last executing test programs: 15m19.803009235s ago: executing program 32 (id=181): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@noload}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x51d, &(0x7f00000014c0)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000500)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") r1 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/route\x00') write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x8b}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000940)='nv', 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000980)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000009c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000a40)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000ac0), 0x651, 0x0) getsockname$unix(r1, 0x0, &(0x7f0000000b00)) recvmmsg(r3, &(0x7f0000000b40), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x4, 0x16, &(0x7f0000000c40)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f0000000c80)={0x6, 0x3, 0x8, 0x9}) shmctl$IPC_RMID(0x0, 0xc00000000000000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$ext4(&(0x7f0000004300)='ext4\x00', &(0x7f0000004340)='./file1\x00', 0x200000, &(0x7f0000004380)={[{@resuid}, {@dioread_lock}, {@grpjquota}, {@dax_always}]}, 0x3, 0x577, &(0x7f00000043c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000004940)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r5, &(0x7f0000004980)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195a420, &(0x7f0000000340)={[{}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r6, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 14m58.024936539s ago: executing program 33 (id=232): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000280)="$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") syz_open_dev$vim2m(&(0x7f0000000700), 0x4003, 0x2) madvise(0xffffffffffffffff, 0x0, 0x67) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000980)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0x58, &(0x7f0000000a40)}, 0x10) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000900)=0xffffffffffffffff) 14m51.825977743s ago: executing program 34 (id=242): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r6 = dup(r4) inotify_rm_watch(r6, r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000003c0)={0x84, @multicast2, 0x4e31, 0x3, 'wrr\x00', 0x1, 0x9, 0x4030}, 0x2c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000440)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r7, &(0x7f0000000480)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[], 0x8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x20000000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) 14m1.300378686s ago: executing program 35 (id=297): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/check_wx_pages\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/100, 0x64) 12m34.478834233s ago: executing program 0 (id=466): mbind(&(0x7f0000a15000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x80000000000001, 0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept(r0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x8480, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) set_mempolicy(0x6005, &(0x7f0000000580)=0xfffffffffffffffd, 0x4) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a40), 0x30882, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000a00)={0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5, 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000780)=[0x6, 0x9, 0x69, 0x7f, 0x1], &(0x7f00000007c0), &(0x7f0000000800)=[0x10]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000840)={0x22001500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12m33.305529879s ago: executing program 0 (id=473): unshare(0x64000600) 12m21.518681097s ago: executing program 0 (id=501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 12m20.217931317s ago: executing program 0 (id=504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 12m11.901146323s ago: executing program 0 (id=519): userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 12m9.853418809s ago: executing program 0 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 11m54.585863206s ago: executing program 36 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 10m1.71793682s ago: executing program 2 (id=906): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa5a1, 0x42401}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40408d4) 9m58.319889498s ago: executing program 2 (id=912): r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3e, 0xffffffeb, 0x200000294, 0x40, 0x4000000027b, 0x400000, 0x81, 0x38, 0x1, 0xfffe, 0x7fff, 0x3}, [{0x3, 0x7, 0x3, 0x2, 0xc, 0x7, 0x7ff, 0x3}]}, 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x0, 0x0, 0x1000) 9m58.046343199s ago: executing program 2 (id=914): socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = epoll_create1(0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x80088a02, 0xfffffffffffff29a) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x2036040, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002a40)="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", 0x2000, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b00)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004b40)='./file0\x00', 0x22801, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000006c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x180, 0xa42, 0xb}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 9m56.111325453s ago: executing program 2 (id=917): userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 9m54.055695676s ago: executing program 2 (id=922): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000019d40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x6402000}, 0xc, &(0x7f0000019d00)={&(0x7f0000019d80)=ANY=[@ANYBLOB="ec030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3ec}, 0x1, 0x0, 0x0, 0x40900}, 0x1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f00000198c0)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r4, 0x0) mount(0x0, &(0x7f00000001c0)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r5, r5, 0xf, 0x0, @void}, 0x10) symlinkat(&(0x7f00000004c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') 9m52.610358312s ago: executing program 2 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x808b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) add_key(&(0x7f0000000780)='asymmetric\x00', 0x0, &(0x7f00000007c0)="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", 0x114, 0xfffffffffffffffe) 9m36.45002203s ago: executing program 37 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x808b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) add_key(&(0x7f0000000780)='asymmetric\x00', 0x0, &(0x7f00000007c0)="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", 0x114, 0xfffffffffffffffe) 5m1.719837657s ago: executing program 1 (id=1978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x23}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 5m0.308777916s ago: executing program 1 (id=1982): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x1000004, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:07.0/remove\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1f2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x14, 0x6a, 0x15, 0x8000000, 0xffffffff, "", [@generic="894150da"]}, 0x14}], 0x1}, 0x8000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB="1803000000050000000000000000ffff1801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000008c0)={r4, 0x1}, 0xc) r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000640)=""/144) 4m59.144985335s ago: executing program 1 (id=1985): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_init(0xf00, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x6}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x9}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x3650d}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x20, 0x7, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x24, r3, 0x1, 0x4, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa8}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x4) 4m58.488694234s ago: executing program 1 (id=1988): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800043}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 4m57.962912557s ago: executing program 1 (id=1992): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x1, 0x2, 0x6, 0x200}) fcntl$lock(r0, 0x25, &(0x7f0000000200)={0x0, 0x0, 0x76, 0x6031}) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) syz_mount_image$ocfs2(&(0x7f0000000280), &(0x7f0000000480)='./file0\x00', 0x8c0, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f00000007c0)="$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") mkdirat(0xffffffffffffffff, 0x0, 0x1ef) r4 = openat(0xffffffffffffff9c, &(0x7f0000004f80)='./file1\x00', 0xc4042, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000004fc0), 0x6200, 0x0) sendfile(r4, r5, 0x0, 0x20fffe82) 4m56.957061488s ago: executing program 1 (id=1995): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, 0x0, 0x15) socket$inet6(0xa, 0x800000000000002, 0x3) openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8001, 0x80000008e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) setitimer(0x2, 0x0, &(0x7f0000000580)) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000000640), 0x40000000000017d, 0x888) 4m53.59864647s ago: executing program 6 (id=2005): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000180)={[{@discard}, {@noauto_da_alloc}, {@usrjquota}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@journal_checksum}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r3, &(0x7f0000000640)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f00000006c0)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r4, &(0x7f0000000700)=ANY=[], 0xfffffdcf) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./sys\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) 4m49.062975801s ago: executing program 6 (id=2010): userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4m47.965938076s ago: executing program 6 (id=2011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x0) 4m47.57842962s ago: executing program 6 (id=2014): socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000980)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) shutdown(0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000b40)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) ptrace(0x4208, r0) connect$unix(r1, &(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000000)=0x14) memfd_create(&(0x7f0000000dc0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000ec0)={0x900, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) syz_emit_vhci(&(0x7f0000000f80)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x11}, {0x4, [{0xc9, 0x3}, {0xc8, 0x196}, {0xc9, 0xffff}, {0xc8, 0x3}]}}}, 0x14) 4m46.057850981s ago: executing program 6 (id=2018): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r2, &(0x7f00000008c0)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000019d40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x6402000}, 0xc, &(0x7f0000019d00)={&(0x7f0000019d80)=ANY=[@ANYBLOB="ec030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3ec}, 0x1, 0x0, 0x0, 0x40900}, 0x1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f00000198c0)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r4, 0x0) mount(0x0, &(0x7f00000001c0)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r5, r5, 0xf, 0x0, @void}, 0x10) symlinkat(&(0x7f00000004c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') 4m41.22804087s ago: executing program 38 (id=1995): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, 0x0, 0x15) socket$inet6(0xa, 0x800000000000002, 0x3) openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8001, 0x80000008e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) setitimer(0x2, 0x0, &(0x7f0000000580)) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000000640), 0x40000000000017d, 0x888) 4m39.900724628s ago: executing program 6 (id=2028): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0xfe, 0x7fffffff}]}) listns(&(0x7f00000004c0)={0x20, 0x0, 0x6, 0x2000000}, 0x0, 0x0, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000240), 0x0, &(0x7f0000000440)={0x0, "dec557407795bb6fb33ff8685215d03bb3c57615baa8f98df3165e56695e5fdfec39f4eac81f7fdf77d881d13cbf4bfe44bcb0222522c867dfa97ba205b0f762", 0x1d}, 0x48, 0xfffffffffffffffd) keyctl$clear(0x7, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000380)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x64000600) 4m24.096917711s ago: executing program 39 (id=2028): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0xfe, 0x7fffffff}]}) listns(&(0x7f00000004c0)={0x20, 0x0, 0x6, 0x2000000}, 0x0, 0x0, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000240), 0x0, &(0x7f0000000440)={0x0, "dec557407795bb6fb33ff8685215d03bb3c57615baa8f98df3165e56695e5fdfec39f4eac81f7fdf77d881d13cbf4bfe44bcb0222522c867dfa97ba205b0f762", 0x1d}, 0x48, 0xfffffffffffffffd) keyctl$clear(0x7, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000380)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x64000600) 10.399793265s ago: executing program 8 (id=2858): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r0 = socket(0x2, 0x2, 0x1) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 8.870990605s ago: executing program 8 (id=2864): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1df) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/events/sched/filter\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000001280)=[{&(0x7f0000000000)="6683", 0x2}, {&(0x7f0000000280)="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", 0xe00}], 0x2, 0xbfc, 0x987) 8.740211678s ago: executing program 7 (id=2865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000000000001a01000007"], 0x4c}}, 0x0) 8.62872327s ago: executing program 8 (id=2868): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x43611}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 8.49350959s ago: executing program 7 (id=2869): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./debug\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000640), 0x100, 0x3f00) 7.541908101s ago: executing program 8 (id=2872): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000022c0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000002300), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001e00)='memory.events.local\x00', 0x275a, 0x0) 7.237943595s ago: executing program 9 (id=2874): r0 = socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffffff, 0x0, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001300)='./file0\x00', 0x2a0935e, &(0x7f0000001340)={[{@abort}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@dioread_nolock}, {@dioread_nolock}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f00000013c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000001840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001880)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000018c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001940)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000019c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000001a00), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x402, &(0x7f0000001a40)={&(0x7f0000001a80)=""/108, 0x6c}) bind$rxrpc(r0, 0x0, 0x0) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r5, &(0x7f0000000100)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x110, 0x1, "01000000"}], 0x18}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 5.861106776s ago: executing program 9 (id=2877): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x29, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r0, &(0x7f0000002b80)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r2 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 5.770006398s ago: executing program 8 (id=2878): sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sendto(r2, &(0x7f0000000880)="8401feba840cec36ef49e749d2c32d1e6b2f662a51", 0x15, 0x4085, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000900), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000940)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000980)=@buf) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 5.76890695s ago: executing program 5 (id=2879): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000780)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001180)="f78d9ca38f", 0x5}, {&(0x7f00000011c0)="ebe3a0e9", 0x4}], 0x2}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) 5.576252074s ago: executing program 9 (id=2880): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x4008054) write$nci(r0, &(0x7f0000000500)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x9, @f={0x0, 0x0, 0x2, 0x6, {0x7, 0x3, "680ae1"}, 0x2}}, 0xd) 5.240316103s ago: executing program 5 (id=2882): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) r4 = dup(r0) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000400)=@in6={0x21, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0x9, @mcast2, 0x5}}, 0x24) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000480)=[{{&(0x7f00000004c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000580)=""/41, 0x29}, {&(0x7f00000005c0)=""/182, 0xb6}], 0x3}, 0x72}], 0x1, 0x2, &(0x7f0000000680)={r6, r7+10000000}) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./sys_sec\x00', &(0x7f00000007c0), 0x400) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0x0) setgroups(0x0, 0x0) read(r0, &(0x7f0000000740)=""/9, 0xfffffd87) 5.240044984s ago: executing program 9 (id=2883): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) dup(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r3 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000003c0), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000400), 0x10106, 0x2, 0x0) clock_getres(0x8, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000500)={'HL\x00'}, &(0x7f0000000540)=0x1e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000580)={0x0, 0x4, 0x0, 0x0, 0x1b, "0098ba7d82070071ec25f2f792f6b4ffff6304"}) read(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.23437365s ago: executing program 3 (id=2884): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5.211217113s ago: executing program 4 (id=2885): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r2, &(0x7f00000008c0)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000019d40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x6402000}, 0xc, &(0x7f0000019d00)={&(0x7f0000019d80)=ANY=[@ANYBLOB="ec030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3ec}, 0x1, 0x0, 0x0, 0x40900}, 0x1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f00000198c0)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r4, 0x0) mount(0x0, &(0x7f00000001c0)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r5, r5, 0xf, 0x0, @void}, 0x10) symlinkat(&(0x7f00000004c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') 3.823796008s ago: executing program 4 (id=2886): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet(0x2, 0x4, 0x262) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c62300d06092a864886f70d01010b05003034313230300603553d030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xffffffffffffffff) 3.823223637s ago: executing program 5 (id=2887): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x80000006}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000680)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '', 0x3a, 'basic\x00', 0x3a, './file0'}, 0x2d) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r2, &(0x7f0000000680)=ANY=[], 0xfdef) 3.589360439s ago: executing program 3 (id=2888): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r0, &(0x7f0000000180)='27', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 3.130706328s ago: executing program 4 (id=2889): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000022c0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000002300), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001e00)='memory.events.local\x00', 0x275a, 0x0) 2.281320673s ago: executing program 5 (id=2890): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000780)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001180)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000011c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000001240)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e", 0x97}], 0x3, &(0x7f0000001340)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000001380)={0x0, 0x500, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/81, 0x7ffff000}, {&(0x7f0000001480)=""/83, 0x20000253}], 0x2}, 0x0) 2.209918462s ago: executing program 7 (id=2891): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa08000600"], 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000200000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2.207548336s