last executing test programs: 8m57.338190703s ago: executing program 32 (id=627): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='dummy_udc.0\n', 0xc) write(r6, &(0x7f00000004c0)='\n', 0x1) 8m54.275023763s ago: executing program 33 (id=646): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0xfffa, [0x92e, 0x746ffec1]}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) read$FUSE(r0, 0x0, 0x0) 7m14.455957951s ago: executing program 34 (id=1059): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) 7m10.413992764s ago: executing program 35 (id=1073): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) 7m6.448283216s ago: executing program 36 (id=1085): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r2, r2, 0x7, 0x1, &(0x7f0000000040)='9', 0x7, 0x4, 0x7, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x7}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='md0', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r6, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r6, 0x40140921, &(0x7f0000000420)="010000000100000001000000010000") ioctl(r6, 0x400c0930, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet6(r0, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004010) 6m39.899612418s ago: executing program 37 (id=1181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40008) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a32000000001400000011"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) close(r0) 6m39.887382756s ago: executing program 5 (id=1185): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xfffffffffffffdfd, 0x5, 0x6, 0x40000000032a, 0x2, 0x2, 0xfffffffffffffffd, 0xe95, 0x1}) 6m39.635757203s ago: executing program 5 (id=1186): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6m38.287482056s ago: executing program 5 (id=1187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x2) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sg(0x0, 0x9, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, 0x0) socket$inet(0x2, 0x1, 0x100) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x7e) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x140, 0xb, 0x79b, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xd0eb, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x40008, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x3, 0x7, 0x3, 0x1]}) 6m37.810538374s ago: executing program 5 (id=1188): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80000, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 6m37.430660375s ago: executing program 5 (id=1189): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={0x0, 0x44}}, 0x0) 6m36.079252851s ago: executing program 5 (id=1191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) 6m35.24738832s ago: executing program 38 (id=1191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) 6m35.238272114s ago: executing program 7 (id=1194): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x7}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x40000) 6m34.324490114s ago: executing program 7 (id=1195): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x1a) 6m34.055371461s ago: executing program 7 (id=1196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x2) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sg(0x0, 0x9, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, 0x0) socket$inet(0x2, 0x1, 0x100) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x7e) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x140, 0xb, 0x79b, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xd0eb, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x40008, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x3, 0x7, 0x3, 0x1]}) 6m33.442885301s ago: executing program 7 (id=1197): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80000, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 6m33.003945797s ago: executing program 7 (id=1198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0x560c89bb) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x4}]) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r2, 0x0, r5, 0x0, 0x8000, 0x0) 6m32.540573757s ago: executing program 7 (id=1199): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x0) 6m31.99953206s ago: executing program 39 (id=1199): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x0) 6m24.151893966s ago: executing program 9 (id=1202): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0xffd8) 6m22.991588603s ago: executing program 9 (id=1205): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 6m22.828944543s ago: executing program 9 (id=1206): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) 6m22.691394287s ago: executing program 9 (id=1207): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x24000, 0x0) 6m22.515537361s ago: executing program 9 (id=1208): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/225, 0xe1}], 0x1) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) mkdirat$cgroup(r0, 0x0, 0x1ff) 6m22.085562886s ago: executing program 9 (id=1209): clock_adjtime(0x200000000000000, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x9, 0x2, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0xe3, 0x18, 0x41000, 0x8, 0x2, 0x0, 0x0, 0x3}) 6m21.664234266s ago: executing program 40 (id=1209): clock_adjtime(0x200000000000000, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x9, 0x2, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0xe3, 0x18, 0x41000, 0x8, 0x2, 0x0, 0x0, 0x3}) 6m21.307667852s ago: executing program 8 (id=1213): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='dummy_udc.0\n', 0xc) 6m20.294741437s ago: executing program 8 (id=1214): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 6m19.490758009s ago: executing program 8 (id=1215): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000200)='7', 0x1) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)) 6m19.160467785s ago: executing program 8 (id=1216): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x24000, 0x0) 6m18.861897659s ago: executing program 8 (id=1218): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) readv(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) mkdirat$cgroup(r0, 0x0, 0x1ff) 6m17.944369622s ago: executing program 8 (id=1219): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x264e33, 0x0) 6m17.521925205s ago: executing program 41 (id=1219): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x264e33, 0x0) 56.692391206s ago: executing program 6 (id=2044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 55.68077773s ago: executing program 6 (id=2049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000080)='/dev/mapper/contr', 0x11) lseek(r1, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x14) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x43) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write$cgroup_devices(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x9) ioctl(r2, 0xc138fd12, &(0x7f0000000200)="04") sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) 52.203270095s ago: executing program 6 (id=2054): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000280), 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) 50.64707141s ago: executing program 6 (id=2056): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x1, 0x7fff0021}]}) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0xf29db7ae9ffd573e, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002080)=@raw={'raw\x00', 0x8, 0x3, 0x1250, 0xb4, 0x11, 0x148, 0x0, 0x0, 0x11d8, 0x2a8, 0x2a8, 0x11d8, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @remote, 0x0, 0xff000000, 'veth1\x00', 'syzkaller1\x00', {0xff}, {}, 0x21, 0x3, 0x1f}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0xfc, './cgroup.net/syz0\x00', 0x1, {0xff}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x0, 0x6, 0x1], 0x1, 0x7}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12b0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) close_range(r2, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000240)="0121cafa163d99bca211d94a6ca1fa745b99aafbaac9193b5fe574dc3b2310db85fcabd64616969ab2d27d535378c86266bce11089a28925517b09dfcdaa25ca8b69bd4f8dcdd9022230f5635d9e150451d6380f8dc70b05590600f0f65d59b2a957126621b346f60e70c27b2fa164318c7d8ef8f6df25893e", 0xded}, 0x38) 46.9340855s ago: executing program 6 (id=2062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getdents(0xffffffffffffffff, &(0x7f0000000ec0)=""/4096, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) unshare(0x6a040000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 42.510902839s ago: executing program 6 (id=2069): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x87d4b69a72310a97) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x17c, 0x17c, 0x210, 0x2a4, 0xdc, 0x344, 0x344, 0x344, 0x344, 0x344, 0x6, 0x0, {[{{@ip={@private=0xa010102, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0xa4, 0x1}, 0x0, 0xa8, 0xdc, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x7fffffffffffffff}], 0x1, 0x2}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x0, 0x6, 0x1}, {0xffffffffffffffff, 0x2, 0x7}, 0x4, 0x9}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'gretap0\x00', 'pim6reg\x00', {0xff}, {}, 0x36, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x1, @multicast1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010103, @loopback, 0xffffffff, 0xff000000, 'wg1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x434) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) process_vm_writev(r1, &(0x7f0000000e00)=[{&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000d40)=""/149, 0x95}], 0x6, &(0x7f0000001240)=[{&(0x7f0000000e40)=""/85, 0x55}, {&(0x7f0000000ec0)=""/105, 0x69}, {0x0}, {&(0x7f0000001000)=""/192, 0xc0}, {&(0x7f00000010c0)=""/144, 0x90}, {&(0x7f0000001180)=""/171, 0xab}], 0x6, 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/8, 0x8, 0x1, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) tkill(r5, 0xb) 25.924350336s ago: executing program 42 (id=2069): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x87d4b69a72310a97) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x17c, 0x17c, 0x210, 0x2a4, 0xdc, 0x344, 0x344, 0x344, 0x344, 0x344, 0x6, 0x0, {[{{@ip={@private=0xa010102, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0xa4, 0x1}, 0x0, 0xa8, 0xdc, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x7fffffffffffffff}], 0x1, 0x2}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x0, 0x6, 0x1}, {0xffffffffffffffff, 0x2, 0x7}, 0x4, 0x9}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'gretap0\x00', 'pim6reg\x00', {0xff}, {}, 0x36, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x1, @multicast1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010103, @loopback, 0xffffffff, 0xff000000, 'wg1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x434) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) process_vm_writev(r1, &(0x7f0000000e00)=[{&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000d40)=""/149, 0x95}], 0x6, &(0x7f0000001240)=[{&(0x7f0000000e40)=""/85, 0x55}, {&(0x7f0000000ec0)=""/105, 0x69}, {0x0}, {&(0x7f0000001000)=""/192, 0xc0}, {&(0x7f00000010c0)=""/144, 0x90}, {&(0x7f0000001180)=""/171, 0xab}], 0x6, 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/8, 0x8, 0x1, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) tkill(r5, 0xb) 18.907783092s ago: executing program 3 (id=2114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x1, 0x7fff0021}]}) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0xf29db7ae9ffd573e, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002080)=@raw={'raw\x00', 0x8, 0x3, 0x126c, 0xb4, 0x11, 0x148, 0x0, 0x0, 0x11d8, 0x2a8, 0x2a8, 0x11d8, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @remote, 0x0, 0xff000000, 'veth1\x00', 'syzkaller1\x00', {0xff}, {}, 0x21, 0x3, 0x1f}, 0x0, 0x94, 0xb4, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x10c4, 0x1124, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0xfc, './cgroup.net/syz0\x00', 0x1, {0xff}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x0, 0x6, 0x1], 0x1, 0x7}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x12c8) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) close_range(r2, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000240)="0121cafa163d99bca211d94a6ca1fa745b99aafbaac9193b5fe574dc3b2310db85fcabd64616969ab2d27d535378c86266bce11089a28925517b09dfcdaa25ca8b69bd4f8dcdd9022230f5635d9e150451d6380f8dc70b05590600f0f65d59b2a957126621b346f60e70c27b2fa164318c7d", 0xded}, 0x38) 15.679923828s ago: executing program 1 (id=2107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="080088a200"], 0x4a) 15.045257673s ago: executing program 2 (id=2110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x38}}, 0x0) 14.751393045s ago: executing program 1 (id=2111): socket(0x2a, 0x2, 0x9) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_vhci(0x0, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x2, 0x4e24, @empty}, 0x10) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 14.563132888s ago: executing program 2 (id=2112): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='10 1 1\x00', 0x7) 13.909188577s ago: executing program 4 (id=2115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) 13.632855956s ago: executing program 1 (id=2116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r5, 0x541b, 0x0) ioctl(r5, 0x5451, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xa}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f00000020c0)=""/4052, &(0x7f0000000000)=0xfd4) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024}) openat$null(0xffffffffffffff9c, &(0x7f0000002840), 0x101101, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13.488539911s ago: executing program 0 (id=2117): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(0x0, 0x8001420, 0x0) r3 = open$dir(0x0, 0x42800, 0x0) readv(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) 13.328845011s ago: executing program 2 (id=2118): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) mount(&(0x7f0000000800)=@filename='\\\\::1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='ip=::1,port=20000,user=root,password=root,vers=3.1.1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ed) socket$packet(0x11, 0x2, 0x300) mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/fs/cifs/Stats\x00', 0x0, 0x0) read(r1, &(0x7f0000000c00), 0x1000) 12.099238325s ago: executing program 3 (id=2119): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r3 = gettid() r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345e", 0x41}], 0x1}}], 0x3, 0x60cd894) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mount(0x0, &(0x7f00000002c0)='./tracing\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.030065985s ago: executing program 2 (id=2120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x1, 0x7fff0021}]}) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0xf29db7ae9ffd573e, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002080)=@raw={'raw\x00', 0x8, 0x3, 0x126c, 0xb4, 0x11, 0x148, 0x0, 0x0, 0x11d8, 0x2a8, 0x2a8, 0x11d8, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @remote, 0x0, 0xff000000, 'veth1\x00', 'syzkaller1\x00', {0xff}, {}, 0x21, 0x3, 0x1f}, 0x0, 0x94, 0xb4, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x10c4, 0x1124, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0xfc, './cgroup.net/syz0\x00', 0x1, {0xff}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x0, 0x6, 0x1], 0x1, 0x7}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x12c8) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) close_range(r2, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000240)="0121cafa163d99bca211d94a6ca1fa745b99aafbaac9193b5fe574dc3b2310db85fcabd64616969ab2d27d535378c86266bce11089a28925517b09dfcdaa25ca8b69bd4f8dcdd9022230f5635d9e150451d6380f8dc70b05590600f0f65d59b2a957126621b346f60e70c27b2fa164318c7d8ef8f6df", 0xded}, 0x38) 11.774385125s ago: executing program 4 (id=2121): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x1, 0x7fff0021}]}) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0xf29db7ae9ffd573e, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002080)=@raw={'raw\x00', 0x8, 0x3, 0x1250, 0xb4, 0x11, 0x148, 0x0, 0x0, 0x11d8, 0x2a8, 0x2a8, 0x11d8, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @remote, 0x0, 0xff000000, 'veth1\x00', 'syzkaller1\x00', {0xff}, {}, 0x21, 0x3, 0x1f}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x10c8, 0x1128, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x40}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0xfc, './cgroup.net/syz0\x00', 0x1, {0xff}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x0, 0x6, 0x1], 0x1, 0x7}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12b0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) close_range(r2, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000240)="0121cafa163d99bca211d94a6ca1fa745b99aafbaac9193b5fe574dc3b2310db85fcabd64616969ab2d27d535378c86266bce11089a28925517b09dfcdaa25ca8b69bd4f8dcdd9022230f5635d9e150451d6380f8dc70b05590600f0f65d59b2a957126621b346f60e70c27b2fa164318c7d8ef8f6df25893e", 0xded}, 0x38) 8.684145288s ago: executing