last executing test programs: 13.653004966s ago: executing program 0 (id=83): r0 = memfd_create(&(0x7f0000000040)='dummy\x00', 0x0) ftruncate(r0, 0x6400000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) r3 = memfd_create(&(0x7f0000000100)='dummy2\x00', 0x0) ftruncate(r3, 0x6400000) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='md0\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='7', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000000380)='7:1\x00', 0x4) r8 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r8, &(0x7f0000000400)='raid1\x00', 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r9, &(0x7f0000000480)='2\x00', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0) write(r10, &(0x7f0000000500)='0\x00', 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-loop1/slot\x00', 0x1, 0x0) write(r11, &(0x7f0000000580)='1\x00', 0x2) r12 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/bitmap/metadata\x00', 0x1, 0x0) write(r12, &(0x7f0000000600)='external\x00', 0x9) r13 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/bitmap/chunksize\x00', 0x1, 0x0) write(r13, &(0x7f0000000680)='4096\x00', 0x5) r14 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/block/md0/md/bitmap/time_base\x00', 0x1, 0x0) write(r14, &(0x7f0000000700)='1\x00', 0x2) r15 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r15, &(0x7f0000000780)='+8\x00', 0x3) r16 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r16, &(0x7f0000000800)='readonly\x00', 0x9) 10.859398996s ago: executing program 0 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 7.890382851s ago: executing program 0 (id=95): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x100004) write$eventfd(r5, &(0x7f0000000240), 0xffffff14) 7.600381409s ago: executing program 3 (id=99): r0 = memfd_create(&(0x7f0000000040)='dummy\x00', 0x0) ftruncate(r0, 0x6400000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) r3 = memfd_create(&(0x7f0000000100)='dummy2\x00', 0x0) ftruncate(r3, 0x6400000) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='md0\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='7', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000000380)='7:1\x00', 0x4) r8 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r8, &(0x7f0000000400)='raid1\x00', 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r9, &(0x7f0000000480)='2\x00', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0) write(r10, &(0x7f0000000500)='0\x00', 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-loop1/slot\x00', 0x1, 0x0) write(r11, &(0x7f0000000580)='1\x00', 0x2) r12 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/bitmap/metadata\x00', 0x1, 0x0) write(r12, &(0x7f0000000600)='external\x00', 0x9) r13 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/bitmap/chunksize\x00', 0x1, 0x0) write(r13, &(0x7f0000000680)='4096\x00', 0x5) r14 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/block/md0/md/bitmap/time_base\x00', 0x1, 0x0) write(r14, &(0x7f0000000700)='1\x00', 0x2) r15 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r15, &(0x7f0000000780)='+8\x00', 0x3) r16 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r16, &(0x7f0000000800)='readonly\x00', 0x9) 6.715282721s ago: executing program 2 (id=101): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) dup(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) fcntl$setpipe(r6, 0x407, 0x100004) write$eventfd(r6, 0x0, 0x0) socket(0x1a, 0x80000, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 6.537710385s ago: executing program 0 (id=102): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="23000000010006", 0x7) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b)<', @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) 6.436140538s ago: executing program 3 (id=104): r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000240)={0x0, 0x0, 0x6}) 6.196611104s ago: executing program 3 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 6.195289024s ago: executing program 1 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000800)='0\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000c00), 0x0) write(0xffffffffffffffff, &(0x7f0000000e00)='1', 0x1) mount(0x0, &(0x7f0000000f00)='./dlmfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./dlmfs/domain1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000001200)='./dlmfs/domain1/lock1\x00', 0x42, 0x1b6) openat(0xffffffffffffff9c, &(0x7f0000001200)='./dlmfs/domain1/lock1\x00', 0x0, 0x0) 5.335108266s ago: executing program 2 (id=107): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mkdir(&(0x7f0000000080)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x434140, 0x0) r2 = openat(r1, &(0x7f0000000180)='proc/self/root\x00', 0x10000, 0x0) fchdir(r2) chdir(&(0x7f00000001c0)='sys/kernel/config/usb_gadget\x00') chdir(&(0x7f0000000240)='g1\x00') mkdir(&(0x7f00000002c0)='configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(r3, &(0x7f0000000180)='1', 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 5.053959243s ago: executing program 1 (id=108): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) 4.574371194s ago: executing program 3 (id=109): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000300)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0x0, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.644051908s ago: executing program 1 (id=110): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x100004) write$eventfd(r5, &(0x7f0000000240), 0xffffff14) 2.495830947s ago: executing program 3 (id=111): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) 1.879574193s ago: executing program 2 (id=112): r0 = memfd_create(&(0x7f0000000040)='dummy\x00', 0x0) ftruncate(r0, 0x6400000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) r3 = memfd_create(&(0x7f0000000100)='dummy2\x00', 