ago: executing program 3 (id=2892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x4002}) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x18}, @val={0x3, 0x4, 0x3, 0x7, 0xc5, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x1, 0x7, 0xd7, 0x68, 0x0, 0x5, 0x2f, 0x0, @empty=0x400300, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "8c3f40502f2fb95ab9932b7a85dc"}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0xde, 0x1, 0x1, 0x1, 0x2, 0x4}, 0x1, {0x100}}}, {0x8, 0x22eb, 0x2, {{0xc, 0x2, 0xa9, 0x0, 0x0, 0x1, 0x0, 0x81}, 0x2, {0xf1, 0x200, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "c60a1891ee42184d6c69e305b7a82a3dc45a42e2df696a257241df4db187b505000000000000002729216e060dfdcd871da0abfa54faec83519f0646824d1b5a00d94d509971907d6c9e61c5749b41dd68b82968537985b5dc566f9e2256b0374f1f588a8443e824b9f2ca99fe25b89503"}}}}, 0xe5) 1.985863141s ago: executing program 4 (id=2893): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x4000886}, 0x0) 1.801776214s ago: executing program 9 (id=2894): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) r4 = dup(r0) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000480)=[{{&(0x7f00000004c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000580)=""/41, 0x29}, {&(0x7f00000005c0)=""/182, 0xb6}], 0x3}, 0x72}], 0x1, 0x2, &(0x7f0000000680)={r6, r7+10000000}) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./sys_sec\x00', &(0x7f00000007c0), 0x400) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0x0) read(r0, &(0x7f0000000740)=""/9, 0xfffffd87) 1.781974389s ago: executing program 7 (id=2895): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2084) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc92612d4c77c48430ccac04143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a4610bd7813544e1e4bf994e14a519c2654ff20b42bdb69c26d9dd5d5eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b08686a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d9083323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c262197925ecbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547cd9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c91fc76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff0000000000000004d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c838073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc505f19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857c4504000000000000f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb5457fa10410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc329874af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8631ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d9801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d3ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b59047ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe1fe92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed681413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d5201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca0000000000000000000000000000000000000000000000000000004744095900", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000ac0)={0x50, 0x0, r1, {0x7, 0x2d, 0x3, 0x400, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) r2 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_fuse_handle_req(r0, &(0x7f0000002140)="1af94041b3bab1c54685c243db7bfdf1421a75eccfdb73e42e39ea6641ad4213f43df61bffa5c762fc62332ead3fbe5e7d7c770ac5305e7415e90d731fd18f9fc8b6d0c7f6136429469b78e8be4d3c0608ccb45b4a3b9b7e7aab639565f68fd56ed0dc91f9efe2437df78ba6642784554d699525901503e9663054aeb74e4789cdc1e85f1d09432f61deb3a6f5c996049acd257dfcd8a591ebd4f660a377d43ef8518e7f9a2e561be3be679e34798a9e46eff6b77eea55a57a7d7bb61ba101814755c132bd1c142b040aa1495a4bcc2290500fe47577c66d11240eea567fa41d3976de645565e86804057caa765c1590ccb677aff4d23f4ca36ea32210e775a9e8a160f15db2c51d5b0b5ea14bcf6cfb3b10a83ca0dce48b522dde6c392918a7b2aff0cc964bf209b2de356adca126da2d4a3afc3b1846ba7fd3fe5bc5f1f96b9f5179d28fe7517c648106c2567f8f7daafcf08fd7610c6221b35549218d8dab507fbf435778e2561eb54b8a39cfb822f01267120354bebf07c96f2c53c2fd8bf5f9cd504ae390f5c37aa373306cf23d1a247ba4f1966cedb88ad3fb89cca9b61d581c08fb2df07050ae2bb4e3329d6ab103a7c780eac03219c2e024ef489b89186611cb80d305fcfd5c1a8e3cf1008e24610526481a3d9c94cfdc43ae12563f2af682a960e734fe26d3eed8953783fbf97bf1e08408a4ae06c114318d53173a9aea5acd59186d32ed27c0abd485d8801d18c2a8bb8a5f8e78a90589d6648425976db7552e1cebda96490bf810f6e9d307379cb627148ebe5d3e222abe8e59f84135934b77957cb26dc561fc6b6836a39292d844acb4c8a3d540d77d02fec7aa76eb3ea349892652e7e4f631c51e7fd0c6c66b8e1fca5c108f081c8d377ce2ad5fe72e66b7cab7bb223af81c6c12207b076c049380a857a6dfd1eec345bf0bbbf4ebeb71b855bfb28830739248c6d3b283d2b4664497ac6a1bb34391aa72080b3b8d95a0b6622e3d2aa469454b749ee8f2ad8ba1e184bc6c2d520bd1dc837bce500dc0222f8c4a9f7a4775d20c4517f10c4f737e8206781fd31d34925069767b4c88fa8b0edb24886c6d5f49aa18f25e2a90a2d9b7aebde7b068dedb4dd50720d6de4a80c4cfb664981af35fd5a2871475a7522ccdf589fcffa4346277b4142349e69cf21c107c92c3dae89887d31f25afb9e5881eb7e11f2110e771e3e1111f44f28336f671d124ae33e1224c6ffa03ba1f27de802d147980c650305bdec6317fb69202d912d40fefc573f82e5e560ff799e3697efe85378e2196bd0e657dbfcc813e937bd225bc28e5934543d53db5b7e47ac3d3c4b7e166dd7a941fd571233142150bde26edca20673e7c606395f81ea2a099f57522350699d1bc07490093e1c0fed685717a80e7d0c53b3dcfc195f2cbb1b1b89c79022a4e42fe9eb6fb354929586fab7276c8cdfed118c5edd4287ff44f7b76ce0d3d4a4d924f9145a10ac43b5c23acbdaabb44caf71bcd4d642c81db04939b026c4a33755da2722be2b20bf850b21401f3b0d0ee7dc999fbaf0d9e3ac621fac0be8254d70c75eb9e0eb91009863ea08be9ce46e2bbbcf7bb612e37079a3fc056004acdb4bdb887d1949270727555fa6b08aac28bbe612644b1ce681c6dba1668d0324e12f03187885698448ae55bfefab1f2fcef1e012645090f52a5c6eb474475fbfcff6296440b7fb4a0f688c44cf9179fc55c0e40b39ea638e99dd035d53b377dd33cf576f84210f4e04c095864ad304470feb63ecf27c408ffe5547f7fdd185a52d6940bfa498ab681de3d6906784f01339de08bc571687e07fe909c0757dd927c118f7c8bcdf810b6159406dda40b37e2b492ddc4302e94b750dd3da7692ad80d4f9cd39e481bb43941fd341fe6a1e791a9486ae7891cee017f77d2b98c20c7cd0580cd321077fc9599c5d4fc1f492aefb421b78eddfc384ab2e23eed5d739a3724bd0892ffdb380d82885f0f77bb9964c114925b0fe50a39c29f424b8468074ff6ed36153a67fab5050e8aca92fa930d37aa7705a6ad05512a120312e01ad203e36101e238644e02d6dbbc5d1968242fde22af063f0e3ad3c8d409f260739765168d6a1e7ad025ef7c9faa47aa4b2743463524d44f52088dc3b58856eae4bf6507bcc4a44ce791893e79cf51a499403fe61bd8e037ff429afba1102ebe5ab5dead32006137959ac11d096fc2f522fdfabb8df0df20c617b256af8a7bffda12d1b3709927c4c30f55b62762ae22ea12a9d38adaa360de0d7febf3b6d098e8cc35d4a8e721e2bf661759ef23452f55eec69f1d45ba0738f6f1e4143ca30a5c94788103b3fd2fe8c173a6d58ffc9818b7652e3f8b56f62b5d13111623617bc1ef0fc26386be3dc1f0038a75b3443e3438f6ccc08731c54705357b26094b88144e6b19ad96151360bd0ed868b38efcaf61b4be9f58bd44679c569d159c135d6436d8ed96a9819bd17ead481ece74fa0b36232377b3aed04938425c36b51217dd99393378bcac2ae79792721fb48308dce0af8308e209ad5c39365029c113c79f9540a27c60e360eca03823c0ed0a465e2012edeee69f076f7f379152dfaafa72f539ef318633f015a663bcaf1337ac444a1187f13fc1ebcdc3f5a935a640c67c3ce83ddf84242d165fecbd54fa2e1f9a1c6916606d598a61c664a8f5f67b22c2d2ff561ba913b317ee0c85ebf1e0ae423e480a5fc8e32bc4a01151e37df8267026060102ded471aa659f1045350903625398572d4a10da2cc2707a5c2e406506023d7699f398a8c2dd9efb50232894b304038dd03b74124caa6ff11756100196e68572c73257997c741fdefc2414cef7c8f7ec7ff1b866a50b414c8b6953dc025b2c105a8cee16cbfe3e51e600470dabead0e3aa7e63592f38c1a57632949ddadfc41085eb1a6efc5e0f120d86db7bebcf736252839ff19bbf680d2cb24e7dddc3369f570d606f2d5efbd63b9a89f622b63b6e1305d585f8a369194406fd1b6ba951cd4b958ca87c57016f78864ad907bc220416bfbc2470b15b8dcd83b888d478ca9b17c1a4ee2422e46d17b8eb9d1fbc8e8d46fbcad9caca45bb0f66f1bbc113f2b9a4868da63b195638b3929fe23919f990dca63fb27f2a5092c615cef2cf9828403e4e2dcf40441c5f9da25e9553cca25bbc54fad09fb3c2b337f32e85282b850640cd6b5cd3bf50458013ee29b8fb15c5fd1d2883f68f8535025ea0d5bd068b5a733e2e7a57a895b7ffcfa88815f828ed988c52361c007a645b31885c5c17037e79c092c3173e112a58042e43fe8f9e64684330810a52fc24af20e43fb2c4bc0a0cd31e7170480886dba1ad5ab301e7ae5306dda9a86fbb318b4db266905be9b42bbf30bc1c8b1689cec80edafc1a2d5ab05543e8e1b3a72b308b4eea6f475e9e64f920a8c4a8d51b7bd7c917a8e666b882b6c9136d5bb4364cc1b35e9259acbf1379ecdf7f2e86f4cf47133605d29be4f865725a6a30c38bdef4581c1e2157d81500d456126ce7a58df535680f39af88ad97d88f95a5ec115519c520685322be05d00711bfab39ada517a270c47036e5cf23f92ffce41034c3793a5f50bffd18a4d18fd2e996a0cb6a0c610329565eb8a583185a3cc723f2e63f34ae8a526fc1e030341413bbfbca8884c63c605fa4d4b9edd2de6d873029806906c52a84026596c0ddadf62a31f849c3efdb08a9b13cfbc53ac47cb29493ef2f7db0b5e012413a411ca8a7e6c1a232d35b5d51613f94338e195ff5dd308cbb6365e8bac12ab346cbc33f47f0c6b4b20b0739bae3aab12203ebbc682db602ceca55a7dadf86bec5e226f7726932efd1d6b8d514cec7bfc4e9ffe482e947cbfacd627edf579fe77a850defb16c9f3b1229cd60d841256d98d22444086dfab529467d09e1d9d5c64a5286fcb17a1203ca41b6e5ddf6e069b9cfa9d2db0467491496d26384b729da6c5cca3449521dc4c6635c73794950dabee4840ffd392867e139ff319b51969c07d252599e5827c19545d5887b2cae2c16da01d4c8d56e32bdb609ee67e665e4a2244aa59ebeccb03d6f93bfc1404aff83be44d33c7c5f3457e998ace19304247a2a3f916d126a946297b793a8ddcdaace8d7838a9224b1cd4bb2fb77554dfb954c551309e07088991eaa76478592593f6764dce92441575d4974ab9fe76edb78440745c0470b492a37b2408a8c28dd9c4a28cce672d9abd3d833d4831fe83f27ff5a61b6f9872169308a75f990db2503cbd6eefa35898d0c760143da837e08967b97be9edde89758cf35d26f04791577c1465f45866b15fc57da0493e89b5f4e3a6af280061f9369027ccd835209b223fdfb734640cddfcb81f7f7b95d02265da923b967be4dfb55c16a10e6a4ada4434df62e8fe8a6a7dda5a653edb9eebb4fc1decc17f0282134a6027ce5f9dcb35089b53468aaff28f2a78cee37ebf58efd112912d6add47ca41b8edc2023f4caaa793857c59900550d4964641e6189faedb02a28bf4a4ecd4a09af78f161a2998a727a3bfb7ce3089f397b0d1e87abfbc54d32343f9c43c5f38c3725363afb3e87cbe04f10e9903a4c1212cdae8bb04c81be14b34b528cfcd9098e18ea97192b68199549bf9a0242e79f8f16220c3c0f91b00fdb5e0690d4adccf9ace2053e8028d5275e316a3e05740e19a370676055639a30bd75d8a5582367d53b51806497adde28a3212482df303f3a5ac30d50715a84dcf69a00448f026867f57bcba3ebb38ffd74404759909fbda2082e73f102596bbdc1462118e35bf913f4334bb07a584a6f0c7c5e74b97aa1dc3ac8589773892d2cf9c98a873b8f286ec472dce9917d355228e679244290340ea881499dc537dfaed24d581519a95aa1fc16e9444b588ddd76a6162d7aa8aaa895e757cfecbbcf1cc427d847f6df886567112337a427b98a760bf58f89349d17054e668d42d13bc507203782e653c78b4d4b8b665d255941af4560145a388c04f56e3892ae77cd2c9f3a30129b518205d69bb4657b67068cf90faf6dee1e1278998450d0a6d4201ae7a54cb3583d364ea43fa9350caf9c5717205f848930573c685b39cf9c86f83fdfaca855ec0fcab523ebae32544d3163c72c138d510503bc4288f9c44a574b3e9c5228deb26fc580110ca79968d39fcaf357a137153b35fdb7dcceaafea4b33cef029be1ddcbe77f5f9cc20acb717490734a976a52cd872018118503474aa0fec9d734648a03fa44f54d3eedd1133dfe2ecae40fe2cf4fbe8fa5f594941d3749e576de475210ab178e8fc41b10767103757f17014aae5c769d5316a224b550dc5113e0623394c3693739432127cc19838aa0209c902fc82ba9aed586441d5f81f0e9942d5e53d7f4f66700d21d10e1f9181c2d38a1d4dc9f246e47b02ac8a94abc854365517a5547aed48f8f6862b47f2bd14576ff6a4ff3fd3fefe5b6cab44fa279ad4c5d92ce6026ff646527a62c41ff79befb3d8b8ed0d72027adc4145d0cc1ddbcf83b1dfea09e47b779ed1f8ea97006802e52b0897900787d0cfd03045d40cc0d096a7d00614f38415658dccd565e13956b220cf642426ced3365405e6b2a739f166cbb357cabe3c560b6c738153f0130d4f447b60273794e41474cc0ff345fd3c75bdbd343f1db567fecde7c33c643eb87b203ece5dfd72747943d936add0ff65290730d20f97a3ca82f6a1779b2da4822f267a36bfa70c71868f76aebc0e2b54a35fad1c44292f310eed1fac63817070ed5f90c6dec5e26fd8dec3db620f05424183a3a43a04795ebd7e4431f56a214dca9ee816a960551d260a437cb9f63643bdac6f58d4f88964d0b100c6385029e0774d997c3de5f8202ece4c2cb8c3f8c4a5ccf81657c9b85a314ca91460c613bab165d869824ff285e4e1d3a764ebcb9e85b890f3da8a9ad79ac896a2b7d90409639b1b968cc8907dded511cad030669816aecb21a2de09f418096a425974e00e02b606777f595a80fc80205c46757dfe334c9d7c70f2b02a714e707b456d596f90281c99b20b0765514a00b6b466225b943a9734c72a1e1e2c918ce06a5747a4920179325327e7d83e2c058e150f73ec236fcbc98b9296e982b96f599a6b4e2a81985b9516a3827873e162bd03d066e692f71108afdb0694773feffb33538019ec274a0d796c6f9baa138b0a433371448617d57c893d936899e8a27b27bcff0046ba2e29f3c150eea6a6a920d4d292fec6b5cde9e2aef21af23deedead7a9783e2f395eb5c3b45bb06bce055ddb5fd68d156b95256cb48e90c1029c56579423b9529b8cfc6d989f643460d90ca52adc9e38f821d06820fe2f7419a31c16b201970cf9cd994a559e5355dd9375f344364bfe2a1105cfbd0f952f56ab75daf7762293ce32d83f8c27ffba2934588053def16602f318c36216df21e206697edbcd57c649ebb5a96fd547331783f88a348ae70455943f08f7ef245b2ae587e281cc3309fcff3001f76aa5d4fc8629f98a8c3e73fcd9ab2cc0b81455aa59e214188e106d0c56f06224f80d850769dcb32b8a9201df95aa41d36f1924c8b2737e7b6a16b014e942495af19f810965e895311a25ff3d6735222f35edbc5520ca145427f5e567cabaec51dcbf9b61850eeb2bdd9078597d0efd59a03394beed5c0ff02c807ba6d62b3ace86ef34f8de3bb9bbc00e704828cc74f3e5aa8440c46e0f33225177d0cc003ffa33db1446d53f4ba30c6e669e5f3a34cff8b32df723afd72eff4c9974b24604e80b5da259ccfa2284dfc1bb92fbdb81dd05d4891454b1e8c0ea18b31f7bbfa1cb3004304e8f097fd86d3844885419a638a165ddd73d1b369b14b6577bdd89c4b107b73650ff5cefc26500fce1b40e5b04ae8f9cecb0ed0f90738ec04d87fa6ba315ccb46105904449c1d1c9e058c9925417c116431e0f413d74aaa9a4f4d828cf5751e97daa136abd4da1136cad926bb7f31d3676a31cad87d923bba88ec17d59a673f3d8355dc072cd477705f2c86b459940be8b14ba46ecca9005193113c5f714416c4553109324389e0dc37f6a04715825695cbb49fbb9b02ba162d764e183ee4005164e11873f2f8dae466ee6ef619957aa0221ace8c3d12b97c54412fe907064712354ff0fadbc14b83eaa2efa8378cc504eb0249e563e226d389f597421414a455220f9ecc56f2310e4efd3e09ffaa41dd35a95cb817f6a2202219e6f349c0733715d306f6cd712d068719d36d456370de1c6ca4455f508df2fb9e39a730458b8c1353130ee81e981c3565b5c727247bebaca847c11a1881ba595f229779b4ad89a4ba843cc1489003dd40dd007f3a28ccf059c9536f0579e129cbf99d66dd819cca0aca729b64d108553ab82257e0c1e5dca49665e933a53cdf664ed63531e581857d7e5d17edc6faac382e73500390a2eb8d18bfd4ae8a2e705b8b4f610e92edf45407b05efbf591898098427619aa525e05275af3504f568f14b38cc1134b93f111cd8b654498514c4416c9ec415135e8f54ff2c3e37bb8e69d4fd8162bdc52e7a69d05e54be7a9605145d59cbc58b19b0203d1f26d6f3dce51fce146b1efae302a648c7efd5f8814c666e67f7ba0e5721245f5eb9709792ae76854231f890dadbe95f2427b0abcb0b4bc090478d7d0d832df22af744f8fd72f8269c86a2863dc44a5ce949e6107fbf4c3adadd792215b5724368826bf4ddc7a8cee7cf29f38c1be56f0a47fd394220f7c43865fab4caa9b03d2ab8868a987fbf4ea7f2326d23fe1e9338305d1aac9798b8f52469617627a9056a8c28716472ec424e96e9a6a432239ec9ae5e5540897170a813476fc1fbf2d844299b67e7ea15633a9b6572da83b0d532f6ac1ae8316c90d21cdfcfdde957f9a3465962b6289a3880d0305a767f127927ba3bfb3ae86e5645a6dc0a70786623908a061151faf6983ba9c0ebc92b476f5c9cc51d52b3c481676c05211c9feb6a29f387ab4c943af6eecc68ed535620d21b6371af31b1a8fa0e1e924740ff7a3f8d5694f93b247f6d01da9cefae076ff3614e0829e8d153982130a485e0d38fcbdc437be8321e2e70c6e200fa7f4614ef2a7b52d4767b0e8d151ecd0bca46603b5413171ce335bb6ac8911ebbf9fbda9ecf144a49e0e3dc31c0ffa0fd37a87a2034c04c02b0aec10054300d03ad2e6b7529e38c66457242f435f113b8ac40d75a8f113c70f2001347de802d04007ea31c8e914a20bb836c3ad146b9b34d23fa1f786d5a7a014d1ecff3e074e827a5df29787fb60426490fdf38b9ea5f1357fb1fc4105d1300f3ad64673ed5bb5fc0e37c035fe31eb95b8f2e09d64ef6cc2b90e69461923e1eadfc8092ac253432396891be73789c6f8e00d9baf3efc77cb8455d00432ef00916bf3a6cbbd3c0b1badfc8944bc12b0e5f81d928d755a6afce347f1a4831d50f089f67f3302b8798871c57abb24bfd34988c866880e0681b93a573a89b12e582ecf040bf1dafa7e7a3a5946314bee2283ef64bb2561e2c3f27fe0586041d47bce90a68b87385deb17205537a1ad0bbb1fcd99beddd5212c92f61d3f785e86a3dfe412ab35ff49fc491afe1927c4a7e91e9c44bbdc934e7adc0abddd5051bd2a07ad2142d13a3ddb15bb7324fd5880711aa0603f45d51eb0fc0bb49a5a0e12a87128b5e6622509e9136e6c4be1265ad9c72645577ae9e97b7429937a59ec7caf8ceceb9c96f59297a8d00d3ed407c7a6f8b4ece9d626bf32d9a331be817e63eb509c691b9eb5e56369f317d073c4e69e8777d04d148c6443927de70529a5d232604e7cd82f9b31ec1e73d811bef659498d38a06d40851482783f1365b235d88916f8f6b52d17e33ce4c75b0e71a3a44a72be6fe6f4154e09751e322eaf80dea16a7ac08164f45bc23af1b5f539e2df61910712ba95d0966b2413dd196e60302d9d07da08dfec7d158de1e8c4f4a6a5ee53c7b5649806bbee634dd03f4a9993da44d549cecdc853ed3885f6ae21f5f0cc67caca303ce00db862b8bfbf28bd838a5e2aa5a43f1610f097b35d53d3207369cca06c14f79db0cdf788165e5fa8357adafca32d5a4b2af066a6f17c8efbf734e64f99ff07322964d749c793147ca7dc78e4b32bf025a83a90cb3bb8bae1c1c87c4d8ff4b944a61ae31aef58d645f4f5d85dbd433a70416051c93d1c035a9167ea522f1a3c1e07f4a62ddd1e2ae2d743295542ca3093c93819025afb9c3cfcd16a2493a6f3298eafc039985f4160a436b566653aa330216ab771a777ebc131c499870c4df7be5e58a681e25a785733d0eb888646bd4e491fdcea8e993e2e3379b5666e6316e56e374fe51b727522fed4bd58d3a73f92843628bc93018b39bb17caa9906f2faf8c456d19de56eff571be5d0e5651689acc25d8b7ef616d3479a358f8e9827a6043a2e7b4f2d6b15ac4534ddf4ca213419afae7f5a23e23069254171fb780c1a8c606fb238342cd4b25ffe207926a3a450e3f204a6dc5ec94edc27cd924f9010fd6a545456695c7cc8932f03133f21ac32db9885066d07f311fbb1b1db4382c24ecb68ae44496087f091d54d6eec50fcfb6b0c4b36cb126f289cff7163f19f1f0c6a2db4ac0dc7900284c6dd33f325bd88df7a2d80a0b2327fe2bad85b37ac60873b3e79e77d01cbdf4911216603ce829ab7dcb7f92a050d2a1c0098cf6c6ccd2d1c15ef04f41ce17b84a72ab1b9b7afa2152feabf38c161a6d71922d3ec7bc8e9cf9545beb42826ada25918a2af5638a72c636230e1839cf5702c670c8ec21ff05f139b6d15ec29e6117ab3300c86ff776d183cf79e77c5748171a0344e4a8cf2ffe47b835edd7b7e1d62960ed84481596ff8bf1d2a438be188dc9ad38ce4b48fd70f7df099682701f4cec227d631011006d58a2983ab63b3556d35d462b90cb9024429faec579b5acfab8bf4b0e835615525c7c60d29200b4f06dedd6f5f839348df98b47802ecdce01b4aa41303e992a576e16037abe3ac8a59afdc8f97602f371129131e151181cd7886bc8eeea0869c57d24bb7a2bad25dee341309d5bf01d52aaa89ebd832715ca164b56275a950aeac3b9ecec7dcae8226e05520ec508a9e28c960a34edba5122d7f868e2f8ddf8536bfcd2d704b32e73ad9ed722b4c2e21947197d876f6d9f428b4cb6863b6b1fe2dbc74f108cf518167d199616addd2ec6b69f41ef0a7a2b0670edaa83772c0557bbdabac02692ceac80b9cf1d34d45a03186a48c19aa97c759b20fea169176ed628e74177cafc137744d6a5f7c453b3e7224b784a947a8e83361fff5a6c2ac5781ae5ddd2cc0b09c4196f3f0cb74a5c1075dfbf2e1eb80097f8ff58103a067854d7665133141c8f4bdad8a44240143e6f9cd5acca46486cb9d7ceefe2bca3bc7cc17962b01270d438f53da3f413d6bef3aac1bbc4fa35cb79b4d207406c12a0e105165ac4af0cf70de0556447172137e634849565eda61755f6ae37aee753004bbb96a22e5bece6fea78b722eea6c91dff2e2cdef95f845418a0edabf4b603fae98dabacd59112da9ce821382580c2c7dd32b091e2745408ac298b51010cf302c71a92b570977ebbe33afb5671214255ab3a61d3c2a01b86036aaaf33a7a79a912627828291f1ac43e5640c20a16e08a78cfa4503152c13beab449e14ee3b2437b79c32f4a2dc92a9867b04a72a9c280c304fd3b489aee2322407f487214d49e8024884f7ec3646ca4430cea35938776f34e1fcd3a334687c6e573cb45440829711350f62067c9e3f161df97fad4cc8fe1b703edc65bf6a8cf8404c274b29281a6f0b934dc4ae2538678bc70079a09f996c4d9689927e0dacb82286a3e14178a6fc37ff549fb64bb153bea7aeb0dbc413dcec78f44678c36e696f795c3754310e04ad5df89dbad72883baab36af68b2e95736973df56fdb44f425a96e1863f6f037bf1787e90f68ae8f14a77a19b9b2bcc37cdd19125b99c3b69b91ad450a689057857e21f0587466fe0ecd64f58ac0e1aaa3aef1ef3133388f9bea478cc051e46edc0ad2f92d4290d8415a4cf21c01dad6f98b3c6fcde2029631fe7bd32ff3e3e7eb0ff947585a62ecf424295c7c5161524a091ea069ace1ea43d237bbc70e9f577558c7d0b7acac52144f00070728a5e2897fa3dd94ffd55f167865aa72c5e2e4f9420be76f8384fc374d0371a8399efa2e3ab106c5451d37c09c0207f2f47700bd80aba522cae7845c65c6b820b0147ba902469c0c6f227f43a063526c57858c3f9c8b641ab1b9ac0d648d33f547dccfbf71572d68348cfa8afb17485049b700b2fa4649ec7cbc9a596dc08f50492b75cd24042d00655e5dc7c38ecd19056d5366ab3905f859404e29ca7c1ad6ea5a722475131a3599ff74d9cd18c4343858bb657008021dda02baa31e4354b83d240f77fa311739b705298d516b1b22497383025195b35a8c16b14c99108ff98aa78a04273afa00b9910d9c28ccd0f60d7889d4cd9b0f4cac9146f76373a6c36e9b9a9c796ef3e37657f0f1293e3b2b3fdf41147e22806f3d865063bda202d37ff632b7aeccb9caa1a88cf1bf6f51ba903ce67f2527e84c", 0x2000, &(0x7f0000004a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004300)={0x60, 0x0, 0x8000000000000001, {{0x5, 0x6, 0x9, 0x80000000, 0x2400000, 0x3, 0x3, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.767908038s ago: executing program 5 (id=2896): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x4008054) write$nci(r0, &(0x7f0000000500)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x9, @f={0x0, 0x0, 0x2, 0x6, {0x7, 0x3, "680ae1"}, 0x2}}, 0xd) 1.530576735s ago: executing program 3 (id=2897): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x88, 0x24, 0xf19, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, 0x0, 0x4040010) 1.432381964s ago: executing program 3 (id=2898): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x10) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x20008850) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xd9}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0x10001, 0x5, 0x20, 0x0, 0x467, 0x9, 0x9, 0x80000001, 0x4, 0x8, 0x7, 0xfffff510, 0x80000001, 0x1, 0x3, 0xfffffffc, 0x7, 0x5, 0xff, 0x7, 0x5487, 0x6, 0x0, 0x4, 0x47e, 0xfffffffc, 0xffffffff, 0xfffffffb, 0x485, 0x3, 0x6b, 0x9a1c, 0x5, 0x4, 0x0, 0x2c2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0x7, 0x0, 0x0, 0xe65, 0x3ff, 0xc, 0x7, 0xf, 0x7, 0x1, 0x775a, 0x8, 0x0, 0x7fff, 