x42b/0x9a0 [ 1266.342775][T21314] ? tty_register_device+0x30/0x30 [ 1266.347917][T21314] ? tty_port_init+0x132/0x1a0 [ 1266.352710][T21314] ? gsm_dlci_alloc+0x32a/0x630 [ 1266.357582][T21314] ? __might_fault+0xaa/0x120 [ 1266.362286][T21314] gsm_activate_mux+0x110/0x2a0 [ 1266.367168][T21314] gsmld_ioctl+0x12ca/0x1900 [ 1266.371784][T21314] ? gsmld_write+0x120/0x120 [ 1266.376402][T21314] ? __init_ldsem+0x150/0x150 [ 1266.381105][T21314] ? __fget_files+0x28/0x460 [ 1266.385733][T21314] ? gsmld_write+0x120/0x120 [ 1266.390341][T21314] tty_ioctl+0x9b5/0xdc0 [ 1266.394606][T21314] ? tty_get_icount+0xb0/0xb0 [ 1266.399828][T21314] __se_sys_ioctl+0xfd/0x170 [ 1266.404535][T21314] do_syscall_64+0x55/0xb0 [ 1266.408976][T21314] ? clear_bhb_loop+0x40/0x90 [ 1266.413758][T21314] ? clear_bhb_loop+0x40/0x90 [ 1266.418454][T21314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1266.424368][T21314] RIP: 0033:0x7f3e6059fb19 [ 1266.428799][T21314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1266.448428][T21314] RSP: 002b:00007f3e61395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1266.456861][T21314] RAX: ffffffffffffffda RBX: 00007f3e60826180 RCX: 00007f3e6059fb19 [ 1266.464852][T21314] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1266.473023][T21314] RBP: 00007f3e60637af8 R08: 0000000000000000 R09: 0000000000000000 [ 1266.481006][T21314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1266.489003][T21314] R13: 00007f3e60826218 R14: 00007f3e60826180 R15: 00007ffddb4848b8 [ 1266.497009][T21314] [ 1266.595795][T21314] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1267.743091][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1267.769753][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1267.784112][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1267.810784][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1267.838319][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1267.854926][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1267.952931][ T42] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1269.196537][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 1269.337202][ T42] usb 1-1: device descriptor read/all, error -71 [ 1269.387971][ T8022] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.613831][ T8022] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.699118][T21316] rxe_eth0 speed is unknown, defaulting to 1000 [ 1269.955146][ T5795] Bluetooth: hci1: command tx timeout [ 1270.125483][ T8022] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.523330][T21334] loop5: detected capacity change from 0 to 512 [ 1270.620270][T21334] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.4057: iget: bad i_size value: 38620345925642 [ 1270.768118][T21334] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.4057: couldn't read orphan inode 15 (err -117) [ 1271.780197][T21347] overlayfs: missing 'lowerdir' [ 1272.233235][ T5795] Bluetooth: hci1: command tx timeout [ 1273.610329][T21334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1274.101956][T21338] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1274.342370][ T5795] Bluetooth: hci1: command tx timeout [ 1274.398946][ T8022] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.434116][T21341] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1274.445418][T21341] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1274.541482][T13203] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.306691][T21361] random: crng reseeded on system resumption [ 1275.830148][T21368] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1275.838796][T21368] CPU: 1 PID: 21368 Comm: syz.0.4064 Not tainted syzkaller #0 [ 1275.846286][T21368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1275.856357][T21368] Call Trace: [ 1275.859648][T21368] [ 1275.862594][T21368] dump_stack_lvl+0x18c/0x250 [ 1275.867310][T21368] ? show_regs_print_info+0x20/0x20 [ 1275.872540][T21368] ? load_image+0x420/0x420 [ 1275.877081][T21368] sysfs_create_dir_ns+0x26e/0x2a0 [ 1275.882219][T21368] ? __lock_acquire+0x7eb0/0x7eb0 [ 1275.887268][T21368] ? sysfs_warn_dup+0xa0/0xa0 [ 1275.891966][T21368] ? rcu_is_watching+0x15/0xb0 [ 1275.896759][T21368] ? do_raw_spin_unlock+0x121/0x230 [ 1275.901984][T21368] kobject_add_internal+0x617/0xc90 [ 1275.907213][T21368] kobject_add+0x164/0x240 [ 1275.911651][T21368] ? kobject_init+0x1d0/0x1d0 [ 1275.916349][T21368] ? get_device_parent+0x366/0x390 [ 1275.921482][T21368] device_add+0x3fa/0xc40 [ 1275.925838][T21368] tty_register_device_attr+0x42b/0x9a0 [ 1275.931412][T21368] ? tty_register_device+0x30/0x30 [ 1275.936549][T21368] ? tty_port_init+0x132/0x1a0 [ 1275.941337][T21368] ? gsm_dlci_alloc+0x32a/0x630 [ 1275.946203][T21368] ? __might_fault+0xaa/0x120 [ 1275.950907][T21368] gsm_activate_mux+0x110/0x2a0 [ 1275.955784][T21368] gsmld_ioctl+0x12ca/0x1900 [ 1275.960404][T21368] ? gsmld_write+0x120/0x120 [ 1275.965022][T21368] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1275.970677][T21368] ? __init_ldsem+0x150/0x150 [ 1275.975378][T21368] ? __sanitizer_cov_trace_switch+0x8/0xe0 [ 1275.981209][T21368] ? gsmld_write+0x120/0x120 [ 1275.985813][T21368] tty_ioctl+0x9b5/0xdc0 [ 1275.990071][T21368] ? tty_get_icount+0xb0/0xb0 [ 1275.994765][T21368] __se_sys_ioctl+0xfd/0x170 [ 1275.999380][T21368] do_syscall_64+0x55/0xb0 [ 1276.003814][T21368] ? clear_bhb_loop+0x40/0x90 [ 1276.008517][T21368] ? clear_bhb_loop+0x40/0x90 [ 1276.013215][T21368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1276.019147][T21368] RIP: 0033:0x7fbbbe39fb19 [ 1276.023575][T21368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.043198][T21368] RSP: 