last executing test programs: 11.977392767s ago: executing program 1 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)) 8.897408956s ago: executing program 2 (id=603): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000240)) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe0}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x29, 0x200000e}}], 0x1c, 0x2400e044}, 0x6) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x5, 0x0, 0x0, r1}) 8.832983909s ago: executing program 1 (id=606): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}, 0x1, 0x0, 0x0, 0x200408c1}, 0x0) 7.797819078s ago: executing program 5 (id=607): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) recvmmsg(r0, &(0x7f0000003740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=""/16, 0x10}, 0x805}], 0x1, 0x45833af92e4b39ff, 0x0) 6.941015348s ago: executing program 2 (id=610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x4}]}}}]}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 6.849857053s ago: executing program 1 (id=611): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e65"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0xd) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x810, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r5, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0xf36, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r8, r9, 0x3f5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0x0, r7, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0x5, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0x2, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r8, 0x0, 0x1, 0xfffffdff}}}}, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) close_range(r5, r6, 0x0) write$binfmt_format(r10, &(0x7f0000000040)='0\x00', 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 5.444926709s ago: executing program 2 (id=614): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x40040c0, 0x0, 0x0) listen(r0, 0x101) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000980)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="15dbcab215ec517d68db6e900fcccc03c4be8ee8d8359e6b6f8f59312786d2762c4f61d0310a6fa3aa33708bac50d9d3c7b5a2e28222f6a3cabef2fc1ddb457c295648ef85791155e21e5f92fc43fec152950b43b5a81490ad3a855f49e446fb117dfce2b7", 0x65}, {&(0x7f0000000500)="f30aeee59745205d312fed1f785e4ece19e3971390ea8b762a0f2e373903d251ed2c0ff48df59e55b35c3c2006d169a450231f45bbb0eb890eba8a0b1a97d563b4e977b787cefdc06ee0f824ec58846507c9682050fbc783610909edaf724d77e35e93a80f77a84aed745cf84ac2ed81ad9b158ec1fdaeb35bfe79bb7f1e358849adeb8ef36444cc3f17237704c8f22263d29580f1ded0507dfc17ca228a2609f2f1e6fdc61319914dce52d5e6a9bc3a0d5aba00a8b00473962b6cc33ed165fe19b148e2988a17dfb3b8a146", 0xcc}], 0x2, 0x0, 0x0, 0xa614ce64f59afc28}], 0x1, 0x800) 5.273680064s ago: executing program 0 (id=615): syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./file1\x00', 0x190864, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x323020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file1\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xc0032, 0x0) 4.987195114s ago: executing program 5 (id=616): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)="0f11619352e5ed3bc44aa75ed83863176523cfa526d68f7d964a912887d930aa63fc2cb6a826803c00d570f971a1d95ec7bcc2be4bf94f61d922a82521f4ca94e8139cdfdb19fb68297be93490c18f33e8054771ff87b03e63701bb0e70866e9427c3589c6b65e82af60055dc95327c2850a6feac55083523ac4119e5fd3521d76d44bf88c561d6f100c01cda73221ef92d45a9be1827f46cc4e158f381c651d2b1b0e30c901dd979a7eebad7eef2569dc4d4dc7f0370269d9ffab30f6ef4f9bedbc5c31186b1e6d716069892ce69569c947606c65a3b26102b56c2fec5723714463ff21da7787701e0b3c42e5fdb5787b01", 0xf2) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x100000, 0x1, 0x4000003, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES64=r3], 0x30}, 0x1, 0x0, 0x0, 0x42812}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x0, 0x43, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xff, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) close(r2) 4.763318666s ago: executing program 1 (id=618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)) 4.713012288s ago: executing program 4 (id=619): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000100)="c1df0600000200000000000000a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.490895547s ago: executing program 3 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3.224756575s ago: executing program 2 (id=621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe8000"/51], 0x64) 3.104840167s ago: executing program 0 (id=622): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.046997635s ago: executing program 5 (id=623): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000240)) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe0}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x29, 0x200000e}}], 0x1c, 0x2400e044}, 0x6) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x5, 0x0, 0x0, r1}) 2.96556105s ago: executing program 4 (id=624): syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2d9, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x80, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 2.726173254s ago: executing program 3 (id=625): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x68902, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') epoll_create1(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.708540501s ago: executing program 3 (id=626): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000380)="88", 0x1) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x50, 0x8001}, 0x4000) 2.650022093s ago: executing program 3 (id=627): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) 2.578925828s ago: executing program 3 (id=628): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}, 0x1, 0x0, 0x0, 0x200408c1}, 0x0) 2.074601324s ago: executing program 4 (id=629): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff97ffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = memfd_create(&(0x7f0000000280)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.610291615s ago: executing program 5 (id=630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r2, &(0x7f0000000000), 0x0}, 0x20) 1.519309915s ago: executing program 4 (id=631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.372459817s ago: executing program 0 (id=632): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc88", 0x9d}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b3648cb51d902fcd1b342c28ea583d0c1bf65a670b2911e63cdc6d7ed06f73cfff3675832fce4151730f7ef2c8becc88720661c5013e176dca9141e3db9acc3293f66963645623733b0f3b11aec36f59f89b36e0236a31d63", 0x90}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3ed294ef", 0x73}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd85057", 0x9c}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f5898d64dfb232a5ed4b5e33d2fc3d4625f96ea7e33efc27bacf87905e1fa8220799ffd2e29c67f48e620a307ed4adb8877506211626dedb8faef37535e9ae3b631078ca2f380a3389ca59c8aa73a27651d4a56ac19950c4bd9d149dbb783b01ce1d8ea832b73847494cf", 0xe3}, {&(0x7f0000000b40)="abf5afe05d4f96614c55e2f4df6e139dbd36b34c6a2b15fd05000e53386f5afad3466fe4dc987d0d6f43b83de758521a3df4da6263843c6c3c449953489752d7d0dfc0a307b6413fb553528a04d888cb07cfb8b4698d47ab8d1627b4c6401e0ee5fdb4dcdbd98b78a17e8aa80d2e042f76dd6b22de5542bd5bdde2ce3e0878fe706cd0b6bcda", 0x86}, {&(0x7f0000000c00)="59a6ccfde72fa606722d721aada8234cd925b0c5b4b492432d79c736d25b702feb8b26ebb83614", 0x27}, {&(0x7f0000000c80)="9f9c29e5e85c1e9d55fbfaffee3d448faeb857fcc0f0036525836ae153f155331714de07483696ffacc1906cfad346b7cf08529f396b2afe8db4899c02bd3c", 0x3f}], 0x6, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8000000000000000000"], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320", 0x50}, {&(0x7f0000000400)="7f", 0x1}], 0x2) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a916df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e64070aad6ec7f7c7c973d55a33eca3cc4245bf488a497ac966aa13111ec3033172a3512e97", 0x37b) 1.215229892s ago: executing program 2 (id=633): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) recvmmsg(r0, &(0x7f0000003740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=""/16, 0x10}, 0x805}], 0x1, 0x45833af92e4b39ff, 0x0) 1.212617026s ago: executing program 5 (id=634): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x4559}], 0x1, &(0x7f00000002c0), 0x0, 0xfffffffffffffd00) close_range(r0, 0xffffffffffffffff, 0x0) 1.159273751s ago: executing program 1 (id=635): semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 1.009585042s ago: executing program 5 (id=636): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:t', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='2', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='65536', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='1:1', 0x3) write(0xffffffffffffffff, &(0x7f0000000840)='10', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/dev-ram1/ppl_size\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r6, &(0x7f0000000a40)='active', 0x6) write(0xffffffffffffffff, &(0x7f0000000500)='ppl', 0x3) 988.142031ms ago: executing program 4 (id=637): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, 0x0, 0xd) 983.394838ms ago: executing program 0 (id=638): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x40) mount$9p_virtio(&(0x7f00000000c0), &(0x7f00000001c0)='./proc\x00', &(0x7f0000000380), 0x2, 0x0) 850.216669ms ago: executing program 1 (id=639): socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x12) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 713.87891ms ago: executing program 4 (id=640): writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 665.254343ms ago: executing program 0 (id=641): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc88", 0x9d}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b3648cb51d902fcd1b342c28ea583d0c1bf65a670b2911e63cdc6d7ed06f73cfff3675832fce4151730f7ef2c8becc88720661c5013e176dca9141e3db9acc3293f66963645623733b0f3b11aec36f59f89b36e0236a31d63", 0x90}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739f0", 0x9e}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f5898d64dfb232a5ed4b5e33d2fc3d4625f96ea7e33efc27bacf87905e1fa8220799ffd2e29c67f48e620a307ed4adb8877506211626dedb8faef37535e9ae3b631078ca2f380a3389ca59c8aa73a27651d4a56ac19950c4bd9d149dbb783b01ce1d8ea832b73847494cf", 0xe3}, {&(0x7f0000000b40)="abf5afe05d4f96614c55e2f4df6e139dbd36b34c6a2b15fd05000e53386f5afad3466fe4dc987d0d6f43b83de758521a3df4da6263843c6c3c449953489752d7d0dfc0a307b6413fb553528a04d888cb07cfb8b4698d47ab8d1627b4c6401e0ee5fdb4dcdbd98b78a17e8aa80d2e042f76dd6b22de5542bd5bdde2ce3e0878fe706cd0b6bcda", 0x86}, {&(0x7f0000000c00)="59a6ccfde72fa606722d721aada8234cd925b0c5b4b492432d79c736d25b702feb8b26ebb83614", 0x27}, {&(0x7f0000000c80)="9f9c29e5e85c1e9d55fbfaffee3d448faeb857fcc0f0036525836ae153f155331714de07483696ffacc1906cfad346b7cf08529f396b2afe8db4899c02bd3c", 0x3f}], 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8000000000000000000"], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320", 0x50}, {&(0x7f0000000400)="7f", 0x1}], 0x2) write(r0, &(0x7f0000001e00)="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", 0x37b) 309.704023ms ago: executing program 3 (id=642): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x30}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 106.281689ms ago: executing program 0 (id=643): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x29, 0x200000e, r6}}], 0x20, 0x2400e044}, 0x6) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x5, 0x0, 0x0, r1}) 0s ago: executing program 2 (id=644): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x1, 0x0) write(r0, &(0x7f0000000100), 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. [ 78.521908][ T5600] cgroup: Unknown subsys name 'net' [ 78.638258][ T5600] cgroup: Unknown subsys name 'cpuset' [ 78.641974][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.160014][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.502070][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.502939][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.519901][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.520774][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.537371][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.546217][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.546901][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.557310][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.565513][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.571419][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.571727][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.574436][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.575119][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.578324][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.579129][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.579535][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.580353][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.581144][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.581921][ T5635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.589347][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.595473][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.612106][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.618751][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.619099][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.620621][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.714609][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.717793][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.718240][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.719310][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.719975][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.016772][ T10] cfg80211: failed to load regulatory.db [ 86.654029][ T5619] Bluetooth: hci2: command tx timeout [ 86.654033][ T5628] Bluetooth: hci3: command tx timeout [ 86.654183][ T5619] Bluetooth: hci0: command tx timeout [ 86.654190][ T5628] Bluetooth: hci4: command tx timeout [ 86.654406][ T52] Bluetooth: hci1: command tx timeout [ 86.733410][ T52] Bluetooth: hci5: command tx timeout [ 