last executing test programs: 3m32.772582071s ago: executing program 0 (id=38): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977fb5ac0d93db53353a9f1776ef87199e5752827c1d"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 3m30.633351791s ago: executing program 0 (id=41): close(0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x1d6) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x0, 0xa000, 0xfffffffc, r2, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) syz_fuse_handle_req(r0, &(0x7f0000004380)="afe1b0a996775868391181b871ea09afb8639d886d7e6a93208bfaf110777da0ad6d2e8fffe28bf0ab778be95c1af09b7899d8488b6c93dcb70dae27dfd4f440a78a8d75d483a0e9bbb38e8c0293a89e82eda33d11bc7c3c7e974db0ce4596d96e5ee43d78a2919e6b3f930b523c479082ebd81214d52843acb4288a9c79a6fe84e8109eac84adf1af416d5765c5dd698df54864b59a09357ba6d3594e30a66f6cf9c96e472a954e5c766a6e5d2b18374eca2c040736bd7cac53bb7055b888514f2284f177f02b493e6a6ca8a3add98a5d5992a76bfb7d034287c6a773a50a007adb2a872ced0874ba8fa23996b6b676252912c92aa464cfcd13a50edc39ecc5e07c44d88bf22cc045583a2cd4276ebbb8e9170213feafb4750aff54f15481c2d5eb62539ef5f2b9e1de797073eb2696f599e4a931ad8793ef6ef4de0f3e02841ba538f3d1cb658be3c7b9504c2e3632c7765d40bfe0454e1c6f3fad17124e658bb338ecd28c1edd547030a730cab24a9fc424b8b15ceef0fc275d2eb602076f132f10d2a023703606514286d19de42bdcbbcc2dd63e5bc6221c36cae9879a84c9abd671f509dcd7f4f249843639f46d7f19201f886813e939ddf89ec5fae30cc3fc87903ab05ffa2ac75bba0ae725605cb9198ef8c77d63a83b35309df1b27fa5805120f8739ebbdbb0d9d514e5aa7481198ff181ca559d1ae8ea28c9cf5e9ed1468469d269f315eb5213bec1f55eb247d8b567964a351b8103477654ed443a1de61b31aba918614f9bab10b36bfd31a0bd8fd245005d348c1d9e26836ea09d8adb4f097aa3696fa27fa6aa47a4363116c6fa63449d5c1c8fad49564f4d84e6147720f3b717497f5f9d27b09821c107c9283ca66b3d1f3f684e62411eae6a5fb8ce54239b3c4c9a678711b949a79e7f08eb779c3f34002844b578225ac5dd8cb56931a1b077281679b1a8385e91261d716ce8e72d72455a6f42a218cacd1363cc645798c119077e29cde84adb0d8b66f79b0e9b6663f40caf5351f834b0e6aa496c57c613a6b82da516939bf67a5b4074eee506ba02a81961ae092805bb54176e4a87d61c1619b11385564853e207ad68fd4a8c9f90e59f69a6c269774a46aed5cbc92c57c1937486eeabea242e78a194b08e872c28ac5ae815421fb6bd6c770cca44bbbf4e7517c32e5634dd3ae4c6c79da57aaedf723683488d82e3346a17ad5a9f8556715ea274c9da1d7ebd083cd02b7a33f166ccbe8a5ef218051ae397f22b7cda9b5ef6001ee2bfd52c454560f89c7885d022cf3c085b6520f84c2cba2541df4968a5bfe3effd05c55091f7a50212a9f081f5c54485b95fbf4badf6b1d0aa59bb734c4f9acba0e9d3e27c18b228f01c08f4af0904a687fb9f4de27d9e96086eafbfd799fb5df1d9229519dbc266169a2d056f6cdb49dce17c2290ff24ec4a5fdb1096d99d0caa334061fa28d4308e69103f2fff538f0b231c4237eecba9ef8e853dff8b1066c461cd509caba267ee5ac2f4d5253cafbb1e49dbd6ad1e22e6d087facbe4870bc1eb57046032ed909cbcc58614eb9000ae561f043bd8b50c4c0778e3a1f45d8996074f7741e6b2ef62c235d08b8cdfa5bc3f2f0ac2f82622eb5c25dc0ac71b59356fa584024b835482fdc1dbf992821dbc094344cde2d03c48a6f2283a9272bcae06adc52e7d42811fa424e6c4c14e9138535413d4770b1d23066108cb7525e1ad6af8e10db4bfd90c51c5f8928bb8e92ee108814ddbd1817c13b845414a718bb7414547eb62868a0ea5ade3c0ffddb0d61434e872a5912c97b74aa52d85e68df1153f0d49ad7091d5328d4e55f149dfafc3fe0d745df53888272b2a47ad29207756ff2acd9ee666b78bf5e9320b3a63b8bc967d3746f50fbfb46e68ad02ca52425715c43716210d08ec8b89a3e5453614e9f1125877a0371773d9db9fc6ff1557f6aa010ce940b357d8a609c9415e044cff7e9abeefbb7eb98f19f763ff12cd51a6635d83648dd6b172894e8965b0319c542563f079574e993ebc0f511055b073f1e67d2894a96de2c355d29b7115ba4a31e9e130452b9d21a5fb95446736186c55d2121c1047379757f7c7d489ff83d3c56f12c4a4a7eb55e7ed23ef93aa9aa8030e4dc7add46ef902e4da157e52cdf1d8399273a687c76a570d53a3a3eedab69c64c6e018a8a3d68739406a710b9fecb160ed04fa7e1bea90a6d99ef0bde9c982a57a252786e555901bdb344b53b01c17a4e2a76c34efd4674acc822e692c3ddb51af58f9ac0ba9edb9ddd5884ca734bf7aa6c35b026c6de4fc226341f1f069554beb3b2da82fa128b208dbf3560b397339e2f0d7933042dd16a594d9a7226619501a466057a9d97b83ef1ca0afceec9a823a0aa28773a7386d55321170721cf3588695de0af30b5fc4d1fae110040693f62255dea0f5745aa7f6c6f9faacc199a92bc7e2358d5f56758621240cf2579b60940a42333393bd34028ff0e334f3794a725d48f929e816c3e6b571b067a4eb48dc2f97e91d15ec2b1e6c883a01d39f9e6810b627a76c8e3ed214f135272e0aaf393eeb35cba9379004b58f53b809e4926da2c4d38b6caf89396456d9ebcbd104f256f7a803f90dd65d25a5d70bf2615e90442df64294824b0acb60de3f4072c4c455e92644c3f492e663bb163ebc74ccc35434ecd79ffa325214ac20a1b36762bf4930663056cc52fab60513ce61389e0680d73e4bbb38c648b1cf3d60dffc9687613b70165e47e430f2e7f3f125025fb9502caf906033c2113a7848855b0e06b1fd35152167e43b6498faf667fbb095020c9692f8ce1b63703724fe47ab4034671b8361ef1d794ed98634f25d99bbf8e4f99819e5a61d0bbd673f217f8819dc3becb5969268a52614f60b2124588a697170d905cce06abec79082438533bd80ceae3b53484c6723823a4b0aa27c001dcb498623cc22a1ff658eb513277e78f7571249af287259d378cc0ef182efd91ecba02b65a205dde7ecdb7873c9e32bf4d236cbf5609aa2d5eeaeba3b94dca539a4dcfd8dfcccfc35fc586f5a02ef1c61d1bdd24fd76845d3d043d296e92359e288e7d015bbc172a786450ab52fe5061a4673b4c612b2060448761bfb7b3b31acef810d4619031725b9b93e8e27b09fa8221553981c745d5625522c68b1daa7f941dea564b64a19ed1657ef052fdb349285d99fc6d5d5e4c1f84adf476460fc5a7ac8722c3a6aa0686a793502dff81bf50286810bc11d14733ecfd7b13e73e09f7119f6a9a1f22d7721f6071028b74eadbe4f10cf7926886085c08a2e051fdde848b1e4c9b39fc2ee45a7463d623ddd95280e7db9b78a56a48f5571e907a0c9eb549f0b73973f364088e97d75956e38b54e6289497a8e31fc547516794668829404885e7361eed875eae0e4e16a9f8bde779011c937345c01eb8cab2863e7828a0395905dbc87f17f38261cbd61bb274b397f90d30fc898cfcd2c1c15a89144965e7369f75b95fd11d0a9555a3cedfff602d9a7510a0e95fe8875cf7d4b9c7d63fc57012b3817a6af6ad273cd1c193c67437244d5ba839c14a31b6bbd67687a3b135d17ea810d9b2d73c7873f2761f784bcb638898a824fd15b526d2728e157d5462f35116bf4e025adb6175c0d4c79919ca72e1810862d92101bed6f0bd94c51b954e2089e958af898a9bed2da45534404cb12d3e62ced9b747999a4d61d36c18fc0276260d495140bce76f171207d04d709359edc3c664b36940ba1ce20d7a9252867562ae44cf88cd6b89bad04e8504240dca7c0c8125aaf35ea865e6abc5728fdb3deecd933c18fa0a0d3a6dcded99c4d44b9d0165a6a4b47189fad3bd9f3eb65e532d9ecb084ab459fe5f9d38616cd2a68c991fe6bebc08be4ea36e126a4d20067a41d06439256f8cfd26c68fd4e20cfa7d9937eea76f23c685df175fcc54e138800972d2b2259add19ba26d82c0aec7232a9c8712e3a38ec3027b580de705c9fd528ca2a7098b9ae195d8c88979ea99c85285c84a0578da1fc936b446bb70420be5622a7343eaff201c4b3f6cd22b581bb7dd8256834278f12332d6a0ce0d76f74d3e87955815aa7c789cf212394710cce9807447d4e3e280b56452bfee1dcdb3d79009b387413ea434581dcd96f936f7e17cb245d1b91705bdbb8aed300126098f4782b65702f6734cc43b00e465a5b76a68437dc2170189a7736fc83379a8c1dcf90656e353c8bdad0de5f0275675ae5fc00be905f9c2bee64e7b688a9f2b9ecab8697355cca46c4e8ac2c09e34e4c99ed87a082e1f022033baeff201e4b12c636085fd239d0ffaca1819c13645dee797c92ffcf84f76c3792de704e13418be7fc09a99e28df9e800f07b4e10c1ad1b076022a1307e5a172c31562b86d1ebc500692b78b5d7eba73be3731b892db518c669fe3e165f55bc8885c57b7f2f43429cc478afc94bcab818842a5a5c8545ff82cf8d58f0ab83d2a45af3c758687d2137dd609af58bfa3f8e01dee45c954ce5c35dbd9bc4a32eaeaf0da46f87ebdb3e957707aade7b78e9df030ecef1fc14faefbc351e2bd09b9a4a69fafd8fa58d08183ffe5788918ef2fbc7f0749f3dae479d195f518d775f698ccde58f154fbdcbd8440d0376dcb25d6bea36ccaaca7bd35e92cac4238bb62bcbb94619e89ce7c2b6780c3b97cfbfd5c71099c98f4f296afd7abbef496ab5afa805f20cad9b2a11c0847ab3a73dee5cbd4db3fdd10c9de14f7d2b85596d72e31fe2171f21102852390ea3b5f7294d2d84942ea54b5578c5587e54a26bf2404999b1df386a9db5b5aff3942197c431f15ff507862947526ddf24d65c53580fcd34719212602682978c257796e38a8c18ab6ce46db1f230cfa600286612cfaac47543479a549ea13247edd00185c3c44bf9ef7a779adf06931c18cd8aed566d9c1cb6a3dddb67f4613876518d34d54c14363c7c34449f7176898c87d23b6b1243574d87df916cf086d8a6cde792cc1c93c2a99b7c884b479f488a89dfbd8ee16f19f6d867ced1d30b1ae04821c61afe03ef06b92b7e8e53522bf9f6ce529858674937d8cc423710056403d09f43122862bd8ef51962224a89d2cc6e80ad69fcd5aa39b53d9cfcaa679ab9f18051fedac16de1a2b65405d9c72ab316d2d4fa4981e873873089fc82dc25de7c773f7bec0a62b272167e49854d7fdef08c700e88ab1e46f9e9ba4106d22d79bdb9ea4c400fbdafc0a2d30e4289f7aec6a8143ea1b94901976a3e9db73138d279de3dfd77e6a7e95fd1c80ab7689b452ce761db7f4cd0bf6af9a6dd22a35795c897d5b70f85204711006221677731c6cf4239b7a8f16f2a04d59cc2c1a954ea267c5e36aaa1443532e475de52b3e39642918ac17acba067182267638add164f35685a3578c17327c4c963e2cbc3c74fff73f261b4496cea0449d10b976c9129507f60e18b542e3aab7709f07fad1fc3555e16a27cb430a21d0b6920ee22cedfcfe45c5fc768bfe105600818d008f9657d140b0829a57ab4fb8b523bc8904036efaea194d01091813c167fb2677f56e1cec6e2f42a941054be1fb1a85a46d1f99298ca5f6a45f9d144caf55823554f58ff17275c3060f2d5cfe1b3fc607c979a64bed1626c254e78a6e3c0b76210b08c74e5d07e4711978722c96f7dc0665c3067c4ab93ccdf42d7469441f94a01c72ef11cefe48443f7b3597127e4b8f39ca85cb3ccc5d0545d5398b5c8cd9168aa7c50394c08fa20e48ccf8683171099a1b498c7544e0c74ba1adeb3026ef6a6f6e4da22bfc8d295771705a0315844043918dd33493f76eb85e91f49e9428220f818fc8bea7324e2a1b61a3de4fa775754ecaae82a33353e5ecb1ea557b1c037ad57bf8d723ecfe05e9848d332dc23eae94287432e0a0b19ac34e07a1aa68ef38936054246f9fb1a476a4d7e4e90b8cb83278011d80a57e722066e2142fc322c123f793f02c634157eaf0fe1c7a0bfbe0f40d95116021d9e42958b23e78dc38b30ae6d39b81ae45499d5a830df429388ef2c04b460bd89a9c30a9da013f4cb3f454dbcd8d2333fea253bc100d647cb787b85e8dc6930f442f2b7562d806a6eb0a2625171f26e7e1955f4bed65280feca3a235b8e37c4efa109435d97913a7facdfce9bf9a3d49adc332514849024124e3bbf7cb0dace4df2dc881867c299cf75ca095a17ebf230e5168abfbb0baaecd60a1f955ac195146917d49b8f1b36ae5bed977d34a9a4fed6a677ee8609e18fd687e3c01ac3ea0042082361acb6fe9fea3ae8b679a5e3547804b17eb186b1121f1ddab56523d24e2a54f3e2576fce3ed78fd88597b354bf878a4011d842311f000ce224d69fca2ff4f6831017f998a8b9238c55e5593fa898523d21dd5fb01d03c1205c0ecd892b75d5d5ec28e347c2ea69bdf2e6a88b5199fd82294f486d3a9c39d7e587373d7838bc6906b659fa9d1ad17a9d10389991e617c2990929e0e6064b072022d45e93cd92fcd77e8eb490ae56af092b0c7ed587282b0dcd1551a0dcdc4692478d6fb3ddb479b9557ddb26d97d2ddb6b945f1145a636fa3f4c7b8c6b1e27bc27dcbb468d39ae3f87899c1296535a58e163bcb5f8f5e75a1ea62cd0500f865fd283b618b9f0842af0f5008885bb61057fe2957f77590ec49304fa02d903181cffb91ccfda6223fa67f408d10b371965a0d948b4f0e16f30c652e62592c339c1afcae8921e53a9e568890268cc58cc6f96156eab8d8c3f5742f31d8392fbaacf84ef645954cd33b83b83eda3a63ac763a308c9a373e023543bb89b134511eacecaf10073749f6ca36c4b7a9a4cdcb317e84e6b52f7e7cb4ace5618b8ac5baacbb3125637d37ca3e68096ec6b16b4b840d93db8b32da23b2db7c1213c7fdb5a636ae895279991c5cb21c1e090e629991f657bcc5ad918757a8f9c4953a15f6609449c89a104fcfd637aa9bb2b2fce6f98ae955bd59c82f785910787664dbaaee88fa6525dbf3c537fec5826d8af1eab7f02a61e924cdf0509ba15074fc4443711e04d30885c007176862cd370cde25e2f07f2ea01e56421df0511e0dedb2bcc732735edb1cbc47cfe4bfd00421329416e6a54c9bf39954230ef4a19d8efb018e6328115b0b4b1eeeb0e419307be7bb124756744dd5d054be43eec960dc180ef2d867556f3f866c27bc309f673a21e9781811fb087feb4b044e69d6a7ba72e008ab6b27d5f487bf7e34466ffd1dc38b08f24f3baee8a119d804530b4f02d3610c60e62682e89028f6310ff830ca63ccd410cf63a2e251bbb15148ffb7dcabd0e2156a2f40416431f2cd3893a63251cfd7642de2d70b9c696068c5b8fc17636ef926d0d292867985a7513469836bdfdc3daf50e7cda86ea4a20953df902b5f6b1f30d715afb46c6985a87953be1cdf120a3a63f5f752e92fab1c201b93f8ff49f850cc338783a93a3a968a12476313683aed7e4ebe5a6b31f9aa578cd5052998813f2216d83afbdc03225efd29e9351b597c8c7018d0ac27581f008436d0bd698b1de91361e3f81ffb3d846bea145dae68f06cf2946d5679689ceaa2f8937dcdf464c6ab2cfdba79a19cee80537d3739d979f245d0bec88d33ad661ea92cc8708357f894c0fbcbdc9d80433d45a2af499b3cfd706db0ead57cb1cac12c91d900a98320c69afce92bf27608f2948597dd4f76fc1f5ebece18dee83ec42e6becfe7b088981501ec5cac179d78c6a6752f76c8cf26c056cba2c611363583171118602ec38a36156c4cb66be176cedf2b4f15166ed9cb3314bc4128f7d0e9dd4133fb643f30e163722cf5755a7d2ce80dfe8d4d1b6798d4fa311835b0f0087231e01e13552a42aa22fa330bf3cc517d6ffe198bba10b3ba62b5c77a472d3e96e3ca6396e5f8505e8d7c38fbaec479104f6a069fa3c8921b82606005c5b92599cc124e0ec5f380f50a5166e286ceed43b3794b4a9b1529eb641dd88964e7c1f5e7eb59d018b5d512bcda73e17b6a69a80e7eab7d9cc367aa1507a208c49a4096db1a21202825cbfe41d0281bd51320b5e7b5128cb8e39468647fd6a5c5cb0ad1765a088ba9ed213e66e4c4d25583bd1e1f6f5f0ca44286a01389ddf2475169f3dd85f6852b375449595b06d610ba412954df596d24feb95c302761cbfaddf3989d3a706cb862dee17634e815b232340ef93eaa3d426da09a2a083281d0ea3fa31ffc91fa5a4590ff6d54a72b7b4926c56ff4bb1322d104c8956c1ac848edce067420f126fc150cfa80fb104f10830e0c88036e0ad5446e7ef0882dfbfc67030805eff01262dc40cdaf2509c9a6e92f57cf50c026f2b0d927a829ec0c5a541f3fdd3c8d3d6b0898d9a92450fe78368654469d8322981a42e0d4315b63e9bfd7757fa62f8a0ed3e1a62c15bb7b4e823c8570c1aa27ef516ca066d759f7c5049c5791c7fc5ef76ab26f0ffe99a58dca03dd4514f1a8af07f80dc63a1e9b343f158aa527a4df96f052425ddd61e2251cac94e87739c55c311363f6b026228323835fb95f788b798ead87eef04fc15a24264d167232df2eae4dcac304226b01f518f3dee1ef32d5586e8cf7d71fd0fa9791b4d296c560201b9c5ba13366de60fe6138ddd0227e9e58e670144cd8fc3e17cdfa568a365f00c84820b6c224071ffa61503f8368ad3ab6a8e0aae5fe887929501007923c0b7afab03bffc75abab9af5c6137ee641650345bfb21db35dfd8abd18e3df6c7474d1fc2fa8e709f982bb7cd691faa33691ae878d05c0d2d092763d027df8546d352a1ef64078c1a8034731c0897bfd06f1a704676f2ccbae0c5b34850d0dc1297732155178de788fd8c4fc0eac99fe50a5d8519b5e8391b9a069de7230951a441a3fd9b674affe5267d66b287af099761ea273054331fcbfb35a3d86a14cbec306f0df61207c595148d64f69ca71ffddbcc4fecb4af88d677eebf1337623eee93755cf88216d5c96722648b6e3ac81bf1987565f5b7a70a7698a228b518373d477c57b417987617d3da32b06a35c6f6efc2deaabf549fd7d63a54095b8ee9c1ab1ada51d2e9dd67cf73b8cc700d988d97500bfa1e8fa6f3d603e075cb55f20286e754fdf1683ca47ecda7b246ae2e1dc45c591943f69ebfb01b3ac3566d8db409ae886769598a0829712b6bd516cf98a9af936e9f891056c16a64caec5958e5c220f497efa0ded81435e4f2258c5d197da00cfbff3cdde6013413a307884dc17d25a065eee7449d0559dd1366ca38dbb21584a3c77c057a33a9b9eb2349593187b356c8962c8d169100d2fb6a321029e49a217d0510a06a23df90423bb199c7ade3c55db2eecd230bb7044ab95f071d8484c79e565f78b7ef84cff873e5748d7823abd85ca6ddca8e9a1b01e21590c2b6d52adfa308e83872f80080c7dd67a5249d10a86ec3770bd9cb5347e73c7d1c9603896749a909ae6266046d9f06d3f8aeb3ec679b52f58554d56419539b7871a0dfcec5123d4139e2959aa108d0e58e1d8da57ad0051aa6dfaa7d8a03dad63beec05669124f58128153c13c726853da13a460ce6e66e4cb1070c6c502dbbd6e36f67befb9cbd5beb1c00673301c54a5679d63068a6fdb7511b8027cc3b1bcb6dc659d71c1fb144ec5682a05f2ec100c2e5405e8ab549686afa7c6c283e319c94cf7facdbb63e66edc444922cb4744a79d05f0390aed999df7729f7b0cda96a32432fc7b46ec0a6829a89e28530a0349c0821f2fe956449e35553657a77d7dd578a053ff0c7c71d9ff31728615ad01c132c4cb3ce7689dfdc5d6ee9d28e6da4372738ac557f69aeffa98df8aaa252b1192f2fc0b7d1e7370d1c6f173a86822c4902318e21e435c6c1df6fd1a318ad8bfedf893e65d88551413154505d7cec6d450fc3764cf70ddf0e033b3d819ed9b8156c9112952f0b627863a1f31490bf5eb2b1e9e7f5d155abacff0e5911bf5dd43568af46d57f56f538b58724d225e391902c1b7a6fd282f8b914b7c58ea5166c66465cd07ca4c033ebff0d3ff1cc184b9bcc1c2a472bbaa57f01372b21bdcc9dce9408fe96e993cfba3c1376eaf2961c248a901ef75e8d39ad20a16a603599b13c8c497ea628a8a0fc207bb05f28ce6b65e4526e7abefd07848ee415aa001ae0489cf68ea2c9a9203dad12cddb826d7e55c5341d14c87d2c1dc55192a4ec1ad882638d13db42519a5a6fee298eab143b0955991526bf5d662f4a0bf65591cf59ae73cfc7488fc0deb0638f8df2fc14d8f9417d836ee46c0c70c14950ce23f74ea7261a5a527467bb6bc347a9b1597093285df315bd35b9f188d8ba7bf381c03a39e18863ad1539aae90340a382d93667e22244f06aa992e52e926fa7b1d07ed57a6a83c87ac17cf0e360ed68032c08d5486bbcedf56225e8592812c46676f9c985d1c8f310b5687bac8b6d9758ed94affd3653048b44458edbbaa34678a03cfc85fabb08b5f505de553d487da58c0107879663559e577d85077ec0caef10298140a632ed13b427580200eb1c53dbacafbfc839c234d13096f4823f4f824fcce75eb4c8d4cbee625ca347cd02505e565d2ba23b3172abe8e434e452735a3eefa0332b4887aa9b0940bb82bf866e2d6f26e3a3b3c08f0fad60d1c79be0e8d31827f535f54c09f8c43869efbb1bdf3bd82e75efc26fd9cc235754f9cbf24c140a89b2582ebae7946cc70df7ffe4f275ae194c7b7fba47d2ebfb7a58d4f3bc206535477b60aad8e00ad41672e2cd14ae4dc3e53dd0c0bf78a07b042eae7ef6dce42e31e98e421d00d49e5bfb2b376515d5bc8b7fb9bed46651157abae48f46a6c1da089c7d2883d2398e4462df756c6c41dd28a1652adb48edcef31cf2d712cbe8675dd476d00a5e9b698414bec286f76bb54d6cd07a08de59a659393c1cda10796b33c8b6d0bbd890eac307f92a32285be161fec3c02349280f7d44b23d47fa0f82e97520e16a2b4cd504a0a4a19c289a45949589b34697928ddfaf985986891db7b3da32668a383feb0df495677346516dfd39530a147724e20dcb826007fa146a920303ada23b667db743134a9d604f13df5b6d557a44fa9c1119ee4576b1df5c9d0c32b84a18b19c5f09d6d7efd1095e86c50edf8f44fc8ba55fd3b0f11bece4e9ff98334517341c4e4bd86fd877600c8c34ff3b87d6f26d7706671eb935500f9e13d356d41e014a18bb5e67588d1ea40c5d9cd7d216c76810a40a9155db31cc37ac69effc4849d13fd074f5f32b9130d31ab27c423046e48196e9254980c0f197165fe12f714a0621b6d0850a6eb0669186cd4214f1577c95765e71ca7f24e1dc2cf789c539278d3cc5b267b948f187295cdabf48e7b05443d57b83c1c5a9dafbc772ad776dffa49ecacbfc353328dd7ffdac7737bacf346d4d3427a7302da022b60e1ef876d3c829dacdd2be5e47300ccd4486498b1f9b5209b67d897d10823f27e317e07395b61ec0905c62e5d8b30050ccc1c7f7799363fafabfaaf808fe948c0108d8538d567b507ba2fcc93a62d4bc6f620f787e99060a3e2473d2f12254aaffe6dfe4adf05566fb5984674e9c7b1dce2b39b0098b92fdaf0a97bdc26", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0xa0, 0x0, 0x8, {{0x3, 0x0, 0x7f, 0x7, 0x2, 0x8, {0x0, 0xf, 0x5, 0xfffffffffffffff2, 0x8, 0x4, 0x2, 0x5, 0xfffffc00, 0x8000, 0xffe, r2, 0x0, 0x0, 0x2}}, {0x0, 0x64b82d24ba95f80}}}, 0x0, 0x0}) 3m27.399024272s ago: executing program 0 (id=45): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x1, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$BLKFLSBUF(r6, 0x1261, &(0x7f00000004c0)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000001c0)='#^\xe7P[.,[*^\x00', &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 3m23.44223203s ago: executing program 0 (id=60): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SETXATTR={0x2a, 0x40, 0x0, 0x0, 0x0, &(0x7f000000c640)='./file0\x00', 0xff86, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) 3m20.857780886s ago: executing program 0 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0) write(r0, &(0x7f00000006c0)='1\n', 0x2) 3m19.396091233s ago: executing program 0 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x80000) r4 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r6 = fanotify_init(0x1a, 0x800) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r6, 0x69, 0x40000038, r7, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x4044044) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r4, 0x0, 0x1) fchdir(r8) r9 = open(0x0, 0x0, 0x100) lseek(r9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, 0x0) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000) 3m4.260120598s ago: executing program 32 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x80000) r4 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r6 = fanotify_init(0x1a, 0x800) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r6, 0x69, 0x40000038, r7, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x4044044) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r4, 0x0, 0x1) fchdir(r8) r9 = open(0x0, 0x0, 0x100) lseek(r9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, 0x0) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000) 33.74968964s ago: executing program 2 (id=582): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 33.547051128s ago: executing program 2 (id=583): close(0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x1d6) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x0, 0xa000, 0xfffffffc, r2, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0xa0, 0x0, 0x8, {{0x3, 0x0, 0x7f, 0x7, 0x2, 0x8, {0x0, 0xf, 0x5, 0xfffffffffffffff2, 0x8, 0x4, 0x2, 0x5, 0xfffffc00, 0x8000, 0xffe, r2, 0x0, 0x0, 0x2}}, {0x0, 0x64b82d24ba95f80}}}, 0x0, 0x0}) close(0x3) 30.661501151s ago: executing program 2 (id=587): setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r2 = getpgid(0x0) ptrace(0x10, 0x0) ptrace$peekuser(0x3, 0x0, 0x110) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000003c0)={&(0x7f0000000380)}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c845) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) 29.426389557s ago: executing program 2 (id=595): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, 0x0, 0x40400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 29.154842916s ago: executing program 2 (id=597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="010427bd70000a0000002e00000008000300", @ANYRES32=r2, @ANYBLOB="05003400000000002400fe"], 0x64}}, 0x0) 28.616926365s ago: executing program 2 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x3, 0x0) fcntl$notify(r1, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000040)=0x2007) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}}) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) mq_notify(0xffffffffffffffff, 0x0) r6 = semget$private(0x0, 0x2, 0x10) semctl$SETVAL(r6, 0x1, 0x8, 0x0) semctl$SETALL(r6, 0x0, 0x9, &(0x7f0000000200)) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) semctl$GETPID(0x0, 0x3, 0xb, &(0x7f00000013c0)=""/4096) ptrace$setregset(0x4205, r7, 0x202, &(0x7f00000001c0)={0x0}) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800, 0x2000000000000000]}}) 27.885808248s ago: executing program 33 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x3, 0x0) fcntl$notify(r1, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000040)=0x2007) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}}) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) mq_notify(0xffffffffffffffff, 0x0) r6 = semget$private(0x0, 0x2, 0x10) semctl$SETVAL(r6, 0x1, 0x8, 0x0) semctl$SETALL(r6, 0x0, 0x9, &(0x7f0000000200)) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) semctl$GETPID(0x0, 0x3, 0xb, &(0x7f00000013c0)=""/4096) ptrace$setregset(0x4205, r7, 0x202, &(0x7f00000001c0)={0x0}) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800, 0x2000000000000000]}}) 22.395428498s ago: executing program 3 (id=618): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f00000000c0)={0x0, 0x1, 0x6, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42004}, 0x80000) 17.424404269s ago: executing program 3 (id=624): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="d2c113c29ca1f0329c09333c4e57bb838cfea716579dab7d1cbdce058b04b86cd2573f5a46ec9ad1bb3c276903ebcad8758f3bdb0ea994c5ea01d7771c5b21040018c812e3b3d2c92d14193a28633e7a06c3239d8e97c69f11a821f535082d74ee0c1925c46bfba566d8c9647889a9dde67089b24871471415a695730085f81a0b7c8dc2eae85ccd015b85d7d1fecd2528f2a8369ee0315327ba0d506a583c716ea4fa23575566c8cf1a2a844691717179b82f10998b7d540188e57e864820665ab70db2d483c4fdcb115ea6bbd4a888f9d383f6fea063635b69686590f540c638a77fe8e8cb266cf72667e61871faf1d1810c749c30c5a7b61609d81114f7aa0355967a7513f659d021338ddb687b0f7372386170902b612c56f58dc73a1ccecb389ccd39f926ee91220a5c053dc277919ed4e32b63da14781cb46227a71388f2aeb37e8971d4a554824bb05f7e6861a916c94204feae48f115680a40b7b2da6ec3af295979016cb78ee53d347a2a8de81c26d0468db8b59df449513e109f26ccdff64403180deba17211813b69ef3f0c42f498a6f3d05a4e7f47f99a8b9ff6bb375fcd1cf444a794a7c2a274f2786c8c220b1f80f2d0c1f311960b37357e31198a44f1e25aaa320f6daad7a42c0367de29a2d0d5567098dfc4ac2b0393a7accfaed79afeec5c9d526503e8fbbd3d1f6365c698775999e5109bada3ec51a9d4b884631086bcfa4fe99135a7c482d9e3d2cbd0a58a42f8cd737a812c21185d909bab234d412bd450da975be70eac2a8db479f7030ff5f41817cd798d59a2db9d8d829765459531044ba3bfa6fc89d046c75e707133e5211fd05d20f63d4f493b23bcd966e3f4314a512451b761fb3b3ed815da07c604f71d2a86937142ede6fce427766dbde15f74f2c45d4c3c08e815b507bb05ee97ddf7ed79ea2ddd5c6ef057d455d84c79bdfd6e68ba6f5cd806a6b9dfd5ed65e394554fb59df7aba2676779a547cf8a7c97379abc760e94e01264a2a23c8c63296ec0d9a4e0aa5c9c470fe46beb8db8322372f3649b7d2ad0b8d09e77e4757a2f40835860b56d41382fabc35d891deedd2168ff3b20f3345ec3238ce795fd9b0311fbd7cf10bbefe4e9349bdf7ea5294f3fc3ded1203c01c9a057641ea122eea48e30b942fdebdc4e7263353361dfcf3562eb3f7eb491fe5394ac1e9af734950b3de71b557bd1baf334d39c5dd9e6842a3ef24004eafc5eb85fbdad5c1e49f60f565da146b119f27ec9077774e21300edf2883f34e299ae0465779ab80ba2d097f5d791a72785f35090dbc369864476c33d3279382a49ac45be1706211659d6fac1ae12d772fa270eb3746a69082e67664f4be335f2d172d52f5083a0768e5d4332352be40eb41e3406de4498e740a470141032ea251c144cdb5352d8049281898c72f13a5d3509c9c77308fe45016abfd7d42b1a022a60b9a5bbcece7c0a10bf9f157995465729b38fdcadd0d977574636206982a6b4e8f24bc75e3eb054fb9ae81e878afd24cfa9756f053bb89f0e4a42e195bd2af8a91a6dd5c9fbccd938681a7387ed22a0e3a8284d3182aa7ef1905a267850fc405494d7079f6d0364287cf7b16dc2310b15bc49fb68d1a96075cb5f30f4fc2ec0c51d0b7e806e78f108f4060a55b8c23b3c89a2f2fa321d5138019c417a504d230ec496583933daba2998e20d8f9a2e6798f681e1d4df88fa4e084513d3648ed4f6624d8b894470cf325e837ad177a634bf58d21378fa0d3370bcb724fa88314bbd0749bbe6ff9dd5d7826701891c180278833c3327a8b1500c3e86fbdaacaaba0e0f708052ddecaae4fe142689c812aeccc7211f61159e0787a8f639d1f0a4db373c17317fea5d3ca1c6060fc44a2d02502f0230334acb69861f0cdb82220827f5887a14e7eab133ce4ecd9a414b2a6b31d8c631325319bbb65ad01aaea7e157fea6cbb434c67f4582028c32f5890ceb243dc972e61e122cb36840d5838dff32d4b613ae1909f3970404fb1973f1e80b0e388141b2e24d47276be045880a4ac18fd136c08cf266b35c75e9b796f6210817439833b613195fe4688b22127a978d20f8b32e3df3297e09a565e659857d8052bf69c5006c5870bd25e6c3aeb411553924d06ccb849cdeca659448cb220d259b4ee20d256d44149814b5e13ab365c448369a43553e01874acded99d24da7d1c9c283dae95b0b5311344af85c7c9a8483fb18a5bfd7a4fb4bbade211edfa4c30f3d1b5bc9672a02adb5d638faea66424e2c82540937dc4cf21392fe16e05811f1bcfb83132deb1cf2a522f9b543758b25d6949400af5d2a7a566f4ab0f5fe0b0a8e8379850e3ed78cb823f5b59b3df4de700427b197720ec69b86c76080b2cfdc4a2619e9d2a901e247e591d79dea91257c0d4a3c7ebb86af42de6833aaaa2d69b71e684236705744b79c62079236759def4a37a0b97742dcdc1af8e54385ad496af31cffe7539e4a69d65ae28845439e5e3eea34785e6065c32f3c7b71ef4edfdb16ca9ee9d5d4e066a60f9919461ce932a61c4100276dad7a22447c681bfebac9186f23dd38509090e0c0fd60219d33174d0d1f5a2b3eb194ae1c7003b159dd560e909fcd0b14b803ded8a94f2a61ca59f9015a673c018515b7605512ecdec58b60aafcba88e88b790e6dabc09a6721613d4e60ffd8d01b07ccacc1c7f2415347f5f5aab1b7e5d27090403a55d0364721bf0363e34bdf9d92c8e83fe39e8d23e0a038717c00f82dd27709ea69a7a857575f0e039b067750b0e226dd01091b6aecae409d563a72e0805c8c101401a9d4356c532ec27cf25ad0ea92eb137e5bb367623155b3e62baa1cb29d86e4765a635d180d26f37f58a24683494cca93547b1f9ff0cc81c085cc4509b746c5327f1f169ca3bd059d324ac91e3c05bb225e5f81655d2f5b5f0cd6389d35be14f63cf76ef856634c5c42f5f6763a457be1745d9ddc4e7a77cbe86398585dd18159eb7dadc2da143cabd5794c4caafab774c5b0ad661f6f9e7bd5163af6f214bbd6351560cfb5e9fe42d3b67912e0bb52926429a43c27aa6c52e904660029285c4b763d6becb5cd4e9a029fb092ae20df18e073627d896a8de5f89474cbc2d2a525edbaa635a9704ec9f30bc0d18dea437a986553da723befb7f91d73a9976a528d2ff2ff80aef0fb80b4c84fca0d810e1f0c3857aef2616c9908aa7dc6a02e28085ccbb88e13c8c8c1acc631e4121e39b453a5897602dfcff5629f88d75ae7375cb9d08969dc6e870870c7aaad3c62f1f39c363d7edfda2d5ce1e9e62b25cf3b31bf4da9b90616a79d3be8f031837844c13fa6ea8af83db6eaa6abcb5158c38abe7fd39b8710c7d8d830ac93d5d3cec1d038c7947861c4ea118b3c205be5c441d35ef856c9a81f970c2850397e735a2fb991fe2dd0f293224ed263963a1041dcefc67b77b25b82d6ab047eb282702ddab528cc4bfb8c82d86352057e893bfd4b41e3396d64d7f1a78f6a0d4cd420d4bf84eb791a513163f837556c1a2e7c4e84ab9bfaa3a23a7114bfd301ea1f6b5e5c94e076e8f42a4da7e05224589005625245672ef85a11d6ac4b379b72660583ccb62b3d6cf00090c9c0ef7f3e3bce7bc6e10baa0498799de647451281afb45cf053c7a57eca0732a8f9e9f02437be51649bc7d1a391aca1561fb6b2d47817394e97e426afda0fb9fdd248579b8eb768ef9e249dbef8b0ebbd0e8dec2f149e2356df3a9f728b5392875ea476b54a1c990040ef4e63373566611c5b555b5d60a0e69f32e05db3f9047ea3e261ee6e3d87516bb0fff783333eef6444c8d9d17f8b23514d6358c62cd34dbf0e9dd60f54f286c533d68f2610c82eaedd9e512884f37211f190a08cd3766c7ca6a5043ee9dbabf5994c48d03a2fa5ccedce7ffbe9cee1e9d54036ca4ca7c4fdc339011448c7aad3d14b639dc179e7a97f03b606b0e47a32b8c9ab82c59fbba5e0ab663538aba9ba71d27216614f59bdccb050cc2512f65f465e8476d36855df64b8bb181907e91f45c6262dba02b35dc238bb32b9cc7070d31f7f95f2193b5fca347874a64041ab629cb5c3a3d77ba999793badacf01c4244ae13c0d77fe01fae16c489fcd58010afc3084ffadb9bf7264f23f1ad0e8d9d762dcc431163c343054181812c9cd1a6ecdc9964caa0a2ba8cd29271e6824891129b89efc1ea2996100f1932940a49a324e8eb688d05ac7d6ba273aade15c2be8cc74ef1eafad9b9ebfdfa36edc5c6d109485a48ac6a8395ccdf23779919953cf3c61c3a635c7e782f84098f3cc6bea7644cf3924c2352c97c76bc7141227dd29f1d47ef209adc3aaefd8cf204fb265e6b262e83736c2f26b22d80870af83095338c23a47a5a86af2ae7decd1aaabd925ae900bfe8e82728e14fd82677769bc9962dbb507a61e206821ac9c0940b12d79ecb7a916b9f6573fa3d9a7ef773f66de8cf8db6536d986a29d7b50a2973d228ec48468c5ebec6253130c578e5ec2848b62e8e1082a3d584e84b86e24211a9546e1abf79e568827af5d9ba98ba7b33b5cd9cb7a81dc873ea11276049d9d6206d2ed0933ada7ef9b6823f24b756ebea834297743ffb146350f320ec9044df55b20df0ff84584c16350f465b5ad7d364f9b166fb534c2a0e65f6bb4d61feeb84463ceb4a4f7853c0c2410955881a60170b0bbc131f6699e2616752851063c7e8b0a82e4357b84e48bad8002610e5770c17ee0cb301f9dfe8d5cbb66c6962b5edcae17b5c5dd42026737ea9e2c79bfb9392d290b44d66ade6eb62e26321ee214a6d15facb7cca610b6209392179a50f3dcba1494d3f302745461f6172d329a12d68405be5ee05ad2a641a7aa3da1d1fd3198671bf1af5b39e2bdeed49df80cf0c6e0edc5c4812350097bda47d3fafb3827d73eeb0b29320c74dae0104000000000000835f5a7f98710c644dd50d3af618651b41916bbabb9ea7cc46c8208dd7fb99474be66e1a970c899f17129a9ed17ccce0d93411e71b8f1c7790c787f7a97a50d54acbc6f4eee49a38882c34e3477c97e1c6da0b39a1e9d0d25a3cea9364033bf4f625a02412174d03dafd642526867578f71f2e52920833b8d23713d5ac48165f49545f6c7c75b5b4ef2e0682f8f2e191fdb6c0ba529856f887391f8d5aa3f7dfc5230170b97662611e53a4436bf4e98a5ceaeb16a79bb95f960b2675cb6da9f1cfcdc1ab604ef7749fe87ccb5a3660f463ff5f488b5c544cf847be84dab22d038730a7021cdc7f7ab714c1561c98a39cc92cd6aaf53c82b28665114ac18b2149ee7f1b52f894c28a49eb45d4cf6a0e65df39b3c717039ae41958fe810c1e05ad62ceef2980e0cfd891bfae0db61fb1c8d65b6812ef1bf5d426f955ab4826eae69f531979699685f5312882032a5f47ed8cf2e98e67d9e6c299d2060a04b4aa677500b48a33586b10f71293d57de846d2683621b588630a6ef06a41437bd99366787b787a68c71779132d0ee73aa5f97d5b9ca18a7ae26b7002512df1073e2eccdb4d2f137a15d9604e10547fa465aeb4f2e5899b531adeb5e72fb76c2c1c9d18ceb4a23a5f6174ba86a7119d82e35cb5a5d1c6a093351aaee0094b32b92417dc50c1d3806fffdafd2ec0e3ba176d84bdb7d59755e9083e61ded802e2a089ae9d6746f738b55845bcd4ff0a21888c2c6b972db043973fb323fd1c15e70137aa6a4bce3f60f27c1d1488f3751e5425a5776c7cc3a3c8acbfbd2171407e1a242e8e241e6e9e1287d8995265a8092ec59ad99652e63a41b744f34392017f29c1b1ca4ce7728200743d4497a70cfd2369d0ecf9e0ba6f28da25b2d918a06ad1173091b8d750b8c2120321818a0912bf47b96c9a8962930a843ea8419b24b8618b7b43482291906e151bf39d3634756d9e1ff5a6e787d1fc4be7349c38a3b882e059a5da930a9cb2a01eb8b24b54def200009538fc063542921947f1997dbee59842a50a043d431649ea0adde68c43259ab51592107b2618c5f761364d4d3d5d0f4d4ae1b94650cb4b695db5831c6dd789140b87525d9ed46fb8dce8fa75d68f317dfc3858d810928fb3530b7ae8701d622b0e69ab16cbbd46c8165c467850d081292da8147fe07f472776d1e2c75c17bdc0f8bafbc964da953a5efe64af69944f0f8858b2a4dece04428ede8967d0e93827910400af8a859b59579d9628191b291732bae90a3b50f8b2b7728725568a83e006ed21e940d4b7e7291ad6365138aa2d59c0b303cc298f7a70d0c39e4f17a878083631b1f96a65d7b4c5a4403929180694f55b71ba29685bdf472f0e21a1c8b3c2dbfc4892ffbc0f0f23f38ed0b785080c11b0766ffc5a0c2c750080b764df159e42ac8eb82681baec5b0ad7948153679162c223f63bf22545718accf2a30bc4402f6b54996baa00508c6def488975a2e2bf2a8dbcff49293e83f998f8baebe722cdfef96c46ac3d945d56ada194353f7cd03d2b86cb9844f7d63f008fbe553fe0023f6968e8bea9054ed3c567e5c55b283fb2337fbd20510e5e098537f5c1baa6b509f63b1e812840aaf470690894a2725f4460a106a3b0e14b12b47c3fc1a083ae7e8cd2e710b5d428b2063f7bb91105255cc0fcc8ac51398ec3df6416d283c4aba6ed44846e82be02d242c710c973c5f0a9b3b16da8a96f5cd2a164a3fa040075b0cb99944f1b34f7e79ae039d15a6c992cb40aa423de90992c064e1771f2a396734480f43b024dc799b8e242df235dc0d33cfdce41755722907f4533a1480d78e99320412326c27e15434fd3fdb19ed33a07063a8a62b39ce14be2ea1e0adadec65fcf4f19901bd801b87e90fc91f1270b420fb530b71b7aea9ad23c4a4ad28d4b63444bc2fa7b44247d5e9f0ca0209a489035b4521b5e886a419df1f9d0e27b9c5007ee75fd3909d4e0156973bdf2ff8d1a88cad1d534ba93648ecb34a30b1e760f1ee8cfb90c27c36385fd68ee48982e5f0c190e8786bf2eb5dd386d3f1600efc19a92020b509d3e2c74b4265bdc765085bc49c6fc61476aa22cff375a78c59f33394cc6ff460584ebbd8dba2cbfe97feb1c9147068dbc1d3e25631ad8478d826d88c28b2cf967d07d3ff845cbb25699406d106eabd31066e9cf8abbe7598f71cca663a6f63bfb63caa95d3a363e69e9a3bc889d026df28c37e41786bf8c9a1ccc06c3499986a72bb10367f32b1b8a55365c2a5b46061b58b81c5da69ad39db6c468906f1c1225527f1b26a3dbad94b1419f3671086b061117206a634cd08beee1fcdfb4a3a7cc78b3cb1293dc900d0859505018b38033a1cc9a0051960200000000000000328b6834f9c30bb1734949fcdab62cc6904b285322da3d49f188019648cac314d65a7c57f4e25864f17e346e7ebbe411695a237622356ecc10e66c8ba33e7106a756b8d3abc1a1aababc26413adcfda74a59b9002a7e2e3edb3e7551d32c461c2e40c25cb9de751ffda44d7f353513c5bbbc473594127c09775844dec5dc922caea5532dfa98fe80d80243233a4f0c15520d9dc76da3623aabef3582380ca4d2f9558d6c71b672f259b94f26710aa1d933b3ad79c8755a96c18fcfd62a972ca80ea0d33afbfc80045ba7dab492aa06c73ea3a598b2bc6eb1549627d183c25c3486814960eb1e1b02200a92f51b8642683f88185a9ee91c6dbb576dd8a869e1338b81ec205d979242bd963308af90ec23e01d253a70440edd3ebfac8e489db0a70bb5c887f22e7a5de33918374a9ae5229d419b1948eeb23bdf8dce3c5df3b81d1a3e3b38e095f261cb9e00f5567413a5c13abb469fdf64adc830cc442a099609cf0ebd3ffe936d77d6099d816be2b4cdd31e4fdf5af5904120ec65e81138416462f9e9bbe9ba6d5980c7de01288bd9f4741848802c32f3774678367c70014e531ad7f95b5527d022232ada51148012328f1693b2d08b8eba80dc26d8e9fc369b410331ed720e410ded5bd03ce69942ffb97489a2c5b6e4da93cc73811738a141c3a16d4ff6edf2ad1b3d3ae45a21c5ca2613b92e7871dea89d3cd699b86520c80f6a391cc2911538f8108dc90203b0e74ee43a087e033265e0745a9c991facff49339c40601420bb72ef014bc4b9a51cad1dcde9f1567b4ae9d11b1416ff3d8dee15f4672bdbca4348e7e71f8d75a73851bc0ad539312b7d52c498602a5eda4630296fb40aaa90d8f6122da7fb56d02755f861df193bdc5effd8a0e54c2ef78a284f7543c2b25a81bf545be3a3f549aabe86700bf058877e3fec53813f9992814a2cebf341cedcad346dba70596da899add4d723d98366ab60997cae7e5b9d417252734d9145ab8c5ece5b5b0efdc2f2578838c500ee17b866323a951979c6f1a50da2833bc437bcddd6efaed0244df44e6069daf359289d9c50c073f0fef4be1fb3802be5ea643761ed6347a35a3f537cbde402911c28d7c7c7e6b8612facbe87221f3505ff078d0dbb28ec469fe6eba2efcb4efdcfc5745299c0850e21ee2c9ef77db8070d589c547cc7379b58677d16077093514849869ab5bf8f896fa933ba3edc676dcb73e91386cc48f01782ba635564e0f91988cf98a3a17544abfedcdc1d80540e9499bf98180feb80325194cbc369be3275ed390f8e91b8d75b1364e9fabe50a1e3b9531c3fe1aaf6523e54bb05738bd3a67ca5de01b2e479ef7678a86b13d6b747fb3cb5fe1be8913228705fc232ce422186cb79c3b66c944f6124eb414322806d47978044336221f26d3a09ed8dceb52e3c7e3413535faf1f7868cb47bbbf02b36650b673a4e51387c64d44daf58057adaa5610d22a15329804cd51a42f663311c4e5ece9d99b5a813c4025e8e0a98c0f3ec13cf07de0b18d7e1ba7d3eb143f5825f62ae5b5f6d92b167f9dbb2177e84f23322566814296277fc2933956f818f5475b6aa031545e6e2265679d16cbedff96c4f419d5fabe99ee652feac8acf9a90771ab8ade8291b42d25ebbdc03faac02b9599fdb83621f6ae1e2e7f946520f3cff881cd600c17b4a00c08d0996f7d2bb97d35647f72b80ba8ad3b4a16cb71094b2d1193a5fa1456e4671788bc51c0d506f4809ca34620d4a75a62ddfa20ab5c4d347a08eb8784d4c572fcb473b766f5e1ce9d92db70ebee83accd58b8253da36b9542686edce545261f309144a3d64900f796620003b36ee3d44a06cc4d088f73aa45288b90476d2e1e461795d473d59500aa23a6b7724a2f0d6473dc2f0af6ea311a648e193072016e199b920bc8c0830ae18f1c17e33d73badadc0f9d34cd52b54f4d3d480a7ddfe0f140f8de1a382a4c5a722d3e0f875b69054d88b8bab94e9394ba8d28937f1ffd871d1666a377620e7f032633fe58ebc87e533bd6461b537cdde38352ece085378dd7b24fa3fd5a3dc3f5b77492e4fc91238a8bfcc4e20bb396bd3317155981ec593926f2e9f15e5ac1aa533e122441649a681d88142a93386a6ed6b2d5b18d7fb57541e31a69acee17345b08c6667ebbc53a082fbcd980b4751937ba729dd2fd9b43d06091517922dd3ea524db002db7525902a465081843191d2d7ac76adb7724ac2bb88e4cb2f3188dbf0cd47acf5011b4519ec100a44b2ee6a1dacac5aade2cdcdca777c6b5edf596b05691d247f671491f68bf2e04007e8674309ea98ab794d05c664ade246288796270e10f4a308420a62bf0df1d1636330e88bf4cc78051e5f715c8f97b8a83119b3fb5129ac6d0733256bec96d8cf435fa005e14d88884a0ca24266a4e78e25e2519796ba31971e4d0cb44ea58c5ddf54a15e3b449642e395679fc5ba600cc6bb7f2b004bfb0d621e51f9cf16309e4a02ce4f23f4a2d225aa8c84840bf2d3522a5f7a983cfbbfe4adb62d6ea622ebb784072bc6673878c5eaa865a7657b619f48cf0c51a4b0d47b20f426adc7f8ab68238b97abf68443f0eaac3796bfd99e0bc644e4f6fc43e551eccd615db802dfb031444e09aedcb04846bb894a2cf42dd0a578dc94d727736e502194ae25bf8556373969cb7f27788b6edf5b2bf25a79c7f89289f827ed4be611d65f6bd89698b130aaadd0f2d914819f41a0185dfc73adcea80d2ee592bf32d15010cb32a95ef112bccb2b780b461637ffa1641d34e1b114cdd3dd1ceb365933efef1781f9ec620a73097594c945969c2ea036e36b2380b33599c3e1d4eb2b7f210324aee3bba5a944b71cf0246ceed878897fe00e30d0bd32b3dde08c8805e30efe39cbc9d11b97491d82fbb5d93b1997e5f3128252472ecd256b9f79611175b6f686629ee744d0ba2494607a4476ea5f934c936403509c14bddbc2403ad5d97bfed0da36707b66f39ffdcee7ab39602e740c1ca9761570cdbab5f56b2060db428921457445b15c4c92b9c4b0ebb0746936bc3053836fa884e97c96e44d18a5a52feca033ec4caf950927bf9a281ea1aacb2a8b1a1f74b20de25ad5f3e459ab8b61ba5d00eaedcb6b5467dcd8608cfd48cc8c1a01f2c9f68bc9ef9adf2fd81cb3e28277c52d58f42ea87c8896383c2fa88dd15dba7172990893fe28ad1b50095b2ca20856de64693f3a663be6e34a9ccbb09add5724c5599495d0c95d2b900444651048bf418070b324016678d694b82565931159ffc37d3eefd7b482c41637cdd69b8f7051b6e88cf87a01d26d0689057ca0f66f65a2c3fbca608f7dec52d8e41ea98d21be162eeb38b27e9465d5525e0ffac3bd989adae19bdcf98edc48ff9d9d2a2f0850fa2cac8421ee6e211b1930f9fe9cb7138e8058ae476aa93c0ca49b170eb4ebbbb6fb4020d000eae537b4dd4bdfc63e3fb281848c057b900c14dc12f8833d5ada50c8f0178137964c3b1524c59eae7ae19066a8003b9f4036b0be91f6f24baf6839f360473907135a8eb777dfe4dcf18d15fb8e16d069c48c5a128f046667f66bb22d36e986c73d2ebaa1a9638a9e8c049d0c766e2008fb19c4aabd96e3443c48377214b01dec0f73538fa5a882553a60664e549030fc9cc21a74a73cf79cfdbbfa3676a474910a295044d804b9f6a30104fc8250da4efcfddc379c3a1b84a2050ee78b18ba84ec5cb4db62540ea7be026b48d2b9294f06aa48e44087dbc494d92fe3e8648792c2b9f5d0d580afac814f8fc74208239b5f8fa6c20fc75c9d73fbe448a4fd1eb1af10165c37e7aa72c83c47dbb92bf3203bc0bea3b3ae261636b9a6b621725aed16de5c33502f152ca3704b1e83a60cfc5807177d9e561b12f43c3ded0951c4ec7af0ab29f55e3745df0f10bedcdcee2d443c0023d7547018c94e2cbb04a5c67a81d33df4dda99f80777b1db00f91bf8abb96ca360353c08b8979d00860ee3af86988171d6739a0f546f64ec34c045afd1be790176228204782836484f6d118d734c8e1b302788aa20e704502da74cd11bc5a22bb717a1d10d5176a4426e88cc132479aa7e8370772b9776ea38d5bd217b08c50f94072acbdf93e732e6ce41f92159b626e59e39925b458465ec3b0191a56d8e1c3a76110200e38380ccfcc1a05f85608bc3ea0bdbbf326bfe003158c8c9e01e90a7b1164cc20de5b23146baa978611100", 0x2000, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x80000000}) 16.763845591s ago: executing program 4 (id=629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000"], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x275a, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4], &(0x7f00000001c0)=[0x4], 0x0, 0x1, 0x1}}, 0x40) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000001, 0x0, 0x3}, @multicast2, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 16.345724147s ago: executing program 5 (id=630): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977fb5ac0d93db53353a9f1776ef87199e5752827c1d"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 15.073524549s ago: executing program 1 (id=631): mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='m', 0x1) 14.701896728s ago: executing program 1 (id=632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4403, 0x0) 14.58190275s ago: executing program 5 (id=633): close(0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x1d6) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x0, 0xa000, 0xfffffffc, r2, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0xa0, 0x0, 0x8, {{0x3, 0x0, 0x7f, 0x7, 0x2, 0x8, {0x0, 0xf, 0x5, 0xfffffffffffffff2, 0x8, 0x4, 0x2, 0x5, 0xfffffc00, 0x8000, 0xffe, r2, 0x0, 0x0, 0x2}}, {0x0, 0x64b82d24ba95f80}}}, 0x0, 0x0}) close(0x3) 14.343825762s ago: executing program 5 (id=634): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x117) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_configfs/usb_gadget/g1\x00', 0x1ff) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0x19, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="180200000020000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2f, 0x2000, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672ba2600fb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) linkat(r1, &(0x7f0000000400)='./my_configfs\x00', r1, &(0x7f0000000380)='./my_configfs/usb_gadget/g1\x00', 0x600) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) symlinkat(&(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') symlinkat(&(0x7f0000000280)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb1\x00') write(0xffffffffffffffff, &(0x7f0000000340)='dummy_udc.0', 0xb) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r4, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x7ff, 0x1, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000, 0x7f, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x800, 0x32, 0x0, 0x0, 0x80000, 0x85, 0xfffffffd, 0x5, 0x8, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x925, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0xd6c, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x10, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0xc, 0x3, 0x0, 0x4b2b, 0x8000, 0x0, 0x105, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) 14.254110384s ago: executing program 3 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x76798000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000001440)=""/40, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 13.456236535s ago: executing program 5 (id=636): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x402c1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.102671718s ago: executing program 1 (id=638): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000240), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r0, 0x0, 0x0) 13.022014668s ago: executing program 4 (id=639): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, 0x0, 0x40400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 12.89156962s ago: executing program 3 (id=640): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000"], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) mkdir(&(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x8) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="d20000000504000087000000757ec1471be8f8f93fd5e142eaf9cfd60c3eeb2be0de6a65860fd51df7bd4ad05d2e47a4311d59ff71b7393433e9fa5814913b02c46958961dab41eaf5ff41f17906ce0883498e542d5689f2f724a3c9346fe51101a197d212796eef655ff935f473d81a011e607a31ec47095549b6e20190e5b9daaecaeb7f7ecfdb47dd6e711ed28f125f5748bd051bb4c2d4ad915259138e07f79a13c528babbdccb83e2c92aa54006e802a791042ff39a41bf"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1\x00', 0x1) 12.697202948s ago: executing program 6 (id=641): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x640000, 0x0) faccessat2(r2, 0x0, 0x44, 0x100) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfffff5d4}}, './file0\x00'}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000003c0)=0x4) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fsopen(0x0, 0x0) execveat(r1, &(0x7f0000000200)='.\x00', &(0x7f0000000600)={[&(0x7f0000000500)=']-+\x00', &(0x7f0000000540)='/dev/dri/card#\x00', &(0x7f0000000580)='./binderfs/binder0\x00', &(0x7f00000005c0)='}\x00']}, &(0x7f00000006c0)={[&(0x7f0000000640)='\x00', &(0x7f0000000680)='rpc_pipefs\x00']}, 0x400) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r7, r8+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1000]}, 0x8}) r9 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) 11.178675463s ago: executing program 1 (id=642): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x1f, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000200)='1-1\x00', 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f00000002c0)={r3, 0x8, 0x5, 0x1}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffde}, {0xfff2, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4891) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x17, 0x0, 0xffff, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x7, 0x78, 0xfb, 0xff, 0x30000, [0x2, 0x4]}}) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.origin\x00', &(0x7f0000000280)='/dev/net/tun\x00', 0xd, 0x3) 9.837721182s ago: executing program 4 (id=643): mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='m', 0x1) 9.148749977s ago: executing program 6 (id=644): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendmsg$key(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x8090) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) recvfrom(r1, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) 8.964500525s ago: executing program 5 (id=645): r0 = syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000"], 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) mkdir(&(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="d20000000504000087000000757ec1471be8f8f93fd5e142eaf9cfd60c3eeb2be0de6a65860fd51df7bd4ad05d2e47a4311d59ff71b7393433e9fa5814913b02c46958961dab41eaf5ff41f17906ce0883498e542d5689f2f724a3c9346fe51101a197d212796eef655ff935f473d81a011e607a31ec47095549b6e20190e5b9daaecaeb7f7ecfdb47dd6e711ed28f125f5748bd051bb4c2d4ad915259138e07f79a13c528babbdccb83e2c92aa54006e802a791042ff39a41bfde9ba4956a744d2a33b938a9a4c73cb3cca453dd7340fdbe51ac63fbc7636be0027ae0f6"]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="07000000010001", 0x7) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f014, 0x1}) 8.825649713s ago: executing program 4 (id=646): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000100)='transport=fc,traddr=nn-0x333:pn-0x4444444444444444+host_traddr=nn-0x1111111111111111:pn-0x222222222222222', 0x69) 8.322192509s ago: executing program 3 (id=647): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x7ff, 0x1, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000, 0x7f, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x800, 0x32, 0x0, 0x0, 0x80000, 0x85, 0xfffffffd, 0x5, 0x8, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x925, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0xd6c, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x10, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0xc, 0x3, 0x0, 0x4b2b, 0x8000, 0x0, 0x105, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 6.151655101s ago: executing program 1 (id=648): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94dba5966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd", 0xc8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='qnx4\x00', 0x200000, 0x0) 5.351909549s ago: executing program 4 (id=649): r0 = socket(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x144, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0xd, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x1, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x48, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x1000}, 0x4) r6 = mq_open(&(0x7f0000000040)='kfree\x00', 0x40, 0x5, &(0x7f0000000080)={0xffffffffffffff88, 0x3}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000c40)={&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000000c0)="b16c40f1", 0x4}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c006983001e020000df1b6decacf005bc01b709070008000000"], 0xc}, 0xc850) socket$pptp(0x18, 0x1, 0x2) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x28, r11, 0x801, 0x70bd29, 0x25dfdbfc, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}]}, 0x28}}, 0x80880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 5.293151961s ago: executing program 6 (id=650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4403, 0x0) 5.273169318s ago: executing program 3 (id=651): r0 = syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000"], 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) mkdir(&(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="07000000010001", 0x7) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f014, 0x1}) 3.951397078s ago: executing program 6 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/bmAttributes\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='0x', 0x2) 3.02995926s ago: executing program 5 (id=653): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000240), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r0, 0x0, 0x0) 317.746372ms ago: executing program 6 (id=654): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, 0x0, 0x40400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 141.515403ms ago: executing program 1 (id=655): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000100)="040000000000000004000000000072000000000000f20ae1bbac6ac0b9a1") 72.772914ms