program 4 (id=2122): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xd, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) r0 = socket$unix(0x1, 0x5, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {0x6}, @addr={0x7, 0x3}}, {0xd, 0x8, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x100, 0x2}, {0x0, 0xc}, {}, @control}, {0x0, 0xfb, 0x0, 0x0, @time, {0x3, 0x1}, {0x4}, @raw32={[0x7ff, 0x6, 0x3]}}], 0x70) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r7, 0x81, 0x86, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 8.573487114s ago: executing program 2 (id=2123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="080088a200"], 0x4a) 8.533840683s ago: executing program 3 (id=2124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)}, 0x1c) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d40)={0xffffffffffffffff, 0x7b, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x9, &(0x7f00000008c0)=ANY=[@ANYBLOB="184a0000060000000000000000000000750a3000f0ffffff18340000040000000000000000000000850000f869000000cd58fcff04000000181b00008b8f973e", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x9, 0x63, &(0x7f0000000780)=""/99, 0x40e00, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4], 0x0, 0x10, 0xfffffff8}, 0x94) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x3d3a, 0x4) sendto$inet(r2, &(0x7f0000000300)="01", 0x1, 0x4040, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0xa6b4, 0x2000, 0x1, 0x270}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2116, 0x40, 0x2, 0x30d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc192, 0x1, 0x2, 0x3c6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcfde, 0x200, 0x2, 0x322}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa9fa, 0x10, 0x0, 0x23e}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f00000022c0)={0x2e, 0x33, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x3, 0xe47, 0x0, &(0x7f00000012c0)=@buf_1k="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"}}, &(0x7f0000002340)) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick=0xf48, {}, {}, @result}, {0x0, 0xfe, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @time=@time}], 0x70) r7 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r5, &(0x7f00000023c0)={0x2e, 0x10, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002380)=@any_dev={0x1, 0xc08, 0x0, 0x0, 0x1000, 0x2, r7, 0x0, 0x20}}}, &(0x7f0000002440)) recvmmsg(r2, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x2100, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e23, @empty}, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)='team0\x00', 0xb, 0x8000, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x3) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x20040, 0x40, 0xe}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) prlimit64(r7, 0x3, &(0x7f00000001c0)={0x30, 0x31b7}, &(0x7f0000000240)) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9811"], 0xfce) 8.410328967s ago: executing program 0 (id=2125): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x9, 0x58, 0xb8, 0x10, 0x1410, 0x7004, 0x6a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0xe8, 0x5d, 0x1, 0x42, 0x10, 0xab, 0x2, [], [{{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000540), 0x0, 0x43, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d0027bd7000fddbdf2526000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0, 0x0) r3 = gettid() read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x325, @time={0x10a, 0xff3}, 0x42, {}, 0x2, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000300)={{0x0, 0x7}, 0x0, 0x2000000, 0x5, {0x8, 0x1}, 0x0, 0x7}) tkill(r3, 0x7) fsopen(&(0x7f0000000580)='iso9660\x00', 0x0) 7.371407189s ago: executing program 0 (id=2126): iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080)) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x1, 0x3, 0x8000009, 0x3, 0x80, {0x1, 0x80000000000, 0x1, 0xb, 0x3ff, 0xdbf, 0x10, 0x0, 0x80, 0x8000, 0x2, r3, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.275831319s ago: executing program 0 (id=2127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r5, 0x541b, 0x0) ioctl(r5, 0x5451, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xa}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f00000020c0)=""/4052, &(0x7f0000000000)=0xfd4) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024}) openat$null(0xffffffffffffff9c, &(0x7f0000002840), 0x101101, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.89849142s ago: executing program 1 (id=2128): socket(0x2a, 0x2, 0x9) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_vhci(0x0, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x2, 0x4e24, @empty}, 0x10) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 5.458781259s ago: executing program 0 (id=2129): socket(0x2a, 0x2, 0x9) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_vhci(0x0, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x8}, 0x1c) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 5.281108224s ago: executing program 4 (id=2130): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r3 = gettid() r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345e", 0x41}], 0x1}}], 0x3, 0x60cd894) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mount(0x0, &(0x7f00000002c0)='./tracing\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.082609645s ago: executing program 1 (id=2131): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x1, 0x7fff0021}]}) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0xf29db7ae9ffd573e, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002080)=@raw={'raw\x00', 0x8, 0x3, 0x126c, 0xb4, 0x11, 0x148, 0x0, 0x0, 0x11d8, 0x2a8, 0x2a8, 0x11d8, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @remote, 0x0, 0xff000000, 'veth1\x00', 'syzkaller1\x00', {0xff}, {}, 0x21, 0x3, 0x1f}, 0x0, 0x94, 0xb4, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x10c4, 0x1124, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0xfc, './cgroup.net/syz0\x00', 0x1, {0xff}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x0, 0x6, 0x1], 0x1, 0x7}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x12c8) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) close_range(r2, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000240)="0121cafa163d99bca211d94a6ca1fa745b99aafbaac9193b5fe574dc3b2310db85fcabd64616969ab2d27d535378c86266bce11089a28925517b09dfcdaa25ca8b69bd4f8dcdd9022230f5635d9e150451d6380f8dc70b05590600f0f65d59b2a957126621b346f60e70c27b2fa164318c7d8ef8f6df25893e", 0xded}, 0x38) 3.973097183s ago: executing program 3 (id=2132): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) 3.883547994s ago: executing program 2 (id=2133): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(0x0, 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(0x0, 0x141042, 0x0) 3.36467377s ago: executing program 3 (id=2134): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x1, 0x7fff0021}]}) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0xf29db7ae9ffd573e, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002080)=@raw={'raw\x00', 0x8, 0x3, 0x1250, 0xb4, 0x11, 0x148, 0x0, 0x0, 0x11d8, 0x2a8, 0x2a8, 0x11d8, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @remote, 0x0, 0xff000000, 'veth1\x00', 'syzkaller1\x00', {0xff}, {}, 0x21, 0x3, 0x1f}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x10c8, 0x1128, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x40}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0xfc, './cgroup.net/syz0\x00', 0x1, {0xff}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x0, 0x6, 0x1], 0x1, 0x7}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12b0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) close_range(r2, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000240)="0121cafa163d99bca211d94a6ca1fa745b99aafbaac9193b5fe574dc3b2310db85fcabd64616969ab2d27d535378c86266bce11089a28925517b09dfcdaa25ca8b69bd4f8dcdd9022230f5635d9e150451d6380f8dc70b05590600f0f65d59b2a957126621b346f60e70c27b2fa164318c7d8ef8f6df25893e", 0xded}, 0x38) 3.364366833s ago: executing program 0 (id=2135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r5, 0x541b, 0x0) ioctl(r5, 0x5451, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xa}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f00000020c0)=""/4052, &(0x7f0000000000)=0xfd4) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.354935444s ago: executing program 4 (id=2145): socket(0x2a, 0x2, 0x9) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_vhci(0x0, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x8}, 0x1c) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.30410147s ago: executing program 1 (id=2136): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(0x0, 0x8001420, 0x0) r3 = open$dir(0x0, 0x42800, 0x0) readv(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) 73.800835ms ago: executing program 4 (id=2137): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x9, 0x58, 0xb8, 0x10, 0x1410, 0x7004, 0x6a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0xe8, 0x5d, 0x1, 0x42, 0x10, 0xab, 0x2, [], [{{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000540), 0x0, 0x43, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d0027bd7000fddbdf2526000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0, 0x0) r3 = gettid() read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x325, @time={0x10a, 0xff3}, 0x42, {}, 0x2, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000300)={{0x0, 0x7}, 0x0, 0x2000000, 0x5, {0x8, 0x1}, 0x0, 0x7}) tkill(r3, 0x7) fsopen(&(0x7f0000000580)='iso9660\x00', 0x0) 0s ago: executing program 3 (id=2138): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 00246 ORIG_RAX: 00000000000000ca [ 502.859177][T11164] RAX: ffffffffffffffda RBX: 00007ff557a25fa8 RCX: 00007ff55779e159 [ 502.859202][T11164] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff557a25fac [ 502.859225][T11164] RBP: 00007ff557a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 502.859247][T11164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.859269][T11164] R13: 00007ff557a26038 R14: 00007ffcbe886af0 R15: 00007ffcbe886bd8 [ 502.859316][T11164] [ 504.241564][T11174] tipc: Started in network mode [ 504.241687][T11174] tipc: Node identity ac14140f, cluster identity 4711 [ 504.242002][T11174] tipc: New replicast peer: 255.255.255.255 [ 504.272623][T11174] tipc: Enabled bearer , priority 10 [ 504.557867][T11183] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 505.747551][T11202] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 505.937643][ T5750] tipc: Node number set to 2886997007 [ 506.049718][T11180] random: crng reseeded on system resumption [ 507.492070][ T5629] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 507.724360][ T5629] usb 2-1: Using ep0 maxpacket: 16 [ 508.359770][ T5629] usb 2-1: unable to get BOS descriptor or descriptor too short [ 508.368244][ T5629] usb 2-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 508.385145][ T5629] usb 2-1: config 1 has an invalid interface number: 232 but max is 0 [ 508.393729][ T5629] usb 2-1: config 1 has no interface number 0 [ 508.400135][ T5629] usb 2-1: config 1 interface 232 has no altsetting 0 [ 508.411893][ T5629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.420421][ T5629] usb 2-1: Product: syz [ 508.425028][ T5629] usb 2-1: Manufacturer: syz [ 508.430131][ T5629] usb 2-1: SerialNumber: syz [ 508.593904][T11238] FAULT_INJECTION: forcing a failure. [ 508.593904][T11238] name fail_futex, interval 1, probability 0, space 0, times 0 [ 508.593977][T11238] CPU: 0 UID: 0 PID: 11238 Comm: syz.4.1406 Not tainted syzkaller #0 PREEMPT(full) [ 508.594023][T11238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 508.594042][T11238] Call Trace: [ 508.594054][T11238] [ 508.594068][T11238] dump_stack_lvl+0x100/0x190 [ 508.594126][T11238] should_fail_ex.cold+0x5/0xa [ 508.594175][T11238] get_futex_key+0x1d0/0x14f0 [ 508.594225][T11238] ? __pfx_get_futex_key+0x10/0x10 [ 508.594273][T11238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 508.594320][T11238] ? __lock_acquire+0x4c5/0x1ec0 [ 508.594388][T11238] futex_wake+0xf4/0x5e0 [ 508.594438][T11238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 508.594491][T11238] ? __lock_acquire+0x4c5/0x1ec0 [ 508.594556][T11238] ? __pfx_futex_wake+0x10/0x10 [ 508.594608][T11238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 508.594656][T11238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 508.594706][T11238] ? __f_setown+0xb0/0x390 [ 508.594748][T11238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 508.594794][T11238] ? rcu_is_watching+0x13/0xc0 [ 508.594847][T11238] do_futex+0x2b2/0x440 [ 508.594895][T11238] ? __pfx_do_futex+0x10/0x10 [ 508.594942][T11238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 508.594987][T11238] ? do_fcntl+0x811/0x1670 [ 508.595026][T11238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 508.595082][T11238] __x64_sys_futex+0x34f/0x4d0 [ 508.595137][T11238] ? __pfx___x64_sys_futex+0x10/0x10 [ 508.595184][T11238] ? tomoyo_file_fcntl+0x6c/0xc0 [ 508.595222][T11238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 508.595273][T11238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 508.595328][T11238] do_syscall_64+0x123/0x790 [ 508.595387][T11238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.595427][T11238] RIP: 0033:0x7f5db859e159 [ 508.595462][T11238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.595500][T11238] RSP: 002b:00007f5db942a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 508.595537][T11238] RAX: ffffffffffffffda RBX: 00007f5db8825fa8 RCX: 00007f5db859e159 [ 508.595563][T11238] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5db8825fac [ 508.595588][T11238] RBP: 00007f5db8825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 508.595612][T11238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.595635][T11238] R13: 00007f5db8826038 R14: 00007ffec8ba3cb0 R15: 00007ffec8ba3d98 [ 508.595686][T11238] [ 509.242234][T11252] tipc: Enabling of bearer rejected, already enabled [ 509.373756][T11254] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 509.513354][ T5629] hub 2-1:1.232: bad descriptor, ignoring hub [ 509.513474][ T5629] hub 2-1:1.232: probe with driver hub failed with error -5 [ 509.517688][ T5629] option 2-1:1.232: GSM modem (1-port) converter detected [ 509.553657][ T5629] usb 2-1: USB disconnect, device number 13 [ 509.592956][ T5629] option 2-1:1.232: device disconnected [ 510.098947][T11260] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 512.358438][T11303] FAULT_INJECTION: forcing a failure. [ 512.358438][T11303] name fail_futex, interval 1, probability 0, space 0, times 0 [ 512.358516][T11303] CPU: 1 UID: 0 PID: 11303 Comm: syz.2.1423 Not tainted syzkaller #0 PREEMPT(full) [ 512.358570][T11303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 512.358596][T11303] Call Trace: [ 512.358609][T11303] [ 512.358625][T11303] dump_stack_lvl+0x100/0x190 [ 512.358685][T11303] should_fail_ex.cold+0x5/0xa [ 512.358728][T11303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.358781][T11303] get_futex_key+0x1d0/0x14f0 [ 512.358830][T11303] ? __pfx_get_futex_key+0x10/0x10 [ 512.358871][T11303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.358924][T11303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.358981][T11303] ? __bad_area_nosemaphore+0x320/0x3f0 [ 512.359055][T11303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.359103][T11303] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 512.359153][T11303] futex_wake+0xf4/0x5e0 [ 512.359210][T11303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.359263][T11303] ? __pfx_futex_wake+0x10/0x10 [ 512.359343][T11303] do_futex+0x2b2/0x440 [ 512.359394][T11303] ? __pfx_do_futex+0x10/0x10 [ 512.359442][T11303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.359491][T11303] ? do_fcntl+0x811/0x1670 [ 512.359534][T11303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.359593][T11303] __x64_sys_futex+0x34f/0x4d0 [ 512.359649][T11303] ? __pfx___x64_sys_futex+0x10/0x10 [ 512.359699][T11303] ? tomoyo_file_fcntl+0x6c/0xc0 [ 512.359738][T11303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.359793][T11303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.359848][T11303] do_syscall_64+0x123/0x790 [ 512.359905][T11303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.359946][T11303] RIP: 0033:0x7faf5899e159 [ 512.359985][T11303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.360024][T11303] RSP: 002b:00007faf5990d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 512.360064][T11303] RAX: ffffffffffffffda RBX: 00007faf58c25fa8 RCX: 00007faf5899e159 [ 512.360091][T11303] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faf58c25fac [ 512.360116][T11303] RBP: 00007faf58c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 512.360141][T11303] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 512.360165][T11303] R13: 00007faf58c26038 R14: 00007ffcee403aa0 R15: 00007ffcee403b88 [ 512.360217][T11303] [ 513.021627][ T31] audit: type=1326 audit(1788334120.476:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 513.021740][ T31] audit: type=1326 