86.916387][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.916552][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.916929][ T5618] bridge_slave_0: entered allmulticast mode [ 86.918854][ T5618] bridge_slave_0: entered promiscuous mode [ 86.922593][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.922754][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.922886][ T5618] bridge_slave_1: entered allmulticast mode [ 86.924829][ T5618] bridge_slave_1: entered promiscuous mode [ 87.102219][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.137171][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.137285][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.137646][ T5626] bridge_slave_0: entered allmulticast mode [ 87.139346][ T5626] bridge_slave_0: entered promiscuous mode [ 87.153526][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.222825][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.222926][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.223045][ T5626] bridge_slave_1: entered allmulticast mode [ 87.225921][ T5626] bridge_slave_1: entered promiscuous mode [ 87.268466][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.268590][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.268912][ T5633] bridge_slave_0: entered allmulticast mode [ 87.270481][ T5633] bridge_slave_0: entered promiscuous mode [ 87.273863][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.273972][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.274106][ T5633] bridge_slave_1: entered allmulticast mode [ 87.276010][ T5633] bridge_slave_1: entered promiscuous mode [ 87.362394][ T5618] team0: Port device team_slave_0 added [ 87.408905][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.409018][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.409150][ T5617] bridge_slave_0: entered allmulticast mode [ 87.411002][ T5617] bridge_slave_0: entered promiscuous mode [ 87.416172][ T5618] team0: Port device team_slave_1 added [ 87.448593][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.465816][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.466398][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.466553][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.466975][ T5617] bridge_slave_1: entered allmulticast mode [ 87.468651][ T5617] bridge_slave_1: entered promiscuous mode [ 87.497729][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.513946][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.514081][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.514229][ T5627] bridge_slave_0: entered allmulticast mode [ 87.516873][ T5627] bridge_slave_0: entered promiscuous mode [ 87.523205][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.579215][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.579326][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.579461][ T5627] bridge_slave_1: entered allmulticast mode [ 87.581202][ T5627] bridge_slave_1: entered promiscuous mode [ 87.614666][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.614679][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.614701][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.634417][ T5633] team0: Port device team_slave_0 added [ 87.638213][ T5633] team0: Port device team_slave_1 added [ 87.691718][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.692463][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.692479][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.692508][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.696853][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.697089][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.697268][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.697421][ T5632] bridge_slave_0: entered allmulticast mode [ 87.699738][ T5632] bridge_slave_0: entered promiscuous mode [ 87.741064][ T5626] team0: Port device team_slave_0 added [ 87.786364][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.786505][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.787094][ T5632] bridge_slave_1: entered allmulticast mode [ 87.793157][ T5632] bridge_slave_1: entered promiscuous mode [ 87.820823][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.820841][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.820864][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.834432][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.837882][ T5626] team0: Port device team_slave_1 added [ 87.846081][ T5617] team0: Port device team_slave_0 added [ 87.864236][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.864252][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.864282][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.869439][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.930812][ T5617] team0: Port device team_slave_1 added [ 87.943970][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.971959][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.971978][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.972004][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.024166][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.041969][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.041986][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.042015][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.046640][ T5627] team0: Port device team_slave_0 added [ 88.055995][ T5618] hsr_slave_0: entered promiscuous mode [ 88.057236][ T5618] hsr_slave_1: entered promiscuous mode [ 88.075559][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.075574][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.077544][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.083063][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.083077][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.083106][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.137408][ T5627] team0: Port device team_slave_1 added [ 88.190627][ T5633] hsr_slave_0: entered promiscuous mode [ 88.191856][ T5633] hsr_slave_1: entered promiscuous mode [ 88.192662][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 88.192723][ T5633] Cannot create hsr debugfs directory [ 88.231804][ T5632] team0: Port device team_slave_0 added [ 88.237064][ T5632] team0: Port device team_slave_1 added [ 88.254609][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.254625][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.254651][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.337220][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.337239][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.337266][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.354058][ T5626] hsr_slave_0: entered promiscuous mode [ 88.355722][ T5626] hsr_slave_1: entered promiscuous mode [ 88.356613][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 88.356635][ T5626] Cannot create hsr debugfs directory [ 88.454053][ T5617] hsr_slave_0: entered promiscuous mode [ 88.454920][ T5617] hsr_slave_1: entered promiscuous mode [ 88.455582][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 88.455604][ T5617] Cannot create hsr debugfs directory [ 88.456455][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.456470][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.456495][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.460826][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.460842][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.460870][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.694607][ T5627] hsr_slave_0: entered promiscuous mode [ 88.695681][ T5627] hsr_slave_1: entered promiscuous mode [ 88.696275][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 88.696297][ T5627] Cannot create hsr debugfs directory [ 88.734513][ T5622] Bluetooth: hci1: command tx timeout [ 88.734536][ T5619] Bluetooth: hci2: command tx timeout [ 88.734549][ T5622] Bluetooth: hci0: command tx timeout [ 88.734563][ T5619] Bluetooth: hci3: command tx timeout [ 88.734707][ T52] Bluetooth: hci4: command tx timeout [ 88.767460][ T5632] hsr_slave_0: entered promiscuous mode [ 88.768991][ T5632] hsr_slave_1: entered promiscuous mode [ 88.769802][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 88.769823][ T5632] Cannot create hsr debugfs directory [ 88.814181][ T52] Bluetooth: hci5: command tx timeout [ 89.260175][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.268741][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.295258][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.298708][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.301264][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.306284][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.320030][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.330736][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.387831][ T5617] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.400433][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.408537][ T5617] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.418351][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.422445][ T5617] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.431971][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.448802][ T5617] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.453195][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.527792][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.536407][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.542717][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.556329][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.567413][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.574538][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.592192][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.596986][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.702447][ T5633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.709106][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.721786][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.722717][ T5633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.736392][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.748973][ T5633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.752705][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.786233][ T5633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.790841][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.799921][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.835357][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.835457][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.837952][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.838029][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.939727][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.946738][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.976636][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.980675][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.982921][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.994810][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.010781][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.018585][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.078858][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.168630][ T5632] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.172977][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.201842][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.202232][ T5632] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.217511][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.218405][ T5632] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.222010][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.225557][ T5632] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.241650][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.279857][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.279969][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.318913][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.320733][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.320812][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.438738][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.482135][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.482262][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.505019][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.563161][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.563257][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.592712][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.645585][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.645695][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.711245][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.711354][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.740591][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.814008][ T5628] Bluetooth: hci3: command tx timeout [ 90.814045][ T5628] Bluetooth: hci0: command tx timeout [ 90.814071][ T5628] Bluetooth: hci1: command tx timeout [ 90.814095][ T5628] Bluetooth: hci2: command tx timeout [ 90.814290][ T52] Bluetooth: hci4: command tx timeout [ 90.838524][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.893571][ T52] Bluetooth: hci5: command tx timeout [ 90.926984][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.962377][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.962486][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.997555][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.010188][ T5618] veth0_vlan: entered promiscuous mode [ 91.048791][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.048900][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.130608][ T5618] veth1_vlan: entered promiscuous mode [ 91.174353][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.238606][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.238718][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.293229][ T5618] veth0_macvtap: entered promiscuous mode [ 91.329120][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.329447][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.345689][ T5618] veth1_macvtap: entered promiscuous mode [ 91.480994][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.563231][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.757306][ T1112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.757421][ T1112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.757465][ T1112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.757507][ T1112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.087767][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.108420][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.108444][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.283661][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.287415][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.287436][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.459436][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.569614][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.610649][ T5626] veth0_vlan: entered promiscuous mode [ 92.668505][ T5626] veth1_vlan: entered promiscuous mode [ 92.854574][ T5633] veth0_vlan: entered promiscuous mode [ 92.894796][ T5622] Bluetooth: hci2: command tx timeout [ 92.894831][ T5622] Bluetooth: hci1: command tx timeout [ 92.894855][ T5622] Bluetooth: hci0: command tx timeout [ 92.894879][ T5622] Bluetooth: hci3: command tx timeout [ 92.894942][ T52] Bluetooth: hci4: command tx timeout [ 92.908537][ T5626] veth0_macvtap: entered promiscuous mode [ 92.930263][ T5633] veth1_vlan: entered promiscuous mode [ 92.966262][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.972404][ T5626] veth1_macvtap: entered promiscuous mode [ 92.975516][ T52] Bluetooth: hci5: command tx timeout [ 93.084486][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.132175][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.167793][ T5633] veth0_macvtap: entered promiscuous mode [ 93.231902][ T5633] veth1_macvtap: entered promiscuous mode [ 93.299291][ T5617] veth0_vlan: entered promiscuous mode [ 93.355062][ T5627] veth0_vlan: entered promiscuous mode [ 93.405273][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.460746][ T5627] veth1_vlan: entered promiscuous mode [ 93.467598][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.468075][ T5617] veth1_vlan: entered promiscuous mode [ 93.475256][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.476199][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.476245][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.476286][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.478209][ T3371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.478227][ T3371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.485921][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.623816][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.624721][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.624773][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.624815][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.632760][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.632779][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.920280][ T5617] veth0_macvtap: entered promiscuous mode [ 93.930296][ T5627] veth0_macvtap: entered promiscuous mode [ 94.138942][ T5617] veth1_macvtap: entered promiscuous mode [ 94.151139][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.151162][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.162854][ T5627] veth1_macvtap: entered promiscuous mode [ 94.267248][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.309849][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.319089][ T3371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.319110][ T3371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.325402][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.349877][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.405553][ T1112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.405670][ T1112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.405714][ T1112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.405763][ T1112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.475364][ T1164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.483968][ T1164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.532335][ T5620] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.694519][ T5620] usb 3-1: Using ep0 maxpacket: 8 [ 94.696919][ T5620] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 94.723278][ T5620] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 94.723310][ T5620] usb 3-1: config 0 has no interface number 0 [ 94.723434][ T5620] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 94.723461][ T5620] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 94.723489][ T5620] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.723518][ T5620] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 94.723543][ T5620] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 94.723589][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.810797][ T5620] usb 3-1: config 0 descriptor?? [ 94.814613][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.814634][ T5864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.847871][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.849941][ T1112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.878021][ T5620] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 94.943524][ T5861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.988291][ T5866] jffs2: notice: (5866) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.049681][ T5856] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -90 [ 95.074778][ T975] usb 3-1: USB disconnect, device number 2 [ 95.108201][ T975] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 95.130509][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.130534][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.153396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.157859][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.157878][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.179806][ T5632] veth0_vlan: entered promiscuous mode [ 95.449201][ T5632] veth1_vlan: entered promiscuous mode [ 96.582620][ T3371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.582644][ T3371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.645568][ T5632] veth0_macvtap: entered promiscuous mode [ 96.649808][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.649828][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.678164][ T5632] veth1_macvtap: entered promiscuous mode [ 96.713172][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.736965][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.766346][ T142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.769279][ T142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.907313][ T3371] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.923854][ T994] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.008918][ T5879] binder: 5878:5879 ioctl c00c6211 0 returned -14 [ 97.920983][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.921026][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.345573][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.345600][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.585824][ T975] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.873792][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 98.887524][ T975] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 98.937613][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.181991][ T975] usb 3-1: config 0 descriptor?? [ 99.433708][ T5885] Can't find ip_set type hash:ne [ 99.461097][ T975] usb 3-1: probing VID:PID(0424:012C) [ 99.558932][ T975] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 99.582635][ T5882] Zero length message leads to an empty skb [ 99.608293][ T975] vub300 3-1:0.0: probe with driver vub300 failed with error -22 [ 99.628031][ T975] usb 3-1: USB disconnect, device number 3 [ 99.792590][ T5896] jffs2: notice: (5896) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.515511][ T5831] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.593538][ T30] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.667361][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 101.668195][ T5831] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 101.669409][ T5831] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 101.669436][ T5831] usb 2-1: config 0 has no interface number 0 [ 101.712253][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.712285][ T5831] usb 2-1: Product: syz [ 101.712303][ T5831] usb 2-1: Manufacturer: syz [ 101.712320][ T5831] usb 2-1: SerialNumber: syz [ 101.741759][ T5831] usb 2-1: config 0 descriptor?? [ 101.750441][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 101.751161][ T30] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 101.752279][ T30] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 101.752305][ T30] usb 4-1: config 0 has no interface number 0 [ 101.786412][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.786441][ T30] usb 4-1: Product: syz [ 101.786459][ T30] usb 4-1: Manufacturer: syz [ 101.786477][ T30] usb 4-1: SerialNumber: syz [ 101.792358][ T5831] hub 2-1:0.132: bad descriptor, ignoring hub [ 101.792402][ T5831] hub 2-1:0.132: probe with driver hub failed with error -5 [ 101.834826][ T30] usb 4-1: config 0 descriptor?? [ 101.836957][ T30] hub 4-1:0.132: bad descriptor, ignoring hub [ 101.836983][ T30] hub 4-1:0.132: probe with driver hub failed with error -5 [ 101.842006][ T30] usbhid 4-1:0.132: couldn't find an input interrupt endpoint [ 101.944804][ T5919] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 102.209298][ T5923] jffs2: notice: (5923) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 102.877135][ T5831] usb 2-1: USB disconnect, device number 2 [ 103.114119][ T25] usb 4-1: USB disconnect, device number 2 [ 103.233962][ T1112] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.480374][ T5931] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.629531][ T5934] syzkaller0: entered promiscuous mode [ 103.629551][ T5934] syzkaller0: entered allmulticast mode [ 104.459645][ T5944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.31'. [ 105.304828][ T5948] overlayfs: missing 'lowerdir' [ 106.627622][ T5962] jffs2: notice: (5962) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 109.303024][ T5957] fuse: Bad value for 'fd' [ 109.881735][ T5973] jffs2: notice: (5973) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 113.506311][ T5996] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 113.745608][ T6001] netlink: 48 bytes leftover after parsing attributes in process `syz.5.44'. [ 113.795267][ T6002] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 113.829487][ T6005] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 113.893892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 115.386700][ T6014] md/raid:md0: not clean -- starting background reconstruction [ 115.455661][ T52] Bluetooth: hci5: command tx timeout [ 115.831055][ T6014] md/raid:md0: not enough operational devices (2/2 failed) [ 116.144476][ T6028] jffs2: notice: (6028) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 118.510963][ T6014] md/raid:md0: failed to run raid set. [ 118.510988][ T6014] md: pers->run() failed ... [ 118.683110][ T6045] binder: 6044:6045 ioctl c00c6211 0 returned -14 [ 120.702695][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 120.702721][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 120.744335][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.724293][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 121.945746][ T30] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 122.770786][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.773868][ T30] usb 5-1: config 0 descriptor?? [ 122.870758][ T30] usb 5-1: probing VID:PID(0424:012C) [ 122.964297][ T30] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 123.010030][ T30] vub300 5-1:0.0: probe with driver vub300 failed with error -22 [ 123.100137][ T30] usb 5-1: USB disconnect, device number 2 [ 126.902923][ T6100] jffs2: notice: (6100) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.490787][ T6119] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 131.690034][ T6119] netlink: 48 bytes leftover after parsing attributes in process `syz.5.76'. [ 132.112622][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.112724][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.448044][ T6138] binder: 6136:6138 ioctl c00c6211 0 returned -14 [ 134.957715][ T6153] jffs2: notice: (6153) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 136.195008][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.383524][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 136.392876][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 136.459906][ T10] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 136.459955][ T10] usb 3-1: config 0 has no interface number 0 [ 136.577727][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.577776][ T10] usb 3-1: Product: syz [ 136.577870][ T10] usb 3-1: Manufacturer: syz [ 136.577962][ T10] usb 3-1: SerialNumber: syz [ 138.934502][ T10] usb 3-1: config 0 descriptor?? [ 139.003350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 139.085095][ T191] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 139.110119][ T10] usb 3-1: can't set config #0, error -71 [ 139.141174][ T10] usb 3-1: USB disconnect, device number 4 [ 139.239981][ T191] usb 2-1: Using ep0 maxpacket: 16 [ 139.243427][ T191] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 139.261203][ T191] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 139.261225][ T191] usb 2-1: config 0 has no interface number 0 [ 139.305485][ T191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.305518][ T191] usb 2-1: Product: syz [ 139.305535][ T191] usb 2-1: Manufacturer: syz [ 139.305552][ T191] usb 2-1: SerialNumber: syz [ 139.312456][ T191] usb 2-1: config 0 descriptor?? [ 139.386218][ T191] usb 2-1: can't set config #0, error -71 [ 139.388024][ T191] usb 2-1: USB disconnect, device number 3 [ 140.390434][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 140.390594][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 143.198089][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 143.198111][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 143.258958][ T6205] Bluetooth: MGMT ver 1.23 [ 143.412965][ T6196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.812474][ T6212] jffs2: notice: (6212) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 144.227073][ T5745] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.406105][ T6202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.602834][ T6202] bond1: (slave bond0): making interface the new active one [ 144.653960][ T5745] usb 3-1: Using ep0 maxpacket: 8 [ 144.713638][ T5745] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 144.756395][ T5745] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 144.756454][ T5745] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.756480][ T5745] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.756508][ T5745] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.756551][ T5745] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.756597][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.842565][ T6202] bond1: (slave bond0): Enslaving as an active interface with an up link [ 145.111008][ T5745] usb 3-1: usb_control_msg returned -32 [ 145.111061][ T5745] usbtmc 3-1:16.0: can't read capabilities [ 145.293721][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 145.294177][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.380717][ T6208] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 145.438277][ T5745] usb 3-1: USB disconnect, device number 5 [ 145.498970][ T6223] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 148.494723][ T6252] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 148.679154][ T6254] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 148.679324][ T6254] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 150.672012][ T975] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 151.178313][ T6274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.615324][ T975] usb 1-1: Using ep0 maxpacket: 16 [ 151.616084][ T975] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 151.617910][ T975] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 151.617969][ T975] usb 1-1: config 0 has no interface number 0 [ 151.621678][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.621704][ T975] usb 1-1: Product: syz [ 151.621720][ T975] usb 1-1: Manufacturer: syz [ 151.621736][ T975] usb 1-1: SerialNumber: syz [ 151.694058][ T975] usb 1-1: config 0 descriptor?? [ 151.714036][ T975] hub 1-1:0.132: bad descriptor, ignoring hub [ 151.714067][ T975] hub 1-1:0.132: probe with driver hub failed with error -5 [ 151.744571][ T975] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input7 [ 152.067113][ T6292] jffs2: notice: (6292) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 154.713488][ T5831] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 155.028348][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 155.031917][ T6315] jffs2: notice: (6315) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 155.113893][ T5831] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.223677][ T5831] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 155.223737][ T5831] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.223768][ T5831] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.223795][ T5831] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.223822][ T5831] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.223868][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.011265][ T6320] loop3: detected capacity change from 0 to 64 [ 156.744575][ T5831] usb 2-1: usb_control_msg returned -32 [ 156.744617][ T5831] usbtmc 2-1:16.0: can't read capabilities [ 156.950220][ T5831] usb 2-1: USB disconnect, device number 4 [ 158.198145][ T6338] jffs2: notice: (6338) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 158.243917][ T25] usb 1-1: USB disconnect, device number 2 [ 159.143333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 159.775032][ T5745] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 159.809883][ T6351] null_blk: nullb1: using native zone append [ 159.910289][ T6356] loop2: detected capacity change from 0 to 164 [ 159.934188][ T5745] usb 5-1: Using ep0 maxpacket: 8 [ 159.936911][ T5745] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 159.941256][ T5745] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 159.941285][ T5745] usb 5-1: config 0 has no interface number 0 [ 159.941327][ T5745] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.941351][ T5745] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 159.941383][ T5745] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 159.941411][ T5745] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 159.941441][ T5745] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.958193][ T5745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.958226][ T5745] usb 5-1: Product: syz [ 159.958243][ T5745] usb 5-1: Manufacturer: syz [ 159.958260][ T5745] usb 5-1: SerialNumber: syz [ 159.994296][ T5745] usb 5-1: config 0 descriptor?? [ 160.157746][ T6351] null_blk: disk nullb1 created [ 160.505134][ T6370] loop5: detected capacity change from 0 to 128 [ 160.800908][ T5745] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 160.810972][ T5745] usb 5-1: USB disconnect, device number 3 [ 161.435938][ T6381] jffs2: notice: (6381) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 165.001815][ T6402] overlayfs: failed to resolve './file0': -2 [ 165.075767][ T6417] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 165.075950][ T6417] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 165.883409][ T5620] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.033610][ T5620] usb 3-1: Using ep0 maxpacket: 8 [ 166.114518][ T5620] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 166.504399][ T5620] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 166.504459][ T5620] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.504485][ T5620] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.504513][ T5620] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.504540][ T5620] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.504586][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.793136][ T6439] binder: 6438:6439 ioctl c00c6211 0 returned -14 [ 166.833625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 166.858511][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 169.886419][ T5620] usb 3-1: usb_control_msg returned -71 [ 169.886460][ T5620] usbtmc 3-1:16.0: can't read capabilities [ 169.891406][ T5620] usb 3-1: USB disconnect, device number 6 [ 170.169582][ T6455] netlink: 'syz.4.180': attribute type 2 has an invalid length. [ 170.208603][ T6462] loop5: detected capacity change from 0 to 128 [ 171.474602][ T6463] syzkaller0: entered promiscuous mode [ 171.474629][ T6463] syzkaller0: entered allmulticast mode [ 171.633040][ T6474] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.799907][ T6476] FAULT_INJECTION: forcing a failure. [ 171.799907][ T6476] name failslab, interval 1, probability 0, space 0, times 1 [ 171.799944][ T6476] CPU: 0 UID: 0 PID: 6476 Comm: syz.2.187 Not tainted syzkaller #0 PREEMPT(full) [ 171.799971][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 171.799986][ T6476] Call Trace: [ 171.799995][ T6476] [ 171.800005][ T6476] dump_stack_lvl+0xe8/0x150 [ 171.800047][ T6476] should_fail_ex+0x410/0x560 [ 171.800081][ T6476] should_failslab+0xa8/0x100 [ 171.800114][ T6476] ? security_inode_alloc+0x39/0x310 [ 171.800142][ T6476] kmem_cache_alloc_noprof+0xa1/0x600 [ 171.800176][ T6476] ? security_inode_alloc+0x39/0x310 [ 171.800210][ T6476] security_inode_alloc+0x39/0x310 [ 171.800240][ T6476] inode_init_always_gfp+0x97e/0xd30 [ 171.800280][ T6476] ? __pfx_proc_alloc_inode+0x10/0x10 [ 171.800303][ T6476] alloc_inode+0x82/0x1b0 [ 171.800332][ T6476] new_inode+0x1f/0x170 [ 171.800360][ T6476] ? proc_get_inode+0x1a/0x6a0 [ 171.800386][ T6476] proc_get_inode+0x22/0x6a0 [ 171.800408][ T6476] ? proc_fill_super+0x52a/0x760 [ 171.800437][ T6476] proc_fill_super+0x543/0x760 [ 171.800464][ T6476] ? __pfx_proc_fill_super+0x10/0x10 [ 171.800490][ T6476] get_tree_nodev+0xbb/0x150 [ 171.800528][ T6476] vfs_get_tree+0x92/0x2a0 [ 171.800555][ T6476] do_new_mount+0x319/0xdc0 [ 171.800590][ T6476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.800626][ T6476] ? __pfx_do_new_mount+0x10/0x10 [ 171.800662][ T6476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.800690][ T6476] ? ns_capable+0x89/0xe0 [ 171.800726][ T6476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.800755][ T6476] ? path_mount+0x647/0x1050 [ 171.800791][ T6476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.800820][ T6476] ? user_path_at+0xd4/0x160 [ 171.800864][ T6476] __se_sys_mount+0x31d/0x420 [ 171.800906][ T6476] ? __pfx___se_sys_mount+0x10/0x10 [ 171.800948][ T6476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.800977][ T6476] ? __x64_sys_mount+0x20/0xc0 [ 171.801014][ T6476] do_syscall_64+0x166/0x520 [ 171.801045][ T6476] ? trace_irq_disable+0x3b/0x140 [ 171.801071][ T6476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.801103][ T6476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.801128][ T6476] RIP: 0033:0x7fe73f39e159 [ 171.801150][ T6476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.801169][ T6476] RSP: 002b:00007fe7402df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 171.801195][ T6476] RAX: ffffffffffffffda RBX: 00007fe73f625fa0 RCX: 00007fe73f39e159 [ 171.801214][ T6476] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 171.801230][ T6476] RBP: 00007fe73f43506b R08: 0000000000000000 R09: 0000000000000000 [ 171.801246][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.801267][ T6476] R13: 00007fe73f626038 R14: 00007fe73f625fa0 R15: 00007ffca42624c8 [ 171.801307][ T6476] [ 171.850300][ T6476] proc_fill_super: get root inode failed [ 171.887872][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.190'. [ 171.887896][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.190'. [ 172.161210][ T6482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.102576][ T6483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.111556][ T6483] bond1: (slave bond0): making interface the new active one [ 173.120348][ T6483] bond1: (slave bond0): Enslaving as an active interface with an up link [ 174.516855][ T6511] loop0: detected capacity change from 0 to 128 [ 174.610850][ T6518] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 174.730089][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 174.868021][ T6522] team0: Port device team_slave_0 removed [ 175.186320][ T6538] jffs2: notice: (6538) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 178.445823][ T6548] bond1: option mode: unable to set because the bond device has slaves [ 178.481331][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 178.481351][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 178.583181][ T1164] bond1: (slave bond0): link status definitely down, disabling slave [ 178.608617][ T1164] bond1: now running without any active interface! [ 178.922957][ T6563] loop2: detected capacity change from 0 to 128 [ 179.217127][ T6575] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 180.320897][ T5738] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 181.003388][ T5738] usb 5-1: Using ep0 maxpacket: 8 [ 181.054790][ T5738] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 181.089544][ T5738] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 181.089601][ T5738] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.089626][ T5738] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.089653][ T5738] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.089679][ T5738] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.089724][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.477994][ T6619] loop0: detected capacity change from 0 to 164 [ 182.728970][ T5738] usb 5-1: usb_control_msg returned -71 [ 182.729025][ T5738] usbtmc 5-1:16.0: can't read capabilities [ 183.169898][ T6623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.361683][ T5738] usb 5-1: USB disconnect, device number 4 [ 183.451272][ T6632] jffs2: notice: (6632) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 184.987842][ T6653] bond1: option mode: unable to set because the bond device has slaves [ 185.028288][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 185.028314][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 185.214569][ T6659] overlayfs: failed to resolve './file0': -2 [ 186.209565][ T6667] jffs2: notice: (6667) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 186.614912][ T6678] loop0: detected capacity change from 0 to 164 [ 186.862843][ T6679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.460242][ T6705] fuse: Bad value for 'fd' [ 190.540875][ T6716] binder: 6712:6716 ioctl c00c6211 0 returned -14 [ 190.646029][ T6719] binder: 6715:6719 ioctl c00c6211 0 returned -14 [ 190.953395][ T5775] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 191.301366][ T6726] binder: 6725:6726 ioctl c00c6211 0 returned -14 [ 191.484280][ T5775] usb 5-1: Using ep0 maxpacket: 8 [ 191.499250][ T5775] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 191.511096][ T5775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.883417][ T5775] usb 5-1: config 0 descriptor?? [ 192.325995][ T5775] usb 5-1: probing VID:PID(0424:012C) [ 192.328486][ T6718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.264'. [ 192.372439][ T5775] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 192.385775][ T6718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.264'. [ 192.411940][ T5775] vub300 5-1:0.0: probe with driver vub300 failed with error -22 [ 192.426161][ T5775] usb 5-1: USB disconnect, device number 5 [ 192.546743][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 192.546777][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 192.549633][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 192.939774][ T6748] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 192.941001][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.274'. [ 192.980678][ T6748] serio: Serial port ptm0 [ 193.084524][ T6754] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 193.235419][ T6760] binder: 6759:6760 ioctl c00c6211 0 returned -14 [ 193.535553][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.535616][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.578588][ T6769] loop1: detected capacity change from 0 to 164 [ 195.581510][ T6799] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.599955][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 195.599978][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 195.678310][ T6800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.699221][ T6802] binder: 6801:6802 ioctl c00c6211 0 returned -14 [ 195.727069][ T6800] bond1: (slave bond0): making interface the new active one [ 195.742837][ T6800] bond1: (slave bond0): Enslaving as an active interface with an up link [ 196.024299][ T6812] overlayfs: failed to resolve './file0': -2 [ 197.051803][ T6822] netlink: 324 bytes leftover after parsing attributes in process `syz.1.307'. [ 197.228895][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 197.254549][ T6819] loop4: detected capacity change from 0 to 64 [ 197.339125][ T6826] team0: Port device team_slave_0 removed [ 197.662227][ T6834] loop0: detected capacity change from 0 to 164 [ 197.837418][ T6838] netlink: 16 bytes leftover after parsing attributes in process `syz.5.310'. [ 198.028365][ T6841] binder: 6839:6841 ioctl c00c6211 0 returned -14 [ 199.518617][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 199.520430][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 199.715105][ T25] usb 3-1: device descriptor read/64, error -32 [ 200.066131][ T6859] binder: 6858:6859 ioctl c00c6211 0 returned -14 [ 200.095364][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 200.282444][ T25] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 200.312172][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.312379][ T25] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 200.312422][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.453953][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 200.454003][ T25] usb 3-1: Product: syz [ 200.454094][ T25] usb 3-1: Manufacturer: syz [ 200.920166][ T25] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 201.074582][ T25] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 201.121557][ T25] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 201.173287][ T25] usb 3-1: USB disconnect, device number 8 [ 201.198176][ T25] garmin_gps 3-1:1.0: device disconnected [ 201.414368][ T6880] loop3: detected capacity change from 0 to 128 [ 201.721082][ T6886] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 202.068252][ T6892] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 202.117176][ T6896] loop2: detected capacity change from 0 to 64 [ 203.354120][ T6900] md/raid:md0: not clean -- starting background reconstruction [ 204.060637][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.336'. [ 204.297071][ T6900] md/raid:md0: couldn't allocate thread. [ 204.474191][ T5738] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 204.478787][ T6922] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 204.943410][ T5738] usb 3-1: Using ep0 maxpacket: 8 [ 204.944804][ T5738] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 205.038674][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.605073][ T5738] usb 3-1: config 0 descriptor?? [ 205.615074][ T5738] usb 3-1: probing VID:PID(0424:012C) [ 205.616756][ T5738] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 205.620752][ T6917] Can't find ip_set type hash: [ 205.653685][ T5738] vub300 3-1:0.0: probe with driver vub300 failed with error -22 [ 205.667203][ T6900] md: pers->run() failed ... [ 205.870476][ T5775] usb 3-1: USB disconnect, device number 9 [ 206.104974][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.344'. [ 206.223619][ T5738] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 206.427010][ T5738] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 206.484276][ T5738] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.484351][ T5738] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 206.484874][ T5738] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.621654][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 206.621699][ T5738] usb 2-1: Product: syz [ 206.621847][ T5738] usb 2-1: Manufacturer: syz [ 207.098572][ T5738] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 207.144337][ T5738] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 207.146910][ T5738] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 207.269534][ T10] usb 2-1: USB disconnect, device number 5 [ 207.275915][ T6953] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 207.300361][ T10] garmin_gps 2-1:1.0: device disconnected [ 210.523945][ T191] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 210.597023][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 210.643043][ T6994] jffs2: notice: (6994) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 210.694737][ T191] usb 3-1: Using ep0 maxpacket: 32 [ 210.697187][ T191] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 210.700854][ T191] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 210.700882][ T191] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.700901][ T191] usb 3-1: config 0 has no interface number 0 [ 210.700932][ T191] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 210.705949][ T191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.705976][ T191] usb 3-1: Product: syz [ 210.705993][ T191] usb 3-1: Manufacturer: syz [ 210.706009][ T191] usb 3-1: SerialNumber: syz [ 210.710202][ T191] usb 3-1: config 0 descriptor?? [ 210.731197][ T191] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input12 [ 210.914131][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 211.001578][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.5.371'. [ 211.019951][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.032916][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.069160][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 211.075738][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.075807][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 211.075832][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 211.075858][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.083237][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 211.083265][ T10] usb 2-1: Product: syz [ 211.083381][ T10] usb 2-1: Manufacturer: syz [ 211.165809][ T10] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 211.191566][ T10] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 211.196564][ T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 211.349083][ T5738] usb 2-1: USB disconnect, device number 6 [ 211.366136][ T5738] garmin_gps 2-1:1.0: device disconnected [ 211.385351][ T7011] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 211.458697][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.458742][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 211.458779][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 211.458809][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 211.458861][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 211.507775][ T7008] warning: `syz.2.366' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 211.512581][ T975] usb 3-1: USB disconnect, device number 10 [ 211.610504][ T7013] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 211.611754][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 211.634246][ T7013] serio: Serial port ptm0 [ 212.967283][ T7019] loop3: detected capacity change from 0 to 164 [ 212.968066][ T7019] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 213.279386][ T191] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 213.362650][ T7025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.415641][ T31] audit: type=1326 audit(1789743368.155:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.3.365" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b78d9e159 code=0x7fc00000 [ 213.433888][ T191] usb 1-1: Using ep0 maxpacket: 8 [ 213.434694][ T191] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 213.438604][ T191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.476100][ T191] usb 1-1: config 0 descriptor?? [ 213.493137][ T191] usb 1-1: probing VID:PID(0424:012C) [ 213.500968][ T191] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 213.512488][ T7035] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 213.516851][ T191] vub300 1-1:0.0: probe with driver vub300 failed with error -22 [ 213.618616][ T7036] jffs2: notice: (7036) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 213.699545][ T975] usb 1-1: USB disconnect, device number 3 [ 213.825773][ T7035] md/raid:md0: not clean -- starting background reconstruction [ 214.043154][ T7035] md/raid:md0: not enough operational devices (2/2 failed) [ 214.087774][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 214.314713][ T7052] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 214.350070][ T7035] md/raid:md0: failed to run raid set. [ 214.350089][ T7035] md: pers->run() failed ... [ 214.482842][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'. [ 214.765124][ T5831] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 214.914121][ T5831] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 214.915292][ T5831] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.915342][ T5831] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 214.915366][ T5831] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 214.915392][ T5831] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.917022][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 214.917048][ T5831] usb 5-1: Product: syz [ 214.917065][ T5831] usb 5-1: Manufacturer: syz [ 215.370184][ T7079] loop0: detected capacity change from 0 to 164 [ 215.720077][ T5831] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 215.723927][ T5831] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 215.751998][ T5831] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 215.920634][ T5831] usb 5-1: USB disconnect, device number 6 [ 215.937133][ T7087] overlayfs: missing 'lowerdir' [ 215.971614][ T5831] garmin_gps 5-1:1.0: device disconnected [ 217.108497][ T7096] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 218.397505][ T7113] loop0: detected capacity change from 0 to 128 [ 219.422057][ T7124] jffs2: notice: (7124) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 220.333937][ T7129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.414'. [ 220.359358][ T7128] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 220.419816][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 220.419841][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'. [ 220.641383][ T7128] md/raid:md0: not clean -- starting background reconstruction [ 220.732689][ T7128] md/raid:md0: not enough operational devices (2/2 failed) [ 220.984331][ T7128] md/raid:md0: failed to run raid set. [ 220.984351][ T7128] md: pers->run() failed ... [ 222.158383][ T7160] loop0: detected capacity change from 0 to 128 [ 222.572017][ T7162] jffs2: notice: (7162) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 222.971358][ T7180] netlink: 20 bytes leftover after parsing attributes in process `syz.4.430'. [ 223.211882][ T7183] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 223.383655][ T7183] md/raid:md0: not clean -- starting background reconstruction [ 223.442685][ T7183] md/raid:md0: not enough operational devices (2/2 failed) [ 224.093413][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 224.093417][ T5622] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 226.079742][ T7183] md/raid:md0: failed to run raid set. [ 226.079758][ T7183] md: pers->run() failed ... [ 226.478314][ T7205] loop2: detected capacity change from 0 to 164 [ 226.602661][ T7214] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 226.678805][ T7212] binder: 7210:7212 ioctl c00c6211 0 returned -14 [ 227.439450][ T7217] md/raid:md0: not clean -- starting background reconstruction [ 228.827446][ T7217] md/raid:md0: couldn't allocate thread. [ 228.926014][ T7226] FAULT_INJECTION: forcing a failure. [ 228.926014][ T7226] name failslab, interval 1, probability 0, space 0, times 0 [ 228.926052][ T7226] CPU: 0 UID: 0 PID: 7226 Comm: syz.0.446 Not tainted syzkaller #0 PREEMPT(full) [ 228.926079][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 228.926093][ T7226] Call Trace: [ 228.926103][ T7226] [ 228.926113][ T7226] dump_stack_lvl+0xe8/0x150 [ 228.926156][ T7226] should_fail_ex+0x410/0x560 [ 228.926191][ T7226] should_failslab+0xa8/0x100 [ 228.926225][ T7226] __kmalloc_cache_noprof+0xa3/0x600 [ 228.926253][ T7226] ? __hw_addr_create+0x62/0x240 [ 228.926294][ T7226] ? __hw_addr_create+0x62/0x240 [ 228.926336][ T7226] __hw_addr_create+0x62/0x240 [ 228.926376][ T7226] __hw_addr_add_ex+0x1ce/0x520 [ 228.926419][ T7226] dev_mc_add+0xa1/0x120 [ 228.926461][ T7226] igmp_group_added+0x1df/0x910 [ 228.926499][ T7226] ? __pfx_igmp_group_added+0x10/0x10 [ 228.926537][ T7226] ? __local_bh_enable_ip+0xd6/0x140 [ 228.926576][ T7226] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.926611][ T7226] ____ip_mc_inc_group+0xb46/0xdb0 [ 228.926652][ T7226] __ip_mc_join_group+0x430/0x500 [ 228.926685][ T7226] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.926723][ T7226] do_ip_setsockopt+0x2013/0x2e30 [ 228.926761][ T7226] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 228.926789][ T7226] ? do_futex+0x3e7/0x4e0 [ 228.926822][ T7226] ? __asan_memcpy+0x40/0x70 [ 228.926850][ T7226] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.926879][ T7226] ? lock_acquire+0x115/0x350 [ 228.926916][ T7226] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.926945][ T7226] ? aa_sock_opt_perm+0xe8/0x1e0 [ 228.926983][ T7226] ip_setsockopt+0x66/0x110 [ 228.927012][ T7226] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 228.927044][ T7226] do_sock_setsockopt+0x17c/0x1b0 [ 228.927083][ T7226] __x64_sys_setsockopt+0x13d/0x1b0 [ 228.927121][ T7226] do_syscall_64+0x166/0x520 [ 228.927152][ T7226] ? trace_irq_disable+0x3b/0x140 [ 228.927177][ T7226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.927210][ T7226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.927235][ T7226] RIP: 0033:0x7f07ad39e159 [ 228.927257][ T7226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.927284][ T7226] RSP: 002b:00007f07ae301028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 228.927311][ T7226] RAX: ffffffffffffffda