ago: executing program 4 (id=656): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_flash={0x3d, 0x5, './file0\x00'}}) 0s ago: executing program 6 (id=657): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='m', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. [ 84.751105][ T5608] cgroup: Unknown subsys name 'net' [ 84.891366][ T5608] cgroup: Unknown subsys name 'cpuset' [ 84.900890][ T5608] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.649305][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.351660][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.361110][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.368951][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.378293][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.391767][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.402204][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.411676][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.419685][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.427936][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.437618][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.448352][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.454493][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.471084][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.475770][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.487392][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.489509][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.497120][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.509500][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.515041][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.517668][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.532224][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.542580][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.553445][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.560811][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.569524][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.663962][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.687236][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.695782][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.712347][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.724908][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.266795][ T188] cfg80211: failed to load regulatory.db [ 91.497076][ T5636] Bluetooth: hci1: command tx timeout [ 91.587975][ T5636] Bluetooth: hci0: command tx timeout [ 91.656800][ T5638] Bluetooth: hci3: command tx timeout [ 91.656841][ T5633] Bluetooth: hci2: command tx timeout [ 91.663118][ T5636] Bluetooth: hci4: command tx timeout [ 91.815565][ T5636] Bluetooth: hci5: command tx timeout [ 92.098420][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.105716][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.112947][ T5635] bridge_slave_0: entered allmulticast mode [ 92.121490][ T5635] bridge_slave_0: entered promiscuous mode [ 92.252580][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.260345][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.269205][ T5621] bridge_slave_0: entered allmulticast mode [ 92.277287][ T5621] bridge_slave_0: entered promiscuous mode [ 92.285093][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.292357][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.299764][ T5635] bridge_slave_1: entered allmulticast mode [ 92.307663][ T5635] bridge_slave_1: entered promiscuous mode [ 92.341517][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.348751][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.356084][ T5621] bridge_slave_1: entered allmulticast mode [ 92.363687][ T5621] bridge_slave_1: entered promiscuous mode [ 92.470958][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.478287][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.485868][ T5629] bridge_slave_0: entered allmulticast mode [ 92.493410][ T5629] bridge_slave_0: entered promiscuous mode [ 92.557994][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.582707][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.590055][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.598208][ T5629] bridge_slave_1: entered allmulticast mode [ 92.605978][ T5629] bridge_slave_1: entered promiscuous mode [ 92.631352][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.643912][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.701348][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.805966][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.858149][ T5635] team0: Port device team_slave_0 added [ 92.879034][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.888833][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.896127][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.903340][ T5622] bridge_slave_0: entered allmulticast mode [ 92.911243][ T5622] bridge_slave_0: entered promiscuous mode [ 92.935950][ T5621] team0: Port device team_slave_0 added [ 92.944019][ T5635] team0: Port device team_slave_1 added [ 92.965827][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.973413][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.981266][ T5645] bridge_slave_0: entered allmulticast mode [ 92.988850][ T5645] bridge_slave_0: entered promiscuous mode [ 92.998672][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.005824][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.013260][ T5645] bridge_slave_1: entered allmulticast mode [ 93.021402][ T5645] bridge_slave_1: entered promiscuous mode [ 93.060605][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.068061][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.075333][ T5622] bridge_slave_1: entered allmulticast mode [ 93.083488][ T5622] bridge_slave_1: entered promiscuous mode [ 93.093695][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.101209][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.108691][ T5631] bridge_slave_0: entered allmulticast mode [ 93.116724][ T5631] bridge_slave_0: entered promiscuous mode [ 93.126797][ T5621] team0: Port device team_slave_1 added [ 93.175493][ T5629] team0: Port device team_slave_0 added [ 93.194134][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.201541][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.209208][ T5631] bridge_slave_1: entered allmulticast mode [ 93.217779][ T5631] bridge_slave_1: entered promiscuous mode [ 93.238522][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.245626][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.271746][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.287429][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.299058][ T5629] team0: Port device team_slave_1 added [ 93.344982][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.352147][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.378380][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.392439][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.429692][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.452616][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.459808][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.485947][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.535797][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.548301][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.558315][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.565297][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.592587][ T5636] Bluetooth: hci1: command tx timeout [ 93.592631][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.613313][ T5645] team0: Port device team_slave_0 added [ 93.620033][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.627311][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.653316][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.665121][ T5636] Bluetooth: hci0: command tx timeout [ 93.687229][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.715167][ T5645] team0: Port device team_slave_1 added [ 93.721742][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.729093][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.735543][ T5636] Bluetooth: hci4: command tx timeout [ 93.755663][ T5633] Bluetooth: hci3: command tx timeout [ 93.755716][ T5633] Bluetooth: hci2: command tx timeout [ 93.756500][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.873708][ T5622] team0: Port device team_slave_0 added [ 93.882269][ T5631] team0: Port device team_slave_0 added [ 93.895934][ T5636] Bluetooth: hci5: command tx timeout [ 93.925884][ T5635] hsr_slave_0: entered promiscuous mode [ 93.933573][ T5635] hsr_slave_1: entered promiscuous mode [ 93.955532][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.962518][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.988744][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.003545][ T5622] team0: Port device team_slave_1 added [ 94.011549][ T5631] team0: Port device team_slave_1 added [ 94.036986][ T5621] hsr_slave_0: entered promiscuous mode [ 94.043549][ T5621] hsr_slave_1: entered promiscuous mode [ 94.050206][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 94.056283][ T5621] Cannot create hsr debugfs directory [ 94.078347][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.085837][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.112170][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.206657][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.213716][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.240789][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.296319][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.303307][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.329845][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.342161][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.349461][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.375944][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.433198][ T5629] hsr_slave_0: entered promiscuous mode [ 94.447563][ T5629] hsr_slave_1: entered promiscuous mode [ 94.454377][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 94.462115][ T5629] Cannot create hsr debugfs directory [ 94.476913][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.483952][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.514361][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.642428][ T5645] hsr_slave_0: entered promiscuous mode [ 94.649685][ T5645] hsr_slave_1: entered promiscuous mode [ 94.656178][ T5645] debugfs: 'hsr0' already exists in 'hsr' [ 94.661915][ T5645] Cannot create hsr debugfs directory [ 94.837990][ T5622] hsr_slave_0: entered promiscuous mode [ 94.844492][ T5622] hsr_slave_1: entered promiscuous mode [ 94.850931][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 94.856688][ T5622] Cannot create hsr debugfs directory [ 94.871192][ T5631] hsr_slave_0: entered promiscuous mode [ 94.877701][ T5631] hsr_slave_1: entered promiscuous mode [ 94.883922][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 94.889852][ T5631] Cannot create hsr debugfs directory [ 95.443003][ T5635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.456729][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.481047][ T5635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.492273][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.502854][ T5635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.513440][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.521916][ T5635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.534811][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.620749][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.640159][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.652408][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.664248][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.666139][ T5636] Bluetooth: hci1: command tx timeout [ 95.673031][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.688340][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.698702][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.710459][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.735864][ T5636] Bluetooth: hci0: command tx timeout [ 95.815656][ T5636] Bluetooth: hci4: command tx timeout [ 95.815682][ T5638] Bluetooth: hci2: command tx timeout [ 95.815699][ T5633] Bluetooth: hci3: command tx timeout [ 95.841217][ T5645] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.854464][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.863318][ T5645] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.873834][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.882218][ T5645] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.892832][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.903434][ T5645] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.916427][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.976227][ T5636] Bluetooth: hci5: command tx timeout [ 96.047744][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.060935][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.078282][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.090559][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.099066][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.109939][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.119982][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.130984][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.198074][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.296266][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.314309][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.328481][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.348398][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.360797][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.369227][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.382144][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.390417][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.401600][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.420191][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.505960][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.513362][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.527188][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.578490][ T5622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.589401][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.604603][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.611952][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.623946][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.631121][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.651461][ T5622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.662911][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.684596][ T5622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.695182][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.704328][ T5622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.716439][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.729631][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.740213][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.747551][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.873179][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.932817][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.940354][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.962267][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.969506][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.003780][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.164670][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.211831][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.219064][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.268005][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.275226][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.294227][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.414720][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.467524][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.474733][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.511743][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.544983][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.552227][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.716451][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.738276][ T5636] Bluetooth: hci1: command tx timeout [ 97.802759][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.809981][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.818404][ T5636] Bluetooth: hci0: command tx timeout [ 97.896074][ T5636] Bluetooth: hci2: command tx timeout [ 97.896105][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.901570][ T5636] Bluetooth: hci4: command tx timeout [ 97.908692][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.914076][ T5636] Bluetooth: hci3: command tx timeout [ 98.057856][ T5636] Bluetooth: hci5: command tx timeout [ 98.336924][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.664476][ T5635] veth0_vlan: entered promiscuous mode [ 98.753164][ T5635] veth1_vlan: entered promiscuous mode [ 98.851897][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.997335][ T5635] veth0_macvtap: entered promiscuous mode [ 99.053059][ T5635] veth1_macvtap: entered promiscuous mode [ 99.118360][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.200713][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.290367][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.372014][ T5629] veth0_vlan: entered promiscuous mode [ 99.405637][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.442087][ T111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.513627][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.571559][ T5629] veth1_vlan: entered promiscuous mode [ 99.656801][ T185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.709101][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.809723][ T5629] veth0_macvtap: entered promiscuous mode [ 99.845660][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.873431][ T5629] veth1_macvtap: entered promiscuous mode [ 99.880853][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.912202][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.990600][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.998764][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.023953][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.032982][ T5631] veth0_vlan: entered promiscuous mode [ 100.051253][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.134164][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.170979][ T5631] veth1_vlan: entered promiscuous mode [ 100.200244][ T5635] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.253992][ T5621] veth0_vlan: entered promiscuous mode [ 100.336875][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.367335][ T5621] veth1_vlan: entered promiscuous mode [ 100.427110][ T145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.507167][ T5645] veth0_vlan: entered promiscuous mode [ 100.600327][ T5645] veth1_vlan: entered promiscuous mode [ 100.655788][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.671253][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.717349][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.747804][ T5631] veth0_macvtap: entered promiscuous mode [ 100.763982][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.872916][ T5631] veth1_macvtap: entered promiscuous mode [ 100.909942][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.920211][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.924740][ T5621] veth0_macvtap: entered promiscuous mode [ 100.969177][ T5621] veth1_macvtap: entered promiscuous mode [ 101.007496][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.040310][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.070626][ T5645] veth0_macvtap: entered promiscuous mode [ 101.122498][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.159951][ T5645] veth1_macvtap: entered promiscuous mode [ 101.200242][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.247438][ T185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.272624][ T5622] veth0_vlan: entered promiscuous mode [ 101.290051][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.351234][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.382077][ T5622] veth1_vlan: entered promiscuous mode [ 101.565971][ T1171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.575267][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.609219][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.662570][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.758725][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.767993][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.801843][ T145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.057661][ T185] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.116405][ T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.123633][ T5622] veth0_macvtap: entered promiscuous mode [ 102.166692][ T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.254018][ T5622] veth1_macvtap: entered promiscuous mode [ 102.313539][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.326881][ T185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.346144][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.366675][ T145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.398816][ T5877] jffs2: notice: (5877) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 102.461073][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.484322][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.555506][ T111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.580123][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.592523][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.618035][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.653109][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.746175][ T145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.774629][ T145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.915898][ T145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.058917][ T30] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.168135][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.180533][ T111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.203741][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.228640][ T111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.265759][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 103.447221][ T30] usb 3-1: unable to get BOS descriptor or descriptor too short [ 103.745924][ T30] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 103.865288][ T30] usb 3-1: config 0 has no interface number 0 [ 103.884410][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.024090][ T30] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 104.110415][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.137127][ T5890] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 104.313170][ T30] usb 3-1: config 0 interface 88 has no altsetting 0 [ 104.573933][ T30] usb 3-1: string descriptor 0 read error: -22 [ 104.617561][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.643812][ T30] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 104.733240][ T30] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 105.120976][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 107.198140][ T30] usb 3-1: config 0 descriptor?? [ 107.322184][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.338855][ T30] usb 3-1: can't set config #0, error -71 [ 107.353469][ T30] usb 3-1: USB disconnect, device number 2 [ 107.379301][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.673683][ T5898] gadgetfs: bound to dummy_udc driver [ 108.257610][ T5911] netlink: 'syz.1.15': attribute type 2 has an invalid length. [ 108.297199][ T5911] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15'. [ 109.115703][ T5757] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.328795][ T5939] program syz.1.26 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.360444][ T5939] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 109.681463][ T5757] usb 3-1: Using ep0 maxpacket: 8 [ 111.895376][ T5757] usb 3-1: unable to get BOS descriptor or descriptor too short [ 112.997242][ T5757] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 113.005296][ T5757] usb 3-1: can't read configurations, error -71 [ 113.527736][ T5944] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 116.145309][ T5962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.482586][ T5985] program syz.2.42 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.549938][ T5985] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 120.216468][ T5865] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 120.389106][ T5865] usb 6-1: Using ep0 maxpacket: 8 [ 120.454186][ T5865] usb 6-1: unable to get BOS descriptor or descriptor too short [ 120.489554][ T5865] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 120.518761][ T5865] usb 6-1: can't read configurations, error -71 [ 120.878138][ T6005] Zero length message leads to an empty skb [ 120.936385][ T6008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.52'. [ 122.374460][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.53'. [ 122.383588][ T6026] netlink: 348 bytes leftover after parsing attributes in process `syz.5.53'. [ 122.392662][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.53'. [ 122.402390][ T6026] netlink: 348 bytes leftover after parsing attributes in process `syz.5.53'. [ 122.413414][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.53'. [ 123.028578][ T6023] gretap1: entered promiscuous mode [ 123.560874][ T6038] program syz.5.61 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.604090][ T6037] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 127.475517][ T5784] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.625963][ T5784] usb 2-1: Using ep0 maxpacket: 8 [ 127.728188][ T5784] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.766896][ T5784] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 127.784778][ T5784] usb 2-1: can't read configurations, error -71 [ 128.066769][ T6071] program syz.5.72 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.194558][ T6072] Bluetooth: MGMT ver 1.23 [ 128.305700][ T6071] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 132.112301][ T6082] gretap1: entered promiscuous mode [ 132.246390][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.379869][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.593764][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 133.855624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 133.965430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 136.115888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 136.525647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 140.973112][ T6108] warning: `syz.3.