002b:00007fbbbf2a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1276.051629][T21368] RAX: ffffffffffffffda RBX: 00007fbbbe626180 RCX: 00007fbbbe39fb19 [ 1276.059610][T21368] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1276.067595][T21368] RBP: 00007fbbbe437af8 R08: 0000000000000000 R09: 0000000000000000 [ 1276.075579][T21368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1276.083563][T21368] R13: 00007fbbbe626218 R14: 00007fbbbe626180 R15: 00007ffd78ce6718 [ 1276.091566][T21368] [ 1276.097181][T21368] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1276.543253][ T5795] Bluetooth: hci1: command tx timeout [ 1276.723282][T21366] loop5: detected capacity change from 0 to 4096 [ 1276.821919][T21366] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1276.879525][T21366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1277.062382][ T5170] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1277.103513][T21316] chnl_net:caif_netlink_parms(): no params data found [ 1277.254679][ T5170] usb 3-1: Using ep0 maxpacket: 8 [ 1277.319119][ T5170] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1277.357856][ T5170] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1277.403951][ T5170] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1277.471402][ T5170] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1277.511709][ T5170] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1277.624311][ T5170] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1277.647081][ T5170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.791936][ T5170] usb 3-1: usb_control_msg returned -71 [ 1277.807822][ T5170] usbtmc 3-1:16.0: can't read capabilities [ 1277.856389][ T5170] usb 3-1: USB disconnect, device number 15 [ 1277.922335][T21316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.929624][T21316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.967566][T21316] bridge_slave_0: entered allmulticast mode [ 1277.988405][T21316] bridge_slave_0: entered promiscuous mode [ 1278.342070][T21316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.415431][T21316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.506461][T21316] bridge_slave_1: entered allmulticast mode [ 1278.640465][T21316] bridge_slave_1: entered promiscuous mode [ 1279.076720][T13203] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.170060][T21316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1279.328397][T21316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1279.349649][T21401] overlayfs: missing 'lowerdir' [ 1279.615467][T21405] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1279.624975][T21405] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1280.194881][T21316] team0: Port device team_slave_0 added [ 1280.236946][T21316] team0: Port device team_slave_1 added [ 1280.732108][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1280.992570][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1281.069572][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1281.183957][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1281.241119][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1281.267953][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1281.278579][T21316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.297012][T21316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.352191][T21316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.352896][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1281.396112][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1281.410459][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1281.419830][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.441219][ T9] usb 3-1: config 0 descriptor?? [ 1281.452769][T21425] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1281.478453][T21423] random: crng reseeded on system resumption [ 1281.492400][T21425] CPU: 0 PID: 21425 Comm: syz.5.4072 Not tainted syzkaller #0 [ 1281.499916][T21425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1281.509996][T21425] Call Trace: [ 1281.513296][T21425] [ 1281.516248][T21425] dump_stack_lvl+0x18c/0x250 [ 1281.520963][T21425] ? show_regs_print_info+0x20/0x20 [ 1281.526193][T21425] ? load_image+0x420/0x420 [ 1281.531261][T21425] sysfs_create_dir_ns+0x26e/0x2a0 [ 1281.536402][T21425] ? __lock_acquire+0x7eb0/0x7eb0 [ 1281.541468][T21425] ? sysfs_warn_dup+0xa0/0xa0 [ 1281.546148][T21425] ? rcu_is_watching+0x15/0xb0 [ 1281.550948][T21425] ? do_raw_spin_unlock+0x121/0x230 [ 1281.556179][T21425] kobject_add_internal+0x617/0xc90 [ 1281.561411][T21425] kobject_add+0x164/0x240 [ 1281.565847][T21425] ? kobject_init+0x1d0/0x1d0 [ 1281.570565][T21425] ? get_device_parent+0x366/0x390 [ 1281.575677][T21425] device_add+0x3fa/0xc40 [ 1281.580037][T21425] tty_register_device_attr+0x42b/0x9a0 [ 1281.585577][T21425] ? tty_register_device+0x30/0x30 [ 1281.590684][T21425] ? tty_port_init+0x132/0x1a0 [ 1281.595442][T21425] ? gsm_dlci_alloc+0x32a/0x630 [ 1281.600282][T21425] ? __might_fault+0xaa/0x120 [ 1281.604957][T21425] gsm_activate_mux+0x110/0x2a0 [ 1281.609806][T21425] gsmld_ioctl+0x12ca/0x1900 [ 1281.614391][T21425] ? gsmld_write+0x120/0x120 [ 1281.618977][T21425] ? __init_ldsem+0x150/0x150 [ 1281.623665][T21425] ? __fget_files+0x28/0x460 [ 1281.628256][T21425] ? gsmld_write+0x120/0x120 [ 1281.632869][T21425] tty_ioctl+0x9b5/0xdc0 [ 1281.637103][T21425] ? tty_get_icount+0xb0/0xb0 [ 1281.641773][T21425] __se_sys_ioctl+0xfd/0x170 [ 1281.646403][T21425] do_syscall_64+0x55/0xb0 [ 1281.650819][T21425] ? clear_bhb_loop+0x40/0x90 [ 