0xfffffff7, 0x8000, 0xf79c, 0x5, 0x1ff, 0x1, 0x81, 0xce, 0x1, 0x7, 0x9, 0xc0000000, 0x10, 0x7, 0x6, 0xc, 0x5, 0x4, 0x333, 0x7, 0x4, 0x4, 0xbfb, 0x9, 0x9, 0x7fffffff, 0x0, 0x4, 0x9, 0x2, 0xfffffff7, 0x6, 0x3, 0x2, 0x904, 0x3, 0xa, 0x200, 0x8, 0x1959, 0x8, 0x2, 0x2, 0x6, 0x3, 0x10, 0x7, 0x574, 0x6, 0x6, 0x5f, 0x0, 0x0, 0x2, 0xc, 0x6, 0x800, 0x64af, 0x4, 0x3, 0x8, 0xc7, 0x0, 0x2, 0x7fff, 0x3, 0x9, 0x40, 0x7, 0x9, 0x8, 0x0, 0x4, 0x7, 0x10, 0x9, 0x8, 0x9, 0x1, 0x2, 0x9db, 0x0, 0x80000001, 0x1, 0xf4, 0x8001, 0x1, 0x1, 0xfffffff3, 0x7e3e55a6, 0x6, 0x7, 0x9, 0x4, 0x3, 0x4, 0x2, 0x4, 0xc63b, 0x9c8e, 0xfffffffd, 0x4, 0x0, 0xffff0000, 0x0, 0x0, 0x2, 0x7, 0xac2, 0x6, 0xde7, 0x78, 0x8, 0x3ff, 0x4, 0x0, 0x3, 0x2, 0x859, 0x800, 0xbde8, 0x5, 0xc00, 0x0, 0x2, 0x1c00, 0x3ff, 0xffff, 0x8, 0x4, 0x7, 0x8001, 0x9, 0x3, 0x6, 0x1, 0x7ff, 0x0, 0x9, 0x7, 0x8, 0x0, 0x4, 0x8, 0xfffffff8, 0x7, 0x4, 0x800, 0x7, 0x80000001, 0xc, 0x4, 0x9, 0x9980, 0x6, 0x7ff, 0x10000, 0x6, 0x250, 0x9, 0xfffffffb, 0x2, 0x7, 0x4, 0x6, 0xfff, 0x3, 0x2, 0x80000000, 0x1, 0x3, 0xc093, 0x3, 0x6, 0x51d, 0x0, 0x1, 0x8, 0x4, 0x8001, 0x3, 0x8e, 0x3053, 0xc0000, 0x1, 0x0, 0x9, 0x1600, 0x5, 0xf1, 0xf, 0x4, 0x401, 0x6, 0x0, 0x200, 0x0, 0x4, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffffff8, 0x1, 0x2, 0x5, 0x8, 0x1, 0x0, 0x1, 0x202ed62a, 0x10, 0x9, 0x9, 0x8, 0x9, 0x7, 0x71c, 0x101, 0xfffffff7, 0x0, 0xa5d, 0xffff8000, 0x7f, 0x477b, 0x3, 0x7, 0xb4d8, 0xa0, 0x7ff, 0xffffff7f, 0x22ab, 0x8, 0xd7, 0x3f, 0x3ff, 0x1, 0x2327, 0x80, 0x3, 0xfffffffc, 0x200, 0x8, 0x2, 0xde41, 0x8, 0xc28e, 0x10000, 0xff800000, 0x0, 0x5, 0x9, 0xfffffffc, 0x32b, 0x1, 0xe, 0x4, 0x9, 0x7f5, 0x1, 0x29f, 0x400, 0xffff, 0x6, 0xffffffff, 0x8a, 0x8, 0x7, 0x80000000, 0x0, 0x200, 0x3, 0x2, 0xfff, 0x5, 0x4b1, 0x4, 0x3, 0x1, 0x4, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xfffffffc, 0x10001, 0x1db, 0x40, 0x80000000, 0x9, 0x1, 0x0, 0x15de, 0x2, 0x0, 0x200, 0xd, 0x7, 0x3, 0xfffffff8, 0x1, 0x3, 0x2, 0x8, 0x8, 0xfff, 0x6, 0x7fff, 0x0, 0xffff, 0x3, 0x4, 0x683, 0x8, 0x7, 0x8001, 0x6, 0x7, 0x0, 0x7, 0xffff2294, 0xfffffffa, 0x3, 0xb4, 0x8, 0xfffffff3, 0x5, 0x7fff, 0x5, 0x8, 0x0, 0x3ff, 0x8, 0xc18, 0x6, 0x6, 0x22ca21da, 0xffff, 0xb, 0xa, 0x9f5, 0x1, 0x2, 0x0, 0x0, 0x6, 0x80000000, 0xfffffffd, 0x7, 0x81, 0x8d4a, 0x10000, 0x7f, 0xc5e, 0x1ff, 0x800, 0x5, 0x5, 0xb74, 0xa, 0x80e, 0x1, 0x0, 0x9, 0x2454f7e4, 0x4, 0x6, 0x0, 0x5, 0x4, 0x772, 0x10001, 0xff, 0x1, 0x6, 0x2, 0x7, 0xff, 0x401, 0x0, 0x6, 0x7fffffff, 0x40, 0x9, 0xda1, 0x2, 0x200, 0x8, 0x2948, 0xf5e, 0x36bcd671, 0xb07, 0x8, 0x0, 0x8, 0x9, 0xfffffffa, 0x6, 0x1, 0x1c00, 0x7f, 0x7f, 0x5, 0x6, 0xf01, 0x10001, 0x9, 0x0, 0x4, 0x401, 0x1000, 0x4, 0x1000, 0x9, 0x80000000, 0x3, 0xe, 0x80000001, 0x9, 0x7, 0x80000000, 0x8, 0x0, 0x0, 0x1, 0x8, 0x3ff, 0x4, 0x1ff, 0x3, 0xff, 0x4, 0x1, 0xffff, 0x5, 0x4, 0x3, 0x80000001, 0x6, 0x100, 0x0, 0x170, 0x6c00, 0x2, 0x7, 0x4, 0xf61a, 0x28000, 0xd, 0x1, 0x8, 0x1, 0x6, 0x6, 0x0, 0x79ca]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe71, 0x1, 0x0, 0x1, 0x1, {0xc, 0x2, 0x4, 0x9d, 0x400, 0x1e970d41}, {0xf, 0x2, 0x8, 0x5c7b, 0x80, 0x1}, 0x1, 0x3, 0x3}}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) 1.211788981s ago: executing program 7 (id=2899): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r2, &(0x7f00000008c0)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000019d40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x6402000}, 0xc, &(0x7f0000019d00)={&(0x7f0000019d80)=ANY=[@ANYBLOB="ec030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3ec}, 0x1, 0x0, 0x0, 0x40900}, 0x1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f00000198c0)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r4, 0x0) mount(0x0, &(0x7f00000001c0)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r5, r5, 0xf, 0x0, @void}, 0x10) symlinkat(&(0x7f00000004c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') 1.182633793s ago: executing program 4 (id=2900): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 571.43728ms ago: executing program 9 (id=2901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000df7c000000100000aac4aa9baabb88a84b008100060008"], 0x36) 565.041951ms ago: executing program 5 (id=2902): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1:0\n', 0x4) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000340)='1:1\n', 0x4) write(0xffffffffffffffff, &(0x7f00000003c0)='0\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f00000004c0)='writemostly\n', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='readonly\n', 0x9) 216.064799ms ago: executing program 8 (id=2903): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./debug\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000640), 0x100, 0x3f00) 208.571456ms ago: executing program 3 (id=2904): r0 = socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffffff, 0x0, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001300)='./file0\x00', 0x2a0935e, &(0x7f0000001340)={[{@abort}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@dioread_nolock}, {@dioread_nolock}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f00000013c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000001840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001880)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000018c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001940)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000019c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000001a00), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x402, &(0x7f0000001a40)={&(0x7f0000001a80)=""/108, 0x6c}) bind$rxrpc(r0, 0x0, 0x0) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r5, &(0x7f0000000100)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x110, 0x1, "01000000"}], 0x18}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 159.474455ms ago: executing program 4 (id=2905): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000022c0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000002300), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 0s ago: executing program 7 (id=2906): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): es in process `syz.1.742'. [ 429.388833][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'. [ 429.740009][ T9300] loop2: detected capacity change from 0 to 2048 [ 429.823958][ T9300] EXT4-fs: Ignoring removed orlov option [ 429.824230][ T9300] EXT4-fs: Ignoring removed i_version option [ 430.229598][ T9300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.229711][ T9300] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.448580][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.449210][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.477040][ T9300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.606427][ T9339] netlink: 'syz.9.738': attribute type 1 has an invalid length. [ 430.736045][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.9.738'. [ 430.754170][ T9301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.763670][ T9301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.771297][ T9345] netlink: 12 bytes leftover after parsing attributes in process `syz.8.745'. [ 431.949353][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.7.750'. [ 431.949380][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.7.750'. [ 432.249385][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.514903][ T9339] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 432.571262][ T3283] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.085960][ T9342] bridge1: entered promiscuous mode [ 433.163714][ T3283] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.163767][ T3283] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.953319][ T9401] netlink: 12 bytes leftover after parsing attributes in process `syz.6.760'. [ 438.182593][ T9422] netlink: 'syz.7.767': attribute type 1 has an invalid length. [ 438.250358][ T9422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.320756][ T9422] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 438.336790][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.7.767'. [ 438.379348][ T9422] bridge2: entered promiscuous mode [ 439.623199][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.623301][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.625275][ T9481] loop9: detected capacity change from 0 to 256 [ 445.202323][ T9516] rxe_eth0 speed is unknown, defaulting to 1000 [ 446.125480][ T8996] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 447.193454][ T8996] usb 10-1: Using ep0 maxpacket: 8 [ 447.194313][ T8996] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 447.567611][ T8996] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 447.567669][ T8996] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 447.567704][ T8996] usb 10-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 447.824855][ T8996] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 447.824972][ T8996] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 447.825012][ T8996] usb 10-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 447.826223][ T8996] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 447.826279][ T8996] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 447.826312][ T8996] usb 10-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.091471][ T8996] usb 10-1: string descriptor 0 read error: -22 [ 448.179147][ T8996] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.219567][ T8996] usb 10-1: can't set config #168, error -71 [ 449.183197][ T8996] usb 10-1: USB disconnect, device number 4 [ 449.258068][ T9551] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 453.323167][ T9604] process 'syz.9.808' launched './file1' with NULL argv: empty string added [ 456.951228][ T9651] netlink: 40 bytes leftover after parsing attributes in process `syz.6.821'. [ 457.059001][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5 [ 457.229838][ T9658] fuse: fd is not a fuse device [ 457.273215][ T9656] loop9: detected capacity change from 0 to 2048 [ 457.280709][ T9656] EXT4-fs: Ignoring removed orlov option [ 457.280735][ T9656] EXT4-fs: Ignoring removed i_version option [ 457.377687][ T9656] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.377811][ T9656] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.556867][ T9656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.154974][ T9739] fuse: fd is not a fuse device [ 462.176071][ T9743] batman_adv: batadv0: Adding interface: netdevsim0 [ 462.176089][ T9743] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.176127][ T9743] batman_adv: batadv0: Interface activated: netdevsim0 [ 465.060065][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6 [ 467.438632][ T9797] fuse: fd is not a fuse device [ 471.497051][ T9822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.639627][ T9841] netlink: 44 bytes leftover after parsing attributes in process `syz.6.864'. [ 472.639655][ T9841] netlink: 16 bytes leftover after parsing attributes in process `syz.6.864'. [ 472.639677][ T9841] netlink: 44 bytes leftover after parsing attributes in process `syz.6.864'. [ 476.292602][ T9882] fuse: Bad value for 'fd' [ 478.144653][ T9911] rxe_eth0 speed is unknown, defaulting to 1000 [ 479.229534][ T5282] 8021q: adding VLAN 0 to HW filter on device eth15 [ 479.411387][ T9928] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 480.505233][ T9938] netlink: 48 bytes leftover after parsing attributes in process `syz.6.885'. [ 483.667161][ T9980] rxe_eth0 speed is unknown, defaulting to 1000 [ 485.996110][ T9991] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 490.572480][T10021] rxe_eth0 speed is unknown, defaulting to 1000 [ 493.443560][T10046] netlink: 36 bytes leftover after parsing attributes in process `syz.6.913'. [ 493.443587][T10046] netlink: 16 bytes leftover after parsing attributes in process `syz.6.913'. [ 493.443610][T10046] netlink: 36 bytes leftover after parsing attributes in process `syz.6.913'. [ 493.750601][T10050] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 498.325000][T10085] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 498.325030][T10085] batman_adv: batadv0: Removing interface: netdevsim0 [ 498.578980][ T5282] 8021q: adding VLAN 0 to HW filter on device eth16 [ 499.583832][T10101] netlink: 36 bytes leftover after parsing attributes in process `syz.6.928'. [ 499.583860][T10101] netlink: 16 bytes leftover after parsing attributes in process `syz.6.928'. [ 499.583881][T10101] netlink: 36 bytes leftover after parsing attributes in process `syz.6.928'. [ 500.793543][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.793593][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.347426][T10118] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 502.964509][ T5629] Bluetooth: hci0: command 0x0406 tx timeout [ 504.620801][T10166] capability: warning: `syz.6.944' uses deprecated v2 capabilities in a way that may be insecure [ 507.942412][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.950'. [ 508.231374][T10196] rxe_eth0 speed is unknown, defaulting to 1000 [ 512.533607][T10243] netlink: 44 bytes leftover after parsing attributes in process `syz.9.964'. [ 512.578493][T10243] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.579388][T10243] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.009060][ T5282] 8021q: adding VLAN 0 to HW filter on device eth17 [ 519.736349][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 519.739819][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 519.740750][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 519.756755][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 519.823472][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 521.912235][ T5629] Bluetooth: hci1: command tx timeout [ 523.992091][ T5629] Bluetooth: hci1: command tx timeout [ 524.892084][ T5282] 8021q: adding VLAN 0 to HW filter on device eth18 [ 525.749696][T10297] rxe_eth0 speed is unknown, defaulting to 1000 [ 526.105436][ T5629] Bluetooth: hci1: command tx timeout [ 526.598791][ T5629] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 528.174837][ T5629] Bluetooth: hci1: command tx timeout [ 528.780710][T10414] 8021q: adding VLAN 0 to HW filter on device bond2 [ 529.028017][ T5282] 8021q: adding VLAN 0 to HW filter on device eth19 [ 530.634071][ T5629] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 530.635754][ T5629] Bluetooth: hci2: Injecting HCI hardware error event [ 530.639545][ T5629] Bluetooth: hci2: hardware error 0x00 [ 531.499062][T10297] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.501663][T10297] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.520029][T10297] bridge_slave_0: entered allmulticast mode [ 531.521987][T10297] bridge_slave_0: entered promiscuous mode [ 531.538767][T10297] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.538955][T10297] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.539095][T10297] bridge_slave_1: entered allmulticast mode [ 531.567542][T10297] bridge_slave_1: entered promiscuous mode [ 531.624321][T10297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.627550][T10297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.678024][T10297] team0: Port device team_slave_0 added [ 531.681051][T10297] team0: Port device team_slave_1 added [ 531.728078][T10297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.728100][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.728130][T10297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.730093][T10297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.730111][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.730144][T10297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.865857][T10297] hsr_slave_0: entered promiscuous mode [ 531.866905][T10297] hsr_slave_1: entered promiscuous mode [ 531.867647][T10297] debugfs: 'hsr0' already exists in 'hsr' [ 531.867668][T10297] Cannot create hsr debugfs directory [ 533.147311][ T5282] 8021q: adding VLAN 0 to HW filter on device eth20 [ 533.293879][ T5629] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 537.846124][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1046'. [ 537.846152][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1046'. [ 537.887258][T10297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 537.913959][T10297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 537.917470][T10297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 537.945585][T10297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 537.949589][T10297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 537.969166][T10297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 537.980295][T10297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 537.997059][T10297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 538.144826][T10297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.184638][T10297] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.216214][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.216326][ T5947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.250071][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.250183][ T7917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.045881][ T7917] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.308171][ T7917] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.525014][ T7917] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.850955][ T7917] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.209131][T10297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.332772][ T7917] bridge_slave_1: left allmulticast mode [ 544.332804][ T7917] bridge_slave_1: left promiscuous mode [ 544.333027][ T7917] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.365881][ T7917] bridge_slave_0: left allmulticast mode [ 544.365908][ T7917] bridge_slave_0: left promiscuous mode [ 544.368030][ T7917] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.743938][ T7917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.778075][ T7917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.779849][ T7917] bond0 (unregistering): Released all slaves [ 548.238102][T10297] veth0_vlan: entered promiscuous mode [ 548.272710][T10297] veth1_vlan: entered promiscuous mode [ 548.467079][T10297] veth0_macvtap: entered promiscuous mode [ 548.496682][T10297] veth1_macvtap: entered promiscuous mode [ 548.600546][T10297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.649615][T10297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.986050][ T7328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.987015][ T7328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.143932][ T3283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.163981][ T7328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.843867][ T7917] hsr_slave_0: left promiscuous mode [ 550.857082][ T7917] hsr_slave_1: left promiscuous mode [ 550.858000][ T7917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.858022][ T7917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.883060][ T7917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.883084][ T7917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.936850][ T7917] veth1_macvtap: left promiscuous mode [ 550.936895][ T7917] veth0_macvtap: left promiscuous mode [ 550.937026][ T7917] veth1_vlan: left promiscuous mode [ 550.937118][ T7917] veth0_vlan: left promiscuous mode [ 552.411107][T10814] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1109'. [ 553.849934][ T7917] team0 (unregistering): Port device team_slave_1 removed [ 553.896687][ T7917] team0 (unregistering): Port device team_slave_0 removed [ 554.278786][T10841] netlink: 277 bytes leftover after parsing attributes in process `syz.8.1118'. [ 554.364194][ T2962] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.364528][ T5947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.364547][ T5947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.366094][ T13] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.367079][ T13] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.384722][ T5947] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.613423][T10848] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1120'. [ 554.787763][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.787790][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.587728][T10891] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1133'. [ 560.843245][T10949] fuse: fd is not a fuse device [ 561.269417][T10956] loop4: detected capacity change from 0 to 4096 [ 561.423395][T10956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 561.423423][T10956] EXT4-fs (loop4): Test dummy encryption mode enabled [ 561.425998][T10956] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 561.722172][T10972] batman_adv: batadv0: Adding interface: netdevsim0 [ 561.722194][T10972] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.722231][T10972] batman_adv: batadv0: Interface activated: netdevsim0 [ 562.236798][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.236862][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.706314][T10976] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1153'. [ 563.078426][T10984] rxe_eth0 speed is unknown, defaulting to 1000 [ 563.359661][T10987] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1157'. [ 563.359686][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1157'. [ 564.100995][T11013] loop4: detected capacity change from 0 to 4096 [ 564.119852][T11013] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 564.119874][T11013] EXT4-fs (loop4): Test dummy encryption mode enabled [ 564.120313][T11013] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 568.352076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 570.762057][ T8996] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 570.973516][ T8996] usb 5-1: Using ep0 maxpacket: 32 [ 571.338442][ T8996] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 571.355517][ T8996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.355545][ T8996] usb 5-1: Product: syz [ 571.357198][ T8996] usb 5-1: Manufacturer: syz [ 571.357218][ T8996] usb 5-1: SerialNumber: syz [ 571.394673][ T8996] usb 5-1: config 0 descriptor?? [ 571.852929][ T8996] airspy 5-1:0.0: Board ID: 00 [ 571.852958][ T8996] airspy 5-1:0.0: Firmware version: [ 572.561583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 572.591584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 573.398757][ T8996] airspy 5-1:0.0: usb_control_msg() failed -110 request 11 [ 573.538687][ T8996] airspy 5-1:0.0: Registered as swradio24 [ 573.538715][ T8996] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 575.079544][ T9311] usb 5-1: USB disconnect, device number 2 [ 575.526403][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1200'. [ 575.573458][T11162] nvme nvme0: failed to connect socket: -111 [ 576.021208][T11177] netlink: 'syz.8.1204': attribute type 10 has an invalid length. [ 576.153525][T11177] syz_tun: entered promiscuous mode [ 576.826004][T11177] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 577.538114][T11217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1209'. [ 578.293817][ T9311] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 578.442214][ T9311] usb 5-1: Using ep0 maxpacket: 32 [ 578.444040][ T9311] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 578.457495][ T9311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.457524][ T9311] usb 5-1: Product: syz [ 578.457542][ T9311] usb 5-1: Manufacturer: syz [ 578.457560][ T9311] usb 5-1: SerialNumber: syz [ 578.467566][ T9311] usb 5-1: config 0 descriptor?? [ 580.152705][ T9311] airspy 5-1:0.0: usb_control_msg() failed -110 request 0a [ 580.152739][ T9311] airspy 5-1:0.0: Could not detect board [ 580.152851][ T9311] airspy 5-1:0.0: probe with driver airspy failed with error -110 [ 581.473392][T11264] netlink: 'syz.9.1222': attribute type 10 has an invalid length. [ 581.494130][T11264] syz_tun: entered promiscuous mode [ 581.520425][T11264] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 582.548781][ T9330] usb 5-1: USB disconnect, device number 3 [ 583.469320][T11319] rxe_eth0 speed is unknown, defaulting to 1000 [ 586.289255][T11338] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1237'. [ 586.349313][T11344] netlink: 'syz.1.1240': attribute type 10 has an invalid length. [ 586.354092][T11344] syz_tun: entered promiscuous mode [ 586.367695][T11344] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 591.747382][T11417] netlink: 'syz.6.1258': attribute type 10 has an invalid length. [ 591.747421][T11417] syz_tun: entered promiscuous mode [ 591.758801][T11417] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 592.484529][T11434] batman_adv: batadv0: Adding interface: netdevsim0 [ 592.484551][T11434] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.484588][T11434] batman_adv: batadv0: Interface activated: netdevsim0 [ 592.586015][T11435] fuse: fd is not a fuse device [ 594.779838][T11475] batman_adv: batadv0: Adding interface: netdevsim0 [ 594.779885][T11475] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.779976][T11475] batman_adv: batadv0: Interface activated: netdevsim0 [ 595.747439][T11481] netlink: 'syz.9.1275': attribute type 10 has an invalid length. [ 596.001901][T11490] fuse: fd is not a fuse device [ 596.340139][T11499] rxe_eth0 speed is unknown, defaulting to 1000 [ 598.658992][T11537] syz.1.1288 uses obsolete (PF_INET,SOCK_PACKET) [ 599.777509][T11548] fuse: fd is not a fuse device [ 599.890237][T11553] netlink: 'syz.6.1293': attribute type 10 has an invalid length. [ 600.699480][T11589] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1302'. [ 600.699508][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1302'. [ 602.179939][T11622] netlink: 'syz.6.1313': attribute type 10 has an invalid length. [ 609.671201][ T9310] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 610.613078][ T9310] usb 5-1: Using ep0 maxpacket: 8 [ 610.615093][ T9310] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 610.623085][ T9310] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.623113][ T9310] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 610.633740][ T9310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.633768][ T9310] usb 5-1: Product: syz [ 610.633786][ T9310] usb 5-1: Manufacturer: syz [ 610.633804][ T9310] usb 5-1: SerialNumber: syz [ 610.690014][ T9310] usb 5-1: 0:1 : does not exist [ 610.690098][ T9310] usb 5-1: unit 1 not found! [ 610.690118][ T9310] usb 5-1: unit 9 not found! [ 610.784277][T11704] netlink: 'syz.9.1332': attribute type 10 has an invalid length. [ 611.210918][ T9310] usb 5-1: USB disconnect, device number 4 [ 611.372360][T11690] udevd[11690]: setting mode of /dev/bus/usb/005/004 to 020664 failed: No such file or directory [ 611.372499][T11690] udevd[11690]: setting owner of /dev/bus/usb/005/004 to uid=0, gid=0 failed: No such file or directory [ 611.429568][T11714] udevd[11714]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.740346][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 611.759152][T11728] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1322'. [ 611.759175][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1322'. [ 611.972642][ T9332] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 612.131595][ T9332] usb 5-1: Using ep0 maxpacket: 32 [ 612.133771][ T9332] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 612.140839][ T9332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.140870][ T9332] usb 5-1: Product: syz [ 612.140889][ T9332] usb 5-1: Manufacturer: syz [ 612.140908][ T9332] usb 5-1: SerialNumber: syz [ 612.189848][ T9332] usb 5-1: config 0 descriptor?? [ 613.502743][ T9332] airspy 5-1:0.0: usb_control_msg() failed -110 request 0a [ 613.502776][ T9332] airspy 5-1:0.0: Could not detect board [ 613.502871][ T9332] airspy 5-1:0.0: probe with driver airspy failed with error -110 [ 614.045439][T11773] netlink: 'syz.9.1345': attribute type 10 has an invalid length. [ 615.179302][ T9311] usb 5-1: USB disconnect, device number 5 [ 615.996338][T11812] rxe_eth0 speed is unknown, defaulting to 1000 [ 616.913542][T11816] jffs2: notice: (11816) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 617.217944][T11816] netlink: 'syz.1.1357': attribute type 4 has an invalid length. [ 617.217971][T11816] netlink: 5620 bytes leftover after parsing attributes in process `syz.1.1357'. [ 617.633662][T11815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.613969][T11836] rxe_eth0 speed is unknown, defaulting to 1000 [ 620.344839][T11851] netlink: 'syz.9.1364': attribute type 10 has an invalid length. [ 621.605140][T11895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1376'. [ 623.474115][T11921] rxe_eth0 speed is unknown, defaulting to 1000 [ 623.722380][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.722471][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.507117][T11920] netlink: 'syz.8.1385': attribute type 10 has an invalid length. [ 626.264535][T11967] rxe_eth0 speed is unknown, defaulting to 1000 [ 627.695322][T11966] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 628.949647][T11994] netlink: 'syz.7.1402': attribute type 10 has an invalid length. [ 628.968655][T11994] syz_tun: entered promiscuous mode [ 629.008262][T11994] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 631.879063][T12065] netlink: 'syz.7.1420': attribute type 29 has an invalid length. [ 631.887045][T12065] netlink: 'syz.7.1420': attribute type 29 has an invalid length. [ 631.906980][T12065] netlink: 'syz.7.1420': attribute type 29 has an invalid length. [ 632.228580][T12072] fuse: fd is not a fuse device [ 632.412682][T12085] netlink: 'syz.6.1426': attribute type 10 has an invalid length. [ 633.669028][T12094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1428'. [ 634.056460][T12109] fuse: fd is not a fuse device [ 634.291790][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 634.442884][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 634.444176][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 634.468673][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.468702][ T10] usb 5-1: Product: syz [ 634.468720][ T10] usb 5-1: Manufacturer: syz [ 634.468738][ T10] usb 5-1: SerialNumber: syz [ 634.504983][ T10] usb 5-1: config 0 descriptor?? [ 634.943322][ T10] airspy 5-1:0.0: Board ID: 00 [ 634.943343][ T10] airspy 5-1:0.0: Firmware version: [ 636.576966][ T10] airspy 5-1:0.0: usb_control_msg() failed -71 request 10 [ 636.609831][ T10] airspy 5-1:0.0: Registered as swradio24 [ 636.609854][ T10] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 637.582868][ T10] usb 5-1: USB disconnect, device number 6 [ 638.137144][T12165] rxe_eth0 speed is unknown, defaulting to 1000 [ 638.353007][T12161] netlink: 'syz.4.1444': attribute type 10 has an invalid length. [ 638.486751][T12161] syz_tun: entered promiscuous mode [ 638.524539][T12161] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 640.294274][T12191] rxe_eth0 speed is unknown, defaulting to 1000 [ 642.256177][T12230] netlink: 'syz.4.1466': attribute type 10 has an invalid length. [ 643.092967][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1472'. [ 643.782186][T12267] fuse: fd is not a fuse device [ 643.828848][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 645.533067][T12287] netlink: 'syz.6.1485': attribute type 10 has an invalid length. [ 646.231763][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 646.734564][T12321] batman_adv: batadv0: Adding interface: netdevsim0 [ 646.734633][T12321] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.734725][T12321] batman_adv: batadv0: Interface activated: netdevsim0 [ 648.154020][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 648.175497][T12350] netlink: 'syz.4.1503': attribute type 10 has an invalid length. [ 650.317654][T12389] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1513'. [ 650.317682][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1513'. [ 651.219339][T12422] netlink: 'syz.6.1521': attribute type 10 has an invalid length. [ 656.967145][T12496] rxe_eth0 speed is unknown, defaulting to 1000 [ 657.746581][T12500] netlink: 'syz.4.1539': attribute type 10 has an invalid length. [ 658.747357][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 658.875188][T12524] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1544'. [ 660.329551][T12548] fuse: fd is not a fuse device [ 660.453060][ T8996] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 660.606770][ T8996] usb 5-1: Using ep0 maxpacket: 32 [ 660.608444][ T8996] usb 5-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice=4f.fe [ 660.609818][ T8996] usb 5-1: config 5 has an invalid interface number: 96 but max is 0 [ 660.609847][ T8996] usb 5-1: config 5 has no interface number 0 [ 660.609880][ T8996] usb 5-1: config 5 interface 96 has no altsetting 0 [ 660.620192][ T8996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.620221][ T8996] usb 5-1: Product: syz [ 660.620239][ T8996] usb 5-1: Manufacturer: syz [ 660.620256][ T8996] usb 5-1: SerialNumber: syz [ 660.961475][T12565] netlink: 'syz.1.1556': attribute type 10 has an invalid length. [ 661.056919][ T8996] usb 5-1: can't set first interface for hiFace device. [ 661.056952][ T8996] snd-usb-hiface 5-1:5.96: probe with driver snd-usb-hiface failed with error -5 [ 661.085090][ T8996] usb 5-1: USB disconnect, device number 7 [ 663.375375][T12614] netlink: 694 bytes leftover after parsing attributes in process `syz.6.1567'. [ 663.534113][T12618] netlink: 260 bytes leftover after parsing attributes in process `syz.8.1566'. [ 663.636295][T12613] rxe_eth0 speed is unknown, defaulting to 1000 [ 664.859363][T12631] netlink: 'syz.6.1573': attribute type 10 has an invalid length. [ 666.444874][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 668.178048][T12686] rxe_eth0 speed is unknown, defaulting to 1000 [ 668.256966][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1586'. [ 670.879442][T12730] netlink: 'syz.8.1592': attribute type 10 has an invalid length. [ 671.769661][T12754] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1600'. [ 673.940746][T12782] fuse: Bad value for 'fd' [ 675.398138][T12798] netlink: 'syz.8.1610': attribute type 10 has an invalid length. [ 675.421774][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1611'. [ 676.497353][T12837] fuse: Bad value for 'fd' [ 678.999944][T12867] netlink: 'syz.1.1631': attribute type 10 has an invalid length. [ 679.210404][T12875] fuse: fd is not a fuse device [ 681.409074][T12897] fuse: Bad value for 'fd' [ 682.451684][T12914] netlink: 'syz.1.1647': attribute type 10 has an invalid length. [ 684.429344][T12936] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.1653'. [ 685.202126][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.202192][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.299702][T12963] fuse: fd is not a fuse device [ 687.743752][T12968] netlink: 'syz.9.1664': attribute type 10 has an invalid length. [ 691.166166][T13010] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1672'. [ 692.689546][T13024] fuse: fd is not a fuse device [ 693.133434][T13040] netlink: 'syz.9.1679': attribute type 10 has an invalid length. [ 693.593769][T13060] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1684'. [ 697.468101][T13107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1701'. [ 697.490826][T13104] loop4: detected capacity change from 0 to 512 [ 699.546746][T13122] netlink: 'syz.6.1703': attribute type 10 has an invalid length. [ 699.615635][T13131] loop4: detected capacity change from 0 to 512 [ 699.655174][T13131] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 699.725253][T13131] EXT4-fs warning (device loop4): ext4_enable_quotas:7314: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 699.726340][T13131] EXT4-fs (loop4): mount failed [ 699.917791][T13131] loop4: detected capacity change from 0 to 512 [ 702.962232][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 703.115211][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 703.117959][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 703.117988][ T10] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 703.118011][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 703.118059][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 703.129970][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 703.129999][ T10] usb 5-1: Product: syz [ 703.130018][ T10] usb 5-1: Manufacturer: syz [ 703.157611][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 703.157642][ T10] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 703.579032][T13186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.621318][T13186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.800170][T13186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.037713][T13186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.401398][T13207] netlink: 'syz.1.1723': attribute type 10 has an invalid length. [ 707.552274][ T10] usb 5-1: USB disconnect, device number 8 [ 708.050784][T13274] netlink: 'syz.4.1740': attribute type 10 has an invalid length. [ 710.529878][T13295] tipc: Started in network mode [ 710.529903][T13295] tipc: Node identity 4, cluster identity 4711 [ 710.529919][T13295] tipc: Node number set to 4 [ 711.122647][T13305] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 713.020717][T13316] netlink: 'syz.1.1756': attribute type 10 has an invalid length. [ 716.151837][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 722.130512][ T5625] Bluetooth: hci3: hcon ffff888037128000 sent 1 < count 3 [ 722.130561][ T5625] Bluetooth: hci3: hcon ffff888037128000 sent 0 < count 65535 [ 723.580343][T13424] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 728.357296][T13464] loop4: detected capacity change from 0 to 2048 [ 728.361887][T13464] udf: Unknown parameter 'ÿÿÿÿÿÿ' [ 732.555575][T13517] xt_TCPMSS: Only works on TCP SYN packets [ 734.612721][T13533] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 735.331809][ T8996] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 735.545521][ T8996] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 735.589523][ T8996] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 735.591892][ T8996] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 735.756511][ T8996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.757094][ T8996] usb 5-1: Product: syz [ 735.757314][ T8996] usb 5-1: Manufacturer: syz [ 735.757627][ T8996] usb 5-1: SerialNumber: syz [ 735.958854][ T8996] usb 5-1: NFC: intf ffff88802c0b6000 id ffffffff908615a0 [ 735.994794][ T8996] nfcmrvl 5-1:1.0: NFC: registered with nci successfully [ 736.193376][ T8996] usb 5-1: USB disconnect, device number 9 [ 736.204549][ T8996] usb 5-1: NFC: intf ffff88802c0b6000 [ 738.665574][T13588] netlink: 1688 bytes leftover after parsing attributes in process `syz.9.1841'. [ 741.517919][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 741.684463][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 741.685788][ T10] usb 5-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice=4f.fe [ 741.686939][ T10] usb 5-1: config 5 has an invalid interface number: 96 but max is 0 [ 741.686966][ T10] usb 5-1: config 5 has no interface number 0 [ 741.686998][ T10] usb 5-1: config 5 interface 96 has no altsetting 0 [ 741.734747][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.734776][ T10] usb 5-1: Product: syz [ 741.734794][ T10] usb 5-1: Manufacturer: syz [ 741.734812][ T10] usb 5-1: SerialNumber: syz [ 742.235379][ T10] usb 5-1: can't set first interface for hiFace device. [ 742.235411][ T10] snd-usb-hiface 5-1:5.96: probe with driver snd-usb-hiface failed with error -5 [ 742.240163][ T10] usb 5-1: USB disconnect, device number 10 [ 742.370646][T13633] xt_TCPMSS: Only works on TCP SYN packets [ 742.968441][T13637] fuse: Bad value for 'fd' [ 743.504850][T13650] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 744.471126][T13656] FAULT_INJECTION: forcing a failure. [ 744.471126][T13656] name failslab, interval 1, probability 0, space 0, times 0 [ 744.471165][T13656] CPU: 1 UID: 0 PID: 13656 Comm: syz.4.1860 Not tainted syzkaller #0 PREEMPT(full) [ 744.471194][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 744.471211][T13656] Call Trace: [ 744.471220][T13656] [ 744.471232][T13656] dump_stack_lvl+0xe8/0x150 [ 744.471278][T13656] should_fail_ex+0x410/0x560 [ 744.471321][T13656] should_failslab+0xa8/0x100 [ 744.471366][T13656] __kmalloc_noprof+0xf9/0x710 [ 744.471400][T13656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.471433][T13656] ? trace_kmalloc+0x2a/0xf0 [ 744.471467][T13656] ? tomoyo_encode+0x2ad/0x570 [ 744.471501][T13656] ? tomoyo_encode+0x2ad/0x570 [ 744.471543][T13656] tomoyo_encode+0x2ad/0x570 [ 744.471584][T13656] tomoyo_realpath_from_path+0x5fa/0x640 [ 744.471634][T13656] tomoyo_check_open_permission+0x229/0x470 [ 744.471665][T13656] ? tomoyo_check_open_permission+0x1d3/0x470 [ 744.471693][T13656] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 744.471723][T13656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.471754][T13656] ? __asan_memset+0x22/0x50 [ 744.471822][T13656] ? mnt_get_write_access+0x66/0x280 [ 744.471859][T13656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.471907][T13656] security_file_open+0xa9/0x240 [ 744.471953][T13656] do_dentry_open+0x495/0x1360 [ 744.472007][T13656] vfs_open_consume+0x4a/0x350 [ 744.472046][T13656] ? path_openat+0x16e1/0x20f0 [ 744.472085][T13656] path_openat+0x16fc/0x20f0 [ 744.472143][T13656] do_file_open+0x23e/0x4a0 [ 744.472185][T13656] ? __pfx_do_file_open+0x10/0x10 [ 744.472233][T13656] ? __pfx_kfree_link+0x10/0x10 [ 744.472275][T13656] ? _raw_spin_unlock+0x28/0x50 [ 744.472305][T13656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.472336][T13656] ? alloc_fd+0x6af/0x760 [ 744.472377][T13656] do_sys_openat2+0x115/0x200 [ 744.472419][T13656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.472451][T13656] ? __se_sys_futex+0x3a8/0x450 [ 744.472493][T13656] ? __pfx_do_sys_openat2+0x10/0x10 [ 744.472543][T13656] ? rcu_is_watching+0x16/0xb0 [ 744.472581][T13656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.472618][T13656] __x64_sys_openat+0x138/0x170 [ 744.472668][T13656] do_syscall_64+0x166/0x520 [ 744.472703][T13656] ? trace_irq_disable+0x3b/0x140 [ 744.472736][T13656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.472770][T13656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.472798][T13656] RIP: 0033:0x7f208e75fd8e [ 744.472822][T13656] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 744.472845][T13656] RSP: 002b:00007f208f6a1ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 744.472878][T13656] RAX: ffffffffffffffda RBX: 00007f208f6a26c0 RCX: 00007f208e75fd8e [ 744.472899][T13656] RDX: 0000000000000002 RSI: 00007f208f6a1f90 RDI: ffffffffffffff9c [ 744.472918][T13656] RBP: 00007f208e836b20 R08: 0000000000000000 R09: 0000000000000000 [ 744.472935][T13656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.472952][T13656] R13: 00007f208ea26038 R14: 00007f208ea25fa0 R15: 00007ffc20ef3838 [ 744.472994][T13656] [ 744.480177][T13656] ERROR: Out of memory at tomoyo_realpath_from_path. [ 747.125627][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.125691][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.096765][ T5625] Bluetooth: hci5: hcon ffff88807f550000 sent 1 < count 3 [ 753.096818][ T5625] Bluetooth: hci5: hcon ffff88807f550000 sent 0 < count 65535 [ 753.338749][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 759.008922][T13792] loop4: detected capacity change from 0 to 64 [ 759.729638][T13792] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 762.379122][T13815] tipc: Started in network mode [ 762.379147][T13815] tipc: Node identity 4, cluster identity 4711 [ 762.379162][T13815] tipc: Node number set to 4 [ 762.498699][T13817] loop4: detected capacity change from 0 to 512 [ 766.963193][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1916'. [ 767.219667][T13866] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1921'. [ 768.197179][T13870] loop4: detected capacity change from 0 to 32768 [ 768.999768][T13870] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 769.026650][T13870] JBD2: Ignoring recovery information on journal [ 769.073639][T13870] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 769.150509][ T30] audit: type=1800 audit(1792774072.062:4): pid=13869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1923" name="file1" dev="loop4" ino=17058 res=0 errno=-22 [ 769.468064][T13869] syz.4.1923 (13869) used greatest stack depth: 17984 bytes left [ 769.575686][T13871] bond2: (slave veth0_to_bond): Releasing backup interface [ 770.505928][T10297] ocfs2: Unmounting device (7,4) on (node local) [ 770.608096][T13875] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 770.911256][T13892] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1928'. [ 775.567277][T13960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1943'. [ 776.816728][T13975] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1946'. [ 780.745723][ T8996] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 781.131987][ T8996] usb 5-1: Using ep0 maxpacket: 8 [ 781.132797][ T8996] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 781.135518][ T8996] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 781.135569][ T8996] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 781.135604][ T8996] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 781.135635][ T8996] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 781.135667][ T8996] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 781.136697][ T8996] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 781.136745][ T8996] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 781.136778][ T8996] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 781.136810][ T8996] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 781.136842][ T8996] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 781.138362][ T8996] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 781.138411][ T8996] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 781.138444][ T8996] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 781.138475][ T8996] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 781.138507][ T8996] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 781.290462][ T8996] usb 5-1: string descriptor 0 read error: -22 [ 781.290605][ T8996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.577158][ T8996] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 781.676350][T14029] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 783.542548][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1963'. [ 785.404862][T14051] xt_TCPMSS: Only works on TCP SYN packets [ 786.302470][ T5765] usb 5-1: USB disconnect, device number 11 [ 786.422225][T14055] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1968'. [ 789.365375][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1978'. [ 789.526612][ T8996] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 790.444901][ T8996] usb 5-1: Using ep0 maxpacket: 8 [ 790.445622][ T8996] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 790.446717][ T8996] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.446765][ T8996] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 790.450933][ T8996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.450960][ T8996] usb 5-1: Product: syz [ 790.450978][ T8996] usb 5-1: Manufacturer: syz [ 790.450996][ T8996] usb 5-1: SerialNumber: syz [ 791.819187][ T8996] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input7 [ 791.838898][ T4972] bcm5974 5-1:1.0: could not read from device [ 791.897907][ T8996] usb 5-1: USB disconnect, device number 12 [ 791.900678][ T4972] bcm5974 5-1:1.0: could not read from device [ 794.245537][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1997'. [ 796.548677][T14175] xt_TCPMSS: Only works on TCP SYN packets [ 797.900140][T14191] xt_TCPMSS: Only works on TCP SYN packets [ 798.672337][ T9330] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 799.093463][ T9330] usb 5-1: Using ep0 maxpacket: 8 [ 799.097455][ T9330] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 799.099624][ T9330] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 799.099674][ T9330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 799.099708][ T9330] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 799.099739][ T9330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 799.099770][ T9330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 799.101398][ T9330] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 799.101517][ T9330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 799.101551][ T9330] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 799.101582][ T9330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 799.101613][ T9330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 799.105618][ T9330] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 799.105667][ T9330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 799.105701][ T9330] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 799.105732][ T9330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 799.105763][ T9330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 799.111334][ T9330] usb 5-1: string descriptor 0 read error: -22 [ 799.112286][ T9330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.377260][ T9330] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 803.048948][ T9332] usb 5-1: USB disconnect, device number 13 [ 804.309454][ T5625] Bluetooth: hci6: hcon ffff88807b8cc000 sent 1 < count 3 [ 804.309502][ T5625] Bluetooth: hci6: hcon ffff88807b8cc000 sent 0 < count 65535 [ 808.404292][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.404358][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.287052][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 812.292551][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 812.294006][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 813.067002][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 813.085686][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 815.076514][T14306] fuse: Bad value for 'fd' [ 815.133999][ T5629] Bluetooth: hci0: command tx timeout [ 817.603553][ T5629] Bluetooth: hci0: command tx timeout [ 817.754038][T14153] bond0: (slave syz_tun): Releasing backup interface [ 817.950330][T14313] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2035'. [ 819.913827][ T5625] Bluetooth: hci0: command tx timeout [ 820.948410][ T3364] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.948454][ T3364] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.008629][ T5625] Bluetooth: hci0: command tx timeout [ 822.048019][ T3364] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.048053][ T3364] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.086001][ T3364] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.086046][ T3364] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.684608][ T3364] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.684654][ T3364] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.720504][T14349] syzkaller0: entered promiscuous mode [ 823.720527][T14349] syzkaller0: entered allmulticast mode [ 824.819188][T14287] rxe_eth0 speed is unknown, defaulting to 1000 [ 824.938201][T14361] fuse: fd is not a fuse device [ 825.156932][T14363] loop4: detected capacity change from 0 to 512 [ 825.583310][ T3364] bridge_slave_1: left allmulticast mode [ 825.583341][ T3364] bridge_slave_1: left promiscuous mode [ 825.583557][ T3364] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.597982][ T3364] bridge_slave_0: left allmulticast mode [ 825.598006][ T3364] bridge_slave_0: left promiscuous mode [ 825.598226][ T3364] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.246489][ T5625] Bluetooth: hci4: hcon ffff8880502dc000 sent 1 < count 3 [ 827.246544][ T5625] Bluetooth: hci4: hcon ffff8880502dc000 sent 0 < count 65535 [ 827.408942][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 827.436959][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 827.449357][ T3364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.464743][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 827.468758][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 827.470372][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 827.500062][ T3364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.503978][ T3364] bond0 (unregistering): Released all slaves [ 827.529084][T14359] rxe_eth0 speed is unknown, defaulting to 1000 [ 827.824393][ T3364] tipc: Left network mode [ 827.827613][ T5282] 8021q: adding VLAN 0 to HW filter on device eth17 [ 829.526859][ T5629] Bluetooth: hci2: command tx timeout [ 831.445719][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2055'. [ 831.593071][ T5629] Bluetooth: hci2: command tx timeout [ 831.917709][T14287] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.921338][T14287] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.942128][T14287] bridge_slave_0: entered allmulticast mode [ 831.951329][T14287] bridge_slave_0: entered promiscuous mode [ 831.985110][T14287] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.985350][T14287] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.985513][T14287] bridge_slave_1: entered allmulticast mode [ 832.000924][T14287] bridge_slave_1: entered promiscuous mode [ 832.389162][T14287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.419733][T14394] rxe_eth0 speed is unknown, defaulting to 1000 [ 832.493081][T14359] bond0: (slave syz_tun): Releasing backup interface [ 832.524487][T14287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.907942][T14287] team0: Port device team_slave_0 added [ 832.928727][T14287] team0: Port device team_slave_1 added [ 833.269376][T14458] fuse: fd is not a fuse device [ 833.318784][ T5282] 8021q: adding VLAN 0 to HW filter on device eth18 [ 833.362311][T14287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.362354][T14287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.362419][T14287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.431983][T14287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.432000][T14287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.432034][T14287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.721795][ T5629] Bluetooth: hci2: command tx timeout [ 834.104699][T14287] hsr_slave_0: entered promiscuous mode [ 834.110147][T14287] hsr_slave_1: entered promiscuous mode [ 834.141800][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 834.305552][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 834.306802][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.583157][ T10] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 834.782406][ T10] usb 5-1: USB disconnect, device number 14 [ 835.321910][T14494] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2069'. [ 835.752513][ T5629] Bluetooth: hci2: command tx timeout [ 836.126053][ T3364] hsr_slave_0: left promiscuous mode [ 836.128582][ T3364] hsr_slave_1: left promiscuous mode [ 836.132433][ T3364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.132692][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.154122][ T3364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.154145][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.243893][ T3364] veth1_macvtap: left promiscuous mode [ 836.243940][ T3364] veth0_macvtap: left promiscuous mode [ 836.244109][ T3364] veth1_vlan: left promiscuous mode [ 836.244181][ T3364] veth0_vlan: left promiscuous mode [ 836.882969][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 837.053370][ T10] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 837.054597][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.054625][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 837.075215][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.075243][ T10] usb 5-1: Product: syz [ 837.075262][ T10] usb 5-1: Manufacturer: syz [ 837.075279][ T10] usb 5-1: SerialNumber: syz [ 837.151406][T14512] fuse: fd is not a fuse device [ 837.322498][ T10] speedtch 5-1:1.0: speedtch_bind: data interface not found! [ 837.322526][ T10] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 837.384716][ T3364] team0 (unregistering): Port device team_slave_1 removed [ 837.402765][ T3364] team0 (unregistering): Port device team_slave_0 removed [ 838.531360][ T5282] 8021q: adding VLAN 0 to HW filter on device eth19 [ 839.631278][T14394] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.638471][T14394] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.638608][T14394] bridge_slave_0: entered allmulticast mode [ 839.661267][ T5627] usb 5-1: USB disconnect, device number 15 [ 839.674167][T14394] bridge_slave_0: entered promiscuous mode [ 839.803320][T14542] fuse: fd is not a fuse device [ 839.836946][T14394] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.837072][T14394] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.837207][T14394] bridge_slave_1: entered allmulticast mode [ 839.849126][T14394] bridge_slave_1: entered promiscuous mode [ 840.180756][T14394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.198457][T14394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.415005][T14394] team0: Port device team_slave_0 added [ 840.416639][ T5282] 8021q: adding VLAN 0 to HW filter on device eth20 [ 840.431138][T14394] team0: Port device team_slave_1 added [ 840.774035][T14394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.774055][T14394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.774085][T14394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.778056][ T3364] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 840.887954][ T3364] batman_adv: batadv0: Removing interface: netdevsim0 [ 841.006171][T14394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.006191][T14394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.006224][T14394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.445126][T14394] hsr_slave_0: entered promiscuous mode [ 842.447657][T14394] hsr_slave_1: entered promiscuous mode [ 842.448426][T14394] debugfs: 'hsr0' already exists in 'hsr' [ 842.448447][T14394] Cannot create hsr debugfs directory [ 842.565567][T14287] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 842.586045][T14287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 842.591744][T14287] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 842.621081][T14287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 842.647006][T14287] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 842.677083][T14287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 842.678098][T14287] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 842.698923][T14287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 843.308828][T14600] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2091'. [ 843.876696][ T3364] bridge_slave_1: left allmulticast mode [ 843.876726][ T3364] bridge_slave_1: left promiscuous mode [ 843.876933][ T3364] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.915596][ T3364] bridge_slave_0: left allmulticast mode [ 843.915621][ T3364] bridge_slave_0: left promiscuous mode [ 843.915826][ T3364] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.208222][T14571] loop4: detected capacity change from 0 to 32768 [ 844.287389][T14571] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 844.309107][T14571] JBD2: Ignoring recovery information on journal [ 844.469222][T14571] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 844.645643][ T3364] bond1 (unregistering): (slave bond0): Releasing active interface [ 844.658244][ T30] audit: type=1800 audit(1792774147.572:5): pid=14571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2088" name="file1" dev="loop4" ino=17058 res=0 errno=-22 [ 844.694945][ T3364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.726247][ T3364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.744198][ T3364] bond0 (unregistering): Released all slaves [ 844.810040][ T3364] bond1 (unregistering): Released all slaves [ 844.890327][ T3364] bond2 (unregistering): Released all slaves [ 845.000575][T10297] ocfs2: Unmounting device (7,4) on (node local) [ 845.028088][T14610] warning: `syz.7.2094' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 847.707303][T14287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.827390][T14287] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.850194][ T804] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.850300][ T804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.913823][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.913934][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.371785][ T9310] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 848.539760][ T9310] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 848.541249][ T9310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.541284][ T9310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.541326][ T9310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.576788][ T9310] usb 5-1: config 0 descriptor?? [ 848.607747][ T3364] hsr_slave_0: left promiscuous mode [ 848.614887][ T3364] hsr_slave_1: left promiscuous mode [ 848.615861][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.624449][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 849.353503][ T9310] usbhid 5-1:0.0: can't add hid device: -71 [ 849.353620][ T9310] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 849.411792][ T9310] usb 5-1: USB disconnect, device number 16 [ 849.653713][ T3364] team0 (unregistering): Port device team_slave_1 removed [ 849.711340][ T3364] team0 (unregistering): Port device team_slave_0 removed [ 851.317677][T14698] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2112'. [ 851.661977][T14394] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 851.883550][T14394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 851.886975][T14394] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 851.948821][T14394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 851.964465][T14394] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 851.995792][T14394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 851.998300][T14394] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 852.053841][T14394] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 852.585740][ T3364] IPVS: stop unused estimator thread 0... [ 852.691593][ T5627] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 852.844124][ T5627] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 852.845240][ T5627] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 852.845269][ T5627] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 852.845293][ T5627] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 852.845342][ T5627] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 852.845374][ T5627] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 