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 141.425799][ T5750] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.499636][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 141.508474][ T6121] netlink: 348 bytes leftover after parsing attributes in process `syz.1.86'. [ 141.517488][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 141.526245][ T6121] netlink: 348 bytes leftover after parsing attributes in process `syz.1.86'. [ 141.535908][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 142.039456][ T5750] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 142.161766][ T6124] syz.3.88 uses obsolete (PF_INET,SOCK_PACKET) [ 142.232985][ T5750] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 142.268572][ T5750] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 142.288595][ T5750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.306303][ T6119] netlink: 'syz.3.88': attribute type 2 has an invalid length. [ 142.316508][ T5750] usb 3-1: Product: syz [ 142.332523][ T5750] usb 3-1: Manufacturer: syz [ 142.344494][ T6119] netlink: 'syz.3.88': attribute type 2 has an invalid length. [ 142.348522][ T5750] usb 3-1: SerialNumber: syz [ 142.540406][ T29] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 142.995674][ T5757] usb 3-1: USB disconnect, device number 5 [ 143.185894][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 143.197806][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 143.206363][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 143.215243][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 143.223120][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 143.428489][ T6139] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 143.807764][ T6117] /dev/nullb0: Can't open blockdev [ 144.034651][ T29] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 144.073069][ T29] ath9k_htc: Failed to initialize the device [ 144.943694][ T5757] usb 3-1: ath9k_htc: USB layer deinitialized [ 145.346224][ T5633] Bluetooth: hci6: command tx timeout [ 147.231415][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 147.240360][ T6187] netlink: 348 bytes leftover after parsing attributes in process `syz.1.104'. [ 147.249585][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 147.258970][ T6187] netlink: 348 bytes leftover after parsing attributes in process `syz.1.104'. [ 147.268729][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 147.435711][ T5633] Bluetooth: hci6: command tx timeout [ 147.972999][ T185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.276772][ T185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.429179][ T5856] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.504704][ T6203] program syz.2.110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.728902][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 148.848060][ T5856] usb 2-1: unable to get BOS descriptor or descriptor too short [ 148.993365][ T5856] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 149.117603][ T5856] usb 2-1: config 0 has no interface number 0 [ 149.359980][ T5856] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 149.488121][ T5856] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 149.506727][ T5633] Bluetooth: hci6: command tx timeout [ 149.606633][ T5856] usb 2-1: config 0 interface 88 has no altsetting 0 [ 149.794922][ T5856] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 149.933842][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 150.049373][ T5856] usb 2-1: Product: syz [ 150.133728][ T5856] usb 2-1: Manufacturer: syz [ 150.230058][ T5856] usb 2-1: SerialNumber: syz [ 150.488100][ T5856] usb 2-1: config 0 descriptor?? [ 152.169044][ T5633] Bluetooth: hci6: command tx timeout [ 152.422188][ T185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.702539][ T6208] gretap1: entered promiscuous mode [ 152.719215][ T5856] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input6 [ 156.078255][ T5856] usb 2-1: USB disconnect, device number 4 [ 156.621993][ T185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.710618][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 156.719633][ T6237] netlink: 348 bytes leftover after parsing attributes in process `syz.3.121'. [ 156.728845][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 156.737690][ T6237] netlink: 348 bytes leftover after parsing attributes in process `syz.3.121'. [ 156.747540][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 158.066396][ T5786] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 158.213756][ T6259] nvmet: adding nsid 1 to subsystem testnqn [ 158.277075][ T31] audit: type=1800 audit(1785954540.554:2): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.128" name="attr_allow_any_host" dev="configfs" ino=10821 res=0 errno=0 [ 158.293974][ T6259] nvmet_rdma: address family 255 not supported [ 158.298821][ T31] audit: type=1800 audit(1785954540.594:3): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.128" name="enable" dev="configfs" ino=10823 res=0 errno=0 [ 158.351482][ T31] audit: type=1800 audit(1785954540.604:4): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.128" name="addr_trtype" dev="configfs" ino=10831 res=0 errno=0 [ 158.385812][ T5786] usb 6-1: Using ep0 maxpacket: 8 [ 158.412116][ T5786] usb 6-1: unable to get BOS descriptor or descriptor too short [ 158.451661][ T5786] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 158.462680][ T31] audit: type=1800 audit(1785954540.614:5): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.128" name="addr_traddr" dev="configfs" ino=10833 res=0 errno=0 [ 158.504797][ T5786] usb 6-1: config 0 has no interface number 0 [ 158.539239][ T5786] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 158.595840][ T31] audit: type=1800 audit(1785954540.614:6): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.128" name="addr_trsvcid" dev="configfs" ino=10835 res=0 errno=0 [ 158.709829][ T5786] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 158.735467][ T5786] usb 6-1: config 0 interface 88 has no altsetting 0 [ 158.751721][ T5786] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 158.789718][ T5786] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 158.832924][ T5786] usb 6-1: Product: syz [ 158.844861][ T185] bridge_slave_1: left allmulticast mode [ 158.865104][ T5786] usb 6-1: Manufacturer: syz [ 158.890298][ T5786] usb 6-1: SerialNumber: syz [ 158.906188][ T185] bridge_slave_1: left promiscuous mode [ 158.932068][ T185] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.958385][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 158.970577][ T5786] usb 6-1: config 0 descriptor?? [ 159.080050][ T185] bridge_slave_0: left allmulticast mode [ 159.102219][ T6275] ======================================================= [ 159.102219][ T6275] WARNING: The mand mount option has been deprecated and [ 159.102219][ T6275] and is ignored by this kernel. Remove the mand [ 159.102219][ T6275] option from the mount to silence this warning. [ 159.102219][ T6275] ======================================================= [ 159.150770][ T185] bridge_slave_0: left promiscuous mode [ 159.189149][ T185] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.256862][ T5786] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input7 [ 161.373518][ T5786] usb 6-1: USB disconnect, device number 4 [ 161.625752][ T6100] udevd[6100]: Error opening device "/dev/input/event4": No such device [ 161.693744][ T6100] udevd[6100]: Unable to EVIOCGABS device "/dev/input/event4" [ 162.023398][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 162.033120][ T6294] netlink: 348 bytes leftover after parsing attributes in process `syz.2.138'. [ 162.042531][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 162.051571][ T6294] netlink: 348 bytes leftover after parsing attributes in process `syz.2.138'. [ 162.068009][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 162.535808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 162.756996][ T6100] udevd[6100]: Unable to EVIOCGABS device "/dev/input/event4" [ 162.952924][ T6288] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 163.478008][ T185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.494871][ T185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.523211][ T185] bond0 (unregistering): Released all slaves [ 164.034651][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 164.449063][ T6330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.148'. [ 164.586507][ T6333] jffs2: notice: (6333) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 164.999230][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.082937][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 165.091859][ T6348] netlink: 348 bytes leftover after parsing attributes in process `syz.1.151'. [ 165.101897][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 165.111388][ T6348] netlink: 348 bytes leftover after parsing attributes in process `syz.1.151'. [ 165.713894][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.721344][ T6133] bridge_slave_0: entered allmulticast mode [ 165.730150][ T6133] bridge_slave_0: entered promiscuous mode [ 165.741885][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.749192][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.756553][ T6133] bridge_slave_1: entered allmulticast mode [ 165.764794][ T6133] bridge_slave_1: entered promiscuous mode [ 165.819036][ T6133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.833873][ T6133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.454968][ T6133] team0: Port device team_slave_0 added [ 166.580552][ T185] hsr_slave_0: left promiscuous mode [ 166.618209][ T185] hsr_slave_1: left promiscuous mode [ 166.653160][ T185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.697585][ T185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.904919][ T6373] i2c i2c-0: new_device: Extra parameters [ 166.942732][ T185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.078343][ T185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.691719][ T185] veth1_macvtap: left promiscuous mode [ 167.708532][ T185] veth0_macvtap: left promiscuous mode [ 167.734267][ T185] veth1_vlan: left promiscuous mode [ 167.767491][ T185] veth0_vlan: left promiscuous mode [ 168.051653][ T6390] __nla_validate_parse: 1 callbacks suppressed [ 168.051680][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.164'. [ 168.628562][ T5865] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 168.669066][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 168.721635][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 168.740714][ T6400] ceph: No mds server is up or the cluster is laggy [ 169.011134][ T6409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.168'. [ 169.109735][ T6405] fido_id[6405]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 169.247570][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.167'. [ 169.256574][ T6411] netlink: 348 bytes leftover after parsing attributes in process `syz.5.167'. [ 169.265712][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.167'. [ 169.274532][ T6411] netlink: 348 bytes leftover after parsing attributes in process `syz.5.167'. [ 169.284198][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.167'. [ 170.160951][ T6415] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 170.543990][ T185] team0 (unregistering): Port device team_slave_1 removed [ 170.552393][ T6424] netlink: 'syz.3.172': attribute type 4 has an invalid length. [ 170.574184][ T185] team0 (unregistering): Port device team_slave_0 removed [ 171.645051][ T6133] team0: Port device team_slave_1 added [ 171.656929][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 171.739130][ T31] audit: type=1800 audit(1785954554.084:7): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.173" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 171.818746][ T6425] tipc: Started in network mode [ 171.824127][ T6425] tipc: Node identity e0000001, cluster identity 4711 [ 171.833253][ T6422] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 171.833407][ T6425] tipc: Enabling of bearer rejected, failed to enable media [ 171.982717][ T6422] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 171.995872][ T6422] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 172.186864][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.235752][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.383081][ T6133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.460179][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.499304][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.599630][ T6133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.236739][ T6133] hsr_slave_0: entered promiscuous mode [ 173.281627][ T6133] hsr_slave_1: entered promiscuous mode [ 173.322429][ T6133] debugfs: 'hsr0' already exists in 'hsr' [ 173.328812][ T6133] Cannot create hsr debugfs directory [ 173.596885][ T6466] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 173.944783][ T6479] netlink: 28 bytes leftover after parsing attributes in process `syz.1.185'. [ 174.220297][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.229396][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.616434][ T6465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.649579][ T6465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.941090][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 175.317287][ T6495] comedi comedi3: pcl818: I/O base address or length out of range [ 175.780203][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.988482][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.145573][ T58] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.967353][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.325857][ T6554] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 179.593048][ T6551] gretap1: entered promiscuous mode [ 180.639433][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 180.774252][ T6133] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 180.838815][ T6133] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 180.878044][ T6133] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 180.924825][ T6133] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 180.947545][ T6133] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 180.969758][ T6133] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 180.983390][ T6133] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 181.010938][ T6133] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.354778][ T6133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.433772][ T6133] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.474284][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.481520][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.552028][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.559295][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.845704][ T5865] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 182.026388][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 182.058838][ T5865] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.098787][ T5865] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 182.134663][ T5865] usb 5-1: config 0 has no interface number 0 [ 182.162644][ T5865] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 182.211756][ T5865] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 182.257757][ T5865] usb 5-1: config 0 interface 88 has no altsetting 0 [ 182.294732][ T5865] usb 5-1: string descriptor 0 read error: -22 [ 182.321116][ T5865] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 182.353856][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 182.419079][ T5865] usb 5-1: config 0 descriptor?? [ 182.504634][ T5865] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input8 [ 182.716665][ T29] usb 5-1: USB disconnect, device number 2 [ 182.997203][ T6620] tipc: Started in network mode [ 183.022391][ T6620] tipc: Node identity 0010000000000000002, cluster identity 1 [ 183.123663][ T6199] udevd[6199]: Error opening device "/dev/input/event4": No such device [ 183.150398][ T6199] udevd[6199]: Unable to EVIOCGABS device "/dev/input/event4" [ 183.170626][ T6623] gretap1: entered promiscuous mode [ 183.176902][ T6199] udevd[6199]: Unable to EVIOCGABS device "/dev/input/event4" [ 184.589903][ T6642] netlink: 'syz.2.230': attribute type 1 has an invalid length. [ 184.839961][ T6642] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.922569][ T6646] tipc: Started in network mode [ 185.008748][ T6646] tipc: Node identity ac14142f, cluster identity 4711 [ 185.073525][ T6646] tipc: New replicast peer: 172.20.20.170 [ 185.118614][ T6646] tipc: Enabled bearer , priority 10 [ 185.157136][ T6648] tipc: New replicast peer: 0.0.0.0 [ 185.199098][ T6133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.287962][ T5750] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 185.302548][ T6664] 9pnet_virtio: no channels available for device syz [ 185.725595][ T5750] usb 2-1: Using ep0 maxpacket: 8 [ 185.741332][ T5750] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.825187][ T6667] bond1: Removing last arp target with arp_interval on [ 185.833717][ T6667] bond1: entered promiscuous mode [ 185.838925][ T6667] bond1: entered allmulticast mode [ 185.844398][ T6667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.855865][ T5750] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.929971][ T5750] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.969962][ T5750] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 186.049394][ T5750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.080176][ T6676] tipc: Cannot configure node identity twice [ 186.132070][ T29] tipc: Node number set to 2886997039 [ 186.164131][ T5750] usb 2-1: config 0 descriptor?? [ 187.562272][ T5750] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 187.577544][ T5750] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 187.584776][ T5750] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 187.740307][ T5750] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 187.757947][ T5750] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 187.787130][ T5750] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 188.026007][ T5750] usb 2-1: USB disconnect, device number 5 [ 188.473891][ T6133] veth0_vlan: entered promiscuous mode [ 188.530778][ T6133] veth1_vlan: entered promiscuous mode [ 190.162680][ T6133] veth0_macvtap: entered promiscuous mode [ 190.184866][ T6133] veth1_macvtap: entered promiscuous mode [ 190.245491][ T6723] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 190.344608][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.249'. [ 190.387744][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.461698][ T6728] tmpfs: Unknown parameter '' [ 190.474527][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.615732][ T1171] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.663853][ T1171] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.698962][ T1171] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.950293][ T6735] tipc: Cannot configure node identity twice [ 191.797353][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.274751][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.318710][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.696281][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 192.705189][ T6756] netlink: 348 bytes leftover after parsing attributes in process `syz.4.259'. [ 192.714360][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 192.723428][ T6756] netlink: 348 bytes leftover after parsing attributes in process `syz.4.259'. [ 192.733185][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 193.627015][ T6759] kAFS: unable to lookup cell 'ÿ' [ 193.664630][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.676773][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.157902][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.215524][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.573746][ T6772] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 194.786397][ T6777] netlink: 72 bytes leftover after parsing attributes in process `syz.3.266'. [ 196.232495][ T6792] tipc: Started in network mode [ 196.255531][ T6792] tipc: Node identity 0010000000000000002, cluster identity 1 [ 196.636201][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.272'. [ 196.645101][ T6812] netlink: 348 bytes leftover after parsing attributes in process `syz.5.272'. [ 196.654280][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.272'. [ 196.663182][ T6812] netlink: 348 bytes leftover after parsing attributes in process `syz.5.272'. [ 196.673170][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.272'. [ 198.245335][ T6835] program syz.3.280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.261428][ T6835] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 198.395207][ T6837] netlink: 72 bytes leftover after parsing attributes in process `syz.2.282'. [ 201.440352][ T6880] fuse: Unknown parameter 'grou00000000000000000000' [ 201.730055][ T6884] netlink: 72 bytes leftover after parsing attributes in process `syz.3.295'. [ 202.887638][ T6904] fuse: Bad value for 'fd' [ 202.894676][ T6903] jffs2: notice: (6903) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 204.025203][ T6912] tipc: Cannot configure node identity twice [ 