audit(1788334120.476:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 513.056430][T11307] tipc: Enabling of bearer rejected, already enabled [ 513.131554][ T31] audit: type=1326 audit(1788334120.586:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 513.131675][ T31] audit: type=1326 audit(1788334120.586:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 513.131741][ T31] audit: type=1326 audit(1788334120.586:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 513.154126][ T31] audit: type=1326 audit(1788334120.606:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 513.154215][ T31] audit: type=1326 audit(1788334120.606:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 513.154287][ T31] audit: type=1326 audit(1788334120.616:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 513.163174][ T31] audit: type=1326 audit(1788334120.616:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 514.048774][T11323] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 514.394739][ T31] audit: type=1326 audit(1788334121.856:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 517.814715][T11362] FAULT_INJECTION: forcing a failure. [ 517.814715][T11362] name fail_futex, interval 1, probability 0, space 0, times 0 [ 517.830621][T11362] CPU: 1 UID: 0 PID: 11362 Comm: syz.2.1441 Not tainted syzkaller #0 PREEMPT(full) [ 517.830677][T11362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 517.830701][T11362] Call Trace: [ 517.830717][T11362] [ 517.830733][T11362] dump_stack_lvl+0x100/0x190 [ 517.830793][T11362] should_fail_ex.cold+0x5/0xa [ 517.830845][T11362] get_futex_key+0x1d0/0x14f0 [ 517.830895][T11362] ? __pfx_get_futex_key+0x10/0x10 [ 517.830937][T11362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 517.830987][T11362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 517.831034][T11362] ? rcu_is_watching+0x13/0xc0 [ 517.831083][T11362] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 517.831126][T11362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 517.831173][T11362] ? lockdep_hardirqs_on+0x7d/0x110 [ 517.831231][T11362] futex_wake+0xf4/0x5e0 [ 517.831285][T11362] ? rcu_is_watching+0x13/0xc0 [ 517.831335][T11362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 517.831386][T11362] ? __pfx_futex_wake+0x10/0x10 [ 517.831465][T11362] do_futex+0x2b2/0x440 [ 517.831521][T11362] ? __pfx_do_futex+0x10/0x10 [ 517.831568][T11362] ? preempt_schedule_irq+0x79/0x90 [ 517.831617][T11362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 517.831674][T11362] __x64_sys_futex+0x34f/0x4d0 [ 517.831730][T11362] ? __pfx___x64_sys_futex+0x10/0x10 [ 517.831799][T11362] do_syscall_64+0x123/0x790 [ 517.831856][T11362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.831898][T11362] RIP: 0033:0x7faf5899e159 [ 517.831929][T11362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.831968][T11362] RSP: 002b:00007faf5990d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 517.832007][T11362] RAX: ffffffffffffffda RBX: 00007faf58c25fa8 RCX: 00007faf5899e159 [ 517.832034][T11362] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faf58c25fac [ 517.832060][T11362] RBP: 00007faf58c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 517.832085][T11362] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 517.832111][T11362] R13: 00007faf58c26038 R14: 00007ffcee403aa0 R15: 00007ffcee403b88 [ 517.832163][T11362] [ 518.534595][ T30] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 518.695988][ T30] usb 7-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 518.708404][ T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.708532][ T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.708616][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.587584][T11381] ceph: No mds server is up or the cluster is laggy [ 519.613245][ T981] libceph: connect (1)[c::]:6789 error -101 [ 519.733718][ T981] libceph: mon0 (1)[c::]:6789 connect error [ 519.962035][ T30] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 520.252849][ T30] wacom 0003:056A:033B.0003: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.6-1/input0 [ 520.292374][ T30] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:056A:033B.0003/input/input32 [ 520.489863][ T30] usb 7-1: USB disconnect, device number 11 [ 520.545871][T11388] tipc: Started in network mode [ 520.545946][T11388] tipc: Node identity ac14140f, cluster identity 4711 [ 520.546237][T11388] tipc: New replicast peer: 255.255.255.255 [ 520.546960][T11388] tipc: Enabled bearer , priority 10 [ 520.924951][T11387] fido_id[11387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 521.663966][T10585] tipc: Node number set to 2886997007 [ 522.209004][T11416] FAULT_INJECTION: forcing a failure. [ 522.209004][T11416] name fail_futex, interval 1, probability 0, space 0, times 0 [ 522.209101][T11416] CPU: 1 UID: 0 PID: 11416 Comm: syz.6.1458 Not tainted syzkaller #0 PREEMPT(full) [ 522.209137][T11416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 522.209155][T11416] Call Trace: [ 522.209165][T11416] [ 522.209177][T11416] dump_stack_lvl+0x100/0x190 [ 522.209224][T11416] should_fail_ex.cold+0x5/0xa [ 522.209256][T11416] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.209297][T11416] get_futex_key+0x1d0/0x14f0 [ 522.209343][T11416] ? __pfx_get_futex_key+0x10/0x10 [ 522.209378][T11416] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.209417][T11416] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.209452][T11416] ? __bad_area_nosemaphore+0x320/0x3f0 [ 522.209490][T11416] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.209525][T11416] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 522.209561][T11416] futex_wake+0xf4/0x5e0 [ 522.209603][T11416] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.209641][T11416] ? __pfx_futex_wake+0x10/0x10 [ 522.209700][T11416] do_futex+0x2b2/0x440 [ 522.209737][T11416] ? __pfx_do_futex+0x10/0x10 [ 522.209772][T11416] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.209807][T11416] ? do_fcntl+0x811/0x1670 [ 522.209837][T11416] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.209881][T11416] __x64_sys_futex+0x34f/0x4d0 [ 522.209922][T11416] ? __pfx___x64_sys_futex+0x10/0x10 [ 522.209964][T11416] ? tomoyo_file_fcntl+0x6c/0xc0 [ 522.209992][T11416] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.210032][T11416] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.210074][T11416] do_syscall_64+0x123/0x790 [ 522.210116][T11416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.210147][T11416] RIP: 0033:0x7f125619e159 [ 522.210171][T11416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.210199][T11416] RSP: 002b:00007f1256f9a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 522.210228][T11416] RAX: ffffffffffffffda RBX: 00007f1256425fa8 RCX: 00007f125619e159 [ 522.210247][T11416] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1256425fac [ 522.210266][T11416] RBP: 00007f1256425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 522.210284][T11416] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 522.210303][T11416] R13: 00007f1256426038 R14: 00007ffd0052a250 R15: 00007ffd0052a338 [ 522.210342][T11416] [ 523.371314][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 523.529757][T11424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.534751][T11424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.846249][T11449] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 527.102306][T11446] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input35 [ 527.644347][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 527.816073][ T10] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 527.832416][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 527.832503][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 527.832548][ T10] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 527.832602][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.892219][T11453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 527.892487][T11453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 527.915763][ T10] pl2303 3-1:1.0: required interrupt-in endpoint missing [ 529.742668][ T9] usb 3-1: USB disconnect, device number 13 [ 529.747845][T11498] ntfs3(nullb0): Primary boot signature is not NTFS. [ 529.762491][T11498] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 531.124703][T11512] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 531.873978][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 532.054516][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 532.066941][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 532.167554][ T10] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 532.176550][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 532.176894][ T10] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 532.176995][ T10] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 532.177062][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 532.332499][ T10] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 532.341631][ T10] usb 2-1: Product: syz [ 532.341667][ T10] usb 2-1: Manufacturer: syz [ 532.341736][ T10] usb 2-1: SerialNumber: syz [ 532.571006][ T10] usb 2-1: config 0 descriptor?? [ 532.776156][ T10] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 532.873745][ T10] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 533.299549][ T5759] usb 2-1: USB disconnect, device number 14 [ 533.324498][ T5759] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 534.318061][T11529] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input36 [ 534.744846][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 534.923871][ T10] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 534.946499][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 534.946570][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 534.946631][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 534.946693][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.008955][T11531] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 535.019298][T11531] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 535.062031][ T10] pl2303 3-1:1.0: pl2303 converter detected [ 535.106765][ T10] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 535.405000][T11529] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 535.405552][T11529] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 535.407088][T11529] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 535.407540][T11529] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 535.410847][T11529] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 535.690748][T11528] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 535.692118][T11528] pl2303 ttyUSB0: error sending break = -32 [ 535.702251][ T981] usb 3-1: USB disconnect, device number 14 [ 535.807362][ T981] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 535.814814][ T981] pl2303 3-1:1.0: device disconnected [ 538.487887][T11570] ceph: No mds server is up or the cluster is laggy [ 538.492813][ T30] libceph: connect (1)[c::]:6789 error -101 [ 538.508312][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 539.584401][T11581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1495'. [ 539.584466][T11581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1495'. [ 540.463928][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 540.617629][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 540.626673][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 540.626742][ T10] usb 5-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 540.631974][ T10] usb 5-1: config 1 has an invalid interface number: 232 but max is 0 [ 540.632024][ T10] usb 5-1: config 1 has no interface number 0 [ 540.632101][ T10] usb 5-1: config 1 interface 232 has no altsetting 0 [ 540.649546][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.649598][ T10] usb 5-1: Product: syz [ 540.649647][ T10] usb 5-1: Manufacturer: syz [ 540.649712][ T10] usb 5-1: SerialNumber: syz [ 541.043794][T11608] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input37 [ 541.148443][T11610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.149242][T11610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.420267][ T10] hub 5-1:1.232: bad descriptor, ignoring hub [ 543.420330][ T10] hub 5-1:1.232: probe with driver hub failed with error -5 [ 543.442532][ T10] option 5-1:1.232: GSM modem (1-port) converter detected [ 543.484843][ T10] usb 5-1: USB disconnect, device number 7 [ 543.516747][ T10] option 5-1:1.232: device disconnected [ 544.715006][T11649] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 545.218657][T11659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1516'. [ 545.218724][T11659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1516'. [ 547.000171][T11623] FAULT_INJECTION: forcing a failure. [ 547.000171][T11623] name failslab, interval 1, probability 0, space 0, times 0 [ 547.000246][T11623] CPU: 1 UID: 0 PID: 11623 Comm: syz.1.1507 Not tainted syzkaller #0 PREEMPT(full) [ 547.000298][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 547.000322][T11623] Call Trace: [ 547.000335][T11623] [ 547.000349][T11623] dump_stack_lvl+0x100/0x190 [ 547.000409][T11623] should_fail_ex.cold+0x5/0xa [ 547.000451][T11623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 547.000513][T11623] should_failslab+0xc2/0x120 [ 547.000576][T11623] kmem_cache_alloc_noprof+0x92/0x6a0 [ 547.000630][T11623] ? __pfx_map_id_range_down+0x10/0x10 [ 547.000695][T11623] ? rcu_is_watching+0x13/0xc0 [ 547.000743][T11623] ? security_inode_alloc+0x3b/0x2c0 [ 547.000799][T11623] security_inode_alloc+0x3b/0x2c0 [ 547.000847][T11623] inode_init_always_gfp+0xc6f/0xfb0 [ 547.000919][T11623] alloc_inode+0x8e/0x250 [ 547.000967][T11623] sock_alloc+0x44/0x280 [ 547.001014][T11623] ? security_socket_create+0x7f/0x250 [ 547.001059][T11623] __sock_create+0xc2/0x860 [ 547.001125][T11623] __sys_socket+0x14d/0x260 [ 547.001185][T11623] ? __pfx___sys_socket+0x10/0x10 [ 547.001261][T11623] __x64_sys_socket+0x72/0xb0 [ 547.001319][T11623] ? lockdep_hardirqs_on+0x7d/0x110 [ 547.001372][T11623] do_syscall_64+0x123/0x790 [ 547.001428][T11623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.001469][T11623] RIP: 0033:0x7fb90fb9e159 [ 547.001505][T11623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.001544][T11623] RSP: 002b:00007fb9109ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 547.001583][T11623] RAX: ffffffffffffffda RBX: 00007fb90fe25fa0 RCX: 00007fb90fb9e159 [ 547.001610][T11623] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 547.001634][T11623] RBP: 00007fb90fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 547.001660][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.001684][T11623] R13: 00007fb90fe26038 R14: 00007fb90fe25fa0 R15: 00007ffff5a8a688 [ 547.001735][T11623] [ 547.098429][T11623] socket: no more sockets [ 547.384548][T11685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.385179][T11685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.966498][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 549.917327][T11724] ceph: No mds server is up or the cluster is laggy [ 550.128015][ T30] libceph: connect (1)[c::]:6789 error -101 [ 550.134386][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 550.860240][ T5277] 8021q: adding VLAN 0 to HW filter on device eth21 [ 550.868730][T11743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1535'. [ 550.868795][T11743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1535'. [ 554.102115][T11764] Bluetooth: hci3: command 0x0406 tx timeout [ 554.115700][T11764] Bluetooth: hci0: command 0x0406 tx timeout [ 555.516793][T11800] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 556.185651][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 556.185714][ T31] audit: type=1326 audit(1788334163.646:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11810 comm="syz.3.1553" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 556.185808][ T31] audit: type=1326 audit(1788334163.646:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11810 comm="syz.3.1553" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 556.221337][ T31] audit: type=1326 audit(1788334163.676:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11810 comm="syz.3.1553" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 556.221426][ T31] audit: type=1326 audit(1788334163.676:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11810 comm="syz.3.1553" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 556.221504][ T31] audit: type=1326 audit(1788334163.676:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11810 comm="syz.3.1553" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 556.237019][ T31] audit: type=1326 audit(1788334163.696:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11810 comm="syz.3.1553" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 556.616096][T11813] random: crng reseeded on system resumption [ 556.735713][ T31] audit: type=1326 audit(1788334164.196:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11810 comm="syz.3.1553" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 556.746073][ T31] audit: type=1326 audit(1788334164.206:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11810 comm="syz.3.1553" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779e159 code=0x7ffc0000 [ 556.966443][T11805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.993349][T11805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.001733][T11830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1558'. [ 557.012976][T11830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1558'. [ 557.088477][ T5277] 8021q: adding VLAN 0 to HW filter on device eth22 [ 558.847842][T11846] fuse: Bad value for 'fd' [ 559.885746][T11859] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 561.589872][T11880] netlink: 'syz.0.1569': attribute type 13 has an invalid length. [ 561.589976][T11880] netlink: 'syz.0.1569': attribute type 17 has an invalid length. [ 562.674895][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.675025][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.027698][T11880] gretap0: refused to change device tx_queue_len [ 563.028243][T11880] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 563.376944][ T31] audit: type=1326 audit(1788334170.836:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.4.1572" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db859e159 code=0x7ffc0000 [ 563.428359][ T31] audit: type=1326 audit(1788334170.886:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.4.1572" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db859e159 code=0x7ffc0000 [ 563.455138][ T31] audit: type=1326 audit(1788334170.916:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.4.1572" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f5db859e159 code=0x7ffc0000 [ 563.644402][ T31] audit: type=1326 audit(1788334171.096:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.4.1572" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db859e159 code=0x7ffc0000 [ 563.645603][ T31] audit: type=1326 audit(1788334171.096:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.4.1572" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db859e159 code=0x7ffc0000 [ 563.869996][T11899] binder: 11897:11899 ioctl 4018620d 0 returned -22 [ 564.399258][T11903] No source specified [ 564.733978][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 565.317155][ T5277] 8021q: adding VLAN 0 to HW filter on device eth23 [ 568.109808][T11941] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 568.491659][T11919] random: crng reseeded on system resumption [ 568.639301][T11953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1584'. [ 568.639359][T11953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1584'. [ 569.004400][ T5629] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 569.144078][ T5629] usb 5-1: device descriptor read/64, error -71 [ 569.319694][T11971] smc: net device vlan1 applied user defined pnetid SYZ2 [ 569.457513][ T5629] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 569.531634][ T5635] Bluetooth: hci1: command 0x0406 tx timeout [ 569.634084][ T5629] usb 5-1: device descriptor read/64, error -71 [ 569.749561][ T5629] usb usb5-port1: attempt power cycle [ 571.615744][ T5277] 8021q: adding VLAN 0 to HW filter on device eth24 [ 572.027289][T12003] ceph: No mds server is up or the cluster is laggy [ 572.173189][ T5629] libceph: connect (1)[c::]:6789 error -101 [ 572.185770][ T5629] libceph: mon0 (1)[c::]:6789 connect error [ 573.532083][T12041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1609'. [ 573.532143][T12041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1609'. [ 573.905890][T12043] random: crng reseeded on system resumption [ 574.484765][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 574.654527][ T10] usb 7-1: device descriptor read/64, error -71 [ 575.037766][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 576.040063][ T10] usb 7-1: device descriptor read/64, error -71 [ 576.218168][ T10] usb usb7-port1: attempt power cycle [ 576.853969][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 577.360483][ T10] usb 7-1: device descriptor read/8, error -71 [ 577.617188][T10585] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 577.783561][T10585] usb 5-1: unable to get BOS descriptor or descriptor too short [ 577.788717][T10585] usb 5-1: not running at top speed; connect to a high speed hub [ 577.788769][T10585] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 577.803468][T10585] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 577.803523][T10585] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 577.803582][T10585] usb 5-1: config 14 has no interface number 0 [ 577.803622][T10585] usb 5-1: config 14 has no interface number 1 [ 577.803747][T10585] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 577.803910][T10585] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 577.803968][T10585] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 577.804023][T10585] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 577.804083][T10585] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 577.804140][T10585] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 577.804189][T10585] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.804248][T10585] usb 5-1: config 14 interface 57 has no altsetting 0 [ 577.804290][T10585] usb 5-1: config 14 interface 228 has no altsetting 0 [ 577.828588][T10585] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.828637][T10585] usb 5-1: Product: syz [ 577.828685][T10585] usb 5-1: Manufacturer: syz [ 577.828722][T10585] usb 5-1: SerialNumber: syz [ 578.862283][T10585] legousbtower 5-1:14.57: interrupt endpoints not found [ 581.682439][T10585] legousbtower 5-1:14.228: get version request failed: -71 [ 581.682661][T10585] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 581.696495][T10585] usb 5-1: USB disconnect, device number 11 [ 583.304148][T12118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1629'. [ 583.304979][T12118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1629'. [ 584.766104][T12148] syz.2.1637 uses obsolete (PF_INET,SOCK_PACKET) [ 585.514230][T10585] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 585.669212][T10585] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 585.670935][T10585] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 585.671031][T10585] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 585.671088][T10585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 585.671147][T10585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 585.671205][T10585] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 585.671280][T10585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.684734][T10585] usb 2-1: config 0 descriptor?? [ 585.690925][T12159] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 586.843248][T10585] usbhid 2-1:0.0: can't add hid device: -71 [ 586.843405][T10585] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 586.907357][T10585] usb 2-1: USB disconnect, device number 15 [ 586.935278][T12173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.952920][T12173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.146484][T12183] syz.2.1646: vmalloc error: size 57344, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 590.150343][T12183] CPU: 1 UID: 0 PID: 12183 Comm: syz.2.1646 Not tainted syzkaller #0 PREEMPT(full) [ 590.150397][T12183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 590.150422][T12183] Call Trace: [ 590.150434][T12183] [ 590.150449][T12183] dump_stack_lvl+0x100/0x190 [ 590.150509][T12183] warn_alloc.cold+0x9e/0xb2 [ 590.150554][T12183] ? __pfx_warn_alloc+0x10/0x10 [ 590.150601][T12183] ? policy_nodemask+0xed/0x4f0 [ 590.150671][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.150720][T12183] ? alloc_pages_mpol+0x260/0x550 [ 590.150788][T12183] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 590.150855][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.150903][T12183] ? find_held_lock+0x2b/0x80 [ 590.150956][T12183] ? rcu_read_unlock+0x17/0x60 [ 590.151017][T12183] __vmalloc_node_range_noprof+0x111c/0x1420 [ 590.151104][T12183] ? bpf_check+0x112/0xa7c0 [ 590.151147][T12183] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 590.151216][T12183] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 590.151290][T12183] ? rcu_is_watching+0x13/0xc0 [ 590.151349][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.151403][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.151460][T12183] __kvmalloc_node_noprof+0x3da/0x9b0 [ 590.151518][T12183] ? bpf_check+0x112/0xa7c0 [ 590.151553][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.151605][T12183] ? ktime_get+0x22c/0x320 [ 590.151639][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.151687][T12183] ? bpf_check+0x112/0xa7c0 [ 590.151733][T12183] bpf_check+0x112/0xa7c0 [ 590.151793][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.151840][T12183] ? __lock_acquire+0x4c5/0x1ec0 [ 590.151906][T12183] ? preempt_schedule_irq+0x79/0x90 [ 590.151960][T12183] ? __pfx_bpf_check+0x10/0x10 [ 590.151998][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.152055][T12183] ? lock_acquire+0x1d1/0x380 [ 590.152116][T12183] ? bpf_prog_load+0x1a09/0x2a80 [ 590.152153][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.152200][T12183] ? find_held_lock+0x2b/0x80 [ 590.152248][T12183] ? bpf_prog_load+0x1a09/0x2a80 [ 590.152286][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.152356][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.152403][T12183] ? __asan_memset+0x23/0x50 [ 590.152451][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.152506][T12183] ? bpf_prog_load+0x1ac3/0x2a80 [ 590.152542][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.152588][T12183] bpf_prog_load+0x1ac3/0x2a80 [ 590.152638][T12183] ? __pfx_bpf_prog_load+0x10/0x10 [ 590.152683][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.152764][T12183] __sys_bpf+0x1f46/0x4a30 [ 590.152812][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.152872][T12183] ? __pfx___sys_bpf+0x10/0x10 [ 590.152920][T12183] ? tomoyo_path_number_perm+0x28f/0x580 [ 590.152970][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.153031][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.153077][T12183] ? tomoyo_path_number_perm+0x188/0x580 [ 590.153149][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.153202][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.153248][T12183] ? __lock_acquire+0x4c5/0x1ec0 [ 590.153312][T12183] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 590.153386][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.153433][T12183] ? rcu_is_watching+0x13/0xc0 [ 590.153478][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.153525][T12183] ? kfree+0x1e5/0x6d0 [ 590.153569][T12183] ? srso_alias_return_thunk+0x5/0xfbef5 [ 590.153615][T12183] ? xfd_validate_state+0x129/0x190 [ 590.153685][T12183] ? __x64_sys_bpf+0xce/0x140 [ 590.153735][T12183] __x64_sys_bpf+0xce/0x140 [ 590.153788][T12183] ? do_syscall_64+0xae/0x790 [ 590.153842][T12183] do_syscall_64+0x123/0x790 [ 590.153897][T12183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.153937][T12183] RIP: 0033:0x7faf5899e159 [ 590.153970][T12183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.154007][T12183] RSP: 002b:00007faf598ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 590.154048][T12183] RAX: ffffffffffffffda RBX: 00007faf58c26090 RCX: 00007faf5899e159 [ 590.154074][T12183] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 590.154099][T12183] RBP: 00007faf58a35024 R08: 0000000000000000 R09: 0000000000000000 [ 590.154123][T12183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.154147][T12183] R13: 00007faf58c26128 R14: 00007faf58c26090 R15: 00007ffcee403b88 [ 590.154198][T12183] [ 590.168609][T12183] Mem-Info: [ 590.168632][T12183] active_anon:32839 inactive_anon:3 isolated_anon:0 [ 590.168632][T12183] active_file:1 inactive_file:58721 isolated_file:0 [ 590.168632][T12183] unevictable:0 dirty:252 writeback:0 [ 590.168632][T12183] slab_reclaimable:11413 slab_unreclaimable:103622 [ 590.168632][T12183] mapped:43689 shmem:25564 pagetables:1560 [ 590.168632][T12183] sec_pagetables:0 bounce:0 [ 590.168632][T12183] kernel_misc_reclaimable:0 [ 590.168632][T12183] free:1263983 free_pcp:8540 free_cma:0 [ 590.168777][T12183] Node 0 active_anon:131356kB inactive_anon:12kB active_file:4kB inactive_file:234680kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174756kB dirty:1008kB writeback:0kB shmem:102256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13484kB pagetables:6108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 590.168886][T12183] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 590.169047][T12183] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.169212][T12183] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 590.169281][T12183] Node 0 DMA32 free:1097292kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:131356kB inactive_anon:12kB active_file:4kB inactive_file:234680kB unevictable:0kB writepending:1008kB zspages:0kB present:3129332kB managed:2530348kB mlocked:0kB bounce:0kB free_pcp:34160kB local_pcp:31068kB free_cma:0kB [ 590.169448][T12183] lowmem_reserve[]: 0 0 0 0 0 [ 590.169515][T12183] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:80kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.169670][T12183] lowmem_reserve[]: 0 0 0 0 0 [ 590.169736][T12183] Node 1 Normal free:3943280kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.169896][T12183] lowmem_reserve[]: 0 0 0 0 0 [ 590.169961][T12183] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 590.170308][T12183] Node 0 DMA32: 1127*4kB (UME) 746*8kB (UME) 115*16kB (UM) 12*32kB (UM) 2*64kB (ME) 1*128kB (U) 2*256kB (UE) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 263*4096kB (UM) = 1097372kB [ 590.170759][T12183] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 590.170998][T12183] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 5*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943280kB [ 590.171451][T12183] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 590.171482][T12183] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 590.171513][T12183] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 590.171591][T12183] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 590.171623][T12183] 84282 total pagecache pages [ 590.171636][T12183] 0 pages in swap cache [ 590.171649][T12183] Free swap = 124972kB [ 590.171662][T12183] Total swap = 124996kB [ 590.171676][T12183] 2097051 pages RAM [ 590.171689][T12183] 0 pages HighMem/MovableOnly [ 590.171702][T12183] 432828 pages reserved [ 590.171762][T12183] 0 pages cma reserved [ 590.310139][T12183] syz.2.1646 (12183) used greatest stack depth: 18904 bytes left [ 591.282736][T12200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1649'. [ 591.282856][T12200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1649'. [ 594.011106][ T30] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 594.217879][ T30] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 594.251568][ T30] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 594.260431][ T30] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 594.260647][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 594.260813][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 594.260874][ T30] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 594.261863][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.691366][ T30] usb 4-1: config 0 descriptor?? [ 594.768026][T12238] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 595.565967][ T30] usbhid 4-1:0.0: can't add hid device: -71 [ 595.576012][ T30] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 595.598277][ T30] usb 4-1: USB disconnect, device number 10 [ 597.178510][T12275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1671'. [ 597.179765][T12275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1671'. [ 598.741633][T12332] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1683'. [ 598.912837][ T30] libceph: connect (1)[c::]:6789 error -101 [ 598.913180][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 598.927906][T12336] ceph: No mds server is up or the cluster is laggy [ 599.032137][ T981] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 599.494896][ T981] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 599.497323][ T981] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 599.497388][ T981] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 599.497483][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 599.497531][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 599.497578][ T981] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 599.497692][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.502366][ T981] usb 4-1: config 0 descriptor?? [ 599.507043][T12335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 600.532457][ T981] usbhid 4-1:0.0: can't add hid device: -71 [ 600.539679][ T981] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 600.560059][ T981] usb 4-1: USB disconnect, device number 11 [ 606.316031][T12446] binder: 12444:12446 ioctl 4018620d 0 returned -22 [ 606.851431][T12459] CIFS: Attempting