1281.655507][T21425] ? clear_bhb_loop+0x40/0x90 [ 1281.660224][T21425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.666143][T21425] RIP: 0033:0x7f3e6059fb19 [ 1281.670566][T21425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.690178][T21425] RSP: 002b:00007f3e61395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1281.698597][T21425] RAX: ffffffffffffffda RBX: 00007f3e60826180 RCX: 00007f3e6059fb19 [ 1281.706572][T21425] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 1281.714546][T21425] RBP: 00007f3e60637af8 R08: 0000000000000000 R09: 0000000000000000 [ 1281.722518][T21425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1281.730482][T21425] R13: 00007f3e60826218 R14: 00007f3e60826180 R15: 00007ffddb4848b8 [ 1281.738464][T21425] [ 1281.797599][T21425] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1281.842680][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1282.046955][T21316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.123114][T21316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.189524][T21316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.529866][T21316] hsr_slave_0: entered promiscuous mode [ 1282.572549][T21316] hsr_slave_1: entered promiscuous mode [ 1282.599710][T21316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1282.612954][ T23] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1282.632026][T21316] Cannot create hsr debugfs directory [ 1282.825178][ T8022] hsr_slave_0: left promiscuous mode [ 1282.865133][ T8022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1282.872155][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 1282.894816][ T8022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1282.906426][ T23] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1282.926868][ T5170] usb 3-1: USB disconnect, device number 16 [ 1282.943684][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1282.949536][ T5170] usblp0: removed [ 1282.965109][ T8022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1282.997686][ T8022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.005133][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1283.024680][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1283.035873][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1283.041472][ T8022] bridge_slave_1: left allmulticast mode [ 1283.068638][ T8022] bridge_slave_1: left promiscuous mode [ 1283.071893][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1283.086095][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.093146][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.136154][ T8022] bridge_slave_0: left allmulticast mode [ 1283.152533][ T8022] bridge_slave_0: left promiscuous mode [ 1283.158616][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.206975][ T8022] veth1_macvtap: left promiscuous mode [ 1283.215252][ T8022] veth0_macvtap: left promiscuous mode [ 1283.220986][ T8022] veth1_vlan: left promiscuous mode [ 1283.232122][ T8022] veth0_vlan: left promiscuous mode [ 1283.344918][T21444] i2c i2c-0: new_device: Missing parameters [ 1283.451111][ T23] usb 1-1: usb_control_msg returned -71 [ 1283.523905][ T23] usbtmc 1-1:16.0: can't read capabilities [ 1283.762359][ T23] usb 1-1: USB disconnect, device number 21 [ 1284.529641][ T8022] bond2 (unregistering): Released all slaves [ 1284.566185][ T8022] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1284.646562][T21452] overlayfs: missing 'lowerdir' [ 1286.215895][ T8022] bond1 (unregistering): Released all slaves [ 1286.260391][ T8022] pim6reg (unregistering): left allmulticast mode [ 1287.830327][ T8022] team0 (unregistering): Port device team_slave_1 removed [ 1287.895075][ T8022] team0 (unregistering): Port device team_slave_0 removed [ 1287.958769][ T8022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1288.021906][ T8022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1288.447370][ T8022] bond0 (unregistering): Released all slaves [ 1288.880621][T21476] i2c i2c-0: new_device: Missing parameters [ 1288.912583][T21477] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1288.921084][T21477] CPU: 1 PID: 21477 Comm: syz.5.4082 Not tainted syzkaller #0 [ 1288.928563][T21477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1288.938635][T21477] Call Trace: [ 1288.941926][T21477] [ 1288.944869][T21477] dump_stack_lvl+0x18c/0x250 [ 1288.949575][T21477] ? show_regs_print_info+0x20/0x20 [ 1288.954797][T21477] ? load_image+0x420/0x420 [ 1288.959336][T21477] sysfs_create_dir_ns+0x26e/0x2a0 [ 1288.964472][T21477] ? __lock_acquire+0x7eb0/0x7eb0 [ 1288.969516][T21477] ? sysfs_warn_dup+0xa0/0xa0 [ 1288.974214][T21477] ? do_raw_spin_unlock+0x121/0x230 [ 1288.979468][T21477] kobject_add_internal+0x617/0xc90 [ 1288.984710][T21477] kobject_add+0x164/0x240 [ 1288.989147][T21477] ? kobject_init+0x1d0/0x1d0 [ 1288.993850][T21477] ? get_device_parent+0x366/0x390 [ 1288.998983][T21477] device_add+0x3fa/0xc40 [ 1289.003334][T21477] tty_register_device_attr+0x42b/0x9a0 [ 1289.008910][T21477] ? tty_register_device+0x30/0x30 [ 1289.014051][T21477] ? tty_port_init+0x132/0x1a0 [ 1289.018843][T21477] ? gsm_dlci_alloc+0x32a/0x630 [ 1289.023711][T21477] ? __might_fault+0xaa/0x120 [ 1289.028412][T21477] gsm_activate_mux+0x110/0x2a0 [ 1289.033289][T21477] gsmld_ioctl+0x12ca/0x1900 [ 1289.037906][T21477] ? gsmld_write+0x120/0x120 [ 1289.042525][T21477] ? __init_ldsem+0x150/0x150 [ 1289.047224][T21477] ? __fget_files+0x28/0x460 [ 1289.051845][T21477] ? gsmld_write+0x120/0x120 [ 1289.056447][T21477] tty_ioctl+0x9b5/0xdc0 [ 1289.060706][T21477] ? tty_get_icount+0xb0/0xb0 [ 1289.065403][T21477] __se_sys_ioctl+0xfd/0x170 [ 1289.070018][T21477] do_syscall_64+0x55/0xb0 [ 1289.074456][T21477] ? clear_bhb_loop+0x40/0x90 [ 1289.079159][T21477] ? clear_bhb_loop+0x40/0x90 [ 1289.083862][T21477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1289.089778][T21477] RIP: 0033:0x7f3e6059fb19 [ 1289.094209][T21477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.113831][T21477] RSP: 002b:00007f3e61395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.122265][T21477] RAX: ffffffffffffffda RBX: 00007f3e60826180 RCX: 00007f3e6059fb19 [ 1289.130246][T21477] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 1289.138235][T21477] RBP: 00007f3e60637af8 R08: 0000000000000000 R09: 0000000000000000 [ 1289.146223][T21477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1289.154204][T21477] R13: 00007f3e60826218 R14: 00007f3e60826180 R15: 00007ffddb4848b8 [ 1289.162248][T21477] [ 1289.166855][T21477] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1289.933679][T21485] random: crng reseeded on system resumption [ 1291.743506][T21509] overlayfs: missing 'lowerdir' [ 1292.202044][T21517] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1292.215689][T21517] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1292.341527][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1292.625410][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1292.687145][T21316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1292.696984][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1292.711629][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1292.733770][T21316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1292.756445][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1292.779715][T21316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1292.800792][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1292.996395][T21527] Invalid ELF header magic: != ELF [ 1293.013022][T21527] overlay: Unknown parameter '/' [ 1294.226759][T21316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1294.275875][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1294.396582][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1294.466810][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.562540][ T9] usb 1-1: can't set config #16, error -71 [ 1294.616029][ T9] usb 1-1: USB disconnect, device number 22 [ 1294.658787][T21540] i2c i2c-0: new_device: Missing parameters [ 1295.720469][T21316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.760772][T21316] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.967276][ T2893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.974440][ T2893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.036756][T21551] loop5: detected capacity change from 0 to 16 [ 1297.518251][ T2893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.525455][ T2893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.515635][T21551] erofs: (device loop5): mounted with root inode @ nid 36. [ 1299.346397][ T27] audit: type=1800 audit(1793671437.221:170): pid=21551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4097" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1299.384017][ T5795] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1299.473732][T21558] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1299.482396][T21558] CPU: 0 PID: 21558 Comm: syz.2.4096 Not tainted syzkaller #0 [ 1299.489891][T21558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1299.499972][T21558] Call Trace: [ 1299.503271][T21558] [ 1299.506194][T21558] dump_stack_lvl+0x18c/0x250 [ 1299.510896][T21558] ? show_regs_print_info+0x20/0x20 [ 1299.516088][T21558] ? load_image+0x420/0x420 [ 1299.520590][T21558] sysfs_create_dir_ns+0x26e/0x2a0 [ 1299.525697][T21558] ? __lock_acquire+0x7eb0/0x7eb0 [ 1299.530713][T21558] ? sysfs_warn_dup+0xa0/0xa0 [ 1299.535377][T21558] ? preempt_schedule_thunk+0x1a/0x30 [ 1299.540745][T21558] kobject_add_internal+0x617/0xc90 [ 1299.546131][T21558] kobject_add+0x164/0x240 [ 1299.550583][T21558] ? kobject_init+0x1d0/0x1d0 [ 1299.555265][T21558] ? get_device_parent+0x366/0x390 [ 1299.560373][T21558] device_add+0x3fa/0xc40 [ 1299.564701][T21558] tty_register_device_attr+0x42b/0x9a0 [ 1299.570263][T21558] ? tty_register_device+0x30/0x30 [ 1299.575387][T21558] ? tty_port_init+0x132/0x1a0 [ 1299.580143][T21558] ? gsm_dlci_alloc+0x32a/0x630 [ 1299.584980][T21558] ? __might_fault+0xaa/0x120 [ 1299.589649][T21558] gsm_activate_mux+0x110/0x2a0 [ 1299.594492][T21558] gsmld_ioctl+0x12ca/0x1900 [ 1299.599078][T21558] ? gsmld_write+0x120/0x120 [ 1299.603684][T21558] ? __init_ldsem+0x150/0x150 [ 1299.608360][T21558] ? __fget_files+0x28/0x460 [ 1299.612946][T21558] ? gsmld_write+0x120/0x120 [ 1299.617522][T21558] tty_ioctl+0x9b5/0xdc0 [ 1299.621755][T21558] ? tty_get_icount+0xb0/0xb0 [ 1299.626423][T21558] __se_sys_ioctl+0xfd/0x170 [ 1299.631028][T21558] do_syscall_64+0x55/0xb0 [ 1299.635455][T21558] ? clear_bhb_loop+0x40/0x90 [ 1299.640121][T21558] ? clear_bhb_loop+0x40/0x90 [ 1299.644794][T21558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1299.650679][T21558] RIP: 0033:0x7fa34e79fb19 [ 1299.655085][T21558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1299.674683][T21558] RSP: 002b:00007fa34f5cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1299.683090][T21558] RAX: ffffffffffffffda RBX: 00007fa34ea26180 RCX: 00007fa34e79fb19 [ 1299.691071][T21558] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 1299.699030][T21558] RBP: 00007fa34e837af8 R08: 0000000000000000 R09: 0000000000000000 [ 1299.707004][T21558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1299.714960][T21558] R13: 