0x0) ftruncate(r3, 0x6400000) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='md0\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='7', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000000380)='7:1\x00', 0x4) r8 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r8, &(0x7f0000000400)='raid1\x00', 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r9, &(0x7f0000000480)='2\x00', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0) write(r10, &(0x7f0000000500)='0\x00', 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-loop1/slot\x00', 0x1, 0x0) write(r11, &(0x7f0000000580)='1\x00', 0x2) r12 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/bitmap/metadata\x00', 0x1, 0x0) write(r12, &(0x7f0000000600)='external\x00', 0x9) r13 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/bitmap/chunksize\x00', 0x1, 0x0) write(r13, &(0x7f0000000680)='4096\x00', 0x5) r14 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/block/md0/md/bitmap/time_base\x00', 0x1, 0x0) write(r14, &(0x7f0000000700)='1\x00', 0x2) r15 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r15, &(0x7f0000000780)='+8\x00', 0x3) r16 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r16, &(0x7f0000000800)='readonly\x00', 0x9) 1.780614895s ago: executing program 1 (id=113): pipe(0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) 1.724099116s ago: executing program 3 (id=114): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000240)={0x0, 0x0, 0x6}) signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000840)={0x14, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195"], 0x0}, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0xf5, 0x80000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x1c, 0x2) write(r3, &(0x7f0000000000)='3', 0x4e) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 1.600559379s ago: executing program 0 (id=115): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) dup(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) fcntl$setpipe(r6, 0x407, 0x100004) write$eventfd(r6, 0x0, 0x0) socket(0x1a, 0x80000, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.401823445s ago: executing program 1 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000800)='0\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000c00), 0x0) write(0xffffffffffffffff, &(0x7f0000000e00)='1', 0x1) mount(0x0, &(0x7f0000000f00)='./dlmfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./dlmfs/domain1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000001200)='./dlmfs/domain1/lock1\x00', 0x42, 0x1b6) openat(0xffffffffffffff9c, &(0x7f0000001200)='./dlmfs/domain1/lock1\x00', 0x0, 0x0) 1.336120746s ago: executing program 2 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 491.483008ms ago: executing program 0 (id=118): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000001100)=""/4110, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x50) syz_emit_ethernet(0xb2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x7c, 0x2b, 0x0, @private2, @local, {[@srh={0x3b, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, [@dev]}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) socket$kcm(0xa, 0x3, 0x87) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x2, &(0x7f0000000200)=0x6}) 235.322104ms ago: executing program 2 (id=119): pipe2$watch_queue(&(0x7f0000000100), 0x80) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r5, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000080)=""/240, 0xfffffffffffffcea, 0x10020, 0x0, 0x0) write(r4, &(0x7f0000000240)='1\x00', 0x1) r7 = syz_open_procfs(0x0, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x100000000000002a) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x8946, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/my_zoned_dev\x00', 0x2, 0x110) read(r9, &(0x7f0000000400), 0x200) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) 98.432127ms ago: executing program 1 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000001000)="fc4e2ba9", 0x4, 0x1000) pwrite64(r0, &(0x7f0000001004)="01000000", 0x4, 0x1004) pwrite64(r0, &(0x7f0000001008)="01", 0x1, 0x1008) pwrite64(r0, &(0x7f000000100c)='\b\x00\x00\x00', 0x4, 0x1060) pwrite64(r0, &(0x7f0000001010)="1000000000000000", 0x8, 0x1080) pwrite64(r0, &(0x7f0000001018)='\n\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1088) pwrite64(r0, &(0x7f0000001020)='\b\x00\x00\x00\x00\x00', 0x6, 0x1090) pwrite64(r0, &(0x7f0000001028)="284f2ba9", 0x4, 0x10d8) pwrite64(r0, &(0x7f0000001030), 0x0, 0x2004) pwrite64(r0, &(0x7f0000001034)="000200", 0x3, 0x2034) pwrite64(r0, &(0x7f000000103c)='\x00\x00\x00\x00', 0x4, 0x203c) fsync(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='md0\n', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1.2\n', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='writemostly\n', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) write(r5, &(0x7f0000000e00)='1024\n', 0x5) 0s ago: executing program 2 (id=121): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340), 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b)<', @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. [ 79.927648][ T5763] cgroup: Unknown subsys name 'net' [ 