to mount //::1/share [ 607.350545][ T31] audit: type=1800 audit(1788334214.806:49): pid=12480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1716" name="manufacturer" dev="configfs" ino=36011 res=0 errno=0 [ 607.585927][T12459] CIFS: VFS: cifs_mount failed w/return code = -112 [ 612.487864][T12550] binder: 12547:12550 ioctl 4018620d 0 returned -22 [ 613.144847][ T31] audit: type=1800 audit(1788334220.606:50): pid=12562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1734" name="manufacturer" dev="configfs" ino=36176 res=0 errno=0 [ 613.960277][T12580] dlm: no local IP address has been set [ 613.960344][T12580] dlm: cannot start dlm midcomms -107 [ 614.266222][T10585] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 614.444757][T10585] usb 3-1: Using ep0 maxpacket: 32 [ 614.458802][T10585] usb 3-1: New USB device found, idVendor=05ac, idProduct=0000, bcdDevice= 0.00 [ 614.469678][T10585] usb 3-1: no configurations [ 614.469780][T10585] usb 3-1: can't read configurations, error -22 [ 614.679739][T10585] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 614.853916][T10585] usb 3-1: Using ep0 maxpacket: 32 [ 614.860039][T10585] usb 3-1: New USB device found, idVendor=05ac, idProduct=0000, bcdDevice= 0.00 [ 614.860101][T10585] usb 3-1: no configurations [ 614.860124][T10585] usb 3-1: can't read configurations, error -22 [ 614.877132][T10585] usb usb3-port1: attempt power cycle [ 616.244382][T10585] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 616.328757][T10585] usb 3-1: Using ep0 maxpacket: 32 [ 616.330153][T10585] usb 3-1: New USB device found, idVendor=05ac, idProduct=0000, bcdDevice= 0.00 [ 616.330318][T10585] usb 3-1: no configurations [ 616.330472][T10585] usb 3-1: can't read configurations, error -22 [ 618.850307][ T31] audit: type=1800 audit(1788334226.306:51): pid=12608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1746" name="addr_traddr" dev="configfs" ino=36252 res=0 errno=0 [ 618.877391][ T31] audit: type=1800 audit(1788334226.336:52): pid=12608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1746" name="addr_trsvcid" dev="configfs" ino=36253 res=0 errno=0 [ 618.908926][ T31] audit: type=1800 audit(1788334226.366:53): pid=12608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1746" name="addr_adrfam" dev="configfs" ino=36255 res=0 errno=0 [ 619.160942][ T31] audit: type=1800 audit(1788334226.616:54): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1749" name="manufacturer" dev="configfs" ino=36262 res=0 errno=0 [ 619.203464][ T5277] 8021q: adding VLAN 0 to HW filter on device eth18 [ 619.319842][T12624] binder: 12623:12624 ioctl 4018620d 0 returned -22 [ 621.129554][T12651] CIFS: Attempting to mount //::1/share [ 622.234170][T12651] CIFS: VFS: cifs_mount failed w/return code = -112 [ 622.420659][T12661] overlay: ./file0 is not a directory [ 623.739897][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.740679][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.847205][T12683] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1762'. [ 626.707841][ T5277] 8021q: adding VLAN 0 to HW filter on device eth19 [ 627.258545][T12734] loop0: detected capacity change from 0 to 128 [ 628.469518][T12734] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 628.514992][T12734] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 628.620815][T12756] tipc: Enabling of bearer rejected, already enabled [ 631.278327][T10164] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 635.829523][ T5277] 8021q: adding VLAN 0 to HW filter on device eth20 [ 636.159345][T12830] syz.2.1797: vmalloc error: size 57344, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 637.150187][T12830] CPU: 0 UID: 0 PID: 12830 Comm: syz.2.1797 Not tainted syzkaller #0 PREEMPT(full) [ 637.150242][T12830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 637.150267][T12830] Call Trace: [ 637.150282][T12830] [ 637.150298][T12830] dump_stack_lvl+0x100/0x190 [ 637.150359][T12830] warn_alloc.cold+0x9e/0xb2 [ 637.150404][T12830] ? __pfx_warn_alloc+0x10/0x10 [ 637.150452][T12830] ? policy_nodemask+0xed/0x4f0 [ 637.150523][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.150573][T12830] ? alloc_pages_mpol+0x260/0x550 [ 637.150643][T12830] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 637.150710][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.150759][T12830] ? find_held_lock+0x2b/0x80 [ 637.150813][T12830] ? rcu_read_unlock+0x17/0x60 [ 637.150869][T12830] __vmalloc_node_range_noprof+0x111c/0x1420 [ 637.150961][T12830] ? bpf_check+0x112/0xa7c0 [ 637.151004][T12830] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 637.151075][T12830] ? __lock_acquire+0x4c5/0x1ec0 [ 637.151141][T12830] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 637.151215][T12830] ? rcu_is_watching+0x13/0xc0 [ 637.151264][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.151315][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.151372][T12830] __kvmalloc_node_noprof+0x3da/0x9b0 [ 637.151432][T12830] ? bpf_check+0x112/0xa7c0 [ 637.151467][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.151519][T12830] ? ktime_get+0x22c/0x320 [ 637.151555][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.151604][T12830] ? bpf_check+0x112/0xa7c0 [ 637.151651][T12830] bpf_check+0x112/0xa7c0 [ 637.151692][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.151741][T12830] ? __css_rstat_updated+0x1ce/0x590 [ 637.151783][T12830] ? __lock_acquire+0x4c5/0x1ec0 [ 637.151864][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.151913][T12830] ? __lock_acquire+0x4c5/0x1ec0 [ 637.151983][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.152032][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.152086][T12830] ? find_held_lock+0x2b/0x80 [ 637.152143][T12830] ? __pfx_bpf_check+0x10/0x10 [ 637.152181][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.152236][T12830] ? lock_acquire+0x1d1/0x380 [ 637.152298][T12830] ? bpf_prog_load+0x1a09/0x2a80 [ 637.152337][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.152409][T12830] ? find_held_lock+0x2b/0x80 [ 637.152459][T12830] ? bpf_prog_load+0x1a09/0x2a80 [ 637.152500][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.152553][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.152601][T12830] ? __asan_memset+0x23/0x50 [ 637.152652][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.152714][T12830] ? bpf_prog_load+0x1ac3/0x2a80 [ 637.152755][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.152804][T12830] bpf_prog_load+0x1ac3/0x2a80 [ 637.152856][T12830] ? __pfx_bpf_prog_load+0x10/0x10 [ 637.152904][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.152990][T12830] __sys_bpf+0x1f46/0x4a30 [ 637.153046][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.153109][T12830] ? __pfx___sys_bpf+0x10/0x10 [ 637.153159][T12830] ? tomoyo_path_number_perm+0x28f/0x580 [ 637.153212][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.153270][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.153318][T12830] ? tomoyo_path_number_perm+0x188/0x580 [ 637.153392][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.153447][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.153495][T12830] ? __lock_acquire+0x4c5/0x1ec0 [ 637.153562][T12830] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 637.153639][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.153688][T12830] ? rcu_is_watching+0x13/0xc0 [ 637.153736][T12830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.153784][T12830] ? kfree+0x1e5/0x6d0 [ 637.153824][T12830] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 637.153886][T12830] ? __x64_sys_bpf+0xce/0x140 [ 637.153938][T12830] __x64_sys_bpf+0xce/0x140 [ 637.153994][T12830] ? do_syscall_64+0xae/0x790 [ 637.154054][T12830] do_syscall_64+0x123/0x790 [ 637.154112][T12830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.154154][T12830] RIP: 0033:0x7faf5899e159 [ 637.154187][T12830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.154229][T12830] RSP: 002b:00007faf598ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 637.154269][T12830] RAX: ffffffffffffffda RBX: 00007faf58c26090 RCX: 00007faf5899e159 [ 637.154296][T12830] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 637.154322][T12830] RBP: 00007faf58a35024 R08: 0000000000000000 R09: 0000000000000000 [ 637.154348][T12830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.154373][T12830] R13: 00007faf58c26128 R14: 00007faf58c26090 R15: 00007ffcee403b88 [ 637.154426][T12830] [ 637.556970][T12830] Mem-Info: [ 637.556993][T12830] active_anon:11681 inactive_anon:0 isolated_anon:0 [ 637.556993][T12830] active_file:0 inactive_file:58805 isolated_file:0 [ 637.556993][T12830] unevictable:0 dirty:259 writeback:0 [ 637.556993][T12830] slab_reclaimable:11373 slab_unreclaimable:104288 [ 637.556993][T12830] mapped:39115 shmem:4595 pagetables:1506 [ 637.556993][T12830] sec_pagetables:0 bounce:0 [ 637.556993][T12830] kernel_misc_reclaimable:0 [ 637.556993][T12830] free:1278600 free_pcp:12867 free_cma:0 [ 637.557104][T12830] Node 0 active_anon:46724kB inactive_anon:0kB active_file:0kB inactive_file:235016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:156460kB dirty:1032kB writeback:0kB shmem:18380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13364kB pagetables:5892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 637.557217][T12830] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 637.557322][T12830] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.557439][T12830] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 637.557508][T12830] Node 0 DMA32 free:1155760kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:46724kB inactive_anon:0kB active_file:0kB inactive_file:235016kB unevictable:0kB writepending:1032kB zspages:40kB present:3129332kB managed:2530348kB mlocked:0kB bounce:0kB free_pcp:51468kB local_pcp:28616kB free_cma:0kB [ 637.557629][T12830] lowmem_reserve[]: 0 0 0 0 0 [ 637.557708][T12830] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:80kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.557821][T12830] lowmem_reserve[]: 0 0 0 0 0 [ 637.557887][T12830] Node 1 Normal free:3943280kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.558004][T12830] lowmem_reserve[]: 0 0 0 0 0 [ 637.558075][T12830] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 637.558301][T12830] Node 0 DMA32: 10*4kB (UE) 483*8kB (UME) 109*16kB (UE) 19*32kB (UE) 181*64kB (UME) 118*128kB (UM) 62*256kB (UME) 36*512kB (ME) 15*1024kB (UME) 4*2048kB (UM) 260*4096kB (UM) = 1155760kB [ 637.561654][T12830] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 637.561849][T12830] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 5*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943280kB [ 637.562163][T12830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.562195][T12830] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 637.562227][T12830] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.562258][T12830] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 637.562290][T12830] 63396 total pagecache pages [ 637.562303][T12830] 0 pages in swap cache [ 637.562316][T12830] Free swap = 124976kB [ 637.562330][T12830] Total swap = 124996kB [ 637.562345][T12830] 2097051 pages RAM [ 637.562357][T12830] 0 pages HighMem/MovableOnly [ 637.562371][T12830] 432828 pages reserved [ 637.562384][T12830] 0 pages cma reserved [ 638.807364][ T5759] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 638.960172][ T5759] usb 7-1: device descriptor read/64, error -71 [ 639.206042][ T5759] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 639.336848][ T5759] usb 7-1: device descriptor read/64, error -71 [ 639.446542][ T5759] usb usb7-port1: attempt power cycle [ 639.787349][ T5759] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 639.809828][ T5759] usb 7-1: device descriptor read/8, error -71 [ 639.921163][T12824] Could not create tracefs 'trace_pipe_raw' entry [ 639.952632][T12824] Could not create tracefs 'stats' entry [ 639.979037][T12824] Could not create tracefs 'buffer_size_kb' entry [ 640.008461][T12824] Could not create tracefs 'cpu1' entry [ 640.036511][T12824] Could not create tracefs 'free_buffer' entry [ 640.045114][ T5759] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 640.072813][T12824] Could not create tracefs 'trace_marker' entry [ 640.073014][ T5759] usb 7-1: device descriptor read/8, error -71 [ 640.107256][T12824] Could not create tracefs 'trace_marker_raw' entry [ 640.139753][T12824] Could not create tracefs 'buffer_percent' entry [ 640.171449][T12824] Could not create tracefs 'syscall_user_buf_size' entry [ 640.174621][ T5759] usb usb7-port1: unable to enumerate USB device [ 640.228890][T12824] Could not create tracefs 'tracing_on' entry [ 640.256853][T12824] Could not create tracefs 'error_log' entry [ 640.281521][T12824] Could not create tracefs 'test_nop_accept' entry [ 640.288448][T12824] ERROR: Failed to create trace option: test_nop_accept [ 640.306526][T12824] Could not create tracefs 'test_nop_refuse' entry [ 643.687241][T12883] binder: 12882:12883 ioctl 4018620d 0 returned -22 [ 643.825610][T12887] jffs2: notice: (12887) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 646.293090][T12921] loop4: detected capacity change from 0 to 128 [ 646.372243][T12921] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 646.386409][T12921] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 647.851541][T12944] ceph: No mds server is up or the cluster is laggy [ 647.854091][ T30] libceph: connect (1)[c::]:6789 error -101 [ 647.854386][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 648.144739][ T5759] libceph: connect (1)[c::]:6789 error -101 [ 648.145079][ T5759] libceph: mon0 (1)[c::]:6789 connect error [ 648.657334][ T5759] libceph: connect (1)[c::]:6789 error -101 [ 648.657658][ T5759] libceph: mon0 (1)[c::]:6789 connect error [ 649.615645][T10032] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 652.951238][T12990] binder: 12987:12990 ioctl 4018620d 0 returned -22 [ 654.067412][T12995] jffs2: notice: (12995) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 658.423178][T13029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.488870][T13029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.874785][T13021] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 660.345724][ T5853] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 660.354194][T13048] nvmet: adding nsid 1 to subsystem testsubsys [ 660.405587][T13048] nvmet: failed to open file ./0©ïßÔ˜ *Ñx¡³8: (-2) [ 660.493919][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 660.502973][ T5853] usb 3-1: unable to get BOS descriptor or descriptor too short [ 660.503062][ T5853] usb 3-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 660.532571][ T5853] usb 3-1: config 1 has an invalid interface number: 232 but max is 0 [ 660.532658][ T5853] usb 3-1: config 1 has no interface number 0 [ 660.532733][ T5853] usb 3-1: config 1 interface 232 has no altsetting 0 [ 661.307614][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.307676][ T5853] usb 3-1: Product: syz [ 661.307725][ T5853] usb 3-1: Manufacturer: syz [ 661.307761][ T5853] usb 3-1: SerialNumber: syz [ 661.765268][T13061] loop0: detected capacity change from 0 to 128 [ 661.815900][T13061] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 661.864986][T13061] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 661.899307][T13062] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1853'. [ 661.923045][T13062] netlink: 'syz.6.1853': attribute type 1 has an invalid length. [ 662.806521][T13071] netlink: 'syz.3.1854': attribute type 13 has an invalid length. [ 662.806647][T13071] netlink: 'syz.3.1854': attribute type 17 has an invalid length. [ 664.660312][ T5853] hub 3-1:1.232: bad descriptor, ignoring hub [ 664.660382][ T5853] hub 3-1:1.232: probe with driver hub failed with error -5 [ 664.663468][ T5853] option 3-1:1.232: GSM modem (1-port) converter detected [ 664.694413][ T5853] usb 3-1: USB disconnect, device number 19 [ 664.709682][T13071] gretap0: refused to change device tx_queue_len [ 664.710167][T13071] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 665.729370][ T5853] option 3-1:1.232: device disconnected [ 665.880411][T10164] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 669.277722][ T5750] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 669.502063][ T5750] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 669.556909][ T5750] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 669.566937][ T5750] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 669.567041][ T5750] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 669.567147][ T5750] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 669.567350][ T5750] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 669.567430][ T5750] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.743702][ T5750] usb 7-1: config 0 descriptor?? [ 669.762128][T13109] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 670.526505][ T5750] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 670.569405][ T5750] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 670.580957][ T5750] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 670.590677][ T5750] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 670.602972][ T5750] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 670.611303][ T5750] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 670.834532][ T5750] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 671.721849][ T5750] usb 7-1: USB disconnect, device number 20 [ 672.068972][T13120] nvmet: failed to open file ./0©ïßÔ˜ *Ñx¡³8: (-2) [ 672.077423][T13120] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 674.593380][T13128] fido_id[13128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 674.760422][T13133] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1869'. [ 675.517722][T13135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.518353][T13135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.942385][T13142] loop1: detected capacity change from 0 to 128 [ 676.199159][T13142] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 676.377997][T13142] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 677.170102][T13160] binder: 13156:13160 ioctl 4018620d 0 returned -22 [ 677.375182][T13162] jffs2: notice: (13162) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 678.495065][T10339] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 679.597393][ T31] audit: type=1800 audit(1788334286.986:55): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1880" name="addr_traddr" dev="configfs" ino=38237 res=0 errno=0 [ 679.744441][ T31] audit: type=1800 audit(1788334287.196:56): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1880" name="addr_adrfam" dev="configfs" ino=37292 res=0 errno=0 [ 679.751573][ T31] audit: type=1800 audit(1788334287.206:57): pid=13180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1880" name="addr_trsvcid" dev="configfs" ino=38238 res=0 errno=0 [ 679.769468][T13177] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 680.164288][ T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 680.393619][ T5759] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 680.423258][T13199] CIFS: Attempting to mount //::1/share [ 680.434479][T13193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1886'. [ 680.595430][ T5759] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 680.643685][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 680.669839][ T5759] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 680.683496][ T5759] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 680.707120][ T5759] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 680.725016][ T5759] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 680.740406][ T5759] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 680.749352][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 680.749398][ T10] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 680.758923][ T5759] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.903297][ T10] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 680.903369][ T10] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 680.903415][ T10] usb 2-1: config 14 has no interface number 0 [ 680.903445][ T10] usb 2-1: config 14 has no interface number 1 [ 680.903521][ T10] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 680.903564][ T10] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 680.903609][ T10] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 680.903655][ T10] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 680.903704][ T10] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 680.903787][ T10] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 680.903829][ T10] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 680.903878][ T10] usb 2-1: config 14 interface 57 has no altsetting 0 [ 680.903912][ T10] usb 2-1: config 14 interface 228 has no altsetting 0 [ 681.356578][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.356648][ T10] usb 2-1: Product: syz [ 681.356697][ T10] usb 2-1: Manufacturer: syz [ 681.356732][ T10] usb 2-1: SerialNumber: syz [ 681.395701][ T5759] usb 7-1: config 0 descriptor?? [ 681.405727][T13199] CIFS: VFS: Error connecting to socket. Aborting operation. [ 681.405808][T13199] CIFS: VFS: cifs_mount failed w/return code = -4 [ 681.417973][T13183] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 681.558006][ T5629] libceph: connect (1)[c::]:6789 error -101 [ 681.566997][ T5629] libceph: mon0 (1)[c::]:6789 connect error [ 681.593578][ T5629] libceph: connect (1)[c::]:6789 error -101 [ 681.601052][ T5629] libceph: mon0 (1)[c::]:6789 connect error [ 681.618967][T13205] ceph: No mds server is up or the cluster is laggy [ 681.935313][ T5759] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 681.935384][ T5759] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 681.943547][ T5759] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 681.943644][ T5759] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 681.943682][ T5759] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 681.943718][ T5759] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 681.989228][ T10] legousbtower 2-1:14.57: interrupt endpoints not found [ 682.028549][ T5759] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 682.196980][ T5759] usb 7-1: USB disconnect, device number 21 [ 682.407378][ T10] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 682.452341][ T10] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 682.514974][T13220] fido_id[13220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 683.585548][T13233] usb 2-1: LEGO USB Tower reset control request failed [ 683.694020][ T5759] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 684.065548][T11075] usb 2-1: USB disconnect, device number 16 [ 684.101447][T11075] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 684.428771][T13243] dlm: no local IP address has been set [ 684.428845][T13243] dlm: cannot start dlm midcomms -107 [ 685.085120][ T5759] usb 3-1: Using ep0 maxpacket: 16 [ 685.090687][ T5759] usb 3-1: unable to get BOS descriptor or descriptor too short [ 685.090749][ T5759] usb 3-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 685.094348][ T5759] usb 3-1: config 1 has an invalid interface number: 232 but max is 0 [ 685.094387][ T5759] usb 3-1: config 1 has no interface number 0 [ 685.094443][ T5759] usb 3-1: config 1 interface 232 has no altsetting 0 [ 685.099380][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.099423][ T5759] usb 3-1: Product: syz [ 685.099495][ T5759] usb 3-1: Manufacturer: syz [ 685.099522][ T5759] usb 3-1: SerialNumber: syz [ 685.130044][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.130133][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.343873][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 685.485411][T13253] binder: 13251:13253 ioctl 4018620d 0 returned -22 [ 685.503864][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 685.509995][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0000, bcdDevice= 0.00 [ 685.520241][ T10] usb 7-1: no configurations [ 685.525345][ T10] usb 7-1: can't read configurations, error -22 [ 685.564375][T13255] jffs2: notice: (13255) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 685.664639][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 685.831737][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 685.841476][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0000, bcdDevice= 0.00 [ 685.843670][ T10] usb 7-1: no configurations [ 685.844553][ T10] usb 7-1: can't read configurations, error -22 [ 685.891575][ T10] usb usb7-port1: attempt power cycle [ 685.961789][T13260] loop3: detected capacity change from 0 to 128 [ 686.040951][ T5759] hub 3-1:1.232: bad descriptor, ignoring hub [ 686.041067][ T5759] hub 3-1:1.232: probe with driver hub failed with error -5 [ 686.046945][ T5759] option 3-1:1.232: GSM modem (1-port) converter detected [ 686.134650][ T5759] usb 3-1: USB disconnect, device number 20 [ 686.141749][ T5759] option 3-1:1.232: device disconnected [ 686.154473][T13260] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 686.161470][T13260] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 686.254092][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 686.274670][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 686.280633][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0000, bcdDevice= 0.00 [ 686.290110][ T10] usb 7-1: no configurations [ 686.290170][ T10] usb 7-1: can't read configurations, error -22 [ 686.463927][ T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 686.604713][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 686.605644][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0000, bcdDevice= 0.00 [ 686.605699][ T10] usb 7-1: no configurations [ 686.605722][ T10] usb 7-1: can't read configurations, error -22 [ 686.606205][ T10] usb usb7-port1: unable to enumerate USB device [ 687.749671][ T9613] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 689.594520][T13286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1899'. [ 691.753961][ T5750] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 691.915176][ T5750] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 691.929331][ T5750] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 691.929421][ T5750] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 691.929487][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 691.929540][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 691.929591][ T5750] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 691.929656][ T5750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.007785][ T5750] usb 2-1: config 0 descriptor?? [ 692.015609][T13294] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 692.488761][ T5750] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 692.496590][ T5750] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 692.504765][ T5750] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 692.512604][ T5750] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 692.512648][ T5750] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 692.512685][ T5750] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 692.627958][ T5750] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 693.312045][ T30] usb 2-1: USB disconnect, device number 17 [ 693.536812][ T5759] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 693.724196][ T5759] usb 4-1: Using ep0 maxpacket: 16 [ 693.737641][ T5759] usb 4-1: unable to get BOS descriptor or descriptor too short [ 693.746040][ T5759] usb 4-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 693.761553][ T5759] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 693.771084][ T5759] usb 4-1: config 1 has no interface number 0 [ 693.771200][ T5759] usb 4-1: config 1 interface 232 has no altsetting 0 [ 693.793290][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.802789][ T5759] usb 4-1: Product: syz [ 693.802904][ T5759] usb 4-1: Manufacturer: syz [ 693.802939][ T5759] usb 4-1: SerialNumber: syz [ 694.321710][T13319] fido_id[13319]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 697.457095][ T5759] hub 4-1:1.232: bad descriptor, ignoring hub [ 697.463398][ T5759] hub 4-1:1.232: probe with driver hub failed with error -5 [ 697.479424][ T5759] option 4-1:1.232: GSM modem (1-port) converter detected [ 697.554778][ T5759] usb 4-1: USB disconnect, device number 12 [ 697.565748][ T5759] option 4-1:1.232: device disconnected [ 698.263005][T13343] ceph: No mds server is up or the cluster is laggy [ 699.240157][T11075] libceph: connect (1)[c::]:6789 error -101 [ 699.240474][T11075] libceph: mon0 (1)[c::]:6789 connect error [ 700.052559][T13365] FAULT_INJECTION: forcing a failure. [ 700.052559][T13365] name fail_futex, interval 1, probability 0, space 0, times 0 [ 700.052692][T13365] CPU: 1 UID: 0 PID: 13365 Comm: syz.4.1921 Not tainted syzkaller #0 PREEMPT(full) [ 700.052731][T13365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 700.052752][T13365] Call Trace: [ 700.052764][T13365] [ 700.052778][T13365] dump_stack_lvl+0x100/0x190 [ 700.052839][T13365] should_fail_ex.cold+0x5/0xa [ 700.052886][T13365] get_futex_key+0x1d0/0x14f0 [ 700.052934][T13365] ? __pfx_get_futex_key+0x10/0x10 [ 700.052975][T13365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 700.053023][T13365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 700.053067][T13365] ? __mutex_unlock_slowpath+0x35d/0x930 [ 700.053122][T13365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 700.053175][T13365] futex_wake+0xf4/0x5e0 [ 700.053235][T13365] ? __pfx_futex_wake+0x10/0x10 [ 700.053288][T13365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 700.053338][T13365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 700.053382][T13365] ? lock_acquire+0x1d1/0x380 [ 700.053441][T13365] ? detach_task_ctx_data+0x83/0x490 [ 700.053492][T13365] do_futex+0x2b2/0x440 [ 700.053540][T13365] ? __pfx_do_futex+0x10/0x10 [ 700.053586][T13365] ? __might_fault+0xc5/0x140 [ 700.053641][T13365] mm_exit_exec_release+0x256/0x2f0 [ 700.053683][T13365] do_exit+0x707/0x2ae0 [ 700.053735][T13365] ? __pfx_do_exit+0x10/0x10 [ 700.053783][T13365] ? do_group_exit+0x15/0x2a0 [ 700.053832][T13365] do_group_exit+0xd5/0x2a0 [ 700.053880][T13365] get_signal+0x1ec7/0x21e0 [ 700.053928][T13365] ? find_held_lock+0x2b/0x80 [ 700.053979][T13365] ? __pfx_get_signal+0x10/0x10 [ 700.054018][T13365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 700.054062][T13365] ? do_futex+0x190/0x440 [ 700.054112][T13365] arch_do_signal_or_restart+0x91/0x7e0 [ 700.054164][T13365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 700.054212][T13365] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 700.054283][T13365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 700.054336][T13365] exit_to_user_mode_loop+0x139/0x700 [ 700.054375][T13365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 700.054419][T13365] ? rcu_is_watching+0x13/0xc0 [ 700.054469][T13365] do_syscall_64+0x661/0x790 [ 700.054522][T13365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.054562][T13365] RIP: 0033:0x7f5db859e159 [ 700.054598][T13365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.054634][T13365] RSP: 002b:00007f5db942a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 700.054670][T13365] RAX: fffffffffffffe00 RBX: 00007f5db8825fa8 RCX: 00007f5db859e159 [ 700.054695][T13365] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5db8825fa8 [ 700.054719][T13365] RBP: 00007f5db8825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 700.054743][T13365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.054766][T13365] R13: 00007f5db8826038 R14: 00007ffec8ba3cb0 R15: 00007ffec8ba3d98 [ 700.054816][T13365] [ 700.455952][T13355] bond0: Error: Cannot enslave bond to itself. [ 701.812554][T13378] loop2: detected capacity change from 0 to 128 [ 701.905797][T13378] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 701.937433][T13378] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 703.131378][T10280] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 703.455841][T13398] jffs2: notice: (13398) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 703.502907][T13398] overlay: ./file0 is not a directory [ 703.561643][T13408] loop6: detected capacity change from 0 to 128 [ 703.568048][ T5750] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 703.602517][T13408] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 703.617447][T13408] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 703.652114][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 705.353637][T13418] netlink: 'syz.1.1931': attribute type 13 has an invalid length. [ 705.353721][T13418] netlink: 'syz.1.1931': attribute type 17 has an invalid length. [ 706.537158][ T5750] usb 5-1: Using ep0 maxpacket: 16 [ 706.669978][T13418] gretap0: refused to change device tx_queue_len [ 706.670648][T13418] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 706.918209][T10099] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 707.127428][ T5750] usb 5-1: device descriptor read/all, error -71 [ 707.128436][ T9] usb 3-1: device descriptor read/all, error -71 [ 707.734167][ T5629] libceph: connect (1)[c::]:6789 error -101 [ 707.755964][T13427] ceph: No mds server is up or the cluster is laggy [ 707.763423][ T5629] libceph: mon0 (1)[c::]:6789 connect error [ 708.174500][T13444] jffs2: notice: (13444) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 708.299606][T13444] overlay: ./file0 is not a directory [ 710.121023][T13471] loop2: detected capacity change from 0 to 128 [ 710.137406][T13475] binder: 13472:13475 ioctl 4018620d 0 returned -22 [ 710.862251][T13480] netlink: 'syz.3.1946': attribute type 13 has an invalid length. [ 710.862370][T13480] netlink: 'syz.3.1946': attribute type 17 has an invalid length. [ 712.283956][T13480] gretap0: refused to change device tx_queue_len [ 712.284520][T13480] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 712.594491][T13471] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 712.605746][T13481] jffs2: notice: (13481) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 712.609320][T13471] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 