205.105520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 205.512715][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 208.947486][ T6948] fuse: Unknown parameter 'grou00000000000000000000' [ 209.208121][ T6947] nvme_fabrics: missing parameter 'host_traddr=%s' [ 210.309603][ T6963] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 210.354168][ T6972] program syz.5.319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.370688][ T6972] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 215.544154][ T7013] fuse: Bad value for 'fd' [ 216.263807][ T4937] Bluetooth: hci0: command 0x0406 tx timeout [ 216.270263][ T4937] Bluetooth: hci2: command 0x0406 tx timeout [ 216.277948][ T4937] Bluetooth: hci4: command 0x0406 tx timeout [ 216.285716][ T4937] Bluetooth: hci3: command 0x0406 tx timeout [ 216.292661][ T4937] Bluetooth: hci5: command 0x0406 tx timeout [ 217.061839][ T7032] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 217.082578][ T7021] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 217.249897][ T7030] nvme_fabrics: missing parameter 'host_traddr=%s' [ 217.515617][ T7038] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 219.481939][ T7054] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 219.865823][ T7063] fuse: Unknown parameter 'group_i00000000000000000000' [ 219.975657][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.028720][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 220.076821][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 220.127455][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.482909][ T7058] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 220.497563][ T7073] fuse: Unknown parameter 'group_i00000000000000000000' [ 220.540486][ T7058] gretap1: left promiscuous mode [ 220.572590][ T7077] nftables ruleset with unbound set [ 221.409358][ T7090] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 227.451144][ T7143] fuse: Unknown parameter 'group_id00000000000000000000' [ 227.775725][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 227.804439][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 227.835176][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 227.956473][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.981228][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 228.021591][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 228.060464][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.077243][ T9] usb 4-1: config 179 has no interface number 0 [ 228.107145][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 228.200209][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 228.279420][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 228.379482][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 228.555854][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 228.780553][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 228.876101][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.937600][ T7145] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.970503][ T7148] gretap1: left promiscuous mode [ 230.787838][ T7177] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 231.178383][ T7187] md: could not open device unknown-block(1,0). [ 231.717619][ T7201] comedi comedi3: pcl818: I/O base address or length out of range [ 231.748437][ T7182] syzkaller1: entered promiscuous mode [ 231.818302][ T7182] syzkaller1: entered allmulticast mode [ 231.845408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 231.855388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 231.935421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 232.168845][ T7207] fuse: Unknown parameter 'group_id00000000000000000000' [ 232.202454][ T7208] netlink: 'syz.6.383': attribute type 12 has an invalid length. [ 232.753147][ T7215] fuse: Unknown parameter 'group_id00000000000000000000' [ 233.186905][ T7225] program syz.1.387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.845417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 236.320461][ T5750] usb 4-1: USB disconnect, device number 2 [ 236.320476][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 236.335576][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 236.788558][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 236.843118][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.253061][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 237.386483][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.974819][ T7243] gretap1: left promiscuous mode [ 238.307476][ T7279] tipc: Started in network mode [ 238.322946][ T7279] tipc: Node identity 0010000000000000002, cluster identity 1 [ 238.334067][ T7272] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 238.436871][ T5757] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 238.626543][ T5757] usb 4-1: Using ep0 maxpacket: 8 [ 238.720212][ T5757] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 238.737647][ T7284] program syz.2.404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.765081][ T7284] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 238.814284][ T5757] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 238.851578][ T5757] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.881991][ T5757] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.920369][ T5757] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.949714][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.181304][ T5757] usb 4-1: GET_CAPABILITIES returned 0 [ 239.187292][ T5757] usbtmc 4-1:16.0: can't read capabilities [ 239.448453][ T5750] usb 4-1: USB disconnect, device number 3 [ 239.780794][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.853275][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.908526][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.415'. [ 239.937883][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.415'. [ 239.971959][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.408'. [ 240.034429][ T7305] gretap1: left promiscuous mode [ 240.053598][ T7314] netlink: 348 bytes leftover after parsing attributes in process `syz.6.408'. [ 240.127632][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.408'. [ 240.189618][ T7314] netlink: 348 bytes leftover after parsing attributes in process `syz.6.408'. [ 240.210112][ T7321] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 240.261563][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.408'. [ 240.485690][ T7321] md: could not open device unknown-block(1,0). [ 241.278167][ T7342] program syz.4.427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.291403][ T7342] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 243.071671][ T7357] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 243.113326][ T7361] tipc: Cannot configure node identity twice [ 243.377077][ T5757] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 243.656464][ T5757] usb 6-1: Using ep0 maxpacket: 8 [ 243.696094][ T5757] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 243.735103][ T5757] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 243.763567][ T5757] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.785192][ T5757] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.099384][ T5757] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.124954][ T5757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.450958][ T5757] usb 6-1: GET_CAPABILITIES returned 0 [ 244.480764][ T5757] usbtmc 6-1:16.0: can't read capabilities [ 244.762667][ T5777] usb 6-1: USB disconnect, device number 5 [ 244.889614][ T7390] netlink: 24 bytes leftover after parsing attributes in process `syz.6.440'. [ 245.248481][ T7397] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 250.405780][ T7414] tipc: Cannot configure node identity twice [ 251.115447][ T5856] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 251.275638][ T5856] usb 3-1: Using ep0 maxpacket: 8 [ 251.314205][ T5856] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 251.440572][ T5856] usb 3-1: config 0 has no interface number 0 [ 251.454102][ T5856] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 251.482378][ T5856] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 251.557815][ T5856] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 251.629885][ T5856] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 251.790776][ T5856] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 251.859943][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.944501][ T5856] usb 3-1: config 0 descriptor?? [ 252.260122][ T5856] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 252.311703][ T7444] gretap1: entered promiscuous mode [ 252.318970][ T7441] program syz.4.458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.468051][ T7457] nvme_fabrics: missing parameter 'transport=%s' [ 254.489841][ T5638] Bluetooth: hci5: unexpected event for opcode 0x4ad0 [ 254.530301][ T7457] nvme_fabrics: missing parameter 'nqn=%s' [ 254.792408][ T5777] usb 3-1: USB disconnect, device number 6 [ 254.979260][ T5777] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 255.099370][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.106263][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.153721][ T7468] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 255.156633][ T7469] tipc: Cannot configure node identity twice [ 255.845572][ T5777] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 256.104831][ T5777] usb 6-1: Using ep0 maxpacket: 32 [ 256.221322][ T5777] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 256.236907][ T5777] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 256.236944][ T5777] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 256.236972][ T5777] usb 6-1: Product: syz [ 256.236993][ T5777] usb 6-1: Manufacturer: syz [ 256.237014][ T5777] usb 6-1: SerialNumber: syz [ 257.351102][ T5777] usb 6-1: config 0 descriptor?? [ 257.710715][ T7491] netlink: 40 bytes leftover after parsing attributes in process `syz.3.474'. [ 258.477477][ T7493] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 258.484368][ T7493] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 258.492985][ T7493] vhci_hcd vhci_hcd.0: Device attached [ 259.547924][ T7495] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 0 [ 259.649905][ T5777] usb 6-1: can't set config #0, error -71 [ 259.661733][ T185] vhci_hcd vhci_hcd.3: stop threads [ 259.667129][ T185] vhci_hcd vhci_hcd.3: release socket [ 259.673481][ T185] vhci_hcd vhci_hcd.3: disconnect device [ 260.014270][ T7504] program syz.2.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.105548][ T5777] usb 6-1: USB disconnect, device number 6 [ 260.208769][ T7511] nvme_fabrics: missing parameter 'transport=%s' [ 260.235991][ T7511] nvme_fabrics: missing parameter 'nqn=%s' [ 260.314122][ T7509] syz.5.479 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 260.942216][ T7525] tipc: Cannot configure node identity twice [ 260.952543][ T5638] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 262.045309][ T7539] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 262.372418][ T7548] nvme_fabrics: missing parameter 'transport=%s' [ 262.425646][ T7548] nvme_fabrics: missing parameter 'nqn=%s' [ 263.102342][ T7567] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 265.015141][ T7574] 9p: Bad value for 'rfdno' [ 266.571666][ T7581] tipc: Cannot configure node identity twice [ 266.712888][ T7580] program syz.1.503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.827100][ T7580] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 267.882386][ T7591] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 268.808475][ T7608] nvme_fabrics: missing parameter 'nqn=%s' [ 270.231774][ T7622] netlink: 72 bytes leftover after parsing attributes in process `syz.3.517'. [ 270.718240][ T7623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.514'. [ 271.261057][ T7624] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 271.267728][ T7624] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.275549][ T7624] vhci_hcd vhci_hcd.0: Device attached [ 272.579814][ T7629] IPv6: NLM_F_CREATE should be specified when creating new route [ 272.607041][ T7629] IPv6: Can't replace route, no match found [ 272.727707][ T7629] mmap: syz.5.518 (7629) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 272.755243][ T7626] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 0 [ 272.797477][ T7639] 9p: Bad value for 'rfdno' [ 273.096610][ T185] vhci_hcd vhci_hcd.2: stop threads [ 273.419966][ T185] vhci_hcd vhci_hcd.2: release socket [ 273.457511][ T185] vhci_hcd vhci_hcd.2: disconnect device [ 273.507188][ T7638] tipc: Cannot configure node identity twice [ 273.526356][ T7641] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 274.497927][ T7649] program syz.1.525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.625095][ T7649] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 276.236767][ T7663] random: crng reseeded on system resumption [ 277.176438][ T7666] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 277.435539][ T7669] IPVS: length: 4096 != 8 [ 277.800269][ T7678] netlink: 72 bytes leftover after parsing attributes in process `syz.6.534'. [ 278.017456][ T7681] fuse: Invalid rootmode [ 278.044533][ T7683] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 278.044533][ T7683] program syz.4.536 not setting count and/or reply_len properly [ 278.437012][ T5784] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 278.638742][ T5784] usb 7-1: Using ep0 maxpacket: 8 [ 278.730867][ T5784] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 278.731057][ T5784] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 278.731154][ T5784] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 278.731207][ T5784] usb 7-1: config 250 has no interface number 0 [ 278.731452][ T5784] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 278.731598][ T5784] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 278.731820][ T5784] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.731903][ T5784] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 278.731994][ T5784] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 278.732089][ T5784] usb 7-1: config 250 interface 228 has no altsetting 0 [ 278.753577][ T7694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.539'. [ 278.783624][ T5784] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 278.783725][ T5784] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 278.783820][ T5784] usb 7-1: Product: syz [ 278.783864][ T5784] usb 7-1: SerialNumber: syz [ 278.970369][ T7694] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 278.970435][ T7694] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 278.970624][ T7694] vhci_hcd vhci_hcd.0: Device attached [ 280.336927][ T7707] program syz.2.542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.455594][ T5786] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 280.457485][ T5750] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 280.605574][ T5750] usb 6-1: Using ep0 maxpacket: 8 [ 280.617102][ T5750] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 280.617202][ T5750] usb 6-1: config 0 has no interface number 0 [ 280.617419][ T5750] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 280.617475][ T5750] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 280.617578][ T5750] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.617676][ T5750] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 280.618001][ T5750] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 280.618100][ T5750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.772008][ T5784] hub 7-1:250.228: bad descriptor, ignoring hub [ 280.772160][ T5784] hub 7-1:250.228: probe with driver hub failed with error -5 [ 281.611875][ T7695] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 1 [ 281.780451][ T37] vhci_hcd vhci_hcd.1: stop threads [ 281.985141][ T37] vhci_hcd vhci_hcd.1: release socket [ 282.131080][ T5750] usb 6-1: config 0 descriptor?? [ 282.154919][ T5784] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 282.173887][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 282.609338][ T5784] usb 7-1: USB disconnect, device number 2 [ 282.634589][ T5784] usblp0: removed [ 282.752727][ T5750] usb 6-1: can't set config #0, error -71 [ 282.774396][ T5750] usb 6-1: USB disconnect, device number 7 [ 283.286955][ T7721] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 284.110691][ T7729] fuse: Invalid rootmode [ 284.557038][ T5638] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 284.999261][ T7740] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 284.999261][ T7740] program syz.3.554 not setting count and/or reply_len properly [ 285.565512][ T5786] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 286.485483][ T5777] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 288.557647][ T5777] usb 5-1: Using ep0 maxpacket: 8 [ 288.618132][ T5777] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 288.660296][ T7757] program syz.2.560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.689930][ T5777] usb 5-1: config 0 has no interface number 0 [ 288.716949][ T7757] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 288.761099][ T5777] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 288.836782][ T5777] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 288.877285][ T5777] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 288.911959][ T5777] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 288.931280][ T5777] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 288.940738][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.986345][ T5784] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 288.994956][ T5777] usb 5-1: config 0 descriptor?? [ 289.024294][ T5777] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 289.164574][ T7769] fuse: Bad value for 'rootmode' [ 289.195466][ T5784] usb 2-1: Using ep0 maxpacket: 8 [ 289.222920][ T5784] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 289.246518][ T5784] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 289.258454][ T5784] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 289.287552][ T5777] usb 5-1: USB disconnect, device number 3 [ 289.305139][ T5784] usb 2-1: config 250 has no interface number 0 [ 289.317390][ T5784] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 289.332569][ T5784] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 289.344035][ T5784] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 289.357161][ T5784] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 289.368698][ T5784] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 289.403713][ T5777] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 289.926603][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 289.935583][ T7781] netlink: 348 bytes leftover after parsing attributes in process `syz.3.567'. [ 289.944655][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 289.953818][ T7781] netlink: 348 bytes leftover after parsing attributes in process `syz.3.567'. [ 289.963034][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 290.782051][ T7778] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 291.003643][ T5784] usb 2-1: config 250 interface 228 has no altsetting 0 [ 291.171245][ T5784] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 291.210947][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 291.235494][ T5784] usb 2-1: Product: syz [ 291.249456][ T5784] usb 2-1: SerialNumber: syz [ 291.313412][ T5784] hub 2-1:250.228: bad descriptor, ignoring hub [ 291.337776][ T5784] hub 2-1:250.228: probe with driver hub failed with error -5 [ 291.394954][ T5638] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 291.432637][ T7791] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 291.692189][ T5784] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 292.555534][ T7763] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 292.799718][ T7806] fuse: Bad value for 'rootmode' [ 293.121108][ T7813] Bluetooth: MGMT ver 1.23 [ 293.163915][ T7818] program syz.4.581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.252175][ T7816] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 293.380643][ T5777] usb 2-1: USB disconnect, device number 6 [ 293.498275][ T5777] usblp0: removed [ 295.256797][ T5638] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 295.263527][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 295.588466][ T7828] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 295.838789][ T7824] netlink: 'syz.5.584': attribute type 2 has an invalid length. [ 295.951360][ T7824] netlink: 'syz.5.584': attribute type 2 has an invalid length. [ 296.514215][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 296.592099][ T7845] netlink: 348 bytes leftover after parsing attributes in process `syz.1.586'. [ 296.895065][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 296.904194][ T7845] netlink: 348 bytes leftover after parsing attributes in process `syz.1.586'. [ 296.926458][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 297.275075][ T7860] gadgetfs: bound to dummy_udc driver [ 297.313180][ T7862] fuse: Bad value for 'rootmode' [ 297.988699][ T7870] nvme_fabrics: missing parameter 'nqn=%s' [ 298.236491][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.519891][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.734232][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.073482][ T7886] program syz.3.604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.096133][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.298546][ T7884] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 299.695837][ T5784] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 299.852377][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.957080][ T5784] usb 7-1: Using ep0 maxpacket: 8 [ 299.971009][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.016475][ T5784] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 300.036817][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.064043][ T5784] usb 7-1: config 179 has no interface number 0 [ 300.076849][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.087668][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.210237][ T5784] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 300.365668][ T5784] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 300.558205][ T5784] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 300.660831][ T5784] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 300.819577][ T5784] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 301.209991][ T5784] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 301.369518][ T5784] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.512497][ T7889] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 301.592305][ T37] bridge_slave_1: left allmulticast mode [ 301.665672][ T37] bridge_slave_1: left promiscuous mode [ 301.694672][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.757229][ T37] bridge_slave_0: left allmulticast mode [ 301.790352][ T37] bridge_slave_0: left promiscuous mode [ 301.817390][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.137192][ T5638] Bluetooth: hci1: command tx timeout [ 302.653617][ T7915] fuse: Unknown parameter 'use00000000000000000000' [ 302.699248][ T7908] gadgetfs: bound to dummy_udc driver [ 303.125605][ T5638] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 303.388187][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.444609][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.496985][ T37] bond0 (unregistering): Released all slaves [ 303.599686][ T37] bond1 (unregistering): Released all slaves [ 303.775030][ T7902] syzkaller1: entered promiscuous mode [ 303.826177][ T7902] syzkaller1: entered allmulticast mode [ 303.877196][ T37] tipc: Disabling bearer [ 303.911413][ T37] tipc: Left network mode [ 304.218461][ T5636] Bluetooth: hci1: command tx timeout [ 304.742607][ T31] audit: type=1800 audit(1785954687.084:8): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.620" name="attr_allow_any_host" dev="configfs" ino=16723 res=0 errno=0 [ 304.879193][ T31] audit: type=1800 audit(1785954687.114:9): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.620" name="enable" dev="configfs" ino=16724 res=0 errno=0 [ 304.990843][ T31] audit: type=1800 audit(1785954687.124:10): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.620" name="addr_trtype" dev="configfs" ino=16725 res=0 errno=0 [ 305.090764][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5 [ 305.540810][ T7958] program syz.1.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.686044][ T7958] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 306.689108][ T5636] Bluetooth: hci1: command tx timeout [ 307.630098][ T37] hsr_slave_0: left promiscuous mode [ 308.079895][ T37] hsr_slave_1: left promiscuous mode [ 308.439327][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.654368][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.778617][ T5636] Bluetooth: hci1: command tx timeout [ 308.918761][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.926934][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.031187][ T7962] fuse: Unknown parameter 'use00000000000000000000' [ 309.097818][ T37] veth1_macvtap: left promiscuous mode [ 309.114281][ T37] veth0_macvtap: left promiscuous mode [ 309.138838][ T37] veth1_vlan: left promiscuous mode [ 309.158294][ T37] veth0_vlan: left promiscuous mode [ 309.233205][ T7966] gadgetfs: bound to dummy_udc driver [ 309.528346][ T5856] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 309.634450][ T7970] nvme_fabrics: missing parameter 'nqn=%s' [ 309.767004][ T5856] usb 4-1: Using ep0 maxpacket: 8 [ 309.802338][ T5856] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.872780][ T5856] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 309.925059][ T5856] usb 4-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 309.976688][ T5856] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 310.050481][ T5856] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 310.202582][ T5856] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.447493][ T5856] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 310.606382][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.931461][ T5636] Bluetooth: hci5: unexpected event for opcode 0x4ad0 [ 311.395663][ T5856] usb 4-1: GET_CAPABILITIES returned 0 [ 311.412898][ T5856] usbtmc 4-1:16.0: can't read capabilities [ 311.642648][ T5757] usb 4-1: USB disconnect, device number 4 [ 311.768129][ T37] team0 (unregistering): Port device team_slave_1 removed [ 311.830458][ T37] team0 (unregistering): Port device team_slave_0 removed [ 312.446364][ T8008] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 313.063616][ T5856] usb 7-1: USB disconnect, device number 3 [ 313.063688][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 313.077771][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 313.606009][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.636'. [ 313.641896][ T8023] fuse: Unknown parameter 'use00000000000000000000' [ 313.744468][ T8019] gadgetfs: bound to dummy_udc driver [ 314.016345][ T8030] program syz.3.640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.055091][ T5856] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 314.135146][ T8018] gadgetfs: suspended from state 2 [ 314.286567][ T8030] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 315.810394][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6 [ 316.548585][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.558838][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.525691][ T8037] jffs2: notice: (8037) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 317.967424][ T8046] program syz.5.645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.188721][ T8046] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 319.834742][ T8053] nvme_fabrics: missing parameter 'nqn=%s' [ 320.851488][ T8057] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 322.748621][ T8077] program syz.3.651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.320166][ T8077] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 326.410952][ T8092] gadgetfs: bound to dummy_udc driver [ 326.583282][ T6133] ================================================================== [ 326.591392][ T6133] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15ca/0x1bd0 [ 326.599152][ T6133] Read of size 8 at addr ffff88807fb22858 by task syz-executor/6133 [ 326.607132][ T6133] [ 326.609457][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 326.609497][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 326.609518][ T6133] Call Trace: [ 326.609529][ T6133] [ 326.609542][ T6133] dump_stack_lvl+0x100/0x190 [ 326.609583][ T6133] print_report+0x13d/0x4b0 [ 326.609634][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.609677][ T6133] ? __virt_addr_valid+0x239/0x430 [ 326.609721][ T6133] ? __mutex_lock+0x15ca/0x1bd0 [ 326.609770][ T6133] kasan_report+0xdf/0x1c0 [ 326.609808][ T6133] ? __mutex_lock+0x15ca/0x1bd0 [ 326.609863][ T6133] __mutex_lock+0x15ca/0x1bd0 [ 326.609912][ T6133] ? ep_open+0x4c/0x2c0 [ 326.609942][ T6133] ? __pfx___schedule+0x10/0x10 [ 326.609986][ T6133] ? __pfx___mutex_lock+0x10/0x10 [ 326.610040][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.610084][ T6133] ? irqentry_exit+0x24d/0xa00 [ 326.610130][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.610173][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.610215][ T6133] ? irqentry_exit+0x24d/0xa00 [ 326.610272][ T6133] ? ep_open+0x4c/0x2c0 [ 326.610300][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.610342][ T6133] ep_open+0x4c/0x2c0 [ 326.610372][ T6133] do_dentry_open+0x6ab/0x14d0 [ 326.610419][ T6133] ? __pfx_ep_open+0x10/0x10 [ 326.610450][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.610495][ T6133] vfs_open+0x82/0x3f0 [ 326.610524][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.610570][ T6133] path_openat+0x2873/0x4280 [ 326.610632][ T6133] ? __pfx_path_openat+0x10/0x10 [ 326.610690][ T6133] do_file_open+0x20e/0x430 [ 326.610743][ T6133] ? __pfx_do_file_open+0x10/0x10 [ 326.610811][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.610853][ T6133] ? alloc_fd+0x471/0x7a0 [ 326.610907][ T6133] ? do_getname+0x191/0x390 [ 326.610944][ T6133] do_sys_openat2+0x10f/0x1e0 [ 326.610977][ T6133] ? __pfx_do_sys_openat2+0x10/0x10 [ 326.611018][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.611065][ T6133] __x64_sys_openat+0x12d/0x210 [ 326.611100][ T6133] ? __pfx___x64_sys_openat+0x10/0x10 [ 326.611139][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.611185][ T6133] do_syscall_64+0x115/0x870 [ 326.611236][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.611272][ T6133] RIP: 0033:0x7f568795e90e [ 326.611299][ T6133] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 326.611332][ T6133] RSP: 002b:00007ffcf8f50c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 326.611365][ T6133] RAX: ffffffffffffffda RBX: 00005555778be500 RCX: 00007f568795e90e [ 326.611388][ T6133] RDX: 0000000000000000 RSI: 00007ffcf8f50de0 RDI: ffffffffffffff9c [ 326.611411][ T6133] RBP: 00007ffcf8f50de0 R08: 0000000000000000 R09: 0000000000000000 [ 326.611432][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf8f51ed0 [ 326.611454][ T6133] R13: 00007f5687a34474 R14: 00005555778be4e8 R15: 0000000000000006 [ 326.611489][ T6133] [ 326.611501][ T6133] [ 326.907105][ T6133] Allocated by task 8092: [ 326.911439][ T6133] kasan_save_stack+0x30/0x50 [ 326.916149][ T6133] kasan_save_track+0x14/0x30 [ 326.920854][ T6133] __kasan_kmalloc+0xaa/0xb0 [ 326.925503][ T6133] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 326.931069][ T6133] gadgetfs_bind+0x582/0x890 [ 326.935686][ T6133] gadget_bind_driver+0x28c/0xbf0 [ 326.940720][ T6133] really_probe+0x241/0xa60 [ 326.945243][ T6133] __driver_probe_device+0x20e/0x450 [ 326.950556][ T6133] driver_probe_device+0x4a/0x140 [ 326.955606][ T6133] __driver_attach+0x21f/0x5b0 [ 326.960391][ T6133] bus_for_each_dev+0x13e/0x1d0 [ 326.965249][ T6133] bus_add_driver+0x305/0x5b0 [ 326.970030][ T6133] driver_register+0x1e2/0x360 [ 326.974824][ T6133] usb_gadget_register_driver_owner+0x132/0x210 [ 326.981076][ T6133] dev_config+0xdce/0x1610 [ 326.985523][ T6133] vfs_write+0x2aa/0x1050 [ 326.989867][ T6133] ksys_write+0x12a/0x250 [ 326.994211][ T6133] do_syscall_64+0x115/0x870 [ 326.998822][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.004725][ T6133] [ 327.007039][ T6133] Freed by task 10: [ 327.010839][ T6133] kasan_save_stack+0x30/0x50 [ 327.015544][ T6133] kasan_save_track+0x14/0x30 [ 327.020247][ T6133] kasan_save_free_info+0x3b/0x70 [ 327.025287][ T6133] __kasan_slab_free+0x5f/0x80 [ 327.030067][ T6133] kfree+0x22b/0x6c0 [ 327.033979][ T6133] put_ep+0x117/0x150 [ 327.037989][ T6133] destroy_ep_files+0x163/0x420 [ 327.042871][ T6133] gadgetfs_unbind+0x139/0x260 [ 327.047660][ T6133] gadget_unbind_driver+0x20c/0x4f0 [ 327.052871][ T6133] device_remove+0xcb/0x180 [ 327.057395][ T6133] device_release_driver_internal+0x44e/0x620 [ 327.063489][ T6133] driver_detach+0xd8/0x1b0 [ 327.068013][ T6133] bus_remove_driver+0x13b/0x2e0 [ 327.073062][ T6133] driver_unregister+0x76/0xb0 [ 327.077854][ T6133] usb_gadget_unregister_driver+0x49/0x70 [ 327.083585][ T6133] dev_release+0x132/0x1b0 [ 327.088032][ T6133] __fput+0x3ff/0xb50 [ 327.092020][ T6133] delayed_fput+0x72/0x90 [ 327.096358][ T6133] process_one_work+0xa23/0x1940 [ 327.101334][ T6133] worker_thread+0x5ef/0xe50 [ 327.105953][ T6133] kthread+0x370/0x450 [ 327.110056][ T6133] ret_from_fork+0x72b/0xd50 [ 327.114665][ T6133] ret_from_fork_asm+0x1a/0x30 [ 327.119462][ T6133] [ 327.121776][ T6133] The buggy address belongs to the object at ffff88807fb22800 [ 327.121776][ T6133] which belongs to the cache kmalloc-512 of size 512 [ 327.135829][ T6133] The buggy address is located 88 bytes inside of [ 327.135829][ T6133] freed 512-byte region [ffff88807fb22800, ffff88807fb22a00) [ 327.149544][ T6133] [ 327.151863][ T6133] The buggy address belongs to the physical page: [ 327.158261][ T6133] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fb20 [ 327.167032][ T6133] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 327.175621][ T6133] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 327.183173][ T6133] page_type: f5(slab) [ 327.187162][ T6133] raw: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 327.195760][ T6133] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 327.204352][ T6133] head: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 327.213033][ T6133] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 327.221748][ T6133] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 327.230435][ T6133] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 327.239449][ T6133] page dumped because: kasan: bad access detected [ 327.245855][ T6133] page_owner tracks the page as allocated [ 327.251558][ T6133] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4977, tgid 4977 (S02sysctl), ts 30652066783, free_ts 28147710241 [ 327.271903][ T6133] post_alloc_hook+0xfd/0x120 [ 327.276702][ T6133] get_page_from_freelist+0xf48/0x3530 [ 327.282187][ T6133] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 327.288104][ T6133] new_slab+0xa2/0x640 [ 327.292191][ T6133] refill_objects+0xe3/0x410 [ 327.296800][ T6133] __pcs_replace_empty_main+0x376/0x680 [ 327.302367][ T6133] __kmalloc_noprof+0x66d/0x820 [ 327.307247][ T6133] tomoyo_init_log+0x1224/0x20c0 [ 327.312298][ T6133] tomoyo_supervisor+0x506/0x1340 [ 327.317331][ T6133] tomoyo_path_permission+0x270/0x3b0 [ 327.322719][ T6133] tomoyo_path_perm+0x364/0x460 [ 327.327586][ T6133] security_inode_getattr+0x116/0x280 [ 327.332974][ T6133] vfs_fstat+0x4b/0xe0 [ 327.337068][ T6133] __do_sys_newfstat+0x8b/0x110 [ 327.341948][ T6133] do_syscall_64+0x115/0x870 [ 327.346558][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.352459][ T6133] page last free pid 1 tgid 1 stack trace: [ 327.358364][ T6133] free_pages_prepare+0x586/0xd80 [ 327.363435][ T6133] __free_contig_range_common+0x14f/0x250 [ 327.369188][ T6133] destroy_args+0xa8/0x7a0 [ 327.373638][ T6133] debug_vm_pgtable+0x1d69/0x3490 [ 327.378698][ T6133] do_one_initcall+0x11d/0x700 [ 327.383513][ T6133] kernel_init_freeable+0x6ea/0x7b0 [ 327.388748][ T6133] kernel_init+0x1f/0x1e0 [ 327.393085][ T6133] ret_from_fork+0x72b/0xd50 [ 327.397695][ T6133] ret_from_fork_asm+0x1a/0x30 [ 327.402486][ T6133] [ 327.404800][ T6133] Memory state around the buggy address: [ 327.410429][ T6133] ffff88807fb22700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 327.418499][ T6133] ffff88807fb22780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 327.426573][ T6133] >ffff88807fb22800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 327.434631][ T6133] ^ [ 327.441560][ T6133] ffff88807fb22880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 327.449621][ T6133] ffff88807fb22900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 327.457676][ T6133] ================================================================== [ 327.516612][ T6133] Disabling lock debugging due to kernel taint [ 327.522877][ T6133] ================================================================== [ 327.530950][ T6133] BUG: KASAN: slab-use-after-free in __mutex_lock+0x1d1/0x1bd0 [ 327.538544][ T6133] Read of size 8 at addr ffff88807fb22800 by task syz-executor/6133 [ 327.546537][ T6133] [ 327.548880][ T6133] CPU: 1 UID: 0 PID: 6133 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(full) [ 327.548939][ T6133] Tainted: [B]=BAD_PAGE [ 327.548953][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 327.548976][ T6133] Call Trace: [ 327.548989][ T6133] [ 327.549002][ T6133] dump_stack_lvl+0x100/0x190 [ 327.549047][ T6133] print_report+0x13d/0x4b0 [ 327.549104][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.549150][ T6133] ? __virt_addr_valid+0x239/0x430 [ 327.549198][ T6133] ? __mutex_lock+0x1d1/0x1bd0 [ 327.549252][ T6133] kasan_report+0xdf/0x1c0 [ 327.549292][ T6133] ? __mutex_lock+0x1d1/0x1bd0 [ 327.549351][ T6133] kasan_check_range+0x10f/0x1e0 [ 327.549398][ T6133] __mutex_lock+0x1d1/0x1bd0 [ 327.549448][ T6133] ? ep_open+0x4c/0x2c0 [ 327.549480][ T6133] ? ep_open+0x4c/0x2c0 [ 327.549518][ T6133] ? __pfx___schedule+0x10/0x10 [ 327.549565][ T6133] ? __pfx___mutex_lock+0x10/0x10 [ 327.549619][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.549667][ T6133] ? irqentry_exit+0x24d/0xa00 [ 327.549717][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.549764][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.549809][ T6133] ? irqentry_exit+0x24d/0xa00 [ 327.549871][ T6133] ? ep_open+0x4c/0x2c0 [ 327.549900][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.549944][ T6133] ep_open+0x4c/0x2c0 [ 327.549977][ T6133] do_dentry_open+0x6ab/0x14d0 [ 327.550027][ T6133] ? __pfx_ep_open+0x10/0x10 [ 327.550061][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.550110][ T6133] vfs_open+0x82/0x3f0 [ 327.550142][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.550191][ T6133] path_openat+0x2873/0x4280 [ 327.550258][ T6133] ? __pfx_path_openat+0x10/0x10 [ 327.550320][ T6133] do_file_open+0x20e/0x430 [ 327.550377][ T6133] ? __pfx_do_file_open+0x10/0x10 [ 327.550451][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.550497][ T6133] ? alloc_fd+0x471/0x7a0 [ 327.550560][ T6133] ? do_getname+0x191/0x390 [ 327.550600][ T6133] do_sys_openat2+0x10f/0x1e0 [ 327.550636][ T6133] ? __pfx_do_sys_openat2+0x10/0x10 [ 327.550675][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.550724][ T6133] __x64_sys_openat+0x12d/0x210 [ 327.550761][ T6133] ? __pfx___x64_sys_openat+0x10/0x10 [ 327.550803][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.550853][ T6133] do_syscall_64+0x115/0x870 [ 327.550908][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.550946][ T6133] RIP: 0033:0x7f568795e90e [ 327.550974][ T6133] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 327.551010][ T6133] RSP: 002b:00007ffcf8f50c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 327.551045][ T6133] RAX: ffffffffffffffda RBX: 00005555778be500 RCX: 00007f568795e90e [ 327.551071][ T6133] RDX: 0000000000000000 RSI: 00007ffcf8f50de0 RDI: ffffffffffffff9c [ 327.551096][ T6133] RBP: 00007ffcf8f50de0 R08: 0000000000000000 R09: 0000000000000000 [ 327.551120][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf8f51ed0 [ 327.551144][ T6133] R13: 00007f5687a34474 R14: 00005555778be4e8 R15: 0000000000000006 [ 327.551182][ T6133] [ 327.551194][ T6133] [ 327.860953][ T6133] Allocated by task 8092: [ 327.865277][ T6133] kasan_save_stack+0x30/0x50 [ 327.869994][ T6133] kasan_save_track+0x14/0x30 [ 327.874708][ T6133] __kasan_kmalloc+0xaa/0xb0 [ 327.879326][ T6133] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 327.884719][ T6133] gadgetfs_bind+0x582/0x890 [ 327.889346][ T6133] gadget_bind_driver+0x28c/0xbf0 [ 327.894383][ T6133] really_probe+0x241/0xa60 [ 327.898907][ T6133] __driver_probe_device+0x20e/0x450 [ 327.904215][ T6133] driver_probe_device+0x4a/0x140 [ 327.909261][ T6133] __driver_attach+0x21f/0x5b0 [ 327.914051][ T6133] bus_for_each_dev+0x13e/0x1d0 [ 327.918915][ T6133] bus_add_driver+0x305/0x5b0 [ 327.923610][ T6133] driver_register+0x1e2/0x360 [ 327.928399][ T6133] usb_gadget_register_driver_owner+0x132/0x210 [ 327.934651][ T6133] dev_config+0xdce/0x1610 [ 327.939094][ T6133] vfs_write+0x2aa/0x1050 [ 327.943442][ T6133] ksys_write+0x12a/0x250 [ 327.947790][ T6133] do_syscall_64+0x115/0x870 [ 327.952444][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.958349][ T6133] [ 327.960664][ T6133] Freed by task 10: [ 327.964467][ T6133] kasan_save_stack+0x30/0x50 [ 327.969184][ T6133] kasan_save_track+0x14/0x30 [ 327.973894][ T6133] kasan_save_free_info+0x3b/0x70 [ 327.978935][ T6133] __kasan_slab_free+0x5f/0x80 [ 327.983711][ T6133] kfree+0x22b/0x6c0 [ 327.987621][ T6133] put_ep+0x117/0x150 [ 327.991628][ T6133] destroy_ep_files+0x163/0x420 [ 327.996593][ T6133] gadgetfs_unbind+0x139/0x260 [ 328.001385][ T6133] gadget_unbind_driver+0x20c/0x4f0 [ 328.006597][ T6133] device_remove+0xcb/0x180 [ 328.011130][ T6133] device_release_driver_internal+0x44e/0x620 [ 328.017266][ T6133] driver_detach+0xd8/0x1b0 [ 328.021795][ T6133] bus_remove_driver+0x13b/0x2e0 [ 328.026751][ T6133] driver_unregister+0x76/0xb0 [ 328.031545][ T6133] usb_gadget_unregister_driver+0x49/0x70 [ 328.037302][ T6133] dev_release+0x132/0x1b0 [ 328.041743][ T6133] __fput+0x3ff/0xb50 [ 328.045813][ T6133] delayed_fput+0x72/0x90 [ 328.050143][ T6133] process_one_work+0xa23/0x1940 [ 328.055084][ T6133] worker_thread+0x5ef/0xe50 [ 328.060109][ T6133] kthread+0x370/0x450 [ 328.064203][ T6133] ret_from_fork+0x72b/0xd50 [ 328.068842][ T6133] ret_from_fork_asm+0x1a/0x30 [ 328.073662][ T6133] [ 328.075977][ T6133] The buggy address belongs to the object at ffff88807fb22800 [ 328.075977][ T6133] which belongs to the cache kmalloc-512 of size 512 [ 328.090034][ T6133] The buggy address is located 0 bytes inside of [ 328.090034][ T6133] freed 512-byte region [ffff88807fb22800, ffff88807fb22a00) [ 328.103663][ T6133] [ 328.106116][ T6133] The buggy address belongs to the physical page: [ 328.112520][ T6133] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fb20 [ 328.121280][ T6133] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 328.129779][ T6133] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 328.137326][ T6133] page_type: f5(slab) [ 328.141308][ T6133] raw: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 328.149899][ T6133] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 328.158498][ T6133] head: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 328.167272][ T6133] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 328.175952][ T6133] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 328.184626][ T6133] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 328.193291][ T6133] page dumped because: kasan: bad access detected [ 328.199898][ T6133] page_owner tracks the page as allocated [ 328.205602][ T6133] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4977, tgid 4977 (S02sysctl), ts 30652066783, free_ts 28147710241 [ 328.226119][ T6133] post_alloc_hook+0xfd/0x120 [ 328.230859][ T6133] get_page_from_freelist+0xf48/0x3530 [ 328.236345][ T6133] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 328.242266][ T6133] new_slab+0xa2/0x640 [ 328.246354][ T6133] refill_objects+0xe3/0x410 [ 328.250970][ T6133] __pcs_replace_empty_main+0x376/0x680 [ 328.256536][ T6133] __kmalloc_noprof+0x66d/0x820 [ 328.261413][ T6133] tomoyo_init_log+0x1224/0x20c0 [ 328.266373][ T6133] tomoyo_supervisor+0x506/0x1340 [ 328.271404][ T6133] tomoyo_path_permission+0x270/0x3b0 [ 328.276788][ T6133] tomoyo_path_perm+0x364/0x460 [ 328.281655][ T6133] security_inode_getattr+0x116/0x280 [ 328.287057][ T6133] vfs_fstat+0x4b/0xe0 [ 328.291240][ T6133] __do_sys_newfstat+0x8b/0x110 [ 328.296126][ T6133] do_syscall_64+0x115/0x870 [ 328.300737][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.306636][ T6133] page last free pid 1 tgid 1 stack trace: [ 328.312432][ T6133] free_pages_prepare+0x586/0xd80 [ 328.317515][ T6133] __free_contig_range_common+0x14f/0x250 [ 328.323339][ T6133] destroy_args+0xa8/0x7a0 [ 328.327783][ T6133] debug_vm_pgtable+0x1d69/0x3490 [ 328.332835][ T6133] do_one_initcall+0x11d/0x700 [ 328.337618][ T6133] kernel_init_freeable+0x6ea/0x7b0 [ 328.342838][ T6133] kernel_init+0x1f/0x1e0 [ 328.347168][ T6133] ret_from_fork+0x72b/0xd50 [ 328.351772][ T6133] ret_from_fork_asm+0x1a/0x30 [ 328.356640][ T6133] [ 328.358955][ T6133] Memory state around the buggy address: [ 328.364576][ T6133] ffff88807fb22700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 328.372637][ T6133] ffff88807fb22780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 328.381314][ T6133] >ffff88807fb22800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 328.389383][ T6133] ^ [ 328.393442][ T6133] ffff88807fb22880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 328.401517][ T6133] ffff88807fb22900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 328.409579][ T6133] ================================================================== [ 328.418233][ T6133] ================================================================== [ 328.426390][ T6133] BUG: KASAN: slab-use-after-free in __mutex_lock+0x18f9/0x1bd0 [ 328.434068][ T6133] Read of size 8 at addr ffff88807fb22800 by task syz-executor/6133 [ 328.442058][ T6133] [ 328.444394][ T6133] CPU: 1 UID: 0 PID: 6133 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(full) [ 328.444451][ T6133] Tainted: [B]=BAD_PAGE [ 328.444465][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 328.444488][ T6133] Call Trace: [ 328.444500][ T6133] [ 328.444519][ T6133] dump_stack_lvl+0x100/0x190 [ 328.444566][ T6133] print_report+0x13d/0x4b0 [ 328.444625][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.444673][ T6133] ? __virt_addr_valid+0x239/0x430 [ 328.444722][ T6133] ? __mutex_lock+0x18f9/0x1bd0 [ 328.444777][ T6133] kasan_report+0xdf/0x1c0 [ 328.444819][ T6133] ? __mutex_lock+0x18f9/0x1bd0 [ 328.444878][ T6133] ? ep_open+0x4c/0x2c0 [ 328.444912][ T6133] __mutex_lock+0x18f9/0x1bd0 [ 328.444967][ T6133] ? ep_open+0x4c/0x2c0 [ 328.444999][ T6133] ? __pfx___schedule+0x10/0x10 [ 328.445048][ T6133] ? __pfx___mutex_lock+0x10/0x10 [ 328.445102][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.445150][ T6133] ? irqentry_exit+0x24d/0xa00 [ 328.445201][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.445249][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.445296][ T6133] ? irqentry_exit+0x24d/0xa00 [ 328.445360][ T6133] ? ep_open+0x4c/0x2c0 [ 328.445390][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.445437][ T6133] ep_open+0x4c/0x2c0 [ 328.445471][ T6133] do_dentry_open+0x6ab/0x14d0 [ 328.445530][ T6133] ? __pfx_ep_open+0x10/0x10 [ 328.445565][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.445615][ T6133] vfs_open+0x82/0x3f0 [ 328.445648][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.445699][ T6133] path_openat+0x2873/0x4280 [ 328.445772][ T6133] ? __pfx_path_openat+0x10/0x10 [ 328.445837][ T6133] do_file_open+0x20e/0x430 [ 328.445896][ T6133] ? __pfx_do_file_open+0x10/0x10 [ 328.445971][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.446017][ T6133] ? alloc_fd+0x471/0x7a0 [ 328.446077][ T6133] ? do_getname+0x191/0x390 [ 328.446118][ T6133] do_sys_openat2+0x10f/0x1e0 [ 328.446155][ T6133] ? __pfx_do_sys_openat2+0x10/0x10 [ 328.446197][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.446248][ T6133] __x64_sys_openat+0x12d/0x210 [ 328.446287][ T6133] ? __pfx___x64_sys_openat+0x10/0x10 [ 328.446330][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.446382][ T6133] do_syscall_64+0x115/0x870 [ 328.446443][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.446486][ T6133] RIP: 0033:0x7f568795e90e [ 328.446525][ T6133] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 328.446566][ T6133] RSP: 002b:00007ffcf8f50c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 328.446602][ T6133] RAX: ffffffffffffffda RBX: 00005555778be500 RCX: 00007f568795e90e [ 328.446629][ T6133] RDX: 0000000000000000 RSI: 00007ffcf8f50de0 RDI: ffffffffffffff9c [ 328.446654][ T6133] RBP: 00007ffcf8f50de0 R08: 0000000000000000 R09: 0000000000000000 [ 328.446679][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf8f51ed0 [ 328.446703][ T6133] R13: 00007f5687a34474 R14: 00005555778be4e8 R15: 0000000000000006 [ 328.446742][ T6133] [ 328.446754][ T6133] [ 328.752780][ T6133] Allocated by task 8092: [ 328.757093][ T6133] kasan_save_stack+0x30/0x50 [ 328.761785][ T6133] kasan_save_track+0x14/0x30 [ 328.766471][ T6133] __kasan_kmalloc+0xaa/0xb0 [ 328.771071][ T6133] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 328.776454][ T6133] gadgetfs_bind+0x582/0x890 [ 328.781151][ T6133] gadget_bind_driver+0x28c/0xbf0 [ 328.786175][ T6133] really_probe+0x241/0xa60 [ 328.790698][ T6133] __driver_probe_device+0x20e/0x450 [ 328.795999][ T6133] driver_probe_device+0x4a/0x140 [ 328.801045][ T6133] __driver_attach+0x21f/0x5b0 [ 328.805832][ T6133] bus_for_each_dev+0x13e/0x1d0 [ 328.810702][ T6133] bus_add_driver+0x305/0x5b0 [ 328.815391][ T6133] driver_register+0x1e2/0x360 [ 328.820176][ T6133] usb_gadget_register_driver_owner+0x132/0x210 [ 328.826453][ T6133] dev_config+0xdce/0x1610 [ 328.830878][ T6133] vfs_write+0x2aa/0x1050 [ 328.835208][ T6133] ksys_write+0x12a/0x250 [ 328.839570][ T6133] do_syscall_64+0x115/0x870 [ 328.844173][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.850061][ T6133] [ 328.852368][ T6133] Freed by task 10: [ 328.856161][ T6133] kasan_save_stack+0x30/0x50 [ 328.860860][ T6133] kasan_save_track+0x14/0x30 [ 328.865634][ T6133] kasan_save_free_info+0x3b/0x70 [ 328.870661][ T6133] __kasan_slab_free+0x5f/0x80 [ 328.875418][ T6133] kfree+0x22b/0x6c0 [ 328.879321][ T6133] put_ep+0x117/0x150 [ 328.883311][ T6133] destroy_ep_files+0x163/0x420 [ 328.888197][ T6133] gadgetfs_unbind+0x139/0x260 [ 328.892972][ T6133] gadget_unbind_driver+0x20c/0x4f0 [ 328.898621][ T6133] device_remove+0xcb/0x180 [ 328.903144][ T6133] device_release_driver_internal+0x44e/0x620 [ 328.909229][ T6133] driver_detach+0xd8/0x1b0 [ 328.913748][ T6133] bus_remove_driver+0x13b/0x2e0 [ 328.918695][ T6133] driver_unregister+0x76/0xb0 [ 328.923495][ T6133] usb_gadget_unregister_driver+0x49/0x70 [ 328.929240][ T6133] dev_release+0x132/0x1b0 [ 328.933683][ T6133] __fput+0x3ff/0xb50 [ 328.937654][ T6133] delayed_fput+0x72/0x90 [ 328.942015][ T6133] process_one_work+0xa23/0x1940 [ 328.946947][ T6133] worker_thread+0x5ef/0xe50 [ 328.951536][ T6133] kthread+0x370/0x450 [ 328.955653][ T6133] ret_from_fork+0x72b/0xd50 [ 328.960246][ T6133] ret_from_fork_asm+0x1a/0x30 [ 328.965027][ T6133] [ 328.967336][ T6133] The buggy address belongs to the object at ffff88807fb22800 [ 328.967336][ T6133] which belongs to the cache kmalloc-512 of size 512 [ 328.981403][ T6133] The buggy address is located 0 bytes inside of [ 328.981403][ T6133] freed 512-byte region [ffff88807fb22800, ffff88807fb22a00) [ 328.995030][ T6133] [ 328.997343][ T6133] The buggy address belongs to the physical page: [ 329.003739][ T6133] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fb20 [ 329.012494][ T6133] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 329.020990][ T6133] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 329.028533][ T6133] page_type: f5(slab) [ 329.032521][ T6133] raw: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 329.041106][ T6133] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 329.049728][ T6133] head: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 329.058404][ T6133] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 329.067072][ T6133] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 329.075746][ T6133] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 329.084425][ T6133] page dumped because: kasan: bad access detected [ 329.090832][ T6133] page_owner tracks the page as allocated [ 329.096536][ T6133] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4977, tgid 4977 (S02sysctl), ts 30652066783, free_ts 28147710241 [ 329.116877][ T6133] post_alloc_hook+0xfd/0x120 [ 329.121572][ T6133] get_page_from_freelist+0xf48/0x3530 [ 329.127051][ T6133] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 329.132999][ T6133] new_slab+0xa2/0x640 [ 329.137080][ T6133] refill_objects+0xe3/0x410 [ 329.141687][ T6133] __pcs_replace_empty_main+0x376/0x680 [ 329.147245][ T6133] __kmalloc_noprof+0x66d/0x820 [ 329.152122][ T6133] tomoyo_init_log+0x1224/0x20c0 [ 329.157079][ T6133] tomoyo_supervisor+0x506/0x1340 [ 329.162103][ T6133] tomoyo_path_permission+0x270/0x3b0 [ 329.167486][ T6133] tomoyo_path_perm+0x364/0x460 [ 329.172346][ T6133] security_inode_getattr+0x116/0x280 [ 329.177730][ T6133] vfs_fstat+0x4b/0xe0 [ 329.181823][ T6133] __do_sys_newfstat+0x8b/0x110 [ 329.186713][ T6133] do_syscall_64+0x115/0x870 [ 329.191334][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.197228][ T6133] page last free pid 1 tgid 1 stack trace: [ 329.203018][ T6133] free_pages_prepare+0x586/0xd80 [ 329.208064][ T6133] __free_contig_range_common+0x14f/0x250 [ 329.213821][ T6133] destroy_args+0xa8/0x7a0 [ 329.218283][ T6133] debug_vm_pgtable+0x1d69/0x3490 [ 329.223320][ T6133] do_one_initcall+0x11d/0x700 [ 329.228089][ T6133] kernel_init_freeable+0x6ea/0x7b0 [ 329.233323][ T6133] kernel_init+0x1f/0x1e0 [ 329.237649][ T6133] ret_from_fork+0x72b/0xd50 [ 329.242243][ T6133] ret_from_fork_asm+0x1a/0x30 [ 329.247023][ T6133] [ 329.249329][ T6133] Memory state around the buggy address: [ 329.254943][ T6133] ffff88807fb22700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 329.263000][ T6133] ffff88807fb22780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 329.271069][ T6133] >ffff88807fb22800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 329.279120][ T6133] ^ [ 329.283197][ T6133] ffff88807fb22880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 329.291315][ T6133] ffff88807fb22900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 329.299368][ T6133] ================================================================== [ 329.391308][ T7890] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 329.446563][ T6133] ================================================================== [ 329.463821][ T6133] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 329.471689][ T6133] Read of size 4 at addr ffff88807fb2280c by task syz-executor/6133 [ 329.479860][ T6133] [ 329.482199][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(full) [ 329.482251][ T6133] Tainted: [B]=BAD_PAGE [ 329.482263][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 329.482284][ T6133] Call Trace: [ 329.482298][ T6133] [ 329.482311][ T6133] dump_stack_lvl+0x100/0x190 [ 329.482355][ T6133] print_report+0x13d/0x4b0 [ 329.482407][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.482450][ T6133] ? __virt_addr_valid+0x239/0x430 [ 329.482494][ T6133] ? do_raw_spin_lock+0x23b/0x260 [ 329.482541][ T6133] kasan_report+0xdf/0x1c0 [ 329.482579][ T6133] ? do_raw_spin_lock+0x23b/0x260 [ 329.482631][ T6133] do_raw_spin_lock+0x23b/0x260 [ 329.482677][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.482720][ T6133] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 329.482766][ T6133] ? lock_acquire+0x301/0x370 [ 329.482804][ T6133] ? __mutex_lock+0x18f9/0x1bd0 [ 329.482855][ T6133] ? _raw_spin_lock_irqsave+0x52/0x60 [ 329.482898][ T6133] ? __mutex_lock+0x1610/0x1bd0 [ 329.482946][ T6133] _raw_spin_lock_irqsave+0x42/0x60 [ 329.482986][ T6133] ? __mutex_lock+0x31f/0x1bd0 [ 329.483041][ T6133] __mutex_lock+0x31f/0x1bd0 [ 329.483090][ T6133] ? ep_open+0x4c/0x2c0 [ 329.483121][ T6133] ? __pfx___schedule+0x10/0x10 [ 329.483173][ T6133] ? __pfx___mutex_lock+0x10/0x10 [ 329.483222][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.483265][ T6133] ? irqentry_exit+0x24d/0xa00 [ 329.483312][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.483361][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.483403][ T6133] ? irqentry_exit+0x24d/0xa00 [ 329.483459][ T6133] ? ep_open+0x4c/0x2c0 [ 329.483487][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.483529][ T6133] ep_open+0x4c/0x2c0 [ 329.483559][ T6133] do_dentry_open+0x6ab/0x14d0 [ 329.483606][ T6133] ? __pfx_ep_open+0x10/0x10 [ 329.483637][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.483682][ T6133] vfs_open+0x82/0x3f0 [ 329.483711][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.483756][ T6133] path_openat+0x2873/0x4280 [ 329.483818][ T6133] ? __pfx_path_openat+0x10/0x10 [ 329.483875][ T6133] do_file_open+0x20e/0x430 [ 329.483928][ T6133] ? __pfx_do_file_open+0x10/0x10 [ 329.483995][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.484041][ T6133] ? alloc_fd+0x471/0x7a0 [ 329.484094][ T6133] ? do_getname+0x191/0x390 [ 329.484130][ T6133] do_sys_openat2+0x10f/0x1e0 [ 329.484163][ T6133] ? __pfx_do_sys_openat2+0x10/0x10 [ 329.484200][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.484246][ T6133] __x64_sys_openat+0x12d/0x210 [ 329.484287][ T6133] ? __pfx___x64_sys_openat+0x10/0x10 [ 329.484326][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.484372][ T6133] do_syscall_64+0x115/0x870 [ 329.484424][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.484460][ T6133] RIP: 0033:0x7f568795e90e [ 329.484487][ T6133] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 329.484521][ T6133] RSP: 002b:00007ffcf8f50c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 329.484553][ T6133] RAX: ffffffffffffffda RBX: 00005555778be500 RCX: 00007f568795e90e [ 329.484576][ T6133] RDX: 0000000000000000 RSI: 00007ffcf8f50de0 RDI: ffffffffffffff9c [ 329.484599][ T6133] RBP: 00007ffcf8f50de0 R08: 0000000000000000 R09: 0000000000000000 [ 329.484620][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf8f51ed0 [ 329.484642][ T6133] R13: 00007f5687a34474 R14: 00005555778be4e8 R15: 0000000000000006 [ 329.484677][ T6133] [ 329.484688][ T6133] [ 329.832017][ T6133] Allocated by task 8092: [ 329.836342][ T6133] kasan_save_stack+0x30/0x50 [ 329.841058][ T6133] kasan_save_track+0x14/0x30 [ 329.846088][ T6133] __kasan_kmalloc+0xaa/0xb0 [ 329.850832][ T6133] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 329.856231][ T6133] gadgetfs_bind+0x582/0x890 [ 329.860890][ T6133] gadget_bind_driver+0x28c/0xbf0 [ 329.865937][ T6133] really_probe+0x241/0xa60 [ 329.870476][ T6133] __driver_probe_device+0x20e/0x450 [ 329.875957][ T6133] driver_probe_device+0x4a/0x140 [ 329.881013][ T6133] __driver_attach+0x21f/0x5b0 [ 329.885797][ T6133] bus_for_each_dev+0x13e/0x1d0 [ 329.890771][ T6133] bus_add_driver+0x305/0x5b0 [ 329.895459][ T6133] driver_register+0x1e2/0x360 [ 329.900249][ T6133] usb_gadget_register_driver_owner+0x132/0x210 [ 329.906500][ T6133] dev_config+0xdce/0x1610 [ 329.910964][ T6133] vfs_write+0x2aa/0x1050 [ 329.915314][ T6133] ksys_write+0x12a/0x250 [ 329.919670][ T6133] do_syscall_64+0x115/0x870 [ 329.924376][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.930312][ T6133] [ 329.932625][ T6133] Freed by task 10: [ 329.936421][ T6133] kasan_save_stack+0x30/0x50 [ 329.941125][ T6133] kasan_save_track+0x14/0x30 [ 329.945829][ T6133] kasan_save_free_info+0x3b/0x70 [ 329.950878][ T6133] __kasan_slab_free+0x5f/0x80 [ 329.955822][ T6133] kfree+0x22b/0x6c0 [ 329.959734][ T6133] put_ep+0x117/0x150 [ 329.963744][ T6133] destroy_ep_files+0x163/0x420 [ 329.968622][ T6133] gadgetfs_unbind+0x139/0x260 [ 329.973416][ T6133] gadget_unbind_driver+0x20c/0x4f0 [ 329.978721][ T6133] device_remove+0xcb/0x180 [ 329.983244][ T6133] device_release_driver_internal+0x44e/0x620 [ 329.989340][ T6133] driver_detach+0xd8/0x1b0 [ 329.993865][ T6133] bus_remove_driver+0x13b/0x2e0 [ 329.998814][ T6133] driver_unregister+0x76/0xb0 [ 330.003603][ T6133] usb_gadget_unregister_driver+0x49/0x70 [ 330.009338][ T6133] dev_release+0x132/0x1b0 [ 330.013780][ T6133] __fput+0x3ff/0xb50 [ 330.017804][ T6133] delayed_fput+0x72/0x90 [ 330.022136][ T6133] process_one_work+0xa23/0x1940 [ 330.027079][ T6133] worker_thread+0x5ef/0xe50 [ 330.031674][ T6133] kthread+0x370/0x450 [ 330.035767][ T6133] ret_from_fork+0x72b/0xd50 [ 330.040374][ T6133] ret_from_fork_asm+0x1a/0x30 [ 330.045160][ T6133] [ 330.047478][ T6133] The buggy address belongs to the object at ffff88807fb22800 [ 330.047478][ T6133] which belongs to the cache kmalloc-512 of size 512 [ 330.061532][ T6133] The buggy address is located 12 bytes inside of [ 330.061532][ T6133] freed 512-byte region [ffff88807fb22800, ffff88807fb22a00) [ 330.075259][ T6133] [ 330.077579][ T6133] The buggy address belongs to the physical page: [ 330.083982][ T6133] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fb20 [ 330.092748][ T6133] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 330.101248][ T6133] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 330.108795][ T6133] page_type: f5(slab) [ 330.112780][ T6133] raw: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 330.121373][ T6133] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 330.129963][ T6133] head: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 330.138644][ T6133] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 330.147321][ T6133] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 330.155998][ T6133] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 330.164709][ T6133] page dumped because: kasan: bad access detected [ 330.171115][ T6133] page_owner tracks the page as allocated [ 330.176821][ T6133] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4977, tgid 4977 (S02sysctl), ts 30652066783, free_ts 28147710241 [ 330.197180][ T6133] post_alloc_hook+0xfd/0x120 [ 330.201902][ T6133] get_page_from_freelist+0xf48/0x3530 [ 330.207432][ T6133] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 330.213353][ T6133] new_slab+0xa2/0x640 [ 330.217439][ T6133] refill_objects+0xe3/0x410 [ 330.222047][ T6133] __pcs_replace_empty_main+0x376/0x680 [ 330.227609][ T6133] __kmalloc_noprof+0x66d/0x820 [ 330.232485][ T6133] tomoyo_init_log+0x1224/0x20c0 [ 330.237967][ T6133] tomoyo_supervisor+0x506/0x1340 [ 330.243000][ T6133] tomoyo_path_permission+0x270/0x3b0 [ 330.248386][ T6133] tomoyo_path_perm+0x364/0x460 [ 330.253253][ T6133] security_inode_getattr+0x116/0x280 [ 330.258645][ T6133] vfs_fstat+0x4b/0xe0 [ 330.262739][ T6133] __do_sys_newfstat+0x8b/0x110 [ 330.267629][ T6133] do_syscall_64+0x115/0x870 [ 330.272239][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.278139][ T6133] page last free pid 1 tgid 1 stack trace: [ 330.283935][ T6133] free_pages_prepare+0x586/0xd80 [ 330.288978][ T6133] __free_contig_range_common+0x14f/0x250 [ 330.294719][ T6133] destroy_args+0xa8/0x7a0 [ 330.299161][ T6133] debug_vm_pgtable+0x1d69/0x3490 [ 330.304216][ T6133] do_one_initcall+0x11d/0x700 [ 330.308998][ T6133] kernel_init_freeable+0x6ea/0x7b0 [ 330.314228][ T6133] kernel_init+0x1f/0x1e0 [ 330.318558][ T6133] ret_from_fork+0x72b/0xd50 [ 330.323163][ T6133] ret_from_fork_asm+0x1a/0x30 [ 330.327948][ T6133] [ 330.330260][ T6133] Memory state around the buggy address: [ 330.335901][ T6133] ffff88807fb22700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 330.343965][ T6133] ffff88807fb22780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 330.352049][ T6133] >ffff88807fb22800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 330.360105][ T6133] ^ [ 330.364436][ T6133] ffff88807fb22880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 330.372550][ T6133] ffff88807fb22900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 330.380614][ T6133] ================================================================== [ 330.388673][ T6133] ================================================================== [ 330.396726][ T6133] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x248/0x260 [ 330.404561][ T6133] Read of size 8 at addr ffff88807fb22818 by task syz-executor/6133 [ 330.412627][ T6133] [ 330.414953][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(full) [ 330.415003][ T6133] Tainted: [B]=BAD_PAGE [ 330.415022][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 330.415044][ T6133] Call Trace: [ 330.415055][ T6133] [ 330.415068][ T6133] dump_stack_lvl+0x100/0x190 [ 330.415109][ T6133] print_report+0x13d/0x4b0 [ 330.415161][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.415204][ T6133] ? __virt_addr_valid+0x239/0x430 [ 330.415248][ T6133] ? do_raw_spin_lock+0x248/0x260 [ 330.415295][ T6133] kasan_report+0xdf/0x1c0 [ 330.415336][ T6133] ? do_raw_spin_lock+0x248/0x260 [ 330.415388][ T6133] do_raw_spin_lock+0x248/0x260 [ 330.415434][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.415478][ T6133] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 330.415525][ T6133] ? lock_acquire+0x301/0x370 [ 330.415563][ T6133] ? __mutex_lock+0x18f9/0x1bd0 [ 330.415614][ T6133] ? _raw_spin_lock_irqsave+0x52/0x60 [ 330.415657][ T6133] ? __mutex_lock+0x1610/0x1bd0 [ 330.415706][ T6133] _raw_spin_lock_irqsave+0x42/0x60 [ 330.415746][ T6133] ? __mutex_lock+0x31f/0x1bd0 [ 330.415795][ T6133] __mutex_lock+0x31f/0x1bd0 [ 330.415844][ T6133] ? ep_open+0x4c/0x2c0 [ 330.415875][ T6133] ? __pfx___schedule+0x10/0x10 [ 330.415919][ T6133] ? __pfx___mutex_lock+0x10/0x10 [ 330.415968][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.416018][ T6133] ? irqentry_exit+0x24d/0xa00 [ 330.416064][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.416108][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.416150][ T6133] ? irqentry_exit+0x24d/0xa00 [ 330.416207][ T6133] ? ep_open+0x4c/0x2c0 [ 330.416235][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.416277][ T6133] ep_open+0x4c/0x2c0 [ 330.416308][ T6133] do_dentry_open+0x6ab/0x14d0 [ 330.416355][ T6133] ? __pfx_ep_open+0x10/0x10 [ 330.416387][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.416432][ T6133] vfs_open+0x82/0x3f0 [ 330.416462][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.416508][ T6133] path_openat+0x2873/0x4280 [ 330.416569][ T6133] ? __pfx_path_openat+0x10/0x10 [ 330.416627][ T6133] do_file_open+0x20e/0x430 [ 330.416680][ T6133] ? __pfx_do_file_open+0x10/0x10 [ 330.416748][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.416790][ T6133] ? alloc_fd+0x471/0x7a0 [ 330.416843][ T6133] ? do_getname+0x191/0x390 [ 330.416879][ T6133] do_sys_openat2+0x10f/0x1e0 [ 330.416913][ T6133] ? __pfx_do_sys_openat2+0x10/0x10 [ 330.416951][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.416997][ T6133] __x64_sys_openat+0x12d/0x210 [ 330.417037][ T6133] ? __pfx___x64_sys_openat+0x10/0x10 [ 330.417076][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.417123][ T6133] do_syscall_64+0x115/0x870 [ 330.417174][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.417210][ T6133] RIP: 0033:0x7f568795e90e [ 330.417237][ T6133] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 330.417273][ T6133] RSP: 002b:00007ffcf8f50c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 330.417306][ T6133] RAX: ffffffffffffffda RBX: 00005555778be500 RCX: 00007f568795e90e [ 330.417330][ T6133] RDX: 0000000000000000 RSI: 00007ffcf8f50de0 RDI: ffffffffffffff9c [ 330.417353][ T6133] RBP: 00007ffcf8f50de0 R08: 0000000000000000 R09: 0000000000000000 [ 330.417375][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf8f51ed0 [ 330.417398][ T6133] R13: 00007f5687a34474 R14: 00005555778be4e8 R15: 0000000000000006 [ 330.417433][ T6133] [ 330.417445][ T6133] [ 330.763961][ T6133] Allocated by task 8092: [ 330.768288][ T6133] kasan_save_stack+0x30/0x50 [ 330.773001][ T6133] kasan_save_track+0x14/0x30 [ 330.777714][ T6133] __kasan_kmalloc+0xaa/0xb0 [ 330.782332][ T6133] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 330.787726][ T6133] gadgetfs_bind+0x582/0x890 [ 330.792346][ T6133] gadget_bind_driver+0x28c/0xbf0 [ 330.797403][ T6133] really_probe+0x241/0xa60 [ 330.801932][ T6133] __driver_probe_device+0x20e/0x450 [ 330.807241][ T6133] driver_probe_device+0x4a/0x140 [ 330.812287][ T6133] __driver_attach+0x21f/0x5b0 [ 330.817156][ T6133] bus_for_each_dev+0x13e/0x1d0 [ 330.822021][ T6133] bus_add_driver+0x305/0x5b0 [ 330.826709][ T6133] driver_register+0x1e2/0x360 [ 330.831497][ T6133] usb_gadget_register_driver_owner+0x132/0x210 [ 330.837748][ T6133] dev_config+0xdce/0x1610 [ 330.842276][ T6133] vfs_write+0x2aa/0x1050 [ 330.846619][ T6133] ksys_write+0x12a/0x250 [ 330.850964][ T6133] do_syscall_64+0x115/0x870 [ 330.855581][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.861483][ T6133] [ 330.863798][ T6133] Freed by task 10: [ 330.867593][ T6133] kasan_save_stack+0x30/0x50 [ 330.872298][ T6133] kasan_save_track+0x14/0x30 [ 330.877059][ T6133] kasan_save_free_info+0x3b/0x70 [ 330.882110][ T6133] __kasan_slab_free+0x5f/0x80 [ 330.886883][ T6133] kfree+0x22b/0x6c0 [ 330.890794][ T6133] put_ep+0x117/0x150 [ 330.894801][ T6133] destroy_ep_files+0x163/0x420 [ 330.899677][ T6133] gadgetfs_unbind+0x139/0x260 [ 330.904471][ T6133] gadget_unbind_driver+0x20c/0x4f0 [ 330.909815][ T6133] device_remove+0xcb/0x180 [ 330.914344][ T6133] device_release_driver_internal+0x44e/0x620 [ 330.920440][ T6133] driver_detach+0xd8/0x1b0 [ 330.924991][ T6133] bus_remove_driver+0x13b/0x2e0 [ 330.929982][ T6133] driver_unregister+0x76/0xb0 [ 330.934775][ T6133] usb_gadget_unregister_driver+0x49/0x70 [ 330.940591][ T6133] dev_release+0x132/0x1b0 [ 330.945057][ T6133] __fput+0x3ff/0xb50 [ 330.949041][ T6133] delayed_fput+0x72/0x90 [ 330.953485][ T6133] process_one_work+0xa23/0x1940 [ 330.958434][ T6133] worker_thread+0x5ef/0xe50 [ 330.963032][ T6133] kthread+0x370/0x450 [ 330.967135][ T6133] ret_from_fork+0x72b/0xd50 [ 330.971742][ T6133] ret_from_fork_asm+0x1a/0x30 [ 330.976538][ T6133] [ 330.978865][ T6133] The buggy address belongs to the object at ffff88807fb22800 [ 330.978865][ T6133] which belongs to the cache kmalloc-512 of size 512 [ 330.992949][ T6133] The buggy address is located 24 bytes inside of [ 330.992949][ T6133] freed 512-byte region [ffff88807fb22800, ffff88807fb22a00) [ 331.006678][ T6133] [ 331.009084][ T6133] The buggy address belongs to the physical page: [ 331.015486][ T6133] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fb20 [ 331.024253][ T6133] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 331.032756][ T6133] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 331.040302][ T6133] page_type: f5(slab) [ 331.044287][ T6133] raw: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 331.052966][ T6133] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 331.061570][ T6133] head: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 331.070288][ T6133] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 331.078970][ T6133] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 331.087655][ T6133] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 331.096332][ T6133] page dumped because: kasan: bad access detected [ 331.102925][ T6133] page_owner tracks the page as allocated [ 331.108721][ T6133] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4977, tgid 4977 (S02sysctl), ts 30652066783, free_ts 28147710241 [ 331.129071][ T6133] post_alloc_hook+0xfd/0x120 [ 331.133778][ T6133] get_page_from_freelist+0xf48/0x3530 [ 331.139266][ T6133] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 331.145187][ T6133] new_slab+0xa2/0x640 [ 331.149271][ T6133] refill_objects+0xe3/0x410 [ 331.153884][ T6133] __pcs_replace_empty_main+0x376/0x680 [ 331.159444][ T6133] __kmalloc_noprof+0x66d/0x820 [ 331.164328][ T6133] tomoyo_init_log+0x1224/0x20c0 [ 331.169288][ T6133] tomoyo_supervisor+0x506/0x1340 [ 331.174749][ T6133] tomoyo_path_permission+0x270/0x3b0 [ 331.180137][ T6133] tomoyo_path_perm+0x364/0x460 [ 331.184998][ T6133] security_inode_getattr+0x116/0x280 [ 331.190389][ T6133] vfs_fstat+0x4b/0xe0 [ 331.194484][ T6133] __do_sys_newfstat+0x8b/0x110 [ 331.199363][ T6133] do_syscall_64+0x115/0x870 [ 331.203973][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.209881][ T6133] page last free pid 1 tgid 1 stack trace: [ 331.215688][ T6133] free_pages_prepare+0x586/0xd80 [ 331.220728][ T6133] __free_contig_range_common+0x14f/0x250 [ 331.226464][ T6133] destroy_args+0xa8/0x7a0 [ 331.230911][ T6133] debug_vm_pgtable+0x1d69/0x3490 [ 331.235969][ T6133] do_one_initcall+0x11d/0x700 [ 331.240763][ T6133] kernel_init_freeable+0x6ea/0x7b0 [ 331.245984][ T6133] kernel_init+0x1f/0x1e0 [ 331.250322][ T6133] ret_from_fork+0x72b/0xd50 [ 331.254927][ T6133] ret_from_fork_asm+0x1a/0x30 [ 331.259711][ T6133] [ 331.262029][ T6133] Memory state around the buggy address: [ 331.267684][ T6133] ffff88807fb22700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 331.275749][ T6133] ffff88807fb22780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 331.283896][ T6133] >ffff88807fb22800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 331.291949][ T6133] ^ [ 331.296791][ T6133] ffff88807fb22880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 331.304849][ T6133] ffff88807fb22900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 331.312902][ T6133] ================================================================== [ 331.320952][ T6133] ================================================================== [ 331.329004][ T6133] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x231/0x260 [ 331.336863][ T6133] Read of size 4 at addr ffff88807fb22810 by task syz-executor/6133 [ 331.344839][ T6133] [ 331.347169][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(full) [ 331.347220][ T6133] Tainted: [B]=BAD_PAGE [ 331.347232][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 331.347254][ T6133] Call Trace: [ 331.347268][ T6133] [ 331.347281][ T6133] dump_stack_lvl+0x100/0x190 [ 331.347323][ T6133] print_report+0x13d/0x4b0 [ 331.347375][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.347418][ T6133] ? __virt_addr_valid+0x239/0x430 [ 331.347463][ T6133] ? do_raw_spin_lock+0x231/0x260 [ 331.347510][ T6133] kasan_report+0xdf/0x1c0 [ 331.347548][ T6133] ? do_raw_spin_lock+0x231/0x260 [ 331.347601][ T6133] do_raw_spin_lock+0x231/0x260 [ 331.347647][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.347690][ T6133] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 331.347737][ T6133] ? lock_acquire+0x301/0x370 [ 331.347775][ T6133] ? __mutex_lock+0x18f9/0x1bd0 [ 331.347826][ T6133] ? _raw_spin_lock_irqsave+0x52/0x60 [ 331.347869][ T6133] ? __mutex_lock+0x1610/0x1bd0 [ 331.347918][ T6133] _raw_spin_lock_irqsave+0x42/0x60 [ 331.347959][ T6133] ? __mutex_lock+0x31f/0x1bd0 [ 331.348007][ T6133] __mutex_lock+0x31f/0x1bd0 [ 331.348072][ T6133] ? ep_open+0x4c/0x2c0 [ 331.348103][ T6133] ? __pfx___schedule+0x10/0x10 [ 331.348146][ T6133] ? __pfx___mutex_lock+0x10/0x10 [ 331.348195][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.348239][ T6133] ? irqentry_exit+0x24d/0xa00 [ 331.348286][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.348330][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.348372][ T6133] ? irqentry_exit+0x24d/0xa00 [ 331.348428][ T6133] ? ep_open+0x4c/0x2c0 [ 331.348456][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.348498][ T6133] ep_open+0x4c/0x2c0 [ 331.348529][ T6133] do_dentry_open+0x6ab/0x14d0 [ 331.348577][ T6133] ? __pfx_ep_open+0x10/0x10 [ 331.348608][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.348653][ T6133] vfs_open+0x82/0x3f0 [ 331.348682][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.348728][ T6133] path_openat+0x2873/0x4280 [ 331.348789][ T6133] ? __pfx_path_openat+0x10/0x10 [ 331.348847][ T6133] do_file_open+0x20e/0x430 [ 331.348900][ T6133] ? __pfx_do_file_open+0x10/0x10 [ 331.348967][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.349010][ T6133] ? alloc_fd+0x471/0x7a0 [ 331.349068][ T6133] ? do_getname+0x191/0x390 [ 331.349104][ T6133] do_sys_openat2+0x10f/0x1e0 [ 331.349137][ T6133] ? __pfx_do_sys_openat2+0x10/0x10 [ 331.349175][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.349221][ T6133] __x64_sys_openat+0x12d/0x210 [ 331.349257][ T6133] ? __pfx___x64_sys_openat+0x10/0x10 [ 331.349296][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.349342][ T6133] do_syscall_64+0x115/0x870 [ 331.349394][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.349430][ T6133] RIP: 0033:0x7f568795e90e [ 331.349457][ T6133] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 331.349492][ T6133] RSP: 002b:00007ffcf8f50c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 331.349525][ T6133] RAX: ffffffffffffffda RBX: 00005555778be500 RCX: 00007f568795e90e [ 331.349549][ T6133] RDX: 0000000000000000 RSI: 00007ffcf8f50de0 RDI: ffffffffffffff9c [ 331.349573][ T6133] RBP: 00007ffcf8f50de0 R08: 0000000000000000 R09: 0000000000000000 [ 331.349595][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf8f51ed0 [ 331.349618][ T6133] R13: 00007f5687a34474 R14: 00005555778be4e8 R15: 0000000000000006 [ 331.349653][ T6133] [ 331.349665][ T6133] [ 331.696652][ T6133] Allocated by task 8092: [ 331.700980][ T6133] kasan_save_stack+0x30/0x50 [ 331.705743][ T6133] kasan_save_track+0x14/0x30 [ 331.710451][ T6133] __kasan_kmalloc+0xaa/0xb0 [ 331.715152][ T6133] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 331.720541][ T6133] gadgetfs_bind+0x582/0x890 [ 331.725161][ T6133] gadget_bind_driver+0x28c/0xbf0 [ 331.730195][ T6133] really_probe+0x241/0xa60 [ 331.734723][ T6133] __driver_probe_device+0x20e/0x450 [ 331.740038][ T6133] driver_probe_device+0x4a/0x140 [ 331.745086][ T6133] __driver_attach+0x21f/0x5b0 [ 331.749877][ T6133] bus_for_each_dev+0x13e/0x1d0 [ 331.754772][ T6133] bus_add_driver+0x305/0x5b0 [ 331.759464][ T6133] driver_register+0x1e2/0x360 [ 331.764256][ T6133] usb_gadget_register_driver_owner+0x132/0x210 [ 331.770507][ T6133] dev_config+0xdce/0x1610 [ 331.774951][ T6133] vfs_write+0x2aa/0x1050 [ 331.779295][ T6133] ksys_write+0x12a/0x250 [ 331.783641][ T6133] do_syscall_64+0x115/0x870 [ 331.788254][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.794153][ T6133] [ 331.796466][ T6133] Freed by task 10: [ 331.800261][ T6133] kasan_save_stack+0x30/0x50 [ 331.804967][ T6133] kasan_save_track+0x14/0x30 [ 331.809676][ T6133] kasan_save_free_info+0x3b/0x70 [ 331.814719][ T6133] __kasan_slab_free+0x5f/0x80 [ 331.819507][ T6133] kfree+0x22b/0x6c0 [ 331.823479][ T6133] put_ep+0x117/0x150 [ 331.827488][ T6133] destroy_ep_files+0x163/0x420 [ 331.832370][ T6133] gadgetfs_unbind+0x139/0x260 [ 331.837161][ T6133] gadget_unbind_driver+0x20c/0x4f0 [ 331.842374][ T6133] device_remove+0xcb/0x180 [ 331.846893][ T6133] device_release_driver_internal+0x44e/0x620 [ 331.852985][ T6133] driver_detach+0xd8/0x1b0 [ 331.857521][ T6133] bus_remove_driver+0x13b/0x2e0 [ 331.862569][ T6133] driver_unregister+0x76/0xb0 [ 331.867359][ T6133] usb_gadget_unregister_driver+0x49/0x70 [ 331.873177][ T6133] dev_release+0x132/0x1b0 [ 331.877620][ T6133] __fput+0x3ff/0xb50 [ 331.881600][ T6133] delayed_fput+0x72/0x90 [ 331.885933][ T6133] process_one_work+0xa23/0x1940 [ 331.890875][ T6133] worker_thread+0x5ef/0xe50 [ 331.895469][ T6133] kthread+0x370/0x450 [ 331.899651][ T6133] ret_from_fork+0x72b/0xd50 [ 331.904267][ T6133] ret_from_fork_asm+0x1a/0x30 [ 331.909053][ T6133] [ 331.911369][ T6133] The buggy address belongs to the object at ffff88807fb22800 [ 331.911369][ T6133] which belongs to the cache kmalloc-512 of size 512 [ 331.925426][ T6133] The buggy address is located 16 bytes inside of [ 331.925426][ T6133] freed 512-byte region [ffff88807fb22800, ffff88807fb22a00) [ 331.939149][ T6133] [ 331.941466][ T6133] The buggy address belongs to the physical page: [ 331.947865][ T6133] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fb20 [ 331.956626][ T6133] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 331.965126][ T6133] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 331.972677][ T6133] page_type: f5(slab) [ 331.976668][ T6133] raw: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 331.985274][ T6133] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 331.993869][ T6133] head: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 332.002547][ T6133] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 332.011228][ T6133] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 332.019906][ T6133] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 332.028570][ T6133] page dumped because: kasan: bad access detected [ 332.034976][ T6133] page_owner tracks the page as allocated [ 332.040679][ T6133] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4977, tgid 4977 (S02sysctl), ts 30652066783, free_ts 28147710241 [ 332.061028][ T6133] post_alloc_hook+0xfd/0x120 [ 332.065736][ T6133] get_page_from_freelist+0xf48/0x3530 [ 332.071221][ T6133] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 332.077139][ T6133] new_slab+0xa2/0x640 [ 332.081222][ T6133] refill_objects+0xe3/0x410 [ 332.085827][ T6133] __pcs_replace_empty_main+0x376/0x680 [ 332.091390][ T6133] __kmalloc_noprof+0x66d/0x820 [ 332.096265][ T6133] tomoyo_init_log+0x1224/0x20c0 [ 332.101229][ T6133] tomoyo_supervisor+0x506/0x1340 [ 332.106266][ T6133] tomoyo_path_permission+0x270/0x3b0 [ 332.111652][ T6133] tomoyo_path_perm+0x364/0x460 [ 332.116519][ T6133] security_inode_getattr+0x116/0x280 [ 332.121908][ T6133] vfs_fstat+0x4b/0xe0 [ 332.125999][ T6133] __do_sys_newfstat+0x8b/0x110 [ 332.130963][ T6133] do_syscall_64+0x115/0x870 [ 332.135571][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.141493][ T6133] page last free pid 1 tgid 1 stack trace: [ 332.147294][ T6133] free_pages_prepare+0x586/0xd80 [ 332.152336][ T6133] __free_contig_range_common+0x14f/0x250 [ 332.158076][ T6133] destroy_args+0xa8/0x7a0 [ 332.162527][ T6133] debug_vm_pgtable+0x1d69/0x3490 [ 332.167579][ T6133] do_one_initcall+0x11d/0x700 [ 332.172367][ T6133] kernel_init_freeable+0x6ea/0x7b0 [ 332.177588][ T6133] kernel_init+0x1f/0x1e0 [ 332.181924][ T6133] ret_from_fork+0x72b/0xd50 [ 332.186542][ T6133] ret_from_fork_asm+0x1a/0x30 [ 332.191330][ T6133] [ 332.193667][ T6133] Memory state around the buggy address: [ 332.199290][ T6133] ffff88807fb22700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 332.207352][ T6133] ffff88807fb22780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 332.215417][ T6133] >ffff88807fb22800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.223476][ T6133] ^ [ 332.228058][ T6133] ffff88807fb22880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.236154][ T6133] ffff88807fb22900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.244211][ T6133] ================================================================== [ 332.252266][ T6133] ================================================================== [ 332.260322][ T6133] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x119/0x260 [ 332.268162][ T6133] Write of size 4 at addr ffff88807fb22808 by task syz-executor/6133 [ 332.276231][ T6133] [ 332.278648][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(full) [ 332.278698][ T6133] Tainted: [B]=BAD_PAGE [ 332.278711][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 332.278733][ T6133] Call Trace: [ 332.278747][ T6133] [ 332.278761][ T6133] dump_stack_lvl+0x100/0x190 [ 332.278803][ T6133] print_report+0x13d/0x4b0 [ 332.278856][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.278900][ T6133] ? __virt_addr_valid+0x239/0x430 [ 332.278944][ T6133] ? do_raw_spin_lock+0x119/0x260 [ 332.278991][ T6133] kasan_report+0xdf/0x1c0 [ 332.279030][ T6133] ? do_raw_spin_lock+0x119/0x260 [ 332.279083][ T6133] kasan_check_range+0x10f/0x1e0 [ 332.279127][ T6133] do_raw_spin_lock+0x119/0x260 [ 332.279173][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.279218][ T6133] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 332.279265][ T6133] ? lock_acquire+0x301/0x370 [ 332.279303][ T6133] ? __mutex_lock+0x18f9/0x1bd0 [ 332.279355][ T6133] ? _raw_spin_lock_irqsave+0x52/0x60 [ 332.279397][ T6133] ? __mutex_lock+0x1610/0x1bd0 [ 332.279447][ T6133] _raw_spin_lock_irqsave+0x42/0x60 [ 332.279488][ T6133] ? __mutex_lock+0x31f/0x1bd0 [ 332.279542][ T6133] __mutex_lock+0x31f/0x1bd0 [ 332.279592][ T6133] ? ep_open+0x4c/0x2c0 [ 332.279623][ T6133] ? __pfx___schedule+0x10/0x10 [ 332.279668][ T6133] ? __pfx___mutex_lock+0x10/0x10 [ 332.279718][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.279762][ T6133] ? irqentry_exit+0x24d/0xa00 [ 332.279810][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.279854][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.279897][ T6133] ? irqentry_exit+0x24d/0xa00 [ 332.279954][ T6133] ? ep_open+0x4c/0x2c0 [ 332.279981][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.280024][ T6133] ep_open+0x4c/0x2c0 [ 332.280056][ T6133] do_dentry_open+0x6ab/0x14d0 [ 332.280104][ T6133] ? __pfx_ep_open+0x10/0x10 [ 332.280135][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.280180][ T6133] vfs_open+0x82/0x3f0 [ 332.280209][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.280256][ T6133] path_openat+0x2873/0x4280 [ 332.280318][ T6133] ? __pfx_path_openat+0x10/0x10 [ 332.280377][ T6133] do_file_open+0x20e/0x430 [ 332.280430][ T6133] ? __pfx_do_file_open+0x10/0x10 [ 332.280499][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.280546][ T6133] ? alloc_fd+0x471/0x7a0 [ 332.280600][ T6133] ? do_getname+0x191/0x390 [ 332.280637][ T6133] do_sys_openat2+0x10f/0x1e0 [ 332.280671][ T6133] ? __pfx_do_sys_openat2+0x10/0x10 [ 332.280709][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.280756][ T6133] __x64_sys_openat+0x12d/0x210 [ 332.280791][ T6133] ? __pfx___x64_sys_openat+0x10/0x10 [ 332.280831][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.280878][ T6133] do_syscall_64+0x115/0x870 [ 332.280930][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.280966][ T6133] RIP: 0033:0x7f568795e90e [ 332.280994][ T6133] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 332.281030][ T6133] RSP: 002b:00007ffcf8f50c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 332.281064][ T6133] RAX: ffffffffffffffda RBX: 00005555778be500 RCX: 00007f568795e90e [ 332.281088][ T6133] RDX: 0000000000000000 RSI: 00007ffcf8f50de0 RDI: ffffffffffffff9c [ 332.281111][ T6133] RBP: 00007ffcf8f50de0 R08: 0000000000000000 R09: 0000000000000000 [ 332.281134][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf8f51ed0 [ 332.281156][ T6133] R13: 00007f5687a34474 R14: 00005555778be4e8 R15: 0000000000000006 [ 332.281191][ T6133] [ 332.281203][ T6133] [ 332.632676][ T6133] Allocated by task 8092: [ 332.637001][ T6133] kasan_save_stack+0x30/0x50 [ 332.641713][ T6133] kasan_save_track+0x14/0x30 [ 332.646419][ T6133] __kasan_kmalloc+0xaa/0xb0 [ 332.651040][ T6133] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 332.656434][ T6133] gadgetfs_bind+0x582/0x890 [ 332.661063][ T6133] gadget_bind_driver+0x28c/0xbf0 [ 332.666102][ T6133] really_probe+0x241/0xa60 [ 332.670627][ T6133] __driver_probe_device+0x20e/0x450 [ 332.675932][ T6133] driver_probe_device+0x4a/0x140 [ 332.680983][ T6133] __driver_attach+0x21f/0x5b0 [ 332.685853][ T6133] bus_for_each_dev+0x13e/0x1d0 [ 332.690714][ T6133] bus_add_driver+0x305/0x5b0 [ 332.695405][ T6133] driver_register+0x1e2/0x360 [ 332.700192][ T6133] usb_gadget_register_driver_owner+0x132/0x210 [ 332.706444][ T6133] dev_config+0xdce/0x1610 [ 332.710891][ T6133] vfs_write+0x2aa/0x1050 [ 332.715238][ T6133] ksys_write+0x12a/0x250 [ 332.719584][ T6133] do_syscall_64+0x115/0x870 [ 332.724201][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.730106][ T6133] [ 332.732453][ T6133] Freed by task 10: [ 332.736253][ T6133] kasan_save_stack+0x30/0x50 [ 332.741045][ T6133] kasan_save_track+0x14/0x30 [ 332.745750][ T6133] kasan_save_free_info+0x3b/0x70 [ 332.750790][ T6133] __kasan_slab_free+0x5f/0x80 [ 332.755561][ T6133] kfree+0x22b/0x6c0 [ 332.759469][ T6133] put_ep+0x117/0x150 [ 332.763473][ T6133] destroy_ep_files+0x163/0x420 [ 332.768352][ T6133] gadgetfs_unbind+0x139/0x260 [ 332.773140][ T6133] gadget_unbind_driver+0x20c/0x4f0 [ 332.778350][ T6133] device_remove+0xcb/0x180 [ 332.782871][ T6133] device_release_driver_internal+0x44e/0x620 [ 332.788965][ T6133] driver_detach+0xd8/0x1b0 [ 332.793490][ T6133] bus_remove_driver+0x13b/0x2e0 [ 332.798446][ T6133] driver_unregister+0x76/0xb0 [ 332.803242][ T6133] usb_gadget_unregister_driver+0x49/0x70 [ 332.808972][ T6133] dev_release+0x132/0x1b0 [ 332.813415][ T6133] __fput+0x3ff/0xb50 [ 332.817397][ T6133] delayed_fput+0x72/0x90 [ 332.821727][ T6133] process_one_work+0xa23/0x1940 [ 332.826673][ T6133] worker_thread+0x5ef/0xe50 [ 332.831268][ T6133] kthread+0x370/0x450 [ 332.835367][ T6133] ret_from_fork+0x72b/0xd50 [ 332.839981][ T6133] ret_from_fork_asm+0x1a/0x30 [ 332.844767][ T6133] [ 332.847079][ T6133] The buggy address belongs to the object at ffff88807fb22800 [ 332.847079][ T6133] which belongs to the cache kmalloc-512 of size 512 [ 332.861226][ T6133] The buggy address is located 8 bytes inside of [ 332.861226][ T6133] freed 512-byte region [ffff88807fb22800, ffff88807fb22a00) [ 332.874861][ T6133] [ 332.877182][ T6133] The buggy address belongs to the physical page: [ 332.883586][ T6133] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fb20 [ 332.892346][ T6133] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 332.900847][ T6133] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 332.908396][ T6133] page_type: f5(slab) [ 332.912381][ T6133] raw: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 332.921089][ T6133] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 332.929686][ T6133] head: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 332.938364][ T6133] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 332.947131][ T6133] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 332.955808][ T6133] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 332.964475][ T6133] page dumped because: kasan: bad access detected [ 332.970924][ T6133] page_owner tracks the page as allocated [ 332.976666][ T6133] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4977, tgid 4977 (S02sysctl), ts 30652066783, free_ts 28147710241 [ 332.997103][ T6133] post_alloc_hook+0xfd/0x120 [ 333.001817][ T6133] get_page_from_freelist+0xf48/0x3530 [ 333.007322][ T6133] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 333.013243][ T6133] new_slab+0xa2/0x640 [ 333.017333][ T6133] refill_objects+0xe3/0x410 [ 333.022051][ T6133] __pcs_replace_empty_main+0x376/0x680 [ 333.027780][ T6133] __kmalloc_noprof+0x66d/0x820 [ 333.032671][ T6133] tomoyo_init_log+0x1224/0x20c0 [ 333.037644][ T6133] tomoyo_supervisor+0x506/0x1340 [ 333.042684][ T6133] tomoyo_path_permission+0x270/0x3b0 [ 333.048076][ T6133] tomoyo_path_perm+0x364/0x460 [ 333.053114][ T6133] security_inode_getattr+0x116/0x280 [ 333.058714][ T6133] vfs_fstat+0x4b/0xe0 [ 333.062840][ T6133] __do_sys_newfstat+0x8b/0x110 [ 333.067727][ T6133] do_syscall_64+0x115/0x870 [ 333.072345][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.078266][ T6133] page last free pid 1 tgid 1 stack trace: [ 333.084072][ T6133] free_pages_prepare+0x586/0xd80 [ 333.089125][ T6133] __free_contig_range_common+0x14f/0x250 [ 333.094869][ T6133] destroy_args+0xa8/0x7a0 [ 333.099319][ T6133] debug_vm_pgtable+0x1d69/0x3490 [ 333.104470][ T6133] do_one_initcall+0x11d/0x700 [ 333.109301][ T6133] kernel_init_freeable+0x6ea/0x7b0 [ 333.114791][ T6133] kernel_init+0x1f/0x1e0 [ 333.119126][ T6133] ret_from_fork+0x72b/0xd50 [ 333.123739][ T6133] ret_from_fork_asm+0x1a/0x30 [ 333.128527][ T6133] [ 333.130842][ T6133] Memory state around the buggy address: [ 333.136474][ T6133] ffff88807fb22700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 333.144538][ T6133] ffff88807fb22780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 333.152600][ T6133] >ffff88807fb22800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.160656][ T6133] ^ [ 333.164980][ T6133] ffff88807fb22880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.173073][ T6133] ffff88807fb22900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.181133][ T6133] ================================================================== [ 333.189189][ T6133] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 333.196923][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(full) [ 333.208049][ T6133] Tainted: [B]=BAD_PAGE [ 333.212192][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 333.222245][ T6133] Call Trace: [ 333.225518][ T6133] [ 333.228449][ T6133] dump_stack_lvl+0x100/0x190 [ 333.233139][ T6133] vpanic+0x552/0x970 [ 333.237128][ T6133] ? __pfx_vpanic+0x10/0x10 [ 333.241732][ T6133] ? do_raw_spin_lock+0x119/0x260 [ 333.246775][ T6133] panic+0xd1/0xe0 [ 333.250509][ T6133] ? __pfx_panic+0x10/0x10 [ 333.254934][ T6133] ? end_report.part.0+0x23/0x90 [ 333.259897][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.265551][ T6133] ? rcu_is_watching+0x12/0xc0 [ 333.270342][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.275991][ T6133] ? lock_release+0x24d/0x310 [ 333.280704][ T6133] end_report.part.0+0x68/0x90 [ 333.285492][ T6133] kasan_report.cold+0xe/0x18 [ 333.290195][ T6133] ? do_raw_spin_lock+0x119/0x260 [ 333.295248][ T6133] kasan_check_range+0x10f/0x1e0 [ 333.300206][ T6133] do_raw_spin_lock+0x119/0x260 [ 333.305082][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.310742][ T6133] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 333.316140][ T6133] ? lock_acquire+0x301/0x370 [ 333.320837][ T6133] ? __mutex_lock+0x18f9/0x1bd0 [ 333.325713][ T6133] ? _raw_spin_lock_irqsave+0x52/0x60 [ 333.331107][ T6133] ? __mutex_lock+0x1610/0x1bd0 [ 333.335997][ T6133] _raw_spin_lock_irqsave+0x42/0x60 [ 333.341228][ T6133] ? __mutex_lock+0x31f/0x1bd0 [ 333.346032][ T6133] __mutex_lock+0x31f/0x1bd0 [ 333.350653][ T6133] ? ep_open+0x4c/0x2c0 [ 333.354815][ T6133] ? __pfx___schedule+0x10/0x10 [ 333.359689][ T6133] ? __pfx___mutex_lock+0x10/0x10 [ 333.364750][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.370408][ T6133] ? irqentry_exit+0x24d/0xa00 [ 333.375208][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.380872][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.386614][ T6133] ? irqentry_exit+0x24d/0xa00 [ 333.391417][ T6133] ? ep_open+0x4c/0x2c0 [ 333.395582][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.401242][ T6133] ep_open+0x4c/0x2c0 [ 333.405246][ T6133] do_dentry_open+0x6ab/0x14d0 [ 333.410056][ T6133] ? __pfx_ep_open+0x10/0x10 [ 333.414675][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.420331][ T6133] vfs_open+0x82/0x3f0 [ 333.424413][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.430079][ T6133] path_openat+0x2873/0x4280 [ 333.434712][ T6133] ? __pfx_path_openat+0x10/0x10 [ 333.439680][ T6133] do_file_open+0x20e/0x430 [ 333.444214][ T6133] ? __pfx_do_file_open+0x10/0x10 [ 333.449368][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.455018][ T6133] ? alloc_fd+0x471/0x7a0 [ 333.459457][ T6133] ? do_getname+0x191/0x390 [ 333.463972][ T6133] do_sys_openat2+0x10f/0x1e0 [ 333.468769][ T6133] ? __pfx_do_sys_openat2+0x10/0x10 [ 333.474004][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.479667][ T6133] __x64_sys_openat+0x12d/0x210 [ 333.484534][ T6133] ? __pfx___x64_sys_openat+0x10/0x10 [ 333.489953][ T6133] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.495621][ T6133] do_syscall_64+0x115/0x870 [ 333.500248][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.506171][ T6133] RIP: 0033:0x7f568795e90e [ 333.510612][ T6133] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 333.530241][ T6133] RSP: 002b:00007ffcf8f50c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 333.538679][ T6133] RAX: ffffffffffffffda RBX: 00005555778be500 RCX: 00007f568795e90e [ 333.546660][ T6133] RDX: 0000000000000000 RSI: 00007ffcf8f50de0 RDI: ffffffffffffff9c [ 333.554646][ T6133] RBP: 00007ffcf8f50de0 R08: 0000000000000000 R09: 0000000000000000 [ 333.562627][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf8f51ed0 [ 333.570864][ T6133] R13: 00007f5687a34474 R14: 00005555778be4e8 R15: 0000000000000006 [ 333.578856][ T6133] [ 333.582119][ T6133] Kernel Offset: disabled [ 333.586436][ T6133] Rebooting in 86400 seconds..