80.060018][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.842498][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.449089][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.458141][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.470401][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.501662][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.509996][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.550967][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.561196][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.570299][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.579357][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.580244][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.595684][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.595762][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.610936][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.612148][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.618520][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.626541][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.633481][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.651520][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.762168][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.770921][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.783557][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.792576][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.802365][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.811297][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.162802][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 84.208637][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 84.310912][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 84.400449][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.408510][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.416343][ T5783] bridge_slave_0: entered allmulticast mode [ 84.423890][ T5783] bridge_slave_0: entered promiscuous mode [ 84.433133][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 84.466002][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.474367][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.481641][ T5783] bridge_slave_1: entered allmulticast mode [ 84.488447][ T5783] bridge_slave_1: entered promiscuous mode [ 84.557198][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.577372][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.584840][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.592286][ T5779] bridge_slave_0: entered allmulticast mode [ 84.599431][ T5779] bridge_slave_0: entered promiscuous mode [ 84.608998][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.629580][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.637628][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.645420][ T5774] bridge_slave_0: entered allmulticast mode [ 84.652620][ T5774] bridge_slave_0: entered promiscuous mode [ 84.660393][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.668068][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.675368][ T5774] bridge_slave_1: entered allmulticast mode [ 84.683001][ T5774] bridge_slave_1: entered promiscuous mode [ 84.689887][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.697399][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.706286][ T5779] bridge_slave_1: entered allmulticast mode [ 84.713512][ T5779] bridge_slave_1: entered promiscuous mode [ 84.798128][ T5783] team0: Port device team_slave_0 added [ 84.808017][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.823674][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.835680][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.852119][ T5783] team0: Port device team_slave_1 added [ 84.860177][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.957087][ T5779] team0: Port device team_slave_0 added [ 84.963367][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.970553][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.978742][ T5789] bridge_slave_0: entered allmulticast mode [ 84.986016][ T5789] bridge_slave_0: entered promiscuous mode [ 84.994658][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.002150][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.028660][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.047125][ T5774] team0: Port device team_slave_0 added [ 85.055354][ T5779] team0: Port device team_slave_1 added [ 85.062237][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.069493][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.079201][ T5789] bridge_slave_1: entered allmulticast mode [ 85.086363][ T5789] bridge_slave_1: entered promiscuous mode [ 85.096098][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.103574][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.129876][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.143484][ T5774] team0: Port device team_slave_1 added [ 85.202612][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.209791][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.239259][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.253684][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.260934][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.287424][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.324111][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.331251][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.357870][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.370433][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.377683][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.404192][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.426833][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.471359][ T5783] hsr_slave_0: entered promiscuous mode [ 85.478172][ T5783] hsr_slave_1: entered promiscuous mode [ 85.487906][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.588206][ T5779] hsr_slave_0: entered promiscuous mode [ 85.597460][ T5779] hsr_slave_1: entered promiscuous mode [ 85.603690][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.611876][ T5779] Cannot create hsr debugfs directory [ 85.620495][ T5789] team0: Port device team_slave_0 added [ 85.630216][ T5789] team0: Port device team_slave_1 added [ 85.688278][ T5774] hsr_slave_0: entered promiscuous mode [ 85.695305][ T5774] hsr_slave_1: entered promiscuous mode [ 85.702311][ T5088] Bluetooth: hci1: command tx timeout [ 85.702334][ T5782] Bluetooth: hci0: command tx timeout [ 85.711495][ T5088] Bluetooth: hci2: command tx timeout [ 85.719212][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.726896][ T5774] Cannot create hsr debugfs directory [ 85.797969][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.805909][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.833168][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.871324][ T5088] Bluetooth: hci3: command tx timeout [ 85.877995][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.885283][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.911378][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.044216][ T5789] hsr_slave_0: entered promiscuous mode [ 86.050563][ T5789] hsr_slave_1: entered promiscuous mode [ 86.057064][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.064972][ T5789] Cannot create hsr debugfs directory [ 86.150941][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.163454][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.203100][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.251521][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.377996][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.413181][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.440016][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.480535][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.539623][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.556056][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.578237][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.589982][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.668788][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.685564][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.707408][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.719926][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.751998][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.798952][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.853952][ T743] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.861447][ T743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.897312][ T743] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.904741][ T743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.942459][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.022495][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.047303][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.057595][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.097980][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.105442][ T4285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.118702][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.126053][ T4285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.139529][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.147164][ T4285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.170837][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.178102][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.279288][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.389164][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.488211][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.551694][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.614697][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.622041][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.665720][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.673240][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.782404][ T5088] Bluetooth: hci0: command tx timeout [ 87.787983][ T5088] Bluetooth: hci2: command tx timeout [ 87.796053][ T5782] Bluetooth: hci1: command tx timeout [ 87.828977][ T5789] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.865625][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.938796][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.952513][ T5088] Bluetooth: hci3: command tx timeout [ 88.138962][ T5783] veth0_vlan: entered promiscuous mode [ 88.198003][ T5783] veth1_vlan: entered promiscuous mode [ 88.289410][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.318844][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.374808][ T5783] veth0_macvtap: entered promiscuous mode [ 88.438010][ T5783] veth1_macvtap: entered promiscuous mode [ 88.524678][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.555169][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.597584][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.608030][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.621127][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.630052][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.644079][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.659790][ T5779] veth0_vlan: entered promiscuous mode [ 88.695205][ T5774] veth0_vlan: entered promiscuous mode [ 88.718552][ T5774] veth1_vlan: entered promiscuous mode [ 88.729572][ T5779] veth1_vlan: entered promiscuous mode [ 88.818953][ T5789] veth0_vlan: entered promiscuous mode [ 88.880142][ T5774] veth0_macvtap: entered promiscuous mode [ 88.889455][ T5789] veth1_vlan: entered promiscuous mode [ 88.903708][ T5779] veth0_macvtap: entered promiscuous mode [ 88.904970][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.914023][ T5774] veth1_macvtap: entered promiscuous mode [ 88.931178][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.976547][ T5779] veth1_macvtap: entered promiscuous mode [ 89.015735][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.029131][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.042863][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.070951][ T5789] veth0_macvtap: entered promiscuous mode [ 89.078176][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.082690][ T5789] veth1_macvtap: entered promiscuous mode [ 89.093892][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.105717][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.120226][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.131924][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.153663][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.165445][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.175579][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.186904][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.198334][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.224585][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.239398][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.250760][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.261680][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.273680][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.284494][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.297290][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.307612][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.317509][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.326548][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.335635][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.364823][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.386689][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.396986][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.407750][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.422566][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.446545][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.480775][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.498359][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.509612][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.534714][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.552115][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.573110][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.643219][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.688152][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.734496][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.785579][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.875159][ T5088] Bluetooth: hci2: command tx timeout [ 89.896567][ T5088] Bluetooth: hci1: command tx timeout [ 89.907275][ T5782] Bluetooth: hci0: command tx timeout [ 90.061058][ T5782] Bluetooth: hci3: command tx timeout [ 90.068970][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.111736][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.143406][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.174723][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.544870][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.607715][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.746014][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.757366][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.842699][ T4728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.855890][ T4728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.949820][ T743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.972373][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.994998][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.995239][ T743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.056331][ T743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.096236][ T743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.943688][ T5782] Bluetooth: hci0: command tx timeout [ 91.949300][ T5782] Bluetooth: hci1: command tx timeout [ 91.955062][ T5088] Bluetooth: hci2: command tx timeout [ 92.101325][ T5782] Bluetooth: hci3: command tx timeout [ 92.384007][ T971] cfg80211: failed to load regulatory.db [ 92.779462][ T5870] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.971028][ T5854] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 93.175730][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.097930][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.109740][ T5854] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.122955][ T5854] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.132346][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.223403][ T5854] usb 4-1: config 0 descriptor?? [ 94.941008][ T5890] Bluetooth: MGMT ver 1.22 [ 95.590300][ T5885] sched: RT throttling activated [ 96.139048][ T5867] FAULT_INJECTION: forcing a failure. [ 96.139048][ T5867] name failslab, interval 1, probability 0, space 0, times 1 [ 96.189605][ T5893] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 96.200835][ T5867] CPU: 1 PID: 5867 Comm: syz.3.9 Not tainted syzkaller #0 [ 96.208118][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.218378][ T5867] Call Trace: [ 96.221676][ T5867] [ 96.224623][ T5867] dump_stack_lvl+0x18c/0x250 [ 96.229326][ T5867] ? show_regs_print_info+0x20/0x20 [ 96.235232][ T5867] ? load_image+0x420/0x420 [ 96.239760][ T5867] ? __might_sleep+0xe0/0xe0 [ 96.244549][ T5867] ? __lock_acquire+0x7d80/0x7d80 [ 96.249596][ T5867] ? crng_make_state+0x142/0x700 [ 96.254683][ T5867] should_fail_ex+0x394/0x4c0 [ 96.259388][ T5867] should_failslab+0x9/0x20 [ 96.263917][ T5867] slab_pre_alloc_hook+0x59/0x300 [ 96.268983][ T5867] ? alloc_super+0x5a/0x910 [ 96.273596][ T5867] __kmem_cache_alloc_node+0x53/0x250 [ 96.278993][ T5867] ? alloc_super+0x5a/0x910 [ 96.283606][ T5867] kmalloc_trace+0x2a/0xe0 [ 96.288048][ T5867] alloc_super+0x5a/0x910 [ 96.292406][ T5867] ? kill_litter_super+0xb0/0xb0 [ 96.297390][ T5867] ? kill_litter_super+0xb0/0xb0 [ 96.302387][ T5867] sget_fc+0x325/0x8d0 [ 96.306498][ T5867] ? kill_litter_super+0xb0/0xb0 [ 96.311465][ T5867] ? fuse_reconfigure+0xb0/0xb0 [ 96.316337][ T5867] get_tree_nodev+0x2a/0x140 [ 