852.847006][ T5627] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 852.847026][ T5627] usb 5-1: Product: syz [ 852.847039][ T5627] usb 5-1: Manufacturer: syz [ 852.866404][T14394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.927796][T14394] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.963633][ T5627] cdc_wdm 5-1:1.0: skipping garbage [ 852.963651][ T5627] cdc_wdm 5-1:1.0: skipping garbage [ 852.968869][ T5627] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 852.968885][ T5627] cdc_wdm 5-1:1.0: Unknown control protocol [ 852.994918][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.995024][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.043612][T13763] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.043718][T13763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.183418][T14726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.185886][T14726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.187119][T14726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.189152][T14726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.040862][ T9311] usb 5-1: USB disconnect, device number 17 [ 854.400142][T14287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.228691][T14772] loop4: detected capacity change from 0 to 512 [ 856.058793][T14774] kthread_run failed with err -4 [ 857.357332][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2123'. [ 858.968036][T14813] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2127'. [ 859.156989][T14394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.191381][T14287] veth0_vlan: entered promiscuous mode [ 859.257048][T14287] veth1_vlan: entered promiscuous mode [ 859.479710][T14287] veth0_macvtap: entered promiscuous mode [ 859.492773][T14287] veth1_macvtap: entered promiscuous mode [ 859.521403][T14394] veth0_vlan: entered promiscuous mode [ 859.595720][T14394] veth1_vlan: entered promiscuous mode [ 859.661012][T14287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.719764][T14287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.824059][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.824101][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.824134][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.827191][T14394] veth0_macvtap: entered promiscuous mode [ 859.845326][T14394] veth1_macvtap: entered promiscuous mode [ 861.303248][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.465856][T14394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.557105][T14394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.688047][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.688071][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.874688][ T1041] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.118064][ T6986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.118084][ T6986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.980262][ T3004] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.986032][ T6986] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.987992][ T6986] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.413914][ T6986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.413940][ T6986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.816552][ T5629] Bluetooth: hci0: hcon ffff88807a3bc000 sent 1 < count 3 [ 863.816593][ T5629] Bluetooth: hci0: hcon ffff888039230000 sent 1 < count 406 [ 863.816968][ T5629] Bluetooth: hci0: hcon ffff88807a3bc000 sent 0 < count 65535 [ 863.895638][ T5629] Bluetooth: hci0: hcon ffff888039230000 sent 0 < count 3 [ 863.956459][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.956476][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.501855][T14888] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.502361][T14888] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.364532][T14919] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2150'. [ 867.456686][T14888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 867.483848][T14888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.962406][T14937] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[10297] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[14937] [ 869.433944][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.434008][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.742065][ T3364] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.742123][ T3364] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.742169][ T3364] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.742215][ T3364] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.148633][T14960] loop4: detected capacity change from 0 to 16 [ 870.398942][T14960] erofs (device loop4): mounted with root inode @ nid 36. [ 870.789290][T14960] syz.4.2161: attempt to access beyond end of device [ 870.789290][T14960] loop4: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 870.857183][T14960] syz.4.2161: attempt to access beyond end of device [ 870.857183][T14960] loop4: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 870.881650][ T30] audit: type=1800 audit(1792774173.802:6): pid=14960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2161" name="file1" dev="loop4" ino=86 res=0 errno=-5 [ 873.047015][T14996] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 873.907150][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2173'. [ 873.926829][T15003] hsr_slave_0: left promiscuous mode [ 874.913667][T15003] hsr_slave_1: left promiscuous mode [ 875.717772][T15017] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2174'. [ 876.559308][T15008] loop3: detected capacity change from 0 to 32768 [ 877.494863][T15008] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 877.495313][T15008] (syz.3.2170,15008,1):ocfs2_initialize_super:2225 ERROR: status = -12 [ 877.527670][T15008] (syz.3.2170,15008,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 878.004484][ T5627] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 878.161524][ T5627] usb 6-1: Using ep0 maxpacket: 16 [ 878.162403][ T5627] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 878.169064][ T5627] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.169092][ T5627] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 878.213716][ T5627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.213746][ T5627] usb 6-1: Product: syz [ 878.213766][ T5627] usb 6-1: Manufacturer: syz [ 878.213784][ T5627] usb 6-1: SerialNumber: syz [ 878.264876][ T5627] usb 6-1: 0:2 : does not exist [ 878.500282][ T5627] usb 6-1: USB disconnect, device number 2 [ 878.710122][T15066] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2187'. [ 878.732714][T15066] loop3: detected capacity change from 0 to 512 [ 878.771148][T15066] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 881.241879][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 881.392201][ T10] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 881.399674][ T10] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 881.399702][ T10] usb 5-1: config 1 has no interface number 0 [ 881.406283][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.406311][ T10] usb 5-1: Product: syz [ 881.406330][ T10] usb 5-1: Manufacturer: syz [ 881.406348][ T10] usb 5-1: SerialNumber: syz [ 881.493908][T15100] loop3: detected capacity change from 0 to 2048 [ 881.495831][T15100] udf: Unknown parameter 'ÿÿÿÿÿÿ' [ 881.498412][ T10] usb 5-1: 3:0 : does not exist [ 881.498441][ T10] usb 5-1: 3:0 : does not exist [ 882.776983][T15083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.777846][T15083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.740823][ T10] usb 5-1: USB disconnect, device number 18 [ 883.924822][T15027] udevd[15027]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 884.186573][T15126] netlink: 'syz.3.2207': attribute type 29 has an invalid length. [ 884.271113][T14940] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.291267][ T6137] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.291837][ T6137] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.291944][ T6137] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.330510][T15136] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 886.576166][T15153] loop5: detected capacity change from 0 to 256 [ 886.674941][T15151] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 886.804184][T15153] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x0612b11d, utbl_chksum : 0xe619d30d) [ 886.808808][T15153] exFAT-fs (loop5): IO charset iso;859-7§92¼ø$N•-$°•Þ½òuØ.+ø ä™y ¢¡[ÃÝë…S¡fÐŒIÕµQ´JËnðÕî¹öÆåÞ not found [ 891.761924][ T8996] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 891.912442][ T8996] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 891.913640][ T8996] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 891.913667][ T8996] usb 6-1: config 1 has no interface number 0 [ 891.918922][ T8996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.918950][ T8996] usb 6-1: Product: syz [ 891.918968][ T8996] usb 6-1: Manufacturer: syz [ 891.918987][ T8996] usb 6-1: SerialNumber: syz [ 891.964931][ T8996] usb 6-1: 3:0 : does not exist [ 891.964959][ T8996] usb 6-1: 3:0 : does not exist [ 892.063409][T15204] loop4: detected capacity change from 0 to 128 [ 892.717788][T15188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.917461][T15188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.087179][ T8996] usb 6-1: USB disconnect, device number 3 [ 893.190393][T15217] netlink: 'syz.9.2229': attribute type 29 has an invalid length. [ 893.315026][T15184] udevd[15184]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 893.424820][T15222] UDC core: g1: couldn't find an available UDC or it's busy [ 893.662162][T15232] netlink: 'syz.7.2233': attribute type 29 has an invalid length. [ 893.670054][ T5948] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 893.670136][ T5948] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 893.670201][ T5948] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 893.670244][ T5948] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 894.707397][T15243] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2236'. [ 894.721750][T15243] loop5: detected capacity change from 0 to 512 [ 894.728255][T15243] EXT4-fs (loop5): blocks per group (255) and clusters per group (8192) inconsistent [ 896.182454][ T9330] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 896.372675][T15250] loop4: detected capacity change from 0 to 512 [ 896.515611][ T9330] usb 4-1: Using ep0 maxpacket: 8 [ 896.516311][ T9330] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 896.519949][ T9330] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 896.519986][ T9330] usb 4-1: can't read configurations, error -61 [ 897.572000][ T9330] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 898.294783][T15287] netlink: 762 bytes leftover after parsing attributes in process `syz.8.2250'. [ 898.376943][T15282] loop3: detected capacity change from 0 to 512 [ 898.407412][T15282] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 898.738438][T15282] EXT4-fs warning (device loop3): ext4_enable_quotas:7314: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 899.383682][T15282] EXT4-fs (loop3): mount failed [ 899.547849][T15282] loop3: detected capacity change from 0 to 512 [ 899.648144][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.648173][T15299] FAT-fs (loop3): Filesystem has been set read-only [ 899.648234][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.648866][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.649203][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.649860][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.650181][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.650768][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.651094][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.651775][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.652113][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.652651][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.653158][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.653716][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.654022][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.654587][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.654884][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.655149][T15299] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 899.655466][T15299] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 899.944709][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 900.095659][ T10] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 900.097378][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 900.097440][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 900.097470][ T10] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 900.105784][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.105813][ T10] usb 5-1: Product: syz [ 900.105830][ T10] usb 5-1: Manufacturer: syz [ 900.105849][ T10] usb 5-1: SerialNumber: syz [ 900.110781][ T9330] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 900.509103][ T9330] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 900.510115][ T9330] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 900.510143][ T9330] usb 6-1: config 1 has no interface number 0 [ 900.540022][ T9330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.540052][ T9330] usb 6-1: Product: syz [ 900.540070][ T9330] usb 6-1: Manufacturer: syz [ 900.540089][ T9330] usb 6-1: SerialNumber: syz [ 900.676370][ T9330] usb 6-1: 3:0 : does not exist [ 900.676514][ T9330] usb 6-1: 3:0 : does not exist [ 901.057869][T15303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.076853][T15323] netlink: 'syz.9.2259': attribute type 29 has an invalid length. [ 901.181961][T15303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.265694][ T9330] usb 6-1: USB disconnect, device number 4 [ 901.331985][T15211] udevd[15211]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 901.431295][ T10] speedtch 5-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 901.431367][ T10] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -71! [ 901.434211][ T10] speedtch 5-1:1.0: probe with driver speedtch failed with error -71 [ 901.443849][ T10] speedtch 5-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 901.447692][ T10] speedtch 5-1:1.1: usbatm_usb_probe: bind failed: -71! [ 901.449301][ T10] speedtch 5-1:1.1: probe with driver speedtch failed with error -71 [ 901.454802][ T10] usb 5-1: USB disconnect, device number 19 [ 901.494143][ T5765] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 901.622022][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2261'. [ 901.642432][ T5765] usb 4-1: Using ep0 maxpacket: 8 [ 901.649082][ T5765] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 901.848135][ T5765] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 901.848176][ T5765] usb 4-1: can't read configurations, error -61 [ 901.972268][ T5765] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 902.154731][ T5765] usb 4-1: Using ep0 maxpacket: 8 [ 902.228610][ T5765] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 902.340665][ T5765] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 902.350036][ T5765] usb 4-1: can't read configurations, error -61 [ 902.421007][ T5765] usb usb4-port1: attempt power cycle [ 903.450195][ T5765] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 903.559530][ T5765] usb 4-1: device descriptor read/8, error -71 [ 905.319363][T15391] loop3: detected capacity change from 0 to 4096 [ 905.504382][T15391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 905.504506][T15391] EXT4-fs (loop3): Test dummy encryption mode enabled [ 905.566839][T15391] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 906.100747][T15381] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2275'. [ 907.301544][ T9330] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 907.385085][T15405] netlink: 'syz.7.2281': attribute type 29 has an invalid length. [ 907.451932][ T9330] usb 5-1: Using ep0 maxpacket: 8 [ 907.452633][ T9330] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 907.458156][ T9330] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 907.458194][ T9330] usb 5-1: can't read configurations, error -61 [ 907.549544][T15421] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2284'. [ 907.623104][ T9330] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 907.778551][ T9330] usb 5-1: Using ep0 maxpacket: 8 [ 907.784674][T15426] veth0_to_bridge: entered promiscuous mode [ 907.793620][ T9330] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 907.797861][T15426] macvtap1: entered allmulticast mode [ 907.797881][T15426] veth0_to_bridge: entered allmulticast mode [ 907.824866][ T9330] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 907.824905][ T9330] usb 5-1: can't read configurations, error -61 [ 907.825559][ T9330] usb usb5-port1: attempt power cycle [ 907.836058][T15426] veth0_to_bridge: left allmulticast mode [ 907.836084][T15426] veth0_to_bridge: left promiscuous mode [ 908.211781][ T9330] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 908.234664][ T9330] usb 5-1: Using ep0 maxpacket: 8 [ 908.257415][ T9330] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 908.336786][ T9330] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 908.336940][ T9330] usb 5-1: can't read configurations, error -61 [ 908.654183][ T9330] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 908.739686][ T9330] usb 5-1: Using ep0 maxpacket: 8 [ 908.829252][ T9330] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 908.961236][ T9330] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 908.961379][ T9330] usb 5-1: can't read configurations, error -61 [ 909.083130][ T9330] usb usb5-port1: unable to enumerate USB device [ 910.482645][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 910.565640][T15455] FAULT_INJECTION: forcing a failure. [ 910.565640][T15455] name failslab, interval 1, probability 0, space 0, times 0 [ 910.565678][T15455] CPU: 0 UID: 0 PID: 15455 Comm: syz.4.2293 Not tainted syzkaller #0 PREEMPT(full) [ 910.565709][T15455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 910.565726][T15455] Call Trace: [ 910.565737][T15455] [ 910.565748][T15455] dump_stack_lvl+0xe8/0x150 [ 910.565801][T15455] should_fail_ex+0x410/0x560 [ 910.565846][T15455] should_failslab+0xa8/0x100 [ 910.565893][T15455] __kmalloc_cache_noprof+0x9e/0x600 [ 910.565931][T15455] ? __raw_spin_lock_init+0x45/0x100 [ 910.565973][T15455] ? snd_seq_oss_timer_new+0x51/0x230 [ 910.566012][T15455] ? snd_seq_oss_timer_new+0x51/0x230 [ 910.566052][T15455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.566092][T15455] snd_seq_oss_timer_new+0x51/0x230 [ 910.566134][T15455] snd_seq_oss_open+0x8c8/0xf40 [ 910.566180][T15455] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 910.566259][T15455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.566292][T15455] ? rcu_is_watching+0x16/0xb0 [ 910.566330][T15455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.566363][T15455] ? trace_contention_end+0x3d/0x140 [ 910.566427][T15455] ? __pfx___mutex_lock+0x10/0x10 [ 910.566480][T15455] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 910.566521][T15455] ? __pfx_free_devinfo+0x10/0x10 [ 910.566557][T15455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.566590][T15455] ? do_raw_spin_unlock+0xf5/0x200 [ 910.566637][T15455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.566670][T15455] ? soundcore_open+0x2da/0x490 [ 910.566713][T15455] odev_open+0x67/0xa0 [ 910.566750][T15455] chrdev_open+0x4d9/0x600 [ 910.566794][T15455] ? __pfx_chrdev_open+0x10/0x10 [ 910.566837][T15455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.566869][T15455] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 910.566914][T15455] ? devcgroup_check_permission+0x31/0x8f0 [ 910.566961][T15455] ? __pfx_chrdev_open+0x10/0x10 [ 910.567001][T15455] do_dentry_open+0x80e/0x1360 [ 910.567057][T15455] vfs_open_consume+0x4a/0x350 [ 910.567098][T15455] ? path_openat+0x16e1/0x20f0 [ 910.567137][T15455] path_openat+0x16fc/0x20f0 [ 910.567196][T15455] do_file_open+0x23e/0x4a0 [ 910.567238][T15455] ? __pfx_do_file_open+0x10/0x10 [ 910.567301][T15455] ? _raw_spin_unlock+0x28/0x50 [ 910.567331][T15455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.567364][T15455] ? alloc_fd+0x6af/0x760 [ 910.567407][T15455] do_sys_openat2+0x115/0x200 [ 910.567457][T15455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.567489][T15455] ? __se_sys_futex+0x3a8/0x450 [ 910.567533][T15455] ? __pfx_do_sys_openat2+0x10/0x10 [ 910.567584][T15455] ? rcu_is_watching+0x16/0xb0 [ 910.567622][T15455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 910.567661][T15455] __x64_sys_openat+0x138/0x170 [ 910.567713][T15455] do_syscall_64+0x166/0x520 [ 910.567753][T15455] ? trace_irq_disable+0x3b/0x140 [ 910.567788][T15455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.567824][T15455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.567852][T15455] RIP: 