00007fa34ea26218 R14: 00007fa34ea26180 R15: 00007fffca2edb18 [ 1299.722929][T21558] [ 1299.727207][T21558] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1299.911579][T21559] overlayfs: missing 'lowerdir' [ 1300.272817][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.279200][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.324318][T21316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1300.722172][T21574] Invalid ELF header magic: != ELF [ 1301.242032][T21574] overlay: Unknown parameter '/' [ 1305.422578][T21591] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1305.431497][T21591] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1305.587543][T21316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.229473][T21316] veth0_vlan: entered promiscuous mode [ 1307.377321][T21316] veth1_vlan: entered promiscuous mode [ 1307.423853][T21628] overlayfs: missing 'lowerdir' [ 1307.601659][T21630] i2c i2c-0: new_device: Can't parse I2C address [ 1308.351429][T21316] veth0_macvtap: entered promiscuous mode [ 1308.381843][T21316] veth1_macvtap: entered promiscuous mode [ 1308.503790][T21316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.534568][T21316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.548724][T21316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.560899][T21316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.575380][T21316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.587941][T21638] loop2: detected capacity change from 0 to 8 [ 1308.599324][T21316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.613379][T21316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1308.658415][T21316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.689704][T21316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.729617][T21316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.781969][T21316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.808732][T21316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.829503][T21316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.856215][T21316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1308.909770][T21316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.029115][T21316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.198508][T21316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.356026][T21316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.850920][T21657] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1309.859632][T21657] CPU: 0 PID: 21657 Comm: syz.2.4112 Not tainted syzkaller #0 [ 1309.867124][T21657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1309.877203][T21657] Call Trace: [ 1309.880496][T21657] [ 1309.883439][T21657] dump_stack_lvl+0x18c/0x250 [ 1309.888156][T21657] ? show_regs_print_info+0x20/0x20 [ 1309.893378][T21657] ? load_image+0x420/0x420 [ 1309.897914][T21657] sysfs_create_dir_ns+0x26e/0x2a0 [ 1309.903049][T21657] ? __lock_acquire+0x7eb0/0x7eb0 [ 1309.908098][T21657] ? sysfs_warn_dup+0xa0/0xa0 [ 1309.912795][T21657] ? rcu_is_watching+0x15/0xb0 [ 1309.917588][T21657] ? do_raw_spin_unlock+0x121/0x230 [ 1309.922811][T21657] kobject_add_internal+0x617/0xc90 [ 1309.928036][T21657] kobject_add+0x164/0x240 [ 1309.932475][T21657] ? kobject_init+0x1d0/0x1d0 [ 1309.937174][T21657] ? get_device_parent+0x366/0x390 [ 1309.942311][T21657] device_add+0x3fa/0xc40 [ 1309.946660][T21657] tty_register_device_attr+0x42b/0x9a0 [ 1309.952242][T21657] ? tty_register_device+0x30/0x30 [ 1309.957379][T21657] ? tty_port_init+0x132/0x1a0 [ 1309.962167][T21657] ? gsm_dlci_alloc+0x32a/0x630 [ 1309.967048][T21657] gsm_activate_mux+0x110/0x2a0 [ 1309.971931][T21657] gsmld_ioctl+0x12ca/0x1900 [ 1309.976570][T21657] ? gsmld_write+0x120/0x120 [ 1309.981197][T21657] ? __init_ldsem+0x150/0x150 [ 1309.985896][T21657] ? __fget_files+0x28/0x460 [ 1309.990554][T21657] ? gsmld_write+0x120/0x120 [ 1309.995167][T21657] tty_ioctl+0x9b5/0xdc0 [ 1309.999432][T21657] ? tty_get_icount+0xb0/0xb0 [ 1310.004129][T21657] __se_sys_ioctl+0xfd/0x170 [ 1310.008749][T21657] do_syscall_64+0x55/0xb0 [ 1310.013187][T21657] ? clear_bhb_loop+0x40/0x90 [ 1310.017890][T21657] ? clear_bhb_loop+0x40/0x90 [ 1310.022591][T21657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1310.028511][T21657] RIP: 0033:0x7fa34e79fb19 [ 1310.032938][T21657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1310.052573][T21657] RSP: 002b:00007fa34f5cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1310.061009][T21657] RAX: ffffffffffffffda RBX: 00007fa34ea26180 RCX: 00007fa34e79fb19 [ 1310.069000][T21657] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1310.076998][T21657] RBP: 00007fa34e837af8 R08: 0000000000000000 R09: 0000000000000000 [ 1310.084989][T21657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1310.092989][T21657] R13: 00007fa34ea26218 R14: 00007fa34ea26180 R15: 00007fffca2edb18 [ 1310.101008][T21657] [ 1310.105607][T21657] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1310.761701][ T2893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.841501][ T2929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.859585][ T2929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.873400][ T2893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.686842][ T27] audit: type=1807 audit(1793671449.771:171): action=measure UNKNOWN=# res=0 [ 1313.402067][ T27] audit: type=1802 audit(1793671449.781:172): pid=21672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.4049" res=0 errno=0 [ 1313.700723][T21684] i2c i2c-0: new_device: Can't parse I2C address [ 1314.403994][T21668] ima: policy update failed [ 