713.619514][T10280] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 713.834576][ T5759] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 714.003448][ T5759] usb 5-1: unable to get BOS descriptor or descriptor too short [ 714.033927][ T5759] usb 5-1: not running at top speed; connect to a high speed hub [ 714.034045][ T5759] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 714.061016][ T5759] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 714.061056][ T5759] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 714.061145][ T5759] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 714.061180][ T5759] usb 5-1: config 14 has no interface number 0 [ 714.061209][ T5759] usb 5-1: config 14 has no interface number 1 [ 714.061347][ T5759] usb 5-1: config 14 interface 228 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.061396][ T5759] usb 5-1: config 14 interface 57 has no altsetting 0 [ 714.061480][ T5759] usb 5-1: config 14 interface 228 has no altsetting 0 [ 714.124535][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.124578][ T5759] usb 5-1: Product: syz [ 714.124609][ T5759] usb 5-1: Manufacturer: syz [ 714.124685][ T5759] usb 5-1: SerialNumber: syz [ 715.252338][ T5759] legousbtower 5-1:14.57: interrupt endpoints not found [ 715.778317][ T5759] legousbtower 5-1:14.228: interrupt endpoints not found [ 717.323042][ T9] usb 5-1: USB disconnect, device number 14 [ 717.531413][T11075] libceph: connect (1)[c::]:6789 error -101 [ 717.531732][T11075] libceph: mon0 (1)[c::]:6789 connect error [ 717.567520][T13523] ceph: No mds server is up or the cluster is laggy [ 719.368532][T11075] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 719.744908][T11075] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 719.758102][T11075] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 719.766860][T11075] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 719.778620][T11075] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 719.794006][T11075] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 719.810029][T11075] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 719.825142][T11075] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.865518][T11075] usb 4-1: config 0 descriptor?? [ 719.871834][T13539] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 719.976437][T13570] binder: 13568:13570 ioctl 4018620d 0 returned -22 [ 721.550633][T13574] jffs2: notice: (13574) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 722.752638][T11075] usbhid 4-1:0.0: can't add hid device: -71 [ 722.752846][T11075] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 723.111369][T11075] usb 4-1: USB disconnect, device number 13 [ 723.593281][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 723.660741][T13588] loop1: detected capacity change from 0 to 128 [ 723.714434][T13588] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 723.743138][T13588] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 724.690020][T13608] ceph: No mds server is up or the cluster is laggy [ 724.692124][T11075] libceph: connect (1)[c::]:6789 error -101 [ 724.702318][T11075] libceph: mon0 (1)[c::]:6789 connect error [ 724.937873][T13613] fuse: Bad value for 'fd' [ 725.022484][T10339] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 726.435341][T13626] netlink: 'syz.1.1973': attribute type 13 has an invalid length. [ 726.435437][T13626] netlink: 'syz.1.1973': attribute type 17 has an invalid length. [ 728.718303][T13626] gretap0: refused to change device tx_queue_len [ 728.718914][T13626] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 729.083575][T13633] loop4: detected capacity change from 0 to 128 [ 729.147875][T13633] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 729.164417][T13633] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 730.395415][T10032] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 731.382767][T13645] Can't find ip_set type has [ 732.123827][T10585] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 732.297699][T10585] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 732.311415][T10585] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 732.311512][T10585] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 732.311614][T10585] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 732.311676][T10585] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 732.311734][T10585] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 732.311811][T10585] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.421813][T10585] usb 5-1: config 0 descriptor?? [ 732.440204][T13656] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 732.520754][T13669] dlm: no local IP address has been set [ 732.520859][T13669] dlm: cannot start dlm midcomms -107 [ 733.416253][T13669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.416845][T13669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.744017][T13670] bond0: Error: Cannot enslave bond to itself. [ 734.273077][T10585] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 734.273147][T10585] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 734.273206][T10585] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 737.234619][T10585] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 737.349156][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 737.525861][T10585] usb 5-1: USB disconnect, device number 15 [ 737.948053][T13680] fido_id[13680]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 738.374731][T13697] dlm: no local IP address has been set [ 738.374816][T13697] dlm: cannot start dlm midcomms -107 [ 738.735558][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 738.918816][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 738.943335][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0000, bcdDevice= 0.00 [ 738.955653][ T9] usb 4-1: no configurations [ 738.958732][ T9] usb 4-1: can't read configurations, error -22 [ 739.162106][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 739.354159][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 739.360175][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0000, bcdDevice= 0.00 [ 739.360264][ T9] usb 4-1: no configurations [ 739.360294][ T9] usb 4-1: can't read configurations, error -22 [ 739.382261][ T9] usb usb4-port1: attempt power cycle [ 739.921873][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 739.944948][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 739.952154][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0000, bcdDevice= 0.00 [ 739.952238][ T9] usb 4-1: no configurations [ 739.952268][ T9] usb 4-1: can't read configurations, error -22 [ 740.779050][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 740.832357][T13724] loop1: detected capacity change from 0 to 128 [ 740.857617][ T9] usb 4-1: device descriptor read/8, error -71 [ 740.967526][ T9] usb usb4-port1: unable to enumerate USB device [ 741.459343][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 741.649755][T13724] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 741.665284][T13732] fuse: Bad value for 'fd' [ 741.677921][T13724] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 743.067382][T13752] Can't find ip_set type has [ 743.138182][T10339] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 743.521540][T13757] CIFS: Attempting to mount //::1/share [ 745.049299][T13757] CIFS: VFS: cifs_mount failed w/return code = -512 [ 745.302452][T13771] CIFS: Attempting to mount //::1/share [ 745.822016][T13771] CIFS: VFS: Error connecting to socket. Aborting operation. [ 745.841434][T13771] CIFS: VFS: cifs_mount failed w/return code = -111 [ 746.623033][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.623192][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.823074][T13782] loop3: detected capacity change from 0 to 128 [ 746.935464][T13782] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 746.959116][T13782] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 748.390022][ T9613] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 752.796075][T13829] loop6: detected capacity change from 0 to 128 [ 752.908733][T13829] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 752.915091][T13829] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 754.667141][T10099] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 754.862506][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 755.270159][T13850] CIFS: Attempting to mount //::1/share [ 755.619944][T13859] dlm: no local IP address has been set [ 755.620033][T13859] dlm: cannot start dlm midcomms -107 [ 756.811258][T13850] CIFS: VFS: Error connecting to socket. Aborting operation. [ 756.811344][T13850] CIFS: VFS: cifs_mount failed w/return code = -4 [ 756.827585][ T5629] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 756.994085][ T5629] usb 5-1: Using ep0 maxpacket: 32 [ 757.000232][ T5629] usb 5-1: New USB device found, idVendor=05ac, idProduct=0000, bcdDevice= 0.00 [ 757.000335][ T5629] usb 5-1: no configurations [ 757.000357][ T5629] usb 5-1: can't read configurations, error -22 [ 757.124075][ T5629] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 757.584422][ T5629] usb 5-1: Using ep0 maxpacket: 32 [ 757.591209][ T5629] usb 5-1: New USB device found, idVendor=05ac, idProduct=0000, bcdDevice= 0.00 [ 757.591347][ T5629] usb 5-1: no configurations [ 757.591379][ T5629] usb 5-1: can't read configurations, error -22 [ 757.612053][ T5629] usb usb5-port1: attempt power cycle [ 762.587668][T13899] Can't find ip_set type hash:n [ 763.151175][T13910] bond0: Error: Cannot enslave bond to itself. [ 764.070586][T13917] loop4: detected capacity change from 0 to 128 [ 764.180972][T13917] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 764.203338][T13917] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 766.356417][T10032] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 770.166217][T13966] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2049'. [ 771.248115][T13976] fuse: Bad value for 'fd' [ 771.316342][ T31] audit: type=1800 audit(1788334378.776:58): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2054" name="addr_traddr" dev="configfs" ino=40085 res=0 errno=0 [ 771.349899][ T31] audit: type=1800 audit(1788334378.806:59): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2054" name="addr_adrfam" dev="configfs" ino=40087 res=0 errno=0 [ 772.187507][T13983] Can't find ip_set type hash:n [ 772.231132][T13987] loop4: detected capacity change from 0 to 128 [ 772.350440][T13987] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 772.367126][T13987] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 773.369361][T10032] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 774.755641][T14011] dlm: no local IP address has been set [ 774.755707][T14011] dlm: cannot start dlm midcomms -107 [ 776.363840][ T5759] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 776.534556][ T5759] usb 2-1: Using ep0 maxpacket: 32 [ 776.535520][ T5759] usb 2-1: New USB device found, idVendor=05ac, idProduct=0000, bcdDevice= 0.00 [ 776.535574][ T5759] usb 2-1: no configurations [ 776.535597][ T5759] usb 2-1: can't read configurations, error -22 [ 776.665037][ T5759] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 776.823856][ T5759] usb 2-1: Using ep0 maxpacket: 32 [ 776.825045][ T5759] usb 2-1: New USB device found, idVendor=05ac, idProduct=0000, bcdDevice= 0.00 [ 777.064362][ T5759] usb 2-1: no configurations [ 777.064424][ T5759] usb 2-1: can't read configurations, error -22 [ 777.064802][ T5759] usb usb2-port1: attempt power cycle [ 777.161953][T14026] dlm: no local IP address has been set [ 777.162090][T14026] dlm: cannot start dlm midcomms -107 [ 778.741998][T14030] netlink: 'syz.6.2062': attribute type 13 has an invalid length. [ 778.742116][T14030] netlink: 'syz.6.2062': attribute type 17 has an invalid length. [ 780.249873][T14030] gretap0: refused to change device tx_queue_len [ 780.250380][T14030] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 781.421406][T14045] overlay: ./file0 is not a directory [ 782.341004][T14043] syz.4.2068: vmalloc error: size 57344, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 782.392471][T14043] CPU: 0 UID: 0 PID: 14043 Comm: syz.4.2068 Not tainted syzkaller #0 PREEMPT(full) [ 782.392520][T14043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 782.392546][T14043] Call Trace: [ 782.392559][T14043] [ 782.392574][T14043] dump_stack_lvl+0x100/0x190 [ 782.392635][T14043] warn_alloc.cold+0x9e/0xb2 [ 782.392686][T14043] ? __pfx_warn_alloc+0x10/0x10 [ 782.392734][T14043] ? policy_nodemask+0xed/0x4f0 [ 782.392805][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.392855][T14043] ? alloc_pages_mpol+0x260/0x550 [ 782.392925][T14043] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 782.392992][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.393041][T14043] ? find_held_lock+0x2b/0x80 [ 782.393095][T14043] ? rcu_read_unlock+0x17/0x60 [ 782.393151][T14043] __vmalloc_node_range_noprof+0x111c/0x1420 [ 782.393238][T14043] ? bpf_check+0x112/0xa7c0 [ 782.393281][T14043] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 782.393347][T14043] ? __lock_acquire+0x4c5/0x1ec0 [ 782.393413][T14043] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 782.393489][T14043] ? rcu_is_watching+0x13/0xc0 [ 782.393537][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.393588][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.393645][T14043] __kvmalloc_node_noprof+0x3da/0x9b0 [ 782.393713][T14043] ? bpf_check+0x112/0xa7c0 [ 782.393748][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.393799][T14043] ? ktime_get+0x22c/0x320 [ 782.393833][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.393880][T14043] ? bpf_check+0x112/0xa7c0 [ 782.393925][T14043] bpf_check+0x112/0xa7c0 [ 782.393964][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.394010][T14043] ? __css_rstat_updated+0x1ce/0x590 [ 782.394051][T14043] ? __lock_acquire+0x4c5/0x1ec0 [ 782.394132][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.394178][T14043] ? __lock_acquire+0x4c5/0x1ec0 [ 782.394247][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.394295][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.394342][T14043] ? find_held_lock+0x2b/0x80 [ 782.394399][T14043] ? __pfx_bpf_check+0x10/0x10 [ 782.394437][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.394484][T14043] ? lock_acquire+0x1d1/0x380 [ 782.394546][T14043] ? bpf_prog_load+0x1a09/0x2a80 [ 782.394585][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.394633][T14043] ? find_held_lock+0x2b/0x80 [ 782.394686][T14043] ? bpf_prog_load+0x1a09/0x2a80 [ 782.394726][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.394779][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.394825][T14043] ? __asan_memset+0x23/0x50 [ 782.394875][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.394932][T14043] ? bpf_prog_load+0x1ac3/0x2a80 [ 782.394968][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.395016][T14043] bpf_prog_load+0x1ac3/0x2a80 [ 782.395066][T14043] ? __pfx_bpf_prog_load+0x10/0x10 [ 782.395103][T14043] ? lock_acquire+0x1d1/0x380 [ 782.395172][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.395254][T14043] __sys_bpf+0x1f46/0x4a30 [ 782.395318][T14043] ? __pfx___sys_bpf+0x10/0x10 [ 782.395368][T14043] ? find_held_lock+0x2b/0x80 [ 782.395417][T14043] ? futex_wake+0x4ea/0x5e0 [ 782.395474][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.395524][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.395611][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.395683][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.395730][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.395778][T14043] ? __x64_sys_futex+0x358/0x4d0 [ 782.395831][T14043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.395878][T14043] ? xfd_validate_state+0x129/0x190 [ 782.395951][T14043] ? __x64_sys_bpf+0xce/0x140 [ 782.396002][T14043] __x64_sys_bpf+0xce/0x140 [ 782.396058][T14043] ? do_syscall_64+0xae/0x790 [ 782.396112][T14043] do_syscall_64+0x123/0x790 [ 782.396168][T14043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.396210][T14043] RIP: 0033:0x7f5db859e159 [ 782.396241][T14043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.396281][T14043] RSP: 002b:00007f5db942a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 782.396318][T14043] RAX: ffffffffffffffda RBX: 00007f5db8825fa0 RCX: 00007f5db859e159 [ 782.396345][T14043] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 782.396370][T14043] RBP: 00007f5db8635024 R08: 0000000000000000 R09: 0000000000000000 [ 782.396395][T14043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.396419][T14043] R13: 00007f5db8826038 R14: 00007f5db8825fa0 R15: 00007ffec8ba3d98 [ 782.396471][T14043] [ 782.619459][T14043] Mem-Info: [ 782.619479][T14043] active_anon:24786 inactive_anon:0 isolated_anon:0 [ 782.619479][T14043] active_file:0 inactive_file:61440 isolated_file:0 [ 782.619479][T14043] unevictable:0 dirty:439 writeback:0 [ 782.619479][T14043] slab_reclaimable:11358 slab_unreclaimable:103605 [ 782.619479][T14043] mapped:36776 shmem:17644 pagetables:1397 [ 782.619479][T14043] sec_pagetables:0 bounce:0 [ 782.619479][T14043] kernel_misc_reclaimable:0 [ 782.619479][T14043] free:1251957 free_pcp:23111 free_cma:0 [ 782.619625][T14043] Node 0 active_anon:99144kB inactive_anon:0kB active_file:0kB inactive_file:245556kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147104kB dirty:1752kB writeback:0kB shmem:70576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13236kB pagetables:5456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 782.619736][T14043] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 782.619880][T14043] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 782.620060][T14043] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 782.620128][T14043] Node 0 DMA32 free:1049188kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:99144kB inactive_anon:0kB active_file:0kB inactive_file:245556kB unevictable:0kB writepending:1752kB zspages:36kB present:3129332kB managed:2530348kB mlocked:0kB bounce:0kB free_pcp:92444kB local_pcp:37728kB free_cma:0kB [ 782.620292][T14043] lowmem_reserve[]: 0 0 0 0 0 [ 782.620357][T14043] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:80kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 782.620510][T14043] lowmem_reserve[]: 0 0 0 0 0 [ 782.620576][T14043] Node 1 Normal free:3943280kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 782.620741][T14043] lowmem_reserve[]: 0 0 0 0 0 [ 782.620806][T14043] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 782.621121][T14043] Node 0 DMA32: 334*4kB (UME) 157*8kB (UME) 18*16kB (UM) 34*32kB (UME) 5*64kB (ME) 8*128kB (UM) 2*256kB (ME) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (UM) 253*4096kB (UM) = 1049280kB [ 782.661449][T14043] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 782.661694][T14043] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 5*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943280kB [ 782.662140][T14043] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 782.662171][T14043] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 782.662202][T14043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 782.662281][T14043] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 782.662312][T14043] 78906 total pagecache pages [ 782.662325][T14043] 1 pages in swap cache [ 782.662338][T14043] Free swap = 124980kB [ 782.662352][T14043] Total swap = 124996kB [ 782.662366][T14043] 2097051 pages RAM [ 782.662379][T14043] 0 pages HighMem/MovableOnly [ 782.662391][T14043] 432828 pages reserved [ 782.662452][T14043] 0 pages cma reserved [ 783.542032][T14067] jffs2: notice: (14067) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 783.846932][T14067] overlay: ./file0 is not a directory [ 787.190272][T14105] netlink: 'syz.1.2077': attribute type 13 has an invalid length. [ 787.190357][T14105] netlink: 'syz.1.2077': attribute type 17 has an invalid length. [ 788.450877][T14105] gretap0: refused to change device tx_queue_len [ 788.451397][T14105] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 789.855820][T14121] loop2: detected capacity change from 0 to 128 [ 790.878339][T14121] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 790.880438][T14121] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 793.754443][T10280] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 795.095179][T14146] fuse: Bad value for 'fd' [ 795.577156][T14159] CIFS: Attempting to mount //::1/share [ 796.268656][T14173] ceph: No mds server is up or the cluster is laggy [ 796.536213][ T30] libceph: connect (1)[c::]:6789 error -101 [ 796.546177][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 796.581696][T14159] CIFS: VFS: cifs_mount failed w/return code = -112 [ 798.709544][ T5635] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 798.726184][ T5635] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 798.735539][ T5635] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 798.745762][ T5635] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 798.756905][ T5635] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 799.021538][T14191] loop4: detected capacity change from 0 to 32768 [ 799.974977][T14205] netlink: 'syz.3.2099': attribute type 13 has an invalid length. [ 799.975075][T14205] netlink: 'syz.3.2099': attribute type 17 has an invalid length. [ 801.096546][ T5632] Bluetooth: hci6: command tx timeout [ 801.496007][T14205] gretap0: refused to change device tx_queue_len [ 801.496622][T14205] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 803.175028][ T5635] Bluetooth: hci6: command tx timeout [ 804.061773][ T31] audit: type=1800 audit(1788334411.516:60): pid=14228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2085" name="addr_adrfam" dev="configfs" ino=39880 res=0 errno=0 [ 805.204239][ T5635] Bluetooth: hci6: command tx timeout [ 807.286197][ T5635] Bluetooth: hci6: command tx timeout [ 807.314515][ T50] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.408328][T14256] jffs2: notice: (14256) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 807.438946][T14256] overlay: ./file0 is not a directory [ 807.632640][ T50] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.708334][T14262] overlayfs: failed to clone upperpath [ 808.008550][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.008707][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.130459][ T50] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.444581][ T50] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.752828][T14283] loop1: detected capacity change from 0 to 128 [ 808.799200][T14283] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 808.827641][T14283] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 809.719094][T14295] overlayfs: failed to clone upperpath [ 809.821218][T10339] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 810.048210][T14302] CIFS: Attempting to mount //::1/share [ 810.612751][ T31] audit: type=1800 audit(1788334418.066:61): pid=14306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2115" name="addr_adrfam" dev="configfs" ino=41159 res=0 errno=0 [ 811.018299][T14302] CIFS: VFS: cifs_mount failed w/return code = -112 [ 811.123860][ T3310] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.154183][ T50] bridge_slave_1: left allmulticast mode [ 812.160019][ T50] bridge_slave_1: left promiscuous mode [ 812.166264][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.509955][ T50] bridge_slave_0: left allmulticast mode [ 813.521659][ T50] bridge_slave_0: left promiscuous mode [ 813.521937][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.345374][T14355] dlm: no local IP address has been set [ 815.345541][T14355] dlm: cannot start dlm midcomms -107 [ 815.767656][ T5759] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 815.964208][ T5759] usb 5-1: Using ep0 maxpacket: 32 [ 815.972425][ T5759] usb 5-1: New USB device found, idVendor=05ac, idProduct=0000, bcdDevice= 0.00 [ 815.972588][ T5759] usb 5-1: no configurations [ 815.972620][ T5759] usb 5-1: can't read configurations, error -22 [ 815.989222][T14358] fuse: fd is not a fuse device [ 816.047653][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.073692][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.092824][ T50] bond0 (unregistering): Released all slaves [ 816.143864][ T5759] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 816.464100][ T5759] usb 5-1: Using ep0 maxpacket: 32 [ 816.477152][ T5759] usb 5-1: New USB device found, idVendor=05ac, idProduct=0000, bcdDevice= 0.00 [ 816.562714][ T5759] usb 5-1: no configurations [ 816.570453][ T5759] usb 5-1: can't read configurations, error -22 [ 816.585294][ T5759] usb usb5-port1: attempt power cycle [ 818.055878][T14375] loop1: detected capacity change from 0 to 128 [ 818.103627][ T50] tipc: Disabling bearer [ 818.113764][ T50] tipc: Left network mode [ 818.142090][T14375] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 818.167701][T14375] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 818.633804][ T5759] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 819.190967][ T5759] usb 5-1: device not accepting address 21, error -71 [ 819.479405][T10339] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 819.698229][ T31] audit: type=1800 audit(1788334427.156:62): pid=14389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2132" name="addr_adrfam" dev="configfs" ino=41288 res=0 errno=0 [ 819.883198][T14394] loop2: detected capacity change from 0 to 64 [ 821.354292][T14403] loop4: detected capacity change from 0 to 128 [ 822.589607][T14403] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 822.603477][T14403] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 823.248397][T14194] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.268138][T14194] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.268486][T14194] bridge_slave_0: entered allmulticast mode [ 823.563293][T14194] bridge_slave_0: entered promiscuous mode [ 823.575939][T14194] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.576134][T14194] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.576428][T14194] bridge_slave_1: entered allmulticast mode [ 823.588062][T14194] bridge_slave_1: entered promiscuous mode [ 823.616807][T14394] ------------[ cut here ]------------ [ 823.616857][T14394] !buffer_uptodate(bh) [ 823.616896][T14394] WARNING: fs/buffer.c:991 at mark_buffer_dirty+0x3ca/0x470, CPU#0: syz.2.2133/14394 [ 823.638401][T14394] Modules linked in: [ 823.643234][T14394] CPU: 0 UID: 0 PID: 14394 Comm: syz.2.2133 Not tainted syzkaller #0 PREEMPT(full) [ 823.653016][T14394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 823.665234][T14394] RIP: 0010:mark_buffer_dirty+0x3ca/0x470 [ 823.672454][T14394] Code: 00 00 00 48 8b 7d 00 be 40 00 00 00 e8 cf 8e fa ff e9 a3 fd ff ff e8 55 ca 62 ff 90 0f 0b 90 e9 c4 fd ff ff e8 47 ca 62 ff 90 <0f> 0b 90 e9 64 fc ff ff e8 39 ca 62 ff 90 0f 0b 90 e9 81 fc ff ff [ 823.692357][T14394] RSP: 0018:ffffc900034f7918 EFLAGS: 00010283 [ 823.698520][T14394] RAX: 00000000000030d9 RBX: ffff888035ddf7e0 RCX: ffffc90016917000 [ 823.706583][T14394] RDX: 0000000000080000 RSI: ffffffff82a904a9 RDI: ffff88807a56be80 [ 823.715075][T14394] RBP: ffff888054215700 R08: 0000000000000001 R09: 0000000000000000 [ 823.723074][T14394] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000e [ 823.732788][T14394] R13: dffffc0000000000 R14: ffff888077be2000 R15: ffffed100ef7c434 [ 823.741514][T14394] FS: 00007faf5990d6c0(0000) GS:ffff888123b61000(0000) knlGS:0000000000000000 [ 823.751231][T14394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 823.757965][T14394] CR2: 0000200000002000 CR3: 0000000056a1c000 CR4: 0000000000350ef0 [ 823.766026][T14394] Call Trace: [ 823.769320][T14394] [ 823.772265][T14394] bfs_get_block+0x3e4/0xe20 [ 823.776968][T14394] ? __pfx_bfs_get_block+0x10/0x10 [ 823.782138][T14394] __block_write_begin_int+0x57a/0x19c0 [ 823.787818][T14394] ? __pfx_bfs_get_block+0x10/0x10 [ 823.792996][T14394] ? __pfx___block_write_begin_int+0x10/0x10 [ 823.799076][T14394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.804827][T14394] ? __pfx_bfs_get_block+0x10/0x10 [ 823.810003][T14394] block_write_begin+0x9d/0x1d0 [ 823.814978][T14394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.820665][T14394] bfs_write_begin+0x31/0xd0 [ 823.825339][T14394] generic_perform_write+0x292/0xa40 [ 823.830693][T14394] ? __pfx_generic_perform_write+0x10/0x10 [ 823.836600][T14394] ? mnt_put_write_access_file+0x4e/0x100 [ 823.843236][T14394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.849563][T14394] ? file_update_time_flags+0x38c/0x520 [ 823.855749][T14394] __generic_file_write_iter+0x1f7/0x240 [ 823.861952][T14394] generic_file_write_iter+0xe1/0x390 [ 823.867403][T14394] vfs_write+0x6af/0x1050 [ 823.871779][T14394] ? __pfx_generic_file_write_iter+0x10/0x10 [ 823.877866][T14394] ? __pfx_vfs_write+0x10/0x10 [ 823.882669][T14394] ? find_held_lock+0x2b/0x80 [ 823.887453][T14394] ksys_write+0x12a/0x250 [ 823.891913][T14394] ? __pfx_ksys_write+0x10/0x10 [ 823.896843][T14394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.902519][T14394] do_syscall_64+0x123/0x790 [ 823.907216][T14394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.913143][T14394] RIP: 0033:0x7faf5899e159 [ 823.917622][T14394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.937905][T14394] RSP: 002b:00007faf5990d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 823.946566][T14394] RAX: ffffffffffffffda RBX: 00007faf58c25fa0 RCX: 00007faf5899e159 [ 823.955295][T14394] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000007 [ 823.963300][T14394] RBP: 00007faf58a35024 R08: 0000000000000000 R09: 0000000000000000 [ 823.972094][T14394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.980130][T14394] R13: 00007faf58c26038 R14: 00007faf58c25fa0 R15: 00007ffcee403b88 [ 823.988205][T14394] [ 823.991293][T14394] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 823.998587][T14394] CPU: 0 UID: 0 PID: 14394 Comm: syz.2.2133 Not tainted syzkaller #0 PREEMPT(full) [ 824.007990][T14394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 824.018078][T14394] Call Trace: [ 824.021371][T14394] [ 824.024312][T14394] dump_stack_lvl+0x100/0x190 [ 824.029040][T14394] vpanic+0x553/0x970 [ 824.033062][T14394] ? __pfx_vpanic+0x10/0x10 [ 824.037707][T14394] panic+0xd1/0xe0 [ 824.041467][T14394] ? __pfx_panic+0x10/0x10 [ 824.045948][T14394] check_panic_on_warn.cold+0x19/0x34 [ 824.051366][T14394] ? mark_buffer_dirty+0x3ca/0x470 [ 824.056536][T14394] __warn.cold+0x191/0x318 [ 824.061007][T14394] __report_bug+0x30f/0x440 [ 824.065557][T14394] ? mark_buffer_dirty+0x3ca/0x470 [ 824.070717][T14394] ? __pfx___report_bug+0x10/0x10 [ 824.075780][T14394] ? __pfx_folio_mark_accessed+0x10/0x10 [ 824.081457][T14394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 824.087236][T14394] ? mark_buffer_dirty+0x3ca/0x470 [ 824.092498][T14394] report_bug+0xb3/0x220 [ 824.096780][T14394] ? mark_buffer_dirty+0x3ca/0x470 [ 824.101926][T14394] handle_bug+0x16a/0x2a0 [ 824.106291][T14394] exc_invalid_op+0x17/0x50 [ 824.110854][T14394] asm_exc_invalid_op+0x1a/0x20 [ 824.115749][T14394] RIP: 0010:mark_buffer_dirty+0x3ca/0x470 [ 824.121519][T14394] Code: 00 00 00 48 8b 7d 00 be 40 00 00 00 e8 cf 8e fa ff e9 a3 fd ff ff e8 55 ca 62 ff 90 0f 0b 90 e9 c4 fd ff ff e8 47 ca 62 ff 90 <0f> 0b 90 e9 64 fc ff ff e8 39 ca 62 ff 90 0f 0b 90 e9 81 fc ff ff [ 824.141166][T14394] RSP: 0018:ffffc900034f7918 EFLAGS: 00010283 [ 824.147267][T14394] RAX: 00000000000030d9 RBX: ffff888035ddf7e0 RCX: ffffc90016917000 [ 824.155249][T14394] RDX: 0000000000080000 RSI: ffffffff82a904a9 RDI: ffff88807a56be80 [ 824.163236][T14394] RBP: ffff888054215700 R08: 0000000000000001 R09: 0000000000000000 [ 824.171220][T14394] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000e [ 824.179206][T14394] R13: dffffc0000000000 R14: ffff888077be2000 R15: ffffed100ef7c434 [ 824.187208][T14394] ? mark_buffer_dirty+0x3c9/0x470 [ 824.192364][T14394] ? mark_buffer_dirty+0x3c9/0x470 [ 824.197517][T14394] bfs_get_block+0x3e4/0xe20 [ 824.202169][T14394] ? __pfx_bfs_get_block+0x10/0x10 [ 824.207328][T14394] __block_write_begin_int+0x57a/0x19c0 [ 824.212934][T14394] ? __pfx_bfs_get_block+0x10/0x10 [ 824.218098][T14394] ? __pfx___block_write_begin_int+0x10/0x10 [ 824.224156][T14394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 824.229836][T14394] ? __pfx_bfs_get_block+0x10/0x10 [ 824.235007][T14394] block_write_begin+0x9d/0x1d0 [ 824.239920][T14394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 824.245585][T14394] bfs_write_begin+0x31/0xd0 [ 824.250213][T14394] generic_perform_write+0x292/0xa40 [ 824.255550][T14394] ? __pfx_generic_perform_write+0x10/0x10 [ 824.261427][T14394] ? mnt_put_write_access_file+0x4e/0x100 [ 824.267193][T14394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 824.272849][T14394] ? file_update_time_flags+0x38c/0x520 [ 824.278425][T14394] __generic_file_write_iter+0x1f7/0x240 [ 824.284087][T14394] generic_file_write_iter+0xe1/0x390 [ 824.289486][T14394] vfs_write+0x6af/0x1050 [ 824.293844][T14394] ? __pfx_generic_file_write_iter+0x10/0x10 [ 824.299854][T14394] ? __pfx_vfs_write+0x10/0x10 [ 824.304645][T14394] ? find_held_lock+0x2b/0x80 [ 824.309382][T14394] ksys_write+0x12a/0x250 [ 824.313738][T14394] ? __pfx_ksys_write+0x10/0x10 [ 824.318622][T14394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 824.324285][T14394] do_syscall_64+0x123/0x790 [ 824.328907][T14394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.334819][T14394] RIP: 0033:0x7faf5899e159 [ 824.339245][T14394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.358874][T14394] RSP: 002b:00007faf5990d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 824.367310][T14394] RAX: ffffffffffffffda RBX: 00007faf58c25fa0 RCX: 00007faf5899e159 [ 824.375291][T14394] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000007 [ 824.383268][T14394] RBP: 00007faf58a35024 R08: 0000000000000000 R09: 0000000000000000 [ 824.391246][T14394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.399225][T14394] R13: 00007faf58c26038 R14: 00007faf58c25fa0 R15: 00007ffcee403b88 [ 824.407236][T14394] [ 824.410509][T14394] Kernel Offset: disabled [ 824.414836][T14394] Rebooting in 86400 seconds..