0033:0x7f208e79f559 [ 910.567876][T15455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.567900][T15455] RSP: 002b:00007f208f6a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 910.567929][T15455] RAX: ffffffffffffffda RBX: 00007f208ea25fa0 RCX: 00007f208e79f559 [ 910.567951][T15455] RDX: 0000000000080200 RSI: 0000200000003440 RDI: ffffffffffffff9c [ 910.567971][T15455] RBP: 00007f208e836b20 R08: 0000000000000000 R09: 0000000000000000 [ 910.567989][T15455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.568006][T15455] R13: 00007f208ea26038 R14: 00007f208ea25fa0 R15: 00007ffc20ef3838 [ 910.568049][T15455] [ 910.584425][T15455] ALSA: seq_oss: can't alloc timer [ 910.655000][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 910.675866][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.675901][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.675943][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.697367][ T10] usb 4-1: config 0 descriptor?? [ 911.230311][ T10] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 911.230350][ T10] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 911.230375][ T10] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 911.230401][ T10] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 911.230427][ T10] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 911.230453][ T10] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 911.230480][ T10] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 911.306104][ T10] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 911.650708][T15476] fuse: fd is not a fuse device [ 911.954406][ T10] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 911.954497][ T10] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 911.968496][ T10] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -71 [ 911.991718][ T10] usb 4-1: USB disconnect, device number 9 [ 913.707222][T15525] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2313'. [ 914.550868][T15542] netlink: 'syz.9.2319': attribute type 29 has an invalid length. [ 914.683357][T15547] netlink: 726 bytes leftover after parsing attributes in process `syz.4.2320'. [ 916.175865][ T5627] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 916.341528][ T5627] usb 4-1: Using ep0 maxpacket: 8 [ 916.342241][ T5627] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 916.361037][ T5627] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.361066][ T5627] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 916.377677][ T5627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.377705][ T5627] usb 4-1: Product: syz [ 916.377723][ T5627] usb 4-1: Manufacturer: syz [ 916.377741][ T5627] usb 4-1: SerialNumber: syz [ 917.628264][ T5627] usb 4-1: USB disconnect, device number 10 [ 918.015153][T15600] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2334'. [ 918.037234][T15602] netlink: 726 bytes leftover after parsing attributes in process `syz.4.2335'. [ 919.321496][ T8996] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 919.715228][ T8996] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 919.752601][ T8996] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 919.752632][ T8996] usb 5-1: config 1 has no interface number 0 [ 919.757549][ T8996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.757577][ T8996] usb 5-1: Product: syz [ 919.757606][ T8996] usb 5-1: Manufacturer: syz [ 919.757659][ T8996] usb 5-1: SerialNumber: syz [ 920.325852][ T8996] usb 5-1: 3:0 : does not exist [ 920.325888][ T8996] usb 5-1: 3:0 : does not exist [ 921.405499][T15613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.406135][T15613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.157302][ T8996] usb 5-1: USB disconnect, device number 24 [ 922.441588][T15184] udevd[15184]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 924.389372][T15671] kthread_run failed with err -4 [ 930.873860][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.873965][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.748829][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2377'. [ 935.760256][T15759] vlan2: entered promiscuous mode [ 935.760277][T15759] hsr0: entered promiscuous mode [ 935.760576][T15759] vlan2: entered allmulticast mode [ 935.760592][T15759] hsr0: entered allmulticast mode [ 935.760608][T15759] hsr_slave_0: entered allmulticast mode [ 935.760625][T15759] hsr_slave_1: entered allmulticast mode [ 935.798891][T15761] hsr_slave_0: left promiscuous mode [ 935.817698][T15761] hsr_slave_1: left promiscuous mode [ 936.178241][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2379'. [ 936.755948][T15772] vlan2: entered promiscuous mode [ 936.755976][T15772] hsr0: entered promiscuous mode [ 936.756256][T15772] vlan2: entered allmulticast mode [ 936.756276][T15772] hsr0: entered allmulticast mode [ 936.756292][T15772] hsr_slave_0: entered allmulticast mode [ 936.756313][T15772] hsr_slave_1: entered allmulticast mode [ 936.943121][T15774] hsr_slave_0: left promiscuous mode [ 936.965930][T15774] hsr_slave_1: left promiscuous mode [ 938.476351][ T5629] Bluetooth: hci0: command 0x0406 tx timeout [ 940.620515][T14880] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.620558][T14880] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.620589][T14880] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.620619][T14880] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.050997][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2392'. [ 944.069231][T15844] vlan2: entered promiscuous mode [ 944.069254][T15844] hsr0: entered promiscuous mode [ 944.069515][T15844] vlan2: entered allmulticast mode [ 944.069534][T15844] hsr0: entered allmulticast mode [ 944.069550][T15844] hsr_slave_0: entered allmulticast mode [ 944.069570][T15844] hsr_slave_1: entered allmulticast mode [ 944.130098][T15846] hsr_slave_0: left promiscuous mode [ 944.158007][T15846] hsr_slave_1: left promiscuous mode [ 945.025224][T15874] jffs2: notice: (15874) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 948.655368][T15916] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 949.515797][T15906] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2403'. [ 952.028060][T15952] loop3: detected capacity change from 0 to 512 [ 952.108951][T15952] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 952.109002][T15952] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 952.306186][T15952] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.2413: bad orphan inode 131083 [ 952.306459][T15952] loop3: lost filesystem error report for type 5 error -117 [ 952.326300][T15952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 953.279115][T15959] netlink: 726 bytes leftover after parsing attributes in process `syz.4.2416'. [ 953.755023][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 955.367967][T15974] loop4: detected capacity change from 0 to 512 [ 956.411438][T15974] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 956.411462][T15974] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 956.799417][T15974] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.2419: bad orphan inode 131083 [ 956.799454][T15974] loop4: lost filesystem error report for type 5 error -117 [ 956.801464][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 956.801488][ C1] EXT4-fs (loop4): initial error at time 1792774259: ext4_orphan_get:1429 [ 956.801516][ C1] EXT4-fs (loop4): last error at time 1792774259: ext4_orphan_get:1429 [ 956.814517][T15974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.877586][T15982] syz_tun: left promiscuous mode [ 957.898064][T15982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.952364][T14394] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.977641][T10297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.648811][T16029] netlink: 726 bytes leftover after parsing attributes in process `syz.7.2431'. [ 963.470246][T16056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 964.856348][T16079] netlink: 726 bytes leftover after parsing attributes in process `syz.4.2446'. [ 965.844241][T16089] loop5: detected capacity change from 0 to 8 [ 965.896280][T16089] jffs2: notice: (16089) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 966.200841][T14287] SQUASHFS error: Unable to read directory block [1d0:22] [ 966.210472][T14287] SQUASHFS error: Unable to read directory block [1d0:22] [ 966.350643][T16100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2450'. [ 966.498522][T16102] loop4: detected capacity change from 0 to 512 [ 966.946111][T16102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 966.946850][T16102] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 968.873534][T10297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.122863][T16132] netlink: 726 bytes leftover after parsing attributes in process `syz.9.2460'. [ 969.691116][T16147] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2462'. [ 970.930181][T16170] veth0_to_bridge: entered promiscuous mode [ 970.930400][T16170] macvtap1: entered allmulticast mode [ 970.930419][T16170] veth0_to_bridge: entered allmulticast mode [ 971.011113][T16170] veth0_to_bridge: left allmulticast mode [ 971.011146][T16170] veth0_to_bridge: left promiscuous mode [ 973.024560][T16207] netlink: 726 bytes leftover after parsing attributes in process `syz.9.2477'. [ 973.982866][T16219] loop4: detected capacity change from 0 to 128 [ 975.188513][T16230] loop3: detected capacity change from 0 to 512 [ 976.172237][T16230] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 976.172261][T16230] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 976.683947][T16230] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.2481: bad orphan inode 131083 [ 976.684032][T16230] loop3: lost filesystem error report for type 5 error -117 [ 976.701884][T16230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 977.922041][T14394] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.966265][T16249] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2487'. [ 979.067803][T16258] netlink: 'syz.3.2486': attribute type 29 has an invalid length. [ 981.242165][T16284] netlink: 'syz.4.2491': attribute type 29 has an invalid length. [ 981.820925][T16279] 8021q: adding VLAN 0 to HW filter on device bond3 [ 982.008145][T16286] macvtap1: entered allmulticast mode [ 982.008172][T16286] veth0_to_bridge: entered allmulticast mode [ 982.092416][T16286] veth0_to_bridge: left allmulticast mode [ 982.166468][ T9332] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 982.318922][ T9332] usb 6-1: Using ep0 maxpacket: 32 [ 982.320410][ T9332] usb 6-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice=4f.fe [ 982.329100][ T9332] usb 6-1: config 5 has an invalid interface number: 96 but max is 0 [ 982.329129][ T9332] usb 6-1: config 5 has no interface number 0 [ 982.329162][ T9332] usb 6-1: config 5 interface 96 has no altsetting 0 [ 982.333598][ T9332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.333625][ T9332] usb 6-1: Product: syz [ 982.333643][ T9332] usb 6-1: Manufacturer: syz [ 982.333661][ T9332] usb 6-1: SerialNumber: syz [ 982.342889][ T8183] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.342941][ T8183] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.342985][ T8183] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.356216][ T2962] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.744372][ T9332] usb 6-1: can't set first interface for hiFace device. [ 982.744405][ T9332] snd-usb-hiface 6-1:5.96: probe with driver snd-usb-hiface failed with error -5 [ 982.843155][ T9332] usb 6-1: USB disconnect, device number 5 [ 982.892076][T16321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2501'. [ 983.082224][T16316] rxe_eth0 speed is unknown, defaulting to 1000 [ 983.945743][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10 [ 984.496781][T16353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2508'. [ 986.163195][T16374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 986.250950][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2515'. [ 986.881034][T16394] veth0_to_bridge: entered promiscuous mode [ 986.914368][T16394] macvtap1: entered allmulticast mode [ 986.914395][T16394] veth0_to_bridge: entered allmulticast mode [ 986.975694][T16394] veth0_to_bridge: left allmulticast mode [ 986.975727][T16394] veth0_to_bridge: left promiscuous mode [ 987.323749][T16407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2520'. [ 987.689640][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11 [ 987.904705][T16415] loop5: detected capacity change from 0 to 128 [ 989.196408][T16436] netlink: 726 bytes leftover after parsing attributes in process `syz.8.2531'. [ 992.255558][T16478] veth0_to_bridge: entered promiscuous mode [ 992.285436][T16478] macvtap1: entered allmulticast mode [ 992.285456][T16478] veth0_to_bridge: entered allmulticast mode [ 992.772255][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.772350][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.255936][T16482] loop3: detected capacity change from 0 to 128 [ 993.290000][T16478] veth0_to_bridge: left allmulticast mode [ 993.290032][T16478] veth0_to_bridge: left promiscuous mode [ 994.174888][T16501] netlink: 726 bytes leftover after parsing attributes in process `syz.7.2544'. [ 994.451894][ T9309] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 994.613985][ T9309] usb 6-1: Using ep0 maxpacket: 8 [ 994.617755][ T9309] usb 6-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 994.619128][ T9309] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 994.619176][ T9309] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 994.668326][ T9309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.668358][ T9309] usb 6-1: Product: syz [ 994.668377][ T9309] usb 6-1: Manufacturer: syz [ 994.668395][ T9309] usb 6-1: SerialNumber: syz [ 994.923589][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12 [ 995.283107][ T9309] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input8 [ 995.295967][ T4972] bcm5974 6-1:1.0: could not read from device [ 995.316345][ T4972] bcm5974 6-1:1.0: could not read from device [ 995.340889][ T4972] bcm5974 6-1:1.0: could not read from device [ 995.350608][ T9309] usb 6-1: USB disconnect, device number 6 [ 998.492912][T16563] netlink: 726 bytes leftover after parsing attributes in process `syz.3.2559'. [ 1002.210778][T16612] overlayfs: statfs failed on './file0' [ 1002.277502][T16621] netlink: 726 bytes leftover after parsing attributes in process `syz.4.2577'. [ 1006.444070][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1008.087728][T16676] netlink: 726 bytes leftover after parsing attributes in process `syz.7.2593'. [ 1008.677453][T16682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1011.743287][ T9332] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1012.003420][ T9332] usb 4-1: Using ep0 maxpacket: 8 [ 1012.029950][ T9332] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 1012.114902][ T9332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.116662][ T9332] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1012.334665][ T9332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.334940][ T9332] usb 4-1: Product: syz [ 1012.334961][ T9332] usb 4-1: Manufacturer: syz [ 1012.335762][ T9332] usb 4-1: SerialNumber: syz [ 1012.628659][T16735] loop5: detected capacity change from 0 to 512 [ 1013.991076][T16755] netlink: 726 bytes leftover after parsing attributes in process `syz.8.2609'. [ 1014.109679][T16757] loop5: detected capacity change from 0 to 512 [ 1015.279995][ T9332] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input9 [ 1015.330386][ T4972] bcm5974 4-1:1.0: could not read from device [ 1015.358651][ T9332] usb 4-1: USB disconnect, device number 11 [ 1015.619512][T16770] netlink: 'syz.8.2611': attribute type 29 has an invalid length. [ 1015.628786][ T51] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1015.628842][ T51] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1015.642412][ T51] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1015.642493][ T51] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1016.859924][T16777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1017.317858][T16792] batman_adv: batadv0: Adding interface: netdevsim0 [ 1017.317886][T16792] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.317928][T16792] batman_adv: batadv0: Interface activated: netdevsim0 [ 1019.651519][ T9309] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1019.822516][ T9309] usb 6-1: Using ep0 maxpacket: 8 [ 1019.827930][ T9309] usb 6-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 1019.851421][ T9309] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.851476][ T9309] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1019.884377][ T9309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.884406][ T9309] usb 6-1: Product: syz [ 1019.884425][ T9309] usb 6-1: Manufacturer: syz [ 1019.884443][ T9309] usb 6-1: SerialNumber: syz [ 1020.835656][ T9309] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input10 [ 1020.867048][ T4972] bcm5974 6-1:1.0: could not read from device [ 1020.913422][ T4972] bcm5974 6-1:1.0: could not read from device [ 1020.954007][ T9309] usb 6-1: USB disconnect, device number 7 [ 1021.214988][T16845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1023.834645][T16899] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2642'. [ 1024.002570][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2642'. [ 1025.663176][T16912] overlayfs: failed to clone upperpath [ 1028.863115][T16959] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1031.808990][T16994] rxe_eth0 speed is unknown, defaulting to 1000 [ 1032.179767][T17008] loop4: detected capacity change from 0 to 8 [ 1032.247851][T17009] loop5: detected capacity change from 0 to 512 [ 1032.333970][T17008] jffs2: notice: (17008) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1032.613953][T17014] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1032.614015][T17014] SQUASHFS error: Failed to read block 0x71: -5 [ 1032.614623][T17014] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1032.614660][T17014] SQUASHFS error: Failed to read block 0x71: -5 [ 1032.644062][ T30] audit: type=1800 audit(1792774335.532:7): pid=17014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2671" name="file0" dev="loop4" ino=3 res=0 errno=-5 [ 1032.657772][T17017] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1037.357295][T17059] loop4: detected capacity change from 0 to 128 [ 1046.763759][T17141] loop4: detected capacity change from 0 to 8 [ 1046.800870][T17141] jffs2: notice: (17141) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1046.826545][T17141] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1046.826583][T17141] SQUASHFS error: Failed to read block 0x71: -5 [ 1046.828372][T17141] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1046.828407][T17141] SQUASHFS error: Failed to read block 0x71: -5 [ 1046.829056][ T30] audit: type=1800 audit(1792774349.742:8): pid=17141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2686" name="file0" dev="loop4" ino=3 res=0 errno=-5 [ 1046.855579][T17150] FAULT_INJECTION: forcing a failure. [ 1046.855579][T17150] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1046.855617][T17150] CPU: 1 UID: 0 PID: 17150 Comm: syz.3.2688 Not tainted syzkaller #0 PREEMPT(full) [ 1046.855646][T17150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1046.855662][T17150] Call Trace: [ 1046.855672][T17150] [ 1046.855683][T17150] dump_stack_lvl+0xe8/0x150 [ 1046.855728][T17150] should_fail_ex+0x410/0x560 [ 1046.855772][T17150] get_futex_key+0x893/0x1410 [ 1046.855823][T17150] ? __pfx_get_futex_key+0x10/0x10 [ 1046.855871][T17150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.855903][T17150] ? futex_private_hash+0x319/0x330 [ 1046.855946][T17150] futex_wait_multiple_setup+0x167/0x6c0 [ 1046.855999][T17150] futex_wait_multiple+0xb2/0x430 [ 1046.856041][T17150] __se_sys_futex_waitv+0x20f/0x2c0 [ 1046.856087][T17150] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 1046.856138][T17150] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1046.856168][T17150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.856207][T17150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.856238][T17150] ? __x64_sys_futex_waitv+0x20/0xc0 [ 1046.856283][T17150] do_syscall_64+0x166/0x520 [ 1046.856319][T17150] ? trace_irq_disable+0x3b/0x140 [ 1046.856352][T17150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.856387][T17150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.856414][T17150] RIP: 0033:0x7f35a9f9f559 [ 1046.856437][T17150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.856460][T17150] RSP: 002b:00007f35aaec0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 1046.856487][T17150] RAX: ffffffffffffffda RBX: 00007f35aa225fa0 RCX: 00007f35a9f9f559 [ 1046.856507][T17150] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001b80 [ 1046.856525][T17150] RBP: 00007f35aa036b20 R08: 0000000000000001 R09: 0000000000000000 [ 1046.856542][T17150] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 1046.856560][T17150] R13: 00007f35aa226038 R14: 00007f35aa225fa0 R15: 00007ffc641802e8 [ 1046.856601][T17150] [ 1047.897896][T17148] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1047.897925][T17148] block device autoloading is deprecated and will be removed. [ 1050.094116][T17207] loop4: detected capacity change from 0 to 8 [ 1050.123826][T17207] jffs2: notice: (17207) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1050.130222][T17207] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1050.130259][T17207] SQUASHFS error: Failed to read block 0x71: -5 [ 1050.130409][T17207] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1050.130441][T17207] SQUASHFS error: Failed to read block 0x71: -5 [ 1050.130674][ T30] audit: type=1800 audit(1792774353.042:9): pid=17207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2707" name="file0" dev="loop4" ino=3 res=0 errno=-5 [ 1050.528880][T17220] vlan2: entered promiscuous mode [ 1050.528907][T17220] hsr0: entered promiscuous mode [ 1050.529179][T17220] vlan2: entered allmulticast mode [ 1050.529198][T17220] hsr0: entered allmulticast mode [ 1050.529212][T17220] hsr_slave_0: entered allmulticast mode [ 1050.529230][T17220] hsr_slave_1: entered allmulticast mode [ 1050.536974][T17220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2714'. [ 1050.593912][T17220] hsr_slave_0: left promiscuous mode [ 1050.595224][T17220] hsr_slave_1: left promiscuous mode [ 1050.918017][T17229] loop5: detected capacity change from 0 to 512 [ 1051.209485][T17235] loop4: detected capacity change from 0 to 512 [ 1051.907830][T17250] loop3: detected capacity change from 0 to 8 [ 1051.962643][T17250] jffs2: notice: (17250) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1052.001296][T17250] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1052.034349][T17250] SQUASHFS error: Failed to read block 0x71: -5 [ 1052.034621][T17250] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1052.034656][T17250] SQUASHFS error: Failed to read block 0x71: -5 [ 1052.038266][ T30] audit: type=1800 audit(1792774354.952:10): pid=17250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2727" name="file0" dev="loop3" ino=3 res=0 errno=-5 [ 1053.730778][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2737'. [ 1053.754845][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.754912][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.789827][T17284] fuse: fd is not a fuse device [ 1053.796946][T17284] overlayfs: failed to resolve './cgroup': -2 [ 1053.890632][T17289] loop3: detected capacity change from 0 to 512 [ 1053.920429][T17288] loop5: detected capacity change from 0 to 512 [ 1054.566901][T17308] loop3: detected capacity change from 0 to 512 [ 1054.568637][T17308] vfat: Unknown parameter 'ÿÿÿÿÿÿ' [ 1054.802165][T17310] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2751'. [ 1054.806731][T17310] bridge_slave_1: left allmulticast mode [ 1054.806760][T17310] bridge_slave_1: left promiscuous mode [ 1054.807007][T17310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.850260][T17310] bridge_slave_0: left allmulticast mode [ 1054.850289][T17310] bridge_slave_0: left promiscuous mode [ 1054.850533][T17310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.093240][T17314] FAULT_INJECTION: forcing a failure. [ 1055.093240][T17314] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.093310][T17314] CPU: 1 UID: 0 PID: 17314 Comm: syz.5.2750 Not tainted syzkaller #0 PREEMPT(full) [ 1055.093341][T17314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1055.093362][T17314] Call Trace: [ 1055.093372][T17314] [ 1055.093384][T17314] dump_stack_lvl+0xe8/0x150 [ 1055.093432][T17314] should_fail_ex+0x410/0x560 [ 1055.093475][T17314] should_failslab+0xa8/0x100 [ 1055.093517][T17314] ? taskstats_exit+0x19e/0xe10 [ 1055.093548][T17314] kmem_cache_alloc_noprof+0x9c/0x600 [ 1055.093582][T17314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.093616][T17314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.093647][T17314] ? taskstats_exit+0x19e/0xe10 [ 1055.093686][T17314] taskstats_exit+0x19e/0xe10 [ 1055.093715][T17314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.093753][T17314] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1055.093797][T17314] ? __pfx_taskstats_exit+0x10/0x10 [ 1055.093830][T17314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.093868][T17314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.093904][T17314] ? _raw_spin_unlock_irq+0x23/0x50 [ 1055.093941][T17314] do_exit+0x688/0x2360 [ 1055.093983][T17314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.094025][T17314] ? __pfx_do_exit+0x10/0x10 [ 1055.094077][T17314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.094108][T17314] ? preempt_schedule_common+0x7f/0xd0 [ 1055.094147][T17314] do_group_exit+0x22d/0x2f0 [ 1055.094195][T17314] get_signal+0x1216/0x12c0 [ 1055.094254][T17314] arch_do_signal_or_restart+0xbb/0x860 [ 1055.094302][T17314] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1055.094369][T17314] exit_to_user_mode_loop+0x10e/0x770 [ 1055.094402][T17314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.094433][T17314] ? rcu_is_watching+0x16/0xb0 [ 1055.094475][T17314] do_syscall_64+0x328/0x520 [ 1055.094512][T17314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.094539][T17314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.094577][T17314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.094605][T17314] RIP: 0033:0x7f9d4939f559 [ 1055.094628][T17314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.094651][T17314] RSP: 002b:00007f9d4a3030e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1055.094679][T17314] RAX: fffffffffffffe00 RBX: 00007f9d49625fa8 RCX: 00007f9d4939f559 [ 1055.094700][T17314] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9d49625fa8 [ 1055.094717][T17314] RBP: 00007f9d49625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1055.094735][T17314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.094751][T17314] R13: 00007f9d49626038 R14: 00007ffe8b6ee330 R15: 00007ffe8b6ee418 [ 1055.094793][T17314] getty: ttyS0: read error: Resource temporarily unavailable [ 1059.644321][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2779'. [ 1059.914713][T17398] ip6gretap1: entered promiscuous mode [ 1060.372800][T17407] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2787'. [ 1061.844349][T17426] netlink: 'syz.3.2793': attribute type 29 has an invalid length. [ 1063.176647][T17439] loop5: detected capacity change from 0 to 512 [ 1064.523341][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2805'. [ 1064.525428][T17456] hsr_slave_0: left promiscuous mode [ 1064.527515][T17456] hsr_slave_1: left promiscuous mode [ 1066.797458][T17482] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1066.851757][T17484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2813'. [ 1066.918805][T17486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2813'. [ 1067.067465][T17491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2818'. [ 1067.067555][T17491] bridge_slave_1: left allmulticast mode [ 1067.067578][T17491] bridge_slave_1: left promiscuous mode [ 1067.067817][T17491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.328677][T17491] bridge_slave_0: left allmulticast mode [ 1067.328702][T17491] bridge_slave_0: left promiscuous mode [ 1067.328893][T17491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.051063][T17542] loop4: detected capacity change from 0 to 512 [ 1072.478940][T17553] rxe_eth0 speed is unknown, defaulting to 1000 [ 1072.692887][T17560] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 1072.692992][T17560] batman_adv: batadv0: Removing interface: netdevsim0 [ 1073.705866][T17562] loop4: detected capacity change from 0 to 512 [ 1076.042582][T17584] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2846'. [ 1076.107775][T17584] bridge_slave_1: left allmulticast mode [ 1076.107809][T17584] bridge_slave_1: left promiscuous mode [ 1076.108059][T17584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.134517][T17584] bridge_slave_0: left allmulticast mode [ 1076.134543][T17584] bridge_slave_0: left promiscuous mode [ 1076.134731][T17584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.499170][T17601] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2851'. [ 1080.100747][T17611] loop5: detected capacity change from 0 to 512 [ 1082.330768][T17638] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2865'. [ 1083.158295][T17650] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 1083.173018][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2866'. [ 1083.173102][T17648] bridge_slave_1: left allmulticast mode [ 1083.173124][T17648] bridge_slave_1: left promiscuous mode [ 1083.173347][T17648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.260286][T17648] bridge_slave_0: left allmulticast mode [ 1083.260311][T17648] bridge_slave_0: left promiscuous mode [ 1083.260500][T17648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.347003][T17657] netlink: 'syz.9.2871': attribute type 29 has an invalid length. [ 1083.458636][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2870'. [ 1083.529294][T17660] bridge_slave_1: left allmulticast mode [ 1083.529315][T17660] bridge_slave_1: left promiscuous mode [ 1083.529483][T17660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.590477][T17660] bridge_slave_0: left allmulticast mode [ 1083.590497][T17660] bridge_slave_0: left promiscuous mode [ 1083.590656][T17660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.583598][T17689] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2881'. [ 1086.350227][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2884'. [ 1089.329500][T17732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1089.451265][T17737] overlayfs: failed to resolve './cgroup': -2 [ 1089.510295][T17739] fuse: Bad value for 'fd' [ 1089.708081][T17752] netlink: 'syz.3.2898': attribute type 10 has an invalid length. [ 1089.708189][T17752] syz_tun: entered promiscuous mode [ 1089.715228][T17752] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1090.816436][T17769] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1091.117211][T17777] loop3: detected capacity change from 0 to 512 [ 1091.409251][T17769] ------------[ cut here ]------------ [ 1091.409269][T17769] 1 [ 1091.409278][T17769] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x425/0x5a0, CPU#1: syz.5.2902/17769 [ 1091.430255][T17769] Modules linked in: [ 1091.434373][T17769] CPU: 1 UID: 0 PID: 17769 Comm: syz.5.2902 Not tainted syzkaller #0 PREEMPT(full) [ 1091.444278][T17769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1091.454400][T17769] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0 [ 1091.461011][T17769] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 62 fd 3a 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 7c 97 56 0f 67 48 0f b9 3a e9 68 [ 1091.481160][T17769] RSP: 0018:ffffc90006187540 EFLAGS: 00010246 [ 1091.489141][T17769] RAX: ffffc90006187500 RBX: 1ffff92000c30eac RCX: 0000000000000000 [ 1091.497398][T17769] RDX: 0000000000000028 RSI: 0000000000000034 RDI: ffffc900061875a8 [ 1091.506090][T17769] RBP: ffffc90006187630 R08: ffffc900061875a7 R09: ffffc90006187580 [ 1091.515162][T17769] R10: dffffc0000000000 R11: fffff52000c30eb5 R12: 0000000000000000 [ 1091.523793][T17769] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000 [ 1091.532733][T17769] FS: 00007f9d4a3036c0(0000) GS:ffff888123b52000(0000) knlGS:0000000000000000 [ 1091.541803][T17769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1091.548408][T17769] CR2: 00007f30aaa88210 CR3: 0000000074cb1000 CR4: 0000000000350ef0 [ 1091.556425][T17769] Call Trace: [ 1091.559691][T17769] [ 1091.563174][T17769] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1091.569508][T17769] ? __pfx_policy_nodemask+0x10/0x10 [ 1091.574847][T17769] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 1091.580836][T17769] alloc_pages_mpol+0x21e/0x390 [ 1091.585766][T17769] ? setup_conf+0xc15/0x2ad0 [ 1091.590366][T17769] ___kmalloc_large_node+0x4f/0x120 [ 1091.596976][T17769] __kmalloc_large_node_noprof+0x18/0x90 [ 1091.602674][T17769] __kmalloc_noprof+0x3f6/0x710 [ 1091.607518][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1091.613191][T17769] ? __raw_spin_lock_init+0x45/0x100 [ 1091.619147][T17769] ? setup_conf+0xc15/0x2ad0 [ 1091.624716][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1091.630351][T17769] setup_conf+0xc15/0x2ad0 [ 1091.634822][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1091.640461][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1091.646134][T17769] ? __pfx_setup_conf+0x10/0x10 [ 1091.650993][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1091.657201][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1091.662924][T17769] raid5_run+0x8cc/0x2560 [ 1091.667260][T17769] ? _raw_spin_unlock+0x28/0x50 [ 1091.672319][T17769] ? get_pers+0x22b/0x2e0 [ 1091.676646][T17769] ? __pfx_get_pers+0x10/0x10 [ 1091.681930][T17769] md_run+0xc3d/0x1cd0 [ 1091.686017][T17769] ? __pfx_md_run+0x10/0x10 [ 1091.690530][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1091.696269][T17769] ? set_disk_ro+0x1c3/0x220 [ 1091.700887][T17769] ? __pfx_set_disk_ro+0x10/0x10 [ 1091.705903][T17769] do_md_run+0x35/0x720 [ 1091.710071][T17769] array_state_store+0x958/0xe90 [ 1091.715573][T17769] md_attr_store+0x3b7/0x640 [ 1091.720807][T17769] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1091.726560][T17769] kernfs_fop_write_iter+0x3a4/0x540 [ 1091.731878][T17769] vfs_write+0x612/0xba0 [ 1091.736128][T17769] ? __pfx_vfs_write+0x10/0x10 [ 1091.740910][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1091.747071][T17769] ? __fget_files+0x3a2/0x420 [ 1091.751811][T17769] ? __fget_files+0x2a/0x420 [ 1091.756407][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1091.762092][T17769] ? fdget+0x1ac/0x250 [ 1091.766157][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1091.772316][T17769] ksys_write+0x150/0x270 [ 1091.776646][T17769] ? __pfx_ksys_write+0x10/0x10 [ 1091.781559][T17769] do_syscall_64+0x166/0x520 [ 1091.786163][T17769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.792292][T17769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.798172][T17769] RIP: 0033:0x7f9d4939f559 [ 1091.803143][T17769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.823465][T17769] RSP: 002b:00007f9d4a303028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1091.832970][T17769] RAX: ffffffffffffffda RBX: 00007f9d49625fa0 RCX: 00007f9d4939f559 [ 1091.840943][T17769] RDX: 0000000000000009 RSI: 0000200000000640 RDI: 0000000000000007 [ 1091.848946][T17769] RBP: 00007f9d49436b20 R08: 0000000000000000 R09: 0000000000000000 [ 1091.856957][T17769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1091.865444][T17769] R13: 00007f9d49626038 R14: 00007f9d49625fa0 R15: 00007ffe8b6ee418 [ 1091.873472][T17769] [ 1091.876482][T17769] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1091.883745][T17769] CPU: 1 UID: 0 PID: 17769 Comm: syz.5.2902 Not tainted syzkaller #0 PREEMPT(full) [ 1091.893098][T17769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1091.903154][T17769] Call Trace: [ 1091.906417][T17769] [ 1091.909328][T17769] vpanic+0x56d/0xa60 [ 1091.913314][T17769] ? __pfx__printk+0x10/0x10 [ 1091.917893][T17769] ? __pfx_vpanic+0x10/0x10 [ 1091.922389][T17769] ? is_bpf_text_address+0x292/0x2b0 [ 1091.927667][T17769] ? is_bpf_text_address+0x26/0x2b0 [ 1091.932869][T17769] panic+0xc5/0xd0 [ 1091.936587][T17769] ? __pfx_panic+0x10/0x10 [ 1091.941012][T17769] __warn+0x315/0x4c0 [ 1091.944991][T17769] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 1091.950972][T17769] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 1091.956949][T17769] __report_bug+0x276/0x570 [ 1091.961452][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1091.967080][T17769] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 1091.973059][T17769] ? __pfx___report_bug+0x10/0x10 [ 1091.978078][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1091.983718][T17769] ? __page_table_check_zero+0x3c3/0x430 [ 1091.989349][T17769] ? __page_table_check_zero+0x6c/0x430 [ 1091.994906][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.000544][T17769] ? prep_compound_page+0x351/0x560 [ 1092.005741][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.011367][T17769] ? get_page_from_freelist+0x2221/0x2280 [ 1092.017085][T17769] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 1092.023060][T17769] report_bug+0x16b/0x220 [ 1092.027389][T17769] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 1092.033367][T17769] ? __alloc_frozen_pages_noprof+0x427/0x5a0 [ 1092.039345][T17769] handle_bug+0x9c/0x200 [ 1092.043587][T17769] exc_invalid_op+0x1a/0x50 [ 1092.048090][T17769] asm_exc_invalid_op+0x1a/0x20 [ 1092.052922][T17769] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0 [ 1092.059500][T17769] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 62 fd 3a 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 7c 97 56 0f 67 48 0f b9 3a e9 68 [ 1092.079084][T17769] RSP: 0018:ffffc90006187540 EFLAGS: 00010246 [ 1092.085133][T17769] RAX: ffffc90006187500 RBX: 1ffff92000c30eac RCX: 0000000000000000 [ 1092.093092][T17769] RDX: 0000000000000028 RSI: 0000000000000034 RDI: ffffc900061875a8 [ 1092.101048][T17769] RBP: ffffc90006187630 R08: ffffc900061875a7 R09: ffffc90006187580 [ 1092.109003][T17769] R10: dffffc0000000000 R11: fffff52000c30eb5 R12: 0000000000000000 [ 1092.116963][T17769] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000 [ 1092.124942][T17769] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1092.131271][T17769] ? __pfx_policy_nodemask+0x10/0x10 [ 1092.136559][T17769] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 1092.142547][T17769] alloc_pages_mpol+0x21e/0x390 [ 1092.147400][T17769] ? setup_conf+0xc15/0x2ad0 [ 1092.151991][T17769] ___kmalloc_large_node+0x4f/0x120 [ 1092.157186][T17769] __kmalloc_large_node_noprof+0x18/0x90 [ 1092.162813][T17769] __kmalloc_noprof+0x3f6/0x710 [ 1092.167660][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.173298][T17769] ? __raw_spin_lock_init+0x45/0x100 [ 1092.178583][T17769] ? setup_conf+0xc15/0x2ad0 [ 1092.183174][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.188802][T17769] setup_conf+0xc15/0x2ad0 [ 1092.193228][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.198853][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.204474][T17769] ? __pfx_setup_conf+0x10/0x10 [ 1092.209320][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.214940][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.220564][T17769] raid5_run+0x8cc/0x2560 [ 1092.224884][T17769] ? _raw_spin_unlock+0x28/0x50 [ 1092.229718][T17769] ? get_pers+0x22b/0x2e0 [ 1092.234046][T17769] ? __pfx_get_pers+0x10/0x10 [ 1092.238727][T17769] md_run+0xc3d/0x1cd0 [ 1092.242799][T17769] ? __pfx_md_run+0x10/0x10 [ 1092.247296][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.252910][T17769] ? set_disk_ro+0x1c3/0x220 [ 1092.257492][T17769] ? __pfx_set_disk_ro+0x10/0x10 [ 1092.262432][T17769] do_md_run+0x35/0x720 [ 1092.266570][T17769] array_state_store+0x958/0xe90 [ 1092.271506][T17769] md_attr_store+0x3b7/0x640 [ 1092.276090][T17769] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1092.281269][T17769] kernfs_fop_write_iter+0x3a4/0x540 [ 1092.286542][T17769] vfs_write+0x612/0xba0 [ 1092.290778][T17769] ? __pfx_vfs_write+0x10/0x10 [ 1092.295528][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.301143][T17769] ? __fget_files+0x3a2/0x420 [ 1092.305800][T17769] ? __fget_files+0x2a/0x420 [ 1092.310401][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.316018][T17769] ? fdget+0x1ac/0x250 [ 1092.320072][T17769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.325690][T17769] ksys_write+0x150/0x270 [ 1092.330008][T17769] ? __pfx_ksys_write+0x10/0x10 [ 1092.334862][T17769] do_syscall_64+0x166/0x520 [ 1092.339443][T17769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.345494][T17769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.351374][T17769] RIP: 0033:0x7f9d4939f559 [ 1092.355782][T17769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.375372][T17769] RSP: 002b:00007f9d4a303028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1092.383774][T17769] RAX: ffffffffffffffda RBX: 00007f9d49625fa0 RCX: 00007f9d4939f559 [ 1092.391747][T17769] RDX: 0000000000000009 RSI: 0000200000000640 RDI: 0000000000000007 [ 1092.399719][T17769] RBP: 00007f9d49436b20 R08: 0000000000000000 R09: 0000000000000000 [ 1092.407671][T17769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.415625][T17769] R13: 00007f9d49626038 R14: 00007f9d49625fa0 R15: 00007ffe8b6ee418 [ 1092.424406][T17769] [ 1092.427639][T17769] Kernel Offset: disabled [ 1092.431966][T17769] Rebooting in 86400 seconds..