1314.424714][ T27] audit: type=1802 audit(1793671452.501:173): pid=21668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.4049" res=0 errno=0 [ 1314.467201][T21683] overlayfs: missing 'lowerdir' [ 1315.524835][T21698] syz.2.4119[21698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1315.524981][T21698] syz.2.4119[21698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1315.654816][T21706] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1315.675505][T21706] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1317.907819][T21715] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1318.085446][T21722] loop4: detected capacity change from 0 to 256 [ 1318.092664][T21722] exfat: Deprecated parameter 'utf8' [ 1318.098067][T21722] exfat: Deprecated parameter 'namecase' [ 1318.103928][T21722] exfat: Deprecated parameter 'utf8' [ 1318.117617][T21722] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1318.165302][T21722] Mass Storage Function, version: 2009/09/11 [ 1318.172654][T21722] LUN: removable file: (no medium) [ 1318.187250][T21722] [ 1318.189626][T21722] ====================================================== [ 1318.196668][T21722] WARNING: possible circular locking dependency detected [ 1318.203707][T21722] syzkaller #0 Not tainted [ 1318.208108][T21722] ------------------------------------------------------ [ 1318.215103][T21722] syz.4.4124/21722 is trying to acquire lock: [ 1318.221162][T21722] ffff8880203ab648 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x739/0x1d50 [ 1318.231474][T21722] [ 1318.231474][T21722] but task is already holding lock: [ 1318.238820][T21722] ffff88807b468128 (&common->filesem){++++}-{3:3}, at: fsg_store_file+0x178/0x530 [ 1318.248161][T21722] [ 1318.248161][T21722] which lock already depends on the new lock. [ 1318.248161][T21722] [ 1318.258563][T21722] [ 1318.258563][T21722] the existing dependency chain (in reverse order) is: [ 1318.267559][T21722] [ 1318.267559][T21722] -> #3 (&common->filesem){++++}-{3:3}: [ 1318.275269][T21722] down_read+0x46/0x2e0 [ 1318.279932][T21722] fsg_show_file+0x2d/0x130 [ 1318.284936][T21722] configfs_read_iter+0x29d/0x570 [ 1318.290463][T21722] __kernel_read+0x2e5/0x730 [ 1318.295559][T21722] integrity_kernel_read+0x8a/0xd0 [ 1318.301194][T21722] ima_calc_file_hash+0xb1f/0x1960 [ 1318.306809][T21722] ima_collect_measurement+0x4d4/0xa30 [ 1318.312778][T21722] process_measurement+0x123a/0x1d50 [ 1318.318588][T21722] ima_file_check+0xcc/0x110 [ 1318.323687][T21722] path_openat+0x2910/0x3270 [ 1318.328781][T21722] do_filp_open+0x1f2/0x430 [ 1318.333810][T21722] do_sys_openat2+0x134/0x1d0 [ 1318.338993][T21722] __x64_sys_openat+0x139/0x160 [ 1318.344350][T21722] do_syscall_64+0x55/0xb0 [ 1318.349276][T21722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1318.355701][T21722] [ 1318.355701][T21722] -> #2 (&p->frag_sem){.+.+}-{3:3}: [ 1318.363070][T21722] down_read+0x46/0x2e0 [ 1318.367753][T21722] configfs_write_iter+0x215/0x400 [ 1318.373376][T21722] vfs_write+0x474/0x9a0 [ 1318.378131][T21722] ksys_write+0x151/0x260 [ 1318.382974][T21722] do_syscall_64+0x55/0xb0 [ 1318.387918][T21722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1318.394320][T21722] [ 1318.394320][T21722] -> #1 (&buffer->mutex){+.+.}-{3:3}: [ 1318.401862][T21722] __mutex_lock+0x135/0xce0 [ 1318.406894][T21722] configfs_read_iter+0x72/0x570 [ 1318.412340][T21722] __kernel_read+0x2e5/0x730 [ 1318.417441][T21722] integrity_kernel_read+0x8a/0xd0 [ 1318.423067][T21722] ima_calc_file_hash+0xb1f/0x1960 [ 1318.428684][T21722] ima_collect_measurement+0x4d4/0xa30 [ 1318.434645][T21722] process_measurement+0x123a/0x1d50 [ 1318.440471][T21722] ima_file_check+0xcc/0x110 [ 1318.445561][T21722] path_openat+0x2910/0x3270 [ 1318.450757][T21722] do_filp_open+0x1f2/0x430 [ 1318.455764][T21722] do_sys_openat2+0x134/0x1d0 [ 1318.460943][T21722] __x64_sys_openat+0x139/0x160 [ 1318.466321][T21722] do_syscall_64+0x55/0xb0 [ 1318.471260][T21722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1318.477663][T21722] [ 1318.477663][T21722] -> #0 (&iint_mutex_key[depth]){+.+.}-{3:3}: [ 1318.485896][T21722] __lock_acquire+0x3a07/0x7eb0 [ 1318.491253][T21722] lock_acquire+0x19e/0x420 [ 1318.496289][T21722] __mutex_lock+0x135/0xce0 [ 1318.501296][T21722] process_measurement+0x739/0x1d50 [ 1318.507004][T21722] ima_file_check+0xcc/0x110 [ 1318.512101][T21722] path_openat+0x2910/0x3270 [ 1318.517194][T21722] do_filp_open+0x1f2/0x430 [ 1318.522200][T21722] filp_open+0x180/0x1e0 [ 1318.526943][T21722] fsg_lun_open+0x67/0xec0 [ 1318.531866][T21722] fsg_store_file+0x1a9/0x530 [ 1318.537048][T21722] configfs_write_iter+0x312/0x400 [ 1318.542663][T21722] vfs_write+0x474/0x9a0 [ 1318.547404][T21722] ksys_write+0x151/0x260 [ 1318.552233][T21722] do_syscall_64+0x55/0xb0 [ 1318.557153][T21722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1318.563551][T21722] [ 1318.563551][T21722] other info that might help us debug this: [ 1318.563551][T21722] [ 1318.573756][T21722] Chain exists of: [ 1318.573756][T21722] &iint_mutex_key[depth] --> &p->frag_sem --> &common->filesem [ 1318.573756][T21722] [ 1318.587196][T21722] Possible unsafe locking scenario: [ 1318.587196][T21722] [ 1318.594622][T21722] CPU0 CPU1 [ 1318.599967][T21722] ---- ---- [ 1318.605308][T21722] lock(&common->filesem); [ 1318.609792][T21722] lock(&p->frag_sem); [ 1318.616445][T21722] lock(&common->filesem); [ 1318.623444][T21722] lock(&iint_mutex_key[depth]); [ 1318.628443][T21722] [ 1318.628443][T21722] *** DEADLOCK *** [ 1318.628443][T21722] [ 1318.636562][T21722] 5 locks held by syz.4.4124/21722: [ 1318.641733][T21722] #0: ffff88807516fc48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 1318.650939][T21722] #1: ffff8881422c0418 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 1318.659883][T21722] #2: ffff8880593f2288 (&buffer->mutex){+.