RBX: 00007f07ad625fa0 RCX: 00007f07ad39e159 [ 228.927329][ T7226] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000005 [ 228.927343][ T7226] RBP: 00007f07ad43506b R08: 000000000000000c R09: 0000000000000000 [ 228.927359][ T7226] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 228.927375][ T7226] R13: 00007f07ad626038 R14: 00007f07ad625fa0 R15: 00007ffe751c5cb8 [ 228.927414][ T7226] [ 229.018830][ T7230] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.290400][ T7217] md: pers->run() failed ... [ 229.580365][ T7230] md/raid:md0: not clean -- starting background reconstruction [ 229.737195][ T7230] md/raid:md0: not enough operational devices (2/2 failed) [ 229.843571][ T975] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 230.191659][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 230.195621][ T975] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 230.197584][ T975] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 230.197609][ T975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.197629][ T975] usb 1-1: config 0 has no interface number 0 [ 230.197669][ T975] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 230.202974][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.203001][ T975] usb 1-1: Product: syz [ 230.203017][ T975] usb 1-1: Manufacturer: syz [ 230.203034][ T975] usb 1-1: SerialNumber: syz [ 230.213852][ T975] usb 1-1: config 0 descriptor?? [ 230.238561][ T975] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input14 [ 231.109835][ T7230] md/raid:md0: failed to run raid set. [ 231.109856][ T7230] md: pers->run() failed ... [ 231.256329][ T25] usb 1-1: USB disconnect, device number 4 [ 232.711234][ T7278] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 232.740501][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 232.848713][ T7278] serio: Serial port ptm0 [ 232.909592][ T7285] netlink: 48 bytes leftover after parsing attributes in process `syz.0.463'. [ 233.065625][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 233.211205][ T7288] Illegal XDP return value 4291670016 on prog (id 43) dev syz_tun, expect packet loss! [ 233.223378][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 233.224129][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.225181][ T25] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 233.225231][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.225255][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.225283][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.225309][ T25] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.225354][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.487021][ T25] usb 4-1: usb_control_msg returned -32 [ 233.487076][ T25] usbtmc 4-1:16.0: can't read capabilities [ 234.634504][ T25] usb 4-1: USB disconnect, device number 3 [ 235.353375][ T5620] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 236.033336][ T5620] usb 4-1: Using ep0 maxpacket: 32 [ 236.034588][ T5620] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 236.035792][ T5620] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 236.035819][ T5620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.035841][ T5620] usb 4-1: config 0 has no interface number 0 [ 236.035881][ T5620] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.042005][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.042032][ T5620] usb 4-1: Product: syz [ 236.042050][ T5620] usb 4-1: Manufacturer: syz [ 236.042067][ T5620] usb 4-1: SerialNumber: syz [ 236.096603][ T5620] usb 4-1: config 0 descriptor?? [ 236.136350][ T5620] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input15 [ 236.160758][ T7313] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 237.792712][ T7318] md/raid:md0: not clean -- starting background reconstruction [ 238.001899][ T7318] md/raid:md0: couldn't allocate thread. [ 238.016491][ T5831] usb 4-1: USB disconnect, device number 4 [ 238.265605][ T7318] md: pers->run() failed ... [ 238.299826][ T7336] netlink: 'syz.2.483': attribute type 2 has an invalid length. [ 238.371167][ T7336] ´: entered promiscuous mode [ 240.577598][ T7366] md/raid:md0: not clean -- starting background reconstruction [ 241.623875][ T7366] md/raid:md0: not enough operational devices (2/2 failed) [ 242.965833][ T7366] md/raid:md0: failed to run raid set. [ 242.965853][ T7366] md: pers->run() failed ... [ 243.080005][ T7394] FAULT_INJECTION: forcing a failure. [ 243.080005][ T7394] name failslab, interval 1, probability 0, space 0, times 0 [ 243.080043][ T7394] CPU: 1 UID: 0 PID: 7394 Comm: syz.2.507 Not tainted syzkaller #0 PREEMPT(full) [ 243.080072][ T7394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 243.080087][ T7394] Call Trace: [ 243.080097][ T7394] [ 243.080107][ T7394] dump_stack_lvl+0xe8/0x150 [ 243.080150][ T7394] should_fail_ex+0x410/0x560 [ 243.080185][ T7394] should_failslab+0xa8/0x100 [ 243.080218][ T7394] ? __anon_vma_prepare+0xc3/0x4d0 [ 243.080258][ T7394] kmem_cache_alloc_noprof+0xa1/0x600 [ 243.080302][ T7394] ? __anon_vma_prepare+0xc3/0x4d0 [ 243.080342][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.080379][ T7394] __anon_vma_prepare+0xc3/0x4d0 [ 243.080416][ T7394] ? __pte_alloc+0x15e/0x1a0 [ 243.080447][ T7394] do_pte_missing+0x2f18/0x34b0 [ 243.080471][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.080506][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.080553][ T7394] handle_mm_fault+0x1a53/0x3750 [ 243.080589][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.080632][ T7394] ? handle_mm_fault+0xf1/0x3750 [ 243.080681][ T7394] ? __pfx_handle_mm_fault+0x10/0x10 [ 243.080715][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.080775][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.080805][ T7394] ? lock_mm_and_find_vma+0xa7/0x340 [ 243.080850][ T7394] do_user_addr_fault+0x746/0x1340 [ 243.080897][ T7394] exc_page_fault+0x6a/0xc0 [ 243.080931][ T7394] asm_exc_page_fault+0x26/0x30 [ 243.080956][ T7394] RIP: 0010:_copy_to_user+0x85/0xb0 [ 243.080994][ T7394] Code: e8 40 d3 e8 fc 4d 39 fc 72 3d 4d 39 ec 77 38 e8 61 d0 e8 fc 4c 89 f7 89 de e8 a7 da 58 fd 0f 01 cb 4c 89 ff 48 89 d9 4c 89 f6 a4 0f 1f 00 48 89 cb 0f 01 ca 48 89 d8 5b 41 5c 41 5d 41 5e 41 [ 243.081015][ T7394] RSP: 0018:ffffc9001d497730 EFLAGS: 00050256 [ 243.081039][ T7394] RAX: ffffffff84df0201 RBX: 0000000000000008 RCX: 0000000000000008 [ 243.081056][ T7394] RDX: 0000000000000000 RSI: ffff88802a2a0f60 RDI: 0000000000000000 [ 243.081073][ T7394] RBP: ffffc9001d497bd0 R08: ffff88802a2a0f67 R09: 1ffff110054541ec [ 243.081092][ T7394] R10: dffffc0000000000 R11: ffffed10054541ed R12: 0000000000000008 [ 243.081110][ T7394] R13: 00007ffffffff000 R14: ffff88802a2a0f60 R15: 0000000000000000 [ 243.081137][ T7394] ? _copy_to_user+0x51/0xb0 [ 243.081182][ T7394] ucma_query+0x1557/0x19a0 [ 243.081220][ T7394] ? finish_task_switch+0x40e/0xc60 [ 243.081254][ T7394] ? lockdep_hardirqs_on+0x7b/0x110 [ 243.081289][ T7394] ? rcu_is_watching+0x16/0xb0 [ 243.081326][ T7394] ? __pfx_ucma_query+0x10/0x10 [ 243.081364][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.081394][ T7394] ? __lock_acquire+0x747/0x2de0 [ 243.081451][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.081481][ T7394] ? lock_acquire+0x115/0x350 [ 243.081515][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.081546][ T7394] ? __lock_acquire+0x747/0x2de0 [ 243.081579][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.081609][ T7394] ? aa_file_perm+0x4ed/0x15f0 [ 243.081643][ T7394] ? futex_unqueue+0x211/0x240 [ 243.081674][ T7394] ? aa_file_perm+0x18b/0x15f0 [ 243.081711][ T7394] ? __futex_wait+0x358/0x400 [ 243.081769][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.081799][ T7394] ? lock_acquire+0x115/0x350 [ 243.081826][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.081868][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.081914][ T7394] ucma_write+0x24e/0x2f0 [ 243.081950][ T7394] ? common_file_perm+0x20e/0x2b0 [ 243.081986][ T7394] ? __pfx_ucma_write+0x10/0x10 [ 243.082019][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.082050][ T7394] ? security_file_permission+0x75/0x260 [ 243.082077][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.082107][ T7394] ? rw_verify_area+0x203/0x4c0 [ 243.082145][ T7394] ? lock_acquire+0x115/0x350 [ 243.082172][ T7394] ? __pfx_ucma_write+0x10/0x10 [ 243.082207][ T7394] vfs_write+0x296/0xba0 [ 243.082272][ T7394] ? __pfx_vfs_write+0x10/0x10 [ 243.082310][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.082343][ T7394] ? __fget_files+0x2a/0x420 [ 243.082384][ T7394] ? __fget_files+0x2a/0x420 [ 243.082418][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.082447][ T7394] ? __fget_files+0x3a2/0x420 [ 243.082483][ T7394] ? __fget_files+0x2a/0x420 [ 243.082524][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.082560][ T7394] ksys_write+0x150/0x270 [ 243.082604][ T7394] ? __pfx_ksys_write+0x10/0x10 [ 243.082642][ T7394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.082686][ T7394] do_syscall_64+0x166/0x520 [ 243.082718][ T7394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.082752][ T7394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.082785][ T7394] RIP: 0033:0x7fe73f39e159 [ 243.082808][ T7394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.082828][ T7394] RSP: 002b:00007fe7402df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.082854][ T7394] RAX: ffffffffffffffda RBX: 00007fe73f625fa0 RCX: 00007fe73f39e159 [ 243.082874][ T7394] RDX: 0000000000000018 RSI: 0000200000000240 RDI: 0000000000000004 [ 243.082891][ T7394] RBP: 00007fe73f43506b R08: 0000000000000000 R09: 0000000000000000 [ 243.082908][ T7394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.082923][ T7394] R13: 00007fe73f626038 R14: 00007fe73f625fa0 R15: 00007ffca42624c8 [ 243.082964][ T7394] [ 244.165305][ T7416] jffs2: notice: (7416) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 244.271078][ T7424] fuse: Unknown parameter 'grou00000000000000000000' [ 244.285279][ T7426] binder: 7418:7426 ioctl c00c6211 0 returned -14 [ 246.431973][ T7448] MTD: Couldn't look up './dev/mtdblock0': -2 [ 246.878067][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 249.270835][ T7454] FAULT_INJECTION: forcing a failure. [ 249.270835][ T7454] name failslab, interval 1, probability 0, space 0, times 0 [ 249.270873][ T7454] CPU: 1 UID: 0 PID: 7454 Comm: syz.3.527 Not tainted syzkaller #0 PREEMPT(full) [ 249.270900][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 249.270915][ T7454] Call Trace: [ 249.270925][ T7454] [ 249.270939][ T7454] dump_stack_lvl+0xe8/0x150 [ 249.270982][ T7454] should_fail_ex+0x410/0x560 [ 249.271020][ T7454] should_failslab+0xa8/0x100 [ 249.271052][ T7454] ? __anon_vma_prepare+0x10e/0x4d0 [ 249.271091][ T7454] kmem_cache_alloc_noprof+0xa1/0x600 [ 249.271132][ T7454] ? kmem_cache_alloc_noprof+0x156/0x600 [ 249.271171][ T7454] ? __anon_vma_prepare+0x10e/0x4d0 [ 249.271217][ T7454] __anon_vma_prepare+0x10e/0x4d0 [ 249.271262][ T7454] do_pte_missing+0x2f18/0x34b0 [ 249.271287][ T7454] ? __lock_acquire+0x747/0x2de0 [ 249.271335][ T7454] handle_mm_fault+0x1a53/0x3750 [ 249.271384][ T7454] ? handle_mm_fault+0xf1/0x3750 [ 249.271433][ T7454] ? __pfx_handle_mm_fault+0x10/0x10 [ 249.271466][ T7454] ? lock_vma_under_rcu+0x45a/0x500 [ 249.271537][ T7454] do_user_addr_fault+0xa4f/0x1340 [ 249.271572][ T7454] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.271605][ T7454] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.271634][ T7454] ? trace_page_fault_user+0x84/0x1e0 [ 249.271664][ T7454] exc_page_fault+0x6a/0xc0 [ 249.271697][ T7454] asm_exc_page_fault+0x26/0x30 [ 249.271721][ T7454] RIP: 0033:0x7f6b78d60082 [ 249.271743][ T7454] Code: 8d 15 f5 19 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 249.271768][ T7454] RSP: 002b:00007f6b79ccdd20 EFLAGS: 00010286 [ 249.271791][ T7454] RAX: ffffffffffffffff RBX: 00007f6b70000000 RCX: 00007f6b78d9df57 [ 249.271810][ T7454] RDX: 00007f6b78e51a53 RSI: 0000000000021000 RDI: 00007f6b70000000 [ 249.271828][ T7454] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 249.271844][ T7454] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 249.271860][ T7454] R13: 0000000000001000 R14: 00007f6b74000000 R15: 0000000001200000 [ 249.271900][ T7454] [ 249.272162][ T7454] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 249.433616][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 249.603956][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 249.607561][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 249.608946][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 249.608997][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.609022][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 249.609049][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.609076][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.609120][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.717141][ T7465] loop0: detected capacity change from 0 to 128 [ 249.789511][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 249.789538][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 249.898209][ T7461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.902566][ T7470] binder: 7469:7470 ioctl c00c6211 0 returned -14 [ 249.922319][ T7466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.922648][ T10] usb 3-1: usb_control_msg returned -32 [ 249.922684][ T10] usbtmc 3-1:16.0: can't read capabilities [ 250.128771][ T10] usb 3-1: USB disconnect, device number 11 [ 250.194646][ T7466] bond1: (slave bond0): making interface the new active one [ 250.226837][ T7466] bond1: (slave bond0): Enslaving as an active interface with an up link [ 252.264757][ T7511] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 252.429324][ T7509] MTD: Couldn't look up './dev/mtdblock0': -2 [ 252.434690][ T7498] jffs2: notice: (7498) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 254.267513][ T7529] FAULT_INJECTION: forcing a failure. [ 254.267513][ T7529] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 254.267550][ T7529] CPU: 0 UID: 0 PID: 7529 Comm: syz.0.552 Not tainted syzkaller #0 PREEMPT(full) [ 254.267578][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 254.267592][ T7529] Call Trace: [ 254.267602][ T7529] [ 254.267612][ T7529] dump_stack_lvl+0xe8/0x150 [ 254.267659][ T7529] should_fail_ex+0x410/0x560 [ 254.267694][ T7529] prepare_alloc_pages+0x223/0x600 [ 254.267729][ T7529] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 254.267763][ T7529] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 254.267797][ T7529] ? __pfx_policy_nodemask+0x10/0x10 [ 254.267829][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.267859][ T7529] ? __lock_acquire+0x747/0x2de0 [ 254.267894][ T7529] alloc_pages_mpol+0x21e/0x390 [ 254.267934][ T7529] alloc_pages_noprof+0xb1/0x2b0 [ 254.267971][ T7529] pte_alloc_one+0x22/0x370 [ 254.268007][ T7529] __pte_alloc+0x25/0x1a0 [ 254.268038][ T7529] do_pte_missing+0x2db7/0x34b0 [ 254.268063][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.268097][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.268126][ T7529] ? do_raw_spin_unlock+0xf5/0x200 [ 254.268167][ T7529] ? __pmd_alloc+0x40a/0x5c0 [ 254.268207][ T7529] handle_mm_fault+0x1a53/0x3750 [ 254.268242][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.268289][ T7529] ? handle_mm_fault+0xf1/0x3750 [ 254.268337][ T7529] ? __pfx_handle_mm_fault+0x10/0x10 [ 254.268370][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.268425][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.268454][ T7529] ? lock_mm_and_find_vma+0xa7/0x340 [ 254.268498][ T7529] do_user_addr_fault+0x746/0x1340 [ 254.268543][ T7529] exc_page_fault+0x6a/0xc0 [ 254.268576][ T7529] asm_exc_page_fault+0x26/0x30 [ 254.268600][ T7529] RIP: 0010:_copy_to_user+0x85/0xb0 [ 254.268634][ T7529] Code: e8 40 d3 e8 fc 4d 39 fc 72 3d 4d 39 ec 77 38 e8 61 d0 e8 fc 4c 89 f7 89 de e8 a7 da 58 fd 0f 01 cb 4c 89 ff 48 89 d9 4c 89 f6 a4 0f 1f 00 48 89 cb 0f 01 ca 48 89 d8 5b 41 5c 41 5d 41 5e 41 [ 254.268654][ T7529] RSP: 0018:ffffc9000519f730 EFLAGS: 00050256 [ 254.268677][ T7529] RAX: ffffffff84df0201 RBX: 0000000000000008 RCX: 0000000000000008 [ 254.268693][ T7529] RDX: 0000000000000000 RSI: ffff8880562c6c40 RDI: 0000000000000000 [ 254.268710][ T7529] RBP: ffffc9000519fbd0 R08: ffff8880562c6c47 R09: 1ffff1100ac58d88 [ 254.268729][ T7529] R10: dffffc0000000000 R11: ffffed100ac58d89 R12: 0000000000000008 [ 254.268747][ T7529] R13: 00007ffffffff000 R14: ffff8880562c6c40 R15: 0000000000000000 [ 254.268774][ T7529] ? _copy_to_user+0x51/0xb0 [ 254.268819][ T7529] ucma_query+0x1557/0x19a0 [ 254.268859][ T7529] ? hrtimer_start_range_ns_common+0x7f6/0xb60 [ 254.268900][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.268931][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.268963][ T7529] ? __pfx_ucma_query+0x10/0x10 [ 254.269000][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.269029][ T7529] ? __lock_acquire+0x747/0x2de0 [ 254.269062][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.269091][ T7529] ? rcu_is_watching+0x16/0xb0 [ 254.269122][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.269151][ T7529] ? trace_sched_exit_tp+0x3a/0x130 [ 254.269184][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.269213][ T7529] ? __schedule+0x17f1/0x58f0 [ 254.269251][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.269285][ T7529] ? lock_acquire+0x115/0x350 [ 254.269318][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.269347][ T7529] ? __lock_acquire+0x747/0x2de0 [ 254.269381][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.269411][ T7529] ? aa_file_perm+0x4ed/0x15f0 [ 254.269445][ T7529] ? aa_file_perm+0x18b/0x15f0 [ 254.269495][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.269524][ T7529] ? lock_acquire+0x115/0x350 [ 254.269551][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.269591][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.269636][ T7529] ucma_write+0x24e/0x2f0 [ 254.269669][ T7529] ? common_file_perm+0x20e/0x2b0 [ 254.269703][ T7529] ? __pfx_ucma_write+0x10/0x10 [ 254.269735][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.269765][ T7529] ? security_file_permission+0x75/0x260 [ 254.269792][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.269820][ T7529] ? rw_verify_area+0x203/0x4c0 [ 254.269860][ T7529] ? __pfx_ucma_write+0x10/0x10 [ 254.269893][ T7529] vfs_write+0x296/0xba0 [ 254.269941][ T7529] ? __pfx_vfs_write+0x10/0x10 [ 254.269977][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.270009][ T7529] ? __fget_files+0x2a/0x420 [ 254.270047][ T7529] ? __fget_files+0x2a/0x420 [ 254.270080][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.270108][ T7529] ? __fget_files+0x3a2/0x420 [ 254.270142][ T7529] ? __fget_files+0x2a/0x420 [ 254.270180][ T7529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.270215][ T7529] ksys_write+0x150/0x270 [ 254.270257][ T7529] ? __pfx_ksys_write+0x10/0x10 [ 254.270315][ T7529] do_syscall_64+0x166/0x520 [ 254.270345][ T7529] ? trace_irq_disable+0x3b/0x140 [ 254.270371][ T7529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.270403][ T7529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.270429][ T7529] RIP: 0033:0x7f07ad39e159 [ 254.270450][ T7529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.270470][ T7529] RSP: 002b:00007f07ae301028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.270494][ T7529] RAX: ffffffffffffffda RBX: 00007f07ad625fa0 RCX: 00007f07ad39e159 [ 254.270513][ T7529] RDX: 0000000000000018 RSI: 0000200000000240 RDI: 0000000000000004 [ 254.270529][ T7529] RBP: 00007f07ad43506b R08: 0000000000000000 R09: 0000000000000000 [ 254.270545][ T7529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.270559][ T7529] R13: 00007f07ad626038 R14: 00007f07ad625fa0 R15: 00007ffe751c5cb8 [ 254.270599][ T7529] [ 254.414243][ T7514] md: pers->run() failed ... [ 254.482193][ T7534] binder: 7533:7534 ioctl c00c6211 0 returned -14 [ 254.974984][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.975050][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.122143][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.554'. [ 255.122170][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.554'. [ 255.350921][ T7540] bond1: (slave bond0): Releasing active interface [ 255.690866][ T7552] capability: warning: `syz.0.560' uses deprecated v2 capabilities in a way that may be insecure [ 255.846918][ T7559] futex_wake_op: syz.0.560 tries to shift op by 144; fix this program [ 255.847155][ T7559] futex_wake_op: syz.0.560 tries to shift op by 144; fix this program [ 256.511156][ T7567] FAULT_INJECTION: forcing a failure. [ 256.511156][ T7567] name failslab, interval 1, probability 0, space 0, times 0 [ 256.511195][ T7567] CPU: 0 UID: 0 PID: 7567 Comm: syz.2.566 Not tainted syzkaller #0 PREEMPT(full) [ 256.511223][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 256.511238][ T7567] Call Trace: [ 256.511248][ T7567] [ 256.511258][ T7567] dump_stack_lvl+0xe8/0x150 [ 256.511308][ T7567] should_fail_ex+0x410/0x560 [ 256.511342][ T7567] ? __alloc_skb+0x1db/0x7a0 [ 256.511374][ T7567] should_failslab+0xa8/0x100 [ 256.511408][ T7567] ? __alloc_skb+0x1db/0x7a0 [ 256.511436][ T7567] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 256.511478][ T7567] ? __alloc_skb+0x18d/0x7a0 [ 256.511509][ T7567] ? __alloc_skb+0x1db/0x7a0 [ 256.511548][ T7567] __alloc_skb+0x1db/0x7a0 [ 256.511585][ T7567] inet_ifmcaddr_notify+0x7e/0x150 [ 256.511625][ T7567] ____ip_mc_inc_group+0xb6b/0xdb0 [ 256.511666][ T7567] __ip_mc_join_group+0x430/0x500 [ 256.511700][ T7567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.511739][ T7567] do_ip_setsockopt+0x2013/0x2e30 [ 256.511778][ T7567] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 256.511806][ T7567] ? do_futex+0x3e7/0x4e0 [ 256.511846][ T7567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.511876][ T7567] ? lock_acquire+0x115/0x350 [ 256.511913][ T7567] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.511943][ T7567] ? aa_sock_opt_perm+0xe8/0x1e0 [ 256.511981][ T7567] ip_setsockopt+0x66/0x110 [ 256.512011][ T7567] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 256.512042][ T7567] do_sock_setsockopt+0x17c/0x1b0 [ 256.512083][ T7567] __x64_sys_setsockopt+0x13d/0x1b0 [ 256.512124][ T7567] do_syscall_64+0x166/0x520 [ 256.512156][ T7567] ? trace_irq_disable+0x3b/0x140 [ 256.512183][ T7567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.512216][ T7567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.512242][ T7567] RIP: 0033:0x7fe73f39e159 [ 256.512264][ T7567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.512285][ T7567] RSP: 002b:00007fe7402df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 256.512318][ T7567] RAX: ffffffffffffffda RBX: 00007fe73f625fa0 RCX: 00007fe73f39e159 [ 256.512337][ T7567] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000004 [ 256.512352][ T7567] RBP: 00007fe73f43506b R08: 000000000000000c R09: 0000000000000000 [ 256.512368][ T7567] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 256.512385][ T7567] R13: 00007fe73f626038 R14: 00007fe73f625fa0 R15: 00007ffca42624c8 [ 256.512425][ T7567] [ 256.973042][ T7577] loop4: detected capacity change from 0 to 164 [ 256.982933][ T7577] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 256.997073][ T7579] netlink: 36 bytes leftover after parsing attributes in process `syz.1.570'. [ 257.000907][ T7575] ip6gre1: entered promiscuous mode [ 257.000928][ T7575] ip6gre1: entered allmulticast mode [ 257.029618][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 257.029638][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 257.079960][ T3371] bond1: (slave bond0): link status definitely down, disabling slave [ 257.097764][ T3371] bond1: now running without any active interface! [ 257.113133][ T31] audit: type=1326 audit(1789743405.858:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.4.557" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6e19e159 code=0x7fc00000 [ 257.153638][ T31] audit: type=1326 audit(1789743405.908:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.4.557" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0b6e19e159 code=0x7fc00000 [ 258.295616][ T7596] loop5: detected capacity change from 0 to 164 [ 258.389329][ T31] audit: type=1326 audit(1789743407.138:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.4.557" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6e19e159 code=0x7fc00000 [ 258.825290][ T7606] binder: 7605:7606 ioctl c00c6211 0 returned -14 [ 260.303308][ T7620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.320833][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 260.320855][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'. [ 260.624476][ T7632] loop2: detected capacity change from 0 to 164 [ 261.510914][ T7646] jffs2: notice: (7646) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 262.407681][ T7672] jffs2: notice: (7672) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 265.809122][ T7700] netlink: 'syz.3.612': attribute type 2 has an invalid length. [ 265.851978][ T7700] ´: entered promiscuous mode [ 266.327562][ T7708] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 266.327758][ T7708] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 266.398395][ T7709] binder: 7706:7709 ioctl c00c6211 0 returned -14 [ 268.117447][ T7725] loop4: detected capacity change from 0 to 128 [ 268.125434][ T7725] FAT-fs (loop4): Directory bread(block 1048) failed [ 268.125468][ T7725] FAT-fs (loop4): Directory bread(block 1049) failed [ 268.125496][ T7725] FAT-fs (loop4): Directory bread(block 1050) failed [ 268.125522][ T7725] FAT-fs (loop4): Directory bread(block 1051) failed [ 268.125548][ T7725] FAT-fs (loop4): Directory bread(block 1052) failed [ 268.125575][ T7725] FAT-fs (loop4): Directory bread(block 1053) failed [ 268.125601][ T7725] FAT-fs (loop4): Directory bread(block 1054) failed [ 268.125627][ T7725] FAT-fs (loop4): Directory bread(block 1055) failed [ 268.139797][ T7725] FAT-fs (loop4): Directory bread(block 1048) failed [ 268.139830][ T7725] FAT-fs (loop4): Directory bread(block 1049) failed [ 268.538065][ T7734] jffs2: notice: (7734) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 269.426185][ T7740] FAULT_INJECTION: forcing a failure. [ 269.426185][ T7740] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 269.426223][ T7740] CPU: 1 UID: 0 PID: 7740 Comm: syz.4.629 Not tainted syzkaller #0 PREEMPT(full) [ 269.426251][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 269.426266][ T7740] Call Trace: [ 269.426276][ T7740] [ 269.426293][ T7740] dump_stack_lvl+0xe8/0x150 [ 269.426335][ T7740] should_fail_ex+0x410/0x560 [ 269.426370][ T7740] prepare_alloc_pages+0x223/0x600 [ 269.426407][ T7740] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 269.426441][ T7740] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 269.426476][ T7740] ? __pfx_policy_nodemask+0x10/0x10 [ 269.426510][ T7740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.426539][ T7740] ? __lock_acquire+0x747/0x2de0 [ 269.426574][ T7740] alloc_pages_mpol+0x21e/0x390 [ 269.426609][ T7740] alloc_pages_noprof+0xb1/0x2b0 [ 269.426640][ T7740] pte_alloc_one+0x22/0x370 [ 269.426670][ T7740] __pte_alloc+0x25/0x1a0 [ 269.426698][ T7740] do_pte_missing+0x2db7/0x34b0 [ 269.426719][ T7740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.426748][ T7740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.426774][ T7740] ? do_raw_spin_unlock+0xf5/0x200 [ 269.426814][ T7740] ? __pmd_alloc+0x40a/0x5c0 [ 269.426848][ T7740] handle_mm_fault+0x1a53/0x3750 [ 269.426879][ T7740] ? mt_find+0x186/0x630 [ 269.426918][ T7740] ? handle_mm_fault+0xf1/0x3750 [ 269.426959][ T7740] ? __pfx_handle_mm_fault+0x10/0x10 [ 269.426989][ T7740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.427014][ T7740] ? mas_find+0x6d6/0xcb0 [ 269.427051][ T7740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.427082][ T7740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.427116][ T7740] __get_user_pages+0x1675/0x2750 [ 269.427179][ T7740] get_user_pages_remote+0x307/0xb10 [ 269.427217][ T7740] ? __pfx_get_user_pages_remote+0x10/0x10 [ 269.427244][ T7740] ? create_init_stack_vma+0x89c/0xa10 [ 269.427278][ T7740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.427307][ T7740] ? mmap_read_lock_maybe_expand+0xd7/0x3b0 [ 269.427347][ T7740] copy_string_kernel+0x2f9/0x5f0 [ 269.427393][ T7740] ? __pfx_copy_string_kernel+0x10/0x10 [ 269.427424][ T7740] ? do_raw_spin_unlock+0xf5/0x200 [ 269.427460][ T7740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.427485][ T7740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.427516][ T7740] do_execveat_common+0x373/0x670 [ 269.427549][ T7740] __x64_sys_execveat+0xc7/0xf0 [ 269.427595][ T7740] do_syscall_64+0x166/0x520 [ 269.427626][ T7740] ? trace_irq_disable+0x3b/0x140 [ 269.427652][ T7740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.427685][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.427710][ T7740] RIP: 0033:0x7f0b6e19e159 [ 269.427733][ T7740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.427753][ T7740] RSP: 002b:00007f0b6f0f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 269.427779][ T7740] RAX: ffffffffffffffda RBX: 00007f0b6e425fa0 RCX: 00007f0b6e19e159 [ 269.427798][ T7740] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 269.427814][ T7740] RBP: 00007f0b6e23506b R08: 0000000000001000 R09: 0000000000000000 [ 269.427830][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.427845][ T7740] R13: 00007f0b6e426038 R14: 00007f0b6e425fa0 R15: 00007ffc2d33be88 [ 269.427885][ T7740] [ 270.165896][ T7762] FAULT_INJECTION: forcing a failure. [ 270.165896][ T7762] name failslab, interval 1, probability 0, space 0, times 0 [ 270.165934][ T7762] CPU: 0 UID: 0 PID: 7762 Comm: syz.0.638 Not tainted syzkaller #0 PREEMPT(full) [ 270.165962][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 270.165977][ T7762] Call Trace: [ 270.165986][ T7762] [ 270.165997][ T7762] dump_stack_lvl+0xe8/0x150 [ 270.166039][ T7762] should_fail_ex+0x410/0x560 [ 270.166074][ T7762] should_failslab+0xa8/0x100 [ 270.166111][ T7762] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 270.166138][ T7762] ? __kasan_kmalloc+0x93/0xb0 [ 270.166170][ T7762] ? v9fs_init_fs_context+0x10a/0x540 [ 270.166196][ T7762] ? v9fs_init_fs_context+0x10a/0x540 [ 270.166225][ T7762] ? __kmalloc_cache_noprof+0x14d/0x600 [ 270.166256][ T7762] kstrdup+0x42/0x100 [ 270.166285][ T7762] v9fs_init_fs_context+0x10a/0x540 [ 270.166316][ T7762] alloc_fs_context+0x9a3/0xd00 [ 270.166354][ T7762] do_new_mount+0x17f/0xdc0 [ 270.166388][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.166425][ T7762] ? __pfx_do_new_mount+0x10/0x10 [ 270.166462][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.166491][ T7762] ? ns_capable+0x89/0xe0 [ 270.166528][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.166557][ T7762] ? path_mount+0x647/0x1050 [ 270.166595][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.166624][ T7762] ? user_path_at+0xd4/0x160 [ 270.166666][ T7762] __se_sys_mount+0x31d/0x420 [ 270.166713][ T7762] ? __pfx___se_sys_mount+0x10/0x10 [ 270.166757][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.166793][ T7762] ? __x64_sys_mount+0x20/0xc0 [ 270.166831][ T7762] do_syscall_64+0x166/0x520 [ 270.166863][ T7762] ? trace_irq_disable+0x3b/0x140 [ 270.166889][ T7762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.166922][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.166948][ T7762] RIP: 0033:0x7f07ad39e159 [ 270.166971][ T7762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.166991][ T7762] RSP: 002b:00007f07ae301028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 270.167017][ T7762] RAX: ffffffffffffffda RBX: 00007f07ad625fa0 RCX: 00007f07ad39e159 [ 270.167036][ T7762] RDX: 0000200000000380 RSI: 00002000000001c0 RDI: 00002000000000c0 [ 270.167054][ T7762] RBP: 00007f07ad43506b R08: 0000000000000000 R09: 0000000000000000 [ 270.167070][ T7762] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 270.167085][ T7762] R13: 00007f07ad626038 R14: 00007f07ad625fa0 R15: 00007ffe751c5cb8 [ 270.167125][ T7762] [ 270.614225][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 270.714941][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 270.732719][ T7767] md/raid1:md0: active with 1 out of 2 mirrors [ 270.766354][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 270.767125][ T25] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 270.772817][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.788371][ T25] usb 2-1: config 0 descriptor?? [ 270.809776][ T25] usb 2-1: probing VID:PID(0424:012C) [ 270.819517][ T25] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 270.837703][ T25] vub300 2-1:0.0: probe with driver vub300 failed with error -22 [ 270.904227][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 270.911699][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 270.912782][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 270.912833][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.912858][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.912886][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.912912][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.912956][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.950103][ T7760] md/raid:md0: device ram1 operational as raid disk 1 [ 271.061294][ T7760] md/raid:md0: couldn't allocate thread. [ 271.062229][ T5831] usb 2-1: USB disconnect, device number 7 [ 271.279982][ T7784] jffs2: notice: (7784) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 271.323750][ T10] usb 5-1: usb_control_msg returned -32 [ 271.324346][ T10] usbtmc 5-1:16.0: can't read capabilities [ 271.563733][ T7760] ============================================================================= [ 271.563755][ T7760] BUG raid5-md0 (Not tainted): Objects remaining on __kmem_cache_shutdown() [ 271.563773][ T7760] ----------------------------------------------------------------------------- [ 271.563773][ T7760] [ 271.564753][ T7760] Object 0xffff88808b840000 @offset=0 [ 271.564771][ T7760] Object 0xffff88808b8404d8 @offset=1240 [ 271.564785][ T7760] Object 0xffff88808b8409b0 @offset=2480 [ 271.564799][ T7760] Object 0xffff88808b840e88 @offset=3720 [ 271.564813][ T7760] Slab 0xffffea00022e1000 objects=13 used=4 fp=0xffff88808b841360 flags=0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 271.564848][ T7760] Disabling lock debugging due to kernel taint [ 271.565137][ T7760] ------------[ cut here ]------------ [ 271.565146][ T7760] 1 [ 271.565154][ T7760] WARNING: mm/slub.c:1268 at __slab_err+0x15/0x20, CPU#0: syz.5.636/7760 [ 271.652506][ T7760] Modules linked in: [ 271.656409][ T7760] CPU: 0 UID: 0 PID: 7760 Comm: syz.5.636 Tainted: G B syzkaller #0 PREEMPT(full) [ 271.667175][ T7760] Tainted: [B]=BAD_PAGE [ 271.671318][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 271.681371][ T7760] RIP: 0010:__slab_err+0x15/0x20 [ 271.686325][ T7760] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 7c 0f 5f 00 90 <0f> 0b 90 e9 5e 04 e8 ff cc 66 90 90 90 90 90 90 90 90 90 90 90 90 [ 271.705941][ T7760] RSP: 0018:ffffc9000527f840 EFLAGS: 00010083 [ 271.712018][ T7760] RAX: ffffffff81874cba RBX: ffff88801f7fb280 RCX: 0000000000080000 [ 271.719992][ T7760] RDX: ffffc9000ddd2000 RSI: 000000000000eef7 RDI: 000000000000eef8 [ 271.727965][ T7760] RBP: 0000000000000000 R08: ffffffff939990a7 R09: 1ffffffff2733214 [ 271.735972][ T7760] R10: dffffc0000000000 R11: fffffbfff2733215 R12: ffffea00022e8c10 [ 271.743948][ T7760] R13: ffffea00022e1000 R14: ffffc9000527f858 R15: ffff88805445e3c0 [ 271.751925][ T7760] FS: 00007f088e6396c0(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 271.760856][ T7760] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.767440][ T7760] CR2: 00007ffca4261db0 CR3: 000000003121e000 CR4: 0000000000350ef0 [ 271.775413][ T7760] Call Trace: [ 271.778688][ T7760] [ 271.781612][ T7760] __kmem_cache_shutdown+0x1a5/0x2b0 [ 271.786913][ T7760] ? free_conf+0x1fc/0x5d0 [ 271.791351][ T7760] kmem_cache_destroy+0x9d/0x180 [ 271.796302][ T7760] free_conf+0x1fc/0x5d0 [ 271.800554][ T7760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.806198][ T7760] setup_conf+0x1720/0x2ad0 [ 271.810718][ T7760] ? __pfx_setup_conf+0x10/0x10 [ 271.815585][ T7760] ? get_pers+0x22b/0x2e0 [ 271.819921][ T7760] ? __pfx_get_pers+0x10/0x10 [ 271.824608][ T7760] raid5_takeover+0x641/0x8d0 [ 271.829302][ T7760] level_store+0x83b/0x1d10 [ 271.833817][ T7760] ? __pfx_level_store+0x10/0x10 [ 271.838758][ T7760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.844401][ T7760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.850043][ T7760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.855680][ T7760] ? do_raw_spin_unlock+0xf5/0x200 [ 271.860810][ T7760] md_attr_store+0x3b7/0x640 [ 271.865407][ T7760] ? __pfx_sysfs_kf_write+0x10/0x10 [ 271.870615][ T7760] kernfs_fop_write_iter+0x3a4/0x540 [ 271.875910][ T7760] vfs_write+0x612/0xba0 [ 271.880172][ T7760] ? __pfx_vfs_write+0x10/0x10 [ 271.884956][ T7760] ? __fget_files+0x2a/0x420 [ 271.889571][ T7760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.895210][ T7760] ksys_write+0x150/0x270 [ 271.899558][ T7760] ? __pfx_ksys_write+0x10/0x10 [ 271.904430][ T7760] do_syscall_64+0x166/0x520 [ 271.909028][ T7760] ? trace_irq_disable+0x3b/0x140 [ 271.914057][ T7760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.920125][ T7760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.926019][ T7760] RIP: 0033:0x7f088d79e159 [ 271.930436][ T7760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.950037][ T7760] RSP: 002b:00007f088e639028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.958451][ T7760] RAX: ffffffffffffffda RBX: 00007f088da25fa0 RCX: 00007f088d79e159 [ 271.966423][ T7760] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000004 [ 271.974386][ T7760] RBP: 00007f088d83506b R08: 0000000000000000 R09: 0000000000000000 [ 271.982351][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.990318][ T7760] R13: 00007f088da26038 R14: 00007f088da25fa0 R15: 00007ffc30f7c868 [ 271.998299][ T7760] [ 272.001318][ T7760] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 272.008599][ T7760] CPU: 0 UID: 0 PID: 7760 Comm: syz.5.636 Tainted: G B syzkaller #0 PREEMPT(full) [ 272.019365][ T7760] Tainted: [B]=BAD_PAGE [ 272.023507][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 272.033558][ T7760] Call Trace: [ 272.036835][ T7760] [ 272.039763][ T7760] vpanic+0x56d/0xa60 [ 272.043764][ T7760] ? __pfx__printk+0x10/0x10 [ 272.048360][ T7760] ? __pfx_vpanic+0x10/0x10 [ 272.052876][ T7760] ? is_bpf_text_address+0x292/0x2b0 [ 272.058169][ T7760] ? is_bpf_text_address+0x26/0x2b0 [ 272.063383][ T7760] panic+0xc5/0xd0 [ 272.067118][ T7760] ? __pfx_panic+0x10/0x10 [ 272.071560][ T7760] __warn+0x315/0x4c0 [ 272.075563][ T7760] ? __slab_err+0x15/0x20 [ 272.079901][ T7760] ? __slab_err+0x15/0x20 [ 272.084237][ T7760] __report_bug+0x276/0x570 [ 272.088754][ T7760] ? rcu_is_watching+0x16/0xb0 [ 272.093531][ T7760] ? __slab_err+0x15/0x20 [ 272.097870][ T7760] ? __pfx___report_bug+0x10/0x10 [ 272.102899][ T7760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.108538][ T7760] ? __wake_up_klogd+0xf0/0x130 [ 272.113404][ T7760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.119041][ T7760] ? vprintk_emit+0x4ee/0x560 [ 272.123725][ T7760] ? __wake_up_klogd+0xf0/0x130 [ 272.128593][ T7760] ? __pfx_vprintk_emit+0x10/0x10 [ 272.133628][ T7760] ? __pfx_vprintk_emit+0x10/0x10 [ 272.138665][ T7760] ? __slab_err+0x15/0x20 [ 272.143041][ T7760] report_bug+0x16b/0x220 [ 272.147381][ T7760] ? __slab_err+0x15/0x20 [ 272.151718][ T7760] ? __slab_err+0x17/0x20 [ 272.156054][ T7760] handle_bug+0x9c/0x200 [ 272.160313][ T7760] exc_invalid_op+0x1a/0x50 [ 272.164834][ T7760] asm_exc_invalid_op+0x1a/0x20 [ 272.169689][ T7760] RIP: 0010:__slab_err+0x15/0x20 [ 272.174640][ T7760] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 7c 0f 5f 00 90 <0f> 0b 90 e9 5e 04 e8 ff cc 66 90 90 90 90 90 90 90 90 90 90 90 90 [ 272.194251][ T7760] RSP: 0018:ffffc9000527f840 EFLAGS: 00010083 [ 272.200332][ T7760] RAX: ffffffff81874cba RBX: ffff88801f7fb280 RCX: 0000000000080000 [ 272.208305][ T7760] RDX: ffffc9000ddd2000 RSI: 000000000000eef7 RDI: 000000000000eef8 [ 272.216278][ T7760] RBP: 0000000000000000 R08: ffffffff939990a7 R09: 1ffffffff2733214 [ 272.224251][ T7760] R10: dffffc0000000000 R11: fffffbfff2733215 R12: ffffea00022e8c10 [ 272.232227][ T7760] R13: ffffea00022e1000 R14: ffffc9000527f858 R15: ffff88805445e3c0 [ 272.240209][ T7760] ? add_taint+0x9a/0xe0 [ 272.244469][ T7760] __kmem_cache_shutdown+0x1a5/0x2b0 [ 272.249766][ T7760] ? free_conf+0x1fc/0x5d0 [ 272.254187][ T7760] kmem_cache_destroy+0x9d/0x180 [ 272.259139][ T7760] free_conf+0x1fc/0x5d0 [ 272.263441][ T7760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.269087][ T7760] setup_conf+0x1720/0x2ad0 [ 272.273609][ T7760] ? __pfx_setup_conf+0x10/0x10 [ 272.278460][ T7760] ? get_pers+0x22b/0x2e0 [ 272.282796][ T7760] ? __pfx_get_pers+0x10/0x10 [ 272.287480][ T7760] raid5_takeover+0x641/0x8d0 [ 272.292257][ T7760] level_store+0x83b/0x1d10 [ 272.296774][ T7760] ? __pfx_level_store+0x10/0x10 [ 272.301711][ T7760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.307357][ T7760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.313000][ T7760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.318641][ T7760] ? do_raw_spin_unlock+0xf5/0x200 [ 272.323771][ T7760] md_attr_store+0x3b7/0x640 [ 272.328370][ T7760] ? __pfx_sysfs_kf_write+0x10/0x10 [ 272.333582][ T7760] kernfs_fop_write_iter+0x3a4/0x540 [ 272.338880][ T7760] vfs_write+0x612/0xba0 [ 272.343143][ T7760] ? __pfx_vfs_write+0x10/0x10 [ 272.347930][ T7760] ? __fget_files+0x2a/0x420 [ 272.352535][ T7760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.358175][ T7760] ksys_write+0x150/0x270 [ 272.362525][ T7760] ? __pfx_ksys_write+0x10/0x10 [ 272.367399][ T7760] do_syscall_64+0x166/0x520 [ 272.371998][ T7760] ? trace_irq_disable+0x3b/0x140 [ 272.377026][ T7760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.383098][ T7760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.388996][ T7760] RIP: 0033:0x7f088d79e159 [ 272.393416][ T7760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.413019][ T7760] RSP: 002b:00007f088e639028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.421439][ T7760] RAX: ffffffffffffffda RBX: 00007f088da25fa0 RCX: 00007f088d79e159 [ 272.429413][ T7760] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000004 [ 272.437382][ T7760] RBP: 00007f088d83506b R08: 0000000000000000 R09: 0000000000000000 [ 272.445349][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.453316][ T7760] R13: 00007f088da26038 R14: 00007f088da25fa0 R15: 00007ffc30f7c868 [ 272.461299][ T7760] [ 272.464528][ T7760] Kernel Offset: disabled [ 272.468843][ T7760] Rebooting in 86400 seconds..