96.320963][ T5867] fuse_get_tree+0x2e2/0x4e0 [ 96.325698][ T5867] vfs_get_tree+0x8c/0x280 [ 96.330155][ T5867] do_new_mount+0x24a/0xa40 [ 96.334785][ T5867] __se_sys_mount+0x2e7/0x3d0 [ 96.339610][ T5867] ? __x64_sys_mount+0xc0/0xc0 [ 96.345050][ T5867] ? lockdep_hardirqs_on+0x98/0x150 [ 96.350360][ T5867] ? __x64_sys_mount+0x20/0xc0 [ 96.355178][ T5867] do_syscall_64+0x55/0xb0 [ 96.359616][ T5867] ? clear_bhb_loop+0x40/0x90 [ 96.364314][ T5867] ? clear_bhb_loop+0x40/0x90 [ 96.369009][ T5867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.375019][ T5867] RIP: 0033:0x7fa4a2d9e159 [ 96.379547][ T5867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.399430][ T5867] RSP: 002b:00007fa4a3c92028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 96.407951][ T5867] RAX: ffffffffffffffda RBX: 00007fa4a3025fa0 RCX: 00007fa4a2d9e159 [ 96.415948][ T5867] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 96.424119][ T5867] RBP: 00007fa4a2e35024 R08: 0000200000000580 R09: 0000000000000000 [ 96.432293][ T5867] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 96.440546][ T5867] R13: 00007fa4a3026038 R14: 00007fa4a3025fa0 R15: 00007fff0ec743b8 [ 96.448656][ T5867] [ 97.240379][ T5854] usbhid 4-1:0.0: can't add hid device: -71 [ 97.571687][ T5854] usbhid: probe of 4-1:0.0 failed with error -71 [ 97.583585][ T5854] usb 4-1: USB disconnect, device number 2 [ 97.818790][ T28] audit: type=1326 audit(1788492982.523:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.3.20" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4a2d9e159 code=0x0 [ 98.160602][ T5815] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.841615][ T5815] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.852942][ T5815] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 98.908381][ T5815] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 98.947583][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.192460][ T5919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'. [ 99.752352][ T5919] syz.0.22 (5919) used greatest stack depth: 17512 bytes left [ 99.951532][ T5922] syz.2.24[5922]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 100.034284][ T5922] loop1: detected capacity change from 0 to 204800 [ 100.075803][ T5854] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.284606][ T5854] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.295577][ T5927] loop0: detected capacity change from 0 to 204800 [ 100.323031][ T5854] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.379333][ T5854] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.405037][ T5854] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.448166][ T5854] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 100.468796][ T5815] qmi_wwan: probe of 2-1:1.0 failed with error -22 [ 100.502566][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.502615][ T5854] usb 4-1: Product: syz [ 100.502629][ T5854] usb 4-1: Manufacturer: syz [ 100.520541][ T5854] cdc_wdm 4-1:1.0: skipping garbage [ 100.520591][ T5854] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 100.544741][ T5815] usb 2-1: USB disconnect, device number 2 [ 100.922254][ T5917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.945450][ T5917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.699540][ T5944] binder: 5943:5944 ioctl 4018620d 0 returned -22 [ 101.727952][ T5815] usb 4-1: USB disconnect, device number 3 [ 102.100110][ T28] audit: type=1800 audit(1788492986.803:3): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.31" name="ipv4_port" dev="configfs" ino=7565 res=0 errno=0 [ 102.101572][ T5941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.28'. [ 102.437210][ T28] audit: type=1800 audit(1788492987.143:4): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.34" name="zoned" dev="configfs" ino=8263 res=0 errno=0 [ 102.602364][ T5957] loop1: detected capacity change from 0 to 204800 [ 103.900797][ T5961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.33'. [ 104.176932][ T5957] md: personality for level is not loaded! [ 104.331387][ T5965] loop0: detected capacity change from 0 to 204800 [ 104.369104][ T28] audit: type=1800 audit(1788492989.073:5): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.37" name="memory_backed" dev="configfs" ino=7593 res=0 errno=0 [ 104.469303][ T28] audit: type=1800 audit(1788492989.073:6): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.37" name="zoned" dev="configfs" ino=7594 res=0 errno=0 [ 104.500214][ T5965] md: personality for level is not loaded! [ 104.522187][ T28] audit: type=1800 audit(1788492989.153:7): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.37" name="power" dev="configfs" ino=7604 res=0 errno=0 [ 104.856982][ T5971] binder: 5970:5971 ioctl c0306201 0 returned -14 [ 105.788388][ T971] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.069261][ T28] audit: type=1800 audit(1788492990.773:8): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.45" name="zoned" dev="configfs" ino=8307 res=0 errno=0 [ 106.158145][ T971] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.169016][ T971] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.181502][ T971] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.191651][ T971] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.792917][ T971] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.807723][ T971] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.848939][ T971] usb 2-1: Product: syz [ 107.947629][ T971] usb 2-1: Manufacturer: syz [ 108.021858][ T971] cdc_wdm 2-1:1.0: skipping garbage [ 108.063965][ T971] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 108.113703][ T5995] loop0: detected capacity change from 0 to 204800 [ 108.149030][ T28] audit: type=1800 audit(1788492992.843:9): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.47" name="memory_backed" dev="configfs" ino=7641 res=0 errno=0 [ 108.172890][ T28] audit: type=1800 audit(1788492992.853:10): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.47" name="zoned" dev="configfs" ino=7642 res=0 errno=0 [ 108.207582][ T5995] md: personality for level is not loaded! [ 108.236794][ T28] audit: type=1800 audit(1788492992.933:11): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.47" name="power" dev="configfs" ino=7648 res=0 errno=0 [ 108.263111][ T971] usb 2-1: USB disconnect, device number 3 [ 108.285597][ T5996] md: could not open device unknown-block(7,1). [ 108.350544][ T5996] md: personality for level is not loaded! [ 108.428404][ T6000] binder: 5999:6000 ioctl c0306201 0 returned -14 [ 110.468572][ T28] audit: type=1800 audit(1788492995.173:12): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.56" name="zoned" dev="configfs" ino=8349 res=0 errno=0 [ 110.523022][ T28] audit: type=1800 audit(1788492995.203:13): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.56" name="zone_nr_conv" dev="configfs" ino=8350 res=0 errno=0 [ 110.827013][ T6025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.55'. [ 111.732271][ T6030] program syz.0.58 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.770540][ T6032] loop0: detected capacity change from 0 to 204800 [ 111.805345][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.53'. [ 111.838115][ T6032] md: personality for level is not loaded! [ 111.921183][ T5815] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.073396][ T6035] binder: 6034:6035 ioctl c0306201 0 returned -14 [ 112.125739][ T5815] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.141992][ T5815] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.153473][ T5815] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.180730][ T5815] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.217153][ T5815] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.221068][ T6037] md: could not open device unknown-block(7,1). [ 112.233419][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.243633][ T5815] usb 3-1: Product: syz [ 112.247944][ T5815] usb 3-1: Manufacturer: syz [ 112.264832][ T5815] cdc_wdm 3-1:1.0: skipping garbage [ 112.270318][ T5815] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 112.287014][ T6037] md: personality for level is not loaded! [ 112.580495][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.682244][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.708645][ T5815] usb 3-1: USB disconnect, device number 2 [ 113.998355][ T28] audit: type=1800 audit(1788492998.703:14): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.67" name="zoned" dev="configfs" ino=8369 res=0 errno=0 [ 114.028505][ T6058] loop0: detected capacity change from 0 to 204800 [ 114.104381][ T28] audit: type=1800 audit(1788492998.723:15): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.67" name="zone_nr_conv" dev="configfs" ino=8370 res=0 errno=0 [ 115.301054][ T6062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.66'. [ 115.772972][ T6058] md: could not open device unknown-block(7,1). [ 115.868783][ T6067] program syz.0.70 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.902000][ T6058] md: personality for level is not loaded! [ 115.964654][ T6070] md: could not open device unknown-block(7,1). [ 116.033719][ T6070] md: personality for level is not loaded! [ 116.095718][ T28] audit: type=1800 audit(1788493000.803:16): pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.72" name="ipv4_port" dev="configfs" ino=8382 res=0 errno=0 [ 117.543791][ T6078] dlm: no local IP address has been set [ 117.566893][ T6078] dlm: cannot start dlm midcomms -107 [ 119.633308][ T6102] loop0: detected capacity change from 0 to 204800 [ 119.865937][ T6102] md: could not open device unknown-block(7,1). [ 119.965541][ T6108] netlink: 20 bytes leftover after parsing attributes in process `syz.3.79'. [ 120.558276][ T28] audit: type=1800 audit(1788493005.263:17): pid=6111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.82" name="ipv4_port" dev="configfs" ino=7833 res=0 errno=0 [ 120.737310][ T6102] md: personality for level is not loaded! [ 120.831321][ T6118] program syz.2.85 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.064202][ T6113] md: could not open device unknown-block(7,1). [ 122.642194][ T6133] dlm: no local IP address has been set [ 122.667462][ T6133] dlm: cannot start dlm midcomms -107 [ 122.924456][ T28] audit: type=1800 audit(1788493007.633:18): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.89" name="zone_nr_conv" dev="configfs" ino=8470 res=0 errno=0 [ 124.630427][ T6151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.92'. [ 125.337894][ T6151] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 125.349413][ T6151] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 125.359455][ T6151] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 125.543257][ T28] audit: type=1800 audit(1788493010.223:19): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.93" name="ipv4_port" dev="configfs" ino=7890 res=0 errno=0 [ 125.634011][ T6156] loop0: detected capacity change from 0 to 204800 [ 125.680957][ T6156] md: could not open device unknown-block(7,1). [ 125.787873][ T6156] md: personality for level is not loaded! [ 125.865689][ T6162] program syz.1.96 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.076344][ T6167] md: could not open device unknown-block(7,1). [ 126.091164][ T6167] md: personality for level is not loaded! [ 128.026115][ T28] audit: type=1800 audit(1788493012.723:20): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.106" name="ipv4_port" dev="configfs" ino=7938 res=0 errno=0 [ 128.351295][ T28] audit: type=1800 audit(1788493012.773:21): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.105" name="zone_nr_conv" dev="configfs" ino=7939 res=0 errno=0 [ 129.009127][ T6190] program syz.1.108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.786422][ T6205] loop0: detected capacity change from 0 to 204800 [ 131.813236][ T6205] md: could not open device unknown-block(7,1). [ 131.905151][ T6205] md: personality for level is not loaded! [ 132.140849][ T5815] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 132.233282][ T28] audit: type=1800 audit(1788493016.943:22): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.117" name="zone_nr_conv" dev="configfs" ino=7990 res=0 errno=0 [ 133.105798][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.245897][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.306848][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.319698][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.339320][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.383490][ T6221] program syz.0.118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.416622][ T5815] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.451719][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.481941][ T5815] usb 4-1: config 0 descriptor?? [ 133.559276][ T6221] syz.0.118 uses obsolete (PF_INET,SOCK_PACKET) [ 133.562322][ T6226] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 133.577619][ T6226] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 133.586111][ T6226] CPU: 1 PID: 6226 Comm: syz.1.120 Not tainted syzkaller #0 [ 133.593496][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.603625][ T6226] RIP: 0010:percpu_ref_kill_and_confirm+0xf1/0x130 [ 133.610154][ T6226] Code: 01 4c 8d 63 08 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 ee ef ac fd 4d 8b 24 24 49 83 c4 08 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 d0 ef ac fd 49 8b 14 24 48 c7 c7 [ 133.630172][ T6226] RSP: 0018:ffffc9000babf9c8 EFLAGS: 00010002 [ 133.636284][ T6226] RAX: 0000000000000001 RBX: ffff888026664040 RCX: 0000000000080000 [ 133.644324][ T6226] RDX: ffffc9000cf92000 RSI: 0000000000001493 RDI: 0000000000001494 [ 133.652340][ T6226] RBP: 1ffff11004ccc808 R08: 0000000000000003 R09: 0000000000000004 [ 133.660437][ T6226] R10: dffffc0000000000 R11: fffff52001757f14 R12: 0000000000000008 [ 133.668527][ T6226] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000a06 [ 133.676541][ T6226] FS: 00007f01a512d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 133.685509][ T6226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.692100][ T6226] CR2: 000000110c42812b CR3: 0000000023af5000 CR4: 00000000003526e0 [ 133.700180][ T6226] Call Trace: [ 133.703472][ T6226] [ 133.706505][ T6226] mddev_suspend+0x1b0/0x5b0 [ 133.711293][ T6226] ? mddev_create_serial_pool+0x470/0x470 [ 133.717135][ T6226] ? backlog_store+0x133/0x4f0 [ 133.722088][ T6226] ? mutex_lock_nested+0x20/0x20 [ 133.727052][ T6226] ? _parse_integer_limit+0x19c/0x1e0 [ 133.732523][ T6226] mddev_create_serial_pool+0x282/0x470 [ 133.738098][ T6226] backlog_store+0x382/0x4f0 [ 133.742797][ T6226] ? md_attr_store+0x16f/0x380 [ 133.747576][ T6226] ? backlog_show+0x50/0x50 [ 133.752096][ T6226] ? do_raw_spin_unlock+0x121/0x230 [ 133.757329][ T6226] md_attr_store+0x196/0x380 [ 133.761951][ T6226] ? sysfs_kf_read+0x360/0x360 [ 133.766897][ T6226] kernfs_fop_write_iter+0x3a4/0x520 [ 133.772205][ T6226] vfs_write+0x474/0x9a0 [ 133.776484][ T6226] ? file_end_write+0x250/0x250 [ 133.781724][ T6226] ? __fget_files+0x3fc/0x460 [ 133.786522][ T6226] ? __fdget_pos+0x2a3/0x330 [ 133.791252][ T6226] ? ksys_write+0x74/0x260 [ 133.795694][ T6226] ksys_write+0x151/0x260 [ 133.800043][ T6226] ? __ia32_sys_read+0x90/0x90 [ 133.805002][ T6226] ? lockdep_hardirqs_on+0x98/0x150 [ 133.810317][ T6226] do_syscall_64+0x55/0xb0 [ 133.814838][ T6226] ? clear_bhb_loop+0x40/0x90 [ 133.819530][ T6226] ? clear_bhb_loop+0x40/0x90 [ 133.824396][ T6226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.830328][ T6226] RIP: 0033:0x7f01a419e159 [ 133.834762][ T6226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.854481][ T6226] RSP: 002b:00007f01a512d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.863266][ T6226] RAX: ffffffffffffffda RBX: 00007f01a4425fa0 RCX: 00007f01a419e159 [ 133.871249][ T6226] RDX: 0000000000000005 RSI: 0000200000000e00 RDI: 0000000000000009 [ 133.879328][ T6226] RBP: 00007f01a4235024 R08: 0000000000000000 R09: 0000000000000000 [ 133.887335][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.895436][ T6226] R13: 00007f01a4426038 R14: 00007f01a4425fa0 R15: 00007ffe161ab678 [ 133.903543][ T6226] [ 133.906797][ T6226] Modules linked in: [ 133.910718][ T6226] ---[ end trace 0000000000000000 ]--- [ 133.916196][ T6226] RIP: 0010:percpu_ref_kill_and_confirm+0xf1/0x130 [ 133.922896][ T6226] Code: 01 4c 8d 63 08 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 ee ef ac fd 4d 8b 24 24 49 83 c4 08 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 d0 ef ac fd 49 8b 14 24 48 c7 c7 [ 133.942881][ T6226] RSP: 0018:ffffc9000babf9c8 EFLAGS: 00010002 [ 133.948973][ T6226] RAX: 0000000000000001 RBX: ffff888026664040 RCX: 0000000000080000 [ 133.956964][ T6226] RDX: ffffc9000cf92000 RSI: 0000000000001493 RDI: 0000000000001494 [ 133.965058][ T6226] RBP: 1ffff11004ccc808 R08: 0000000000000003 R09: 0000000000000004 [ 133.973234][ T6226] R10: dffffc0000000000 R11: fffff52001757f14 R12: 0000000000000008 [ 133.981598][ T6226] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000a06 [ 133.989931][ T6226] FS: 00007f01a512d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 133.999061][ T6226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.005658][ T6226] CR2: 000000110c42812b CR3: 0000000023af5000 CR4: 00000000003526e0 [ 134.013734][ T6226] Kernel panic - not syncing: Fatal exception [ 134.020211][ T6226] Kernel Offset: disabled [ 134.024724][ T6226] Rebooting in 86400 seconds..