+.}-{3:3}, at: configfs_write_iter+0x81/0x400 [ 1318.669690][T21722] #3: ffff88801cb59878 (&p->frag_sem){.+.+}-{3:3}, at: configfs_write_iter+0x215/0x400 [ 1318.679411][T21722] #4: ffff88807b468128 (&common->filesem){++++}-{3:3}, at: fsg_store_file+0x178/0x530 [ 1318.689056][T21722] [ 1318.689056][T21722] stack backtrace: [ 1318.694931][T21722] CPU: 1 PID: 21722 Comm: syz.4.4124 Not tainted syzkaller #0 [ 1318.702388][T21722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1318.712428][T21722] Call Trace: [ 1318.715692][T21722] [ 1318.718612][T21722] dump_stack_lvl+0x18c/0x250 [ 1318.723280][T21722] ? load_image+0x420/0x420 [ 1318.727763][T21722] ? show_regs_print_info+0x20/0x20 [ 1318.732950][T21722] ? print_circular_bug+0x12b/0x1a0 [ 1318.738132][T21722] check_noncircular+0x2fc/0x400 [ 1318.743057][T21722] ? look_up_lock_class+0x75/0x140 [ 1318.748148][T21722] ? print_deadlock_bug+0x5d0/0x5d0 [ 1318.753329][T21722] ? lockdep_lock+0xf5/0x230 [ 1318.757900][T21722] ? _find_first_zero_bit+0xd6/0x100 [ 1318.763169][T21722] __lock_acquire+0x3a07/0x7eb0 [ 1318.768006][T21722] ? __lock_acquire+0x36dd/0x7eb0 [ 1318.773010][T21722] ? verify_lock_unused+0x140/0x140 [ 1318.778281][T21722] ? kmem_cache_alloc+0x17e/0x2d0 [ 1318.783299][T21722] ? ima_file_check+0xcc/0x110 [ 1318.788040][T21722] ? configfs_write_iter+0x312/0x400 [ 1318.793311][T21722] lock_acquire+0x19e/0x420 [ 1318.797798][T21722] ? process_measurement+0x739/0x1d50 [ 1318.803173][T21722] ? __might_sleep+0xe0/0xe0 [ 1318.807748][T21722] ? read_lock_is_recursive+0x20/0x20 [ 1318.813108][T21722] __mutex_lock+0x135/0xce0 [ 1318.817598][T21722] ? process_measurement+0x739/0x1d50 [ 1318.822960][T21722] ? integrity_inode_get+0x408/0x540 [ 1318.828231][T21722] ? process_measurement+0x715/0x1d50 [ 1318.833591][T21722] ? process_measurement+0x739/0x1d50 [ 1318.838949][T21722] ? __lock_acquire+0x7eb0/0x7eb0 [ 1318.843954][T21722] ? mutex_lock_nested+0x20/0x20 [ 1318.848870][T21722] ? up_write+0x1be/0x410 [ 1318.853182][T21722] process_measurement+0x739/0x1d50 [ 1318.858369][T21722] ? __kmem_cache_free+0xba/0x1f0 [ 1318.863371][T21722] ? ima_file_mmap+0x1d0/0x1d0 [ 1318.868120][T21722] ? tomoyo_check_open_permission+0x384/0x460 [ 1318.874244][T21722] ? tomoyo_check_open_permission+0x1cf/0x460 [ 1318.880304][T21722] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1318.886364][T21722] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 1318.892509][T21722] ima_file_check+0xcc/0x110 [ 1318.897079][T21722] ? ima_bprm_check+0x200/0x200 [ 1318.901908][T21722] path_openat+0x2910/0x3270 [ 1318.906486][T21722] ? do_filp_open+0x430/0x430 [ 1318.911143][T21722] do_filp_open+0x1f2/0x430 [ 1318.915630][T21722] ? vfs_tmpfile+0x620/0x620 [ 1318.920205][T21722] ? rcu_is_watching+0x15/0xb0 [ 1318.924951][T21722] ? getname_kernel+0x146/0x2f0 [ 1318.929784][T21722] filp_open+0x180/0x1e0 [ 1318.934007][T21722] ? file_open_name+0x1c0/0x1c0 [ 1318.938842][T21722] fsg_lun_open+0x67/0xec0 [ 1318.943238][T21722] ? down_read_killable+0x340/0x340 [ 1318.948417][T21722] fsg_store_file+0x1a9/0x530 [ 1318.953094][T21722] configfs_write_iter+0x312/0x400 [ 1318.958204][T21722] ? fsg_lun_opts_file_show+0x90/0x90 [ 1318.963564][T21722] vfs_write+0x474/0x9a0 [ 1318.967800][T21722] ? file_end_write+0x250/0x250 [ 1318.972635][T21722] ? __fget_files+0x3fc/0x460 [ 1318.977295][T21722] ? __fdget_pos+0x2a3/0x330 [ 1318.981881][T21722] ? ksys_write+0x74/0x260 [ 1318.986287][T21722] ksys_write+0x151/0x260 [ 1318.990598][T21722] ? __ia32_sys_read+0x90/0x90 [ 1318.995349][T21722] ? lockdep_hardirqs_on+0x98/0x150 [ 1319.000525][T21722] do_syscall_64+0x55/0xb0 [ 1319.004926][T21722] ? clear_bhb_loop+0x40/0x90 [ 1319.009582][T21722] ? clear_bhb_loop+0x40/0x90 [ 1319.014268][T21722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1319.020145][T21722] RIP: 0033:0x7f51daf9fb19 [ 1319.024539][T21722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1319.044125][T21722] RSP: 002b:00007f51dbdd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1319.052521][T21722] RAX: ffffffffffffffda RBX: 00007f51db226090 RCX: 00007f51daf9fb19 [ 1319.060470][T21722] RDX: 0000000000000005 RSI: 0000200000001e40 RDI: 0000000000000008 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1319.068434][T21722] RBP: 00007f51db037af8 R08: 0000000000000000 R09: 0000000000000000 [ 1319.076392][T21722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1319.084363][T21722] R13: 00007f51db226128 R14: 00007f51db226090 R15: 00007ffd72b277d8 [ 1319.092324][T21722] [ 1319.150935][ T27] audit: type=1800 audit(1793671456.271:174): pid=21722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4124" name="file" dev="configfs" ino=54458 res=0 errno=0 [ 1319.200938][T21728] i2c i2c-0: new_device: Can't parse I2C address [ 1320.007179][ T2893] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.141222][ T2893] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.247233][ T2893] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.319709][ T2893] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.237610][ T2893] hsr_slave_0: left promiscuous mode [ 1321.245062][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1321.253936][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1321.270647][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1321.278373][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1321.286311][ T2893] bridge_slave_1: left allmulticast mode [ 1321.292191][ T2893] bridge_slave_1: left promiscuous mode [ 1321.297927][ T2893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.307893][ T2893] bridge_slave_0: left allmulticast mode [ 1321.313650][ T2893] bridge_slave_0: left promiscuous mode [ 1321.319361][ T2893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.331527][ T2893] veth1_macvtap: left promiscuous mode [ 1321.338963][ T2893] veth0_macvtap: left promiscuous mode [ 1321.346648][ T2893] veth1_vlan: left promiscuous mode [ 1321.352024][ T2893] veth0_vlan: left promiscuous mode [ 1321.579323][ T2893] bond3 (unregistering): Released all slaves [ 1321.734119][ T2893] bond2 (unregistering): Released all slaves [ 1321.880036][ T2893] bond1 (unregistering): Released all slaves [ 1321.895095][ T2893] pim6reg (unregistering): left allmulticast mode [ 1322.019867][ T2893] team0 (unregistering): Port device team_slave_1 removed [ 1322.049916][ T2893] team0 (unregistering): Port device team_slave_0 removed [ 1322.088192][ T2893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.121642][ T2893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1322.188341][ T2893] bond0 (unregistering): Released all slaves [ 1322.581270][ T2893] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.647985][ T2893] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.687584][ T2893] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.750843][ T2893] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.877737][ T2893] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.918408][ T2893] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.979819][ T2893] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.211719][ T2893] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.257760][ T2893] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.309836][ T2893] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.368941][ T2893] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.795740][ T2893] hsr_slave_0: left promiscuous mode [ 1326.810695][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.818281][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.827639][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.835924][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.844823][ T2893] bridge_slave_1: left allmulticast mode [ 1326.850487][ T2893] bridge_slave_1: left promiscuous mode [ 1326.856491][ T2893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.865366][ T2893] bridge_slave_0: left allmulticast mode [ 1326.871023][ T2893] bridge_slave_0: left promiscuous mode [ 1326.876840][ T2893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.888550][ T2893] hsr_slave_0: left promiscuous mode [ 1326.894366][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.901753][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.909545][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.919288][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.927011][ T2893] bridge_slave_1: left allmulticast mode [ 1326.932731][ T2893] bridge_slave_1: left promiscuous mode [ 1326.938389][ T2893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.947160][ T2893] bridge_slave_0: left allmulticast mode [ 1326.952903][ T2893] bridge_slave_0: left promiscuous mode [ 1326.958536][ T2893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.969214][ T2893] hsr_slave_0: left promiscuous mode [ 1326.975098][ T2893] hsr_slave_1: left promiscuous mode [ 1326.980762][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.988226][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.995895][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1327.003906][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1327.011403][ T2893] bridge_slave_1: left allmulticast mode [ 1327.017466][ T2893] bridge_slave_1: left promiscuous mode [ 1327.023580][ T2893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.031836][ T2893] bridge_slave_0: left allmulticast mode [ 1327.037495][ T2893] bridge_slave_0: left promiscuous mode [ 1327.043509][ T2893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.056372][ T2893] veth1_macvtap: left promiscuous mode [ 1327.061969][ T2893] veth0_macvtap: left promiscuous mode [ 1327.067498][ T2893] veth1_vlan: left promiscuous mode [ 1327.073410][ T2893] veth0_vlan: left promiscuous mode [ 1327.079469][ T2893] veth1_macvtap: left promiscuous mode [ 1327.085100][ T2893] veth0_macvtap: left promiscuous mode [ 1327.090630][ T2893] veth1_vlan: left promiscuous mode [ 1327.096158][ T2893] veth0_vlan: left promiscuous mode [ 1327.102890][ T2893] veth1_macvtap: left promiscuous mode [ 1327.108393][ T2893] veth0_macvtap: left promiscuous mode [ 1327.114055][ T2893] veth1_vlan: left promiscuous mode [ 1327.119326][ T2893] veth0_vlan: left promiscuous mode [ 1327.432856][ T2893] bond5 (unregistering): Released all slaves [ 1327.589816][ T2893] bond4 (unregistering): Released all slaves [ 1327.599453][ T2893] pim6reg (unregistering): left allmulticast mode [ 1327.744616][ T2893] bond3 (unregistering): Released all slaves [ 1327.890055][ T2893] bond2 (unregistering): Released all slaves [ 1327.899899][ T2893] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 1327.914972][ T2893] bond1 (unregistering): Released all slaves [ 1328.034204][ T2893] team0 (unregistering): Port device team_slave_1 removed [ 1328.069158][ T2893] team0 (unregistering): Port device team_slave_0 removed [ 1328.097252][ T2893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.126425][ T2893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface