last executing test programs: 21m25.300929964s ago: executing program 32 (id=1438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3d2de2d5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d6c3f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40dfc4e1c24ecafb84f531cbc4b2ee41cbda0dbf2"], 0x1, 0x5531, &(0x7f0000000b00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/trace_options\x00', 0x0, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1, 0x7}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e0000000000000000000000000000000020000000"], 0x5000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='10', 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup(r5) 19m6.242691702s ago: executing program 33 (id=1732): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x6, "94c4af000000000400000000000000000000000000caf8e3913e898add000465"}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000940)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@discard}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8001) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) write$P9_RXATTRCREATE(r1, &(0x7f0000000400)={0x7}, 0x2000) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f0000000300)=""/187, 0xbb) 13m36.406507604s ago: executing program 34 (id=2583): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5fbd, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 12m4.577030452s ago: executing program 35 (id=2707): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) read$msr(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0xecea) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000004c0)={0x2020}, 0x2020) semget(0x2, 0x3, 0x39c) read$FUSE(r4, &(0x7f0000002800)={0x2020}, 0x2020) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') fchdir(r5) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) statx(r6, &(0x7f0000000000)='.\x00', 0x0, 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) ioctl$UI_DEV_DESTROY(r6, 0x5502) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) 10m40.396820029s ago: executing program 36 (id=2824): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x19, 0x7, 0xb, 0x7, "80faffffff072000"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x5fbd, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 10m16.098459157s ago: executing program 37 (id=2855): r0 = syz_open_dev$evdev(0x0, 0xfb9d, 0x1a0400) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)="6585", 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0xe) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$VIDIOC_DECODER_CMD(r6, 0xc0485660, &(0x7f0000000380)={0x1, 0x1, @start={0x775b4acb, 0x1}}) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000200)=""/233) 9m8.333950243s ago: executing program 38 (id=2945): socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd06, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 8m49.623106788s ago: executing program 6 (id=2970): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 8m49.150963682s ago: executing program 6 (id=2971): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x30, 0x30, 0x30, 0x39, 0x30, 0x66, 0x30, 0x30, 0x64, 0x30, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r0) add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x38, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x66, 0x64]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 8m47.664566371s ago: executing program 6 (id=2973): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="1200000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="c2c48d7e810038a019787dafa9bc88834f198fd8b607ba113b87dbee2d89d8e0453494ee6c70ecaba9880211e4816a90775bbb57b183470abd7caaa2f0cdbee810e103d114319b8b670461a89d27bde8b23ed2f26adafcaa2b1053c18d7720854ccec25f215ccb8def12d1515955d61b3cccd5934c51117633c48ed384d594d98881e029df9069e370112a4cc7df79242ddf6d8255a06d21d49435d10bc4b3d90d3b028ed39e0cee751c9c92236882c62edb23805e3069677ff44081f588217092fbcdc999", @ANYRES64=0x0], 0x20) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffffffffffff, 0x8, 0x68a, 0x9, 0x4618d88d, 0x1]}, &(0x7f0000000080)=0x78) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) socket$alg(0x26, 0x5, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) io_uring_setup(0xf08, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x64, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) 8m47.028298269s ago: executing program 6 (id=2975): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r0, &(0x7f0000005400)=[{&(0x7f0000000780)='F', 0x1}, {&(0x7f0000005440)="994b7372433f40b7dc8743e65285b2f966dd667ba378d42a5d28e7755590ab29f26bc78bfdb6d6f80e94c469c6126d556a04e65a31f8a53e9313b0f7be0b4df0f29938b84f3ddb13a659a36c31bf50e780e3c414aa91f1d3bb7f633196aafc5d28d7196a0b7d9cc94134d9c8d36990d05a66c22efce3df34cbbb257201d8cb03f7488b2ba731a04910e873232c5e9b123fce3873fe20fa7e2afd0d24a7b9e22ec740ddd30fbc1ae5b9b1dfbe6895c3a81990058f09b4967ccc8b1de924e8114f43e4f77edefee8a5e6603003c2a02bbbb9fee5754a531bda8b57b3f6f73118e36674dc2cd985eae7a2ba8acd1fee9787c6ddc5fd2e480523c9ed591abea739dcd445c6d8e989b7546f3f536cba268c2e871327ed042184ba6ba6881af6b63e272f06e6ca5443753427a599651078bbb9ac978bb077d019c83276c4ca044463940f1e2e4bbe7f4439fe50a605ba3d96c151a598f6d99d33f64b596312b01eb324f5488bc3297f8fe65594b6c188e329720fed0d3758ef1d229553e75b661385632ab1bdf396db9c77f310d3d4e2cc1b0d1e55916109aa5517557c2f8953fe0c46a53139a2220bf8fac027ecf81a2d5716bf0c4dbbfcbd020855b140b222c323937e66e425e10c1e5c314002cb0c0a3f497f037d22dd64420ac018b9514aea3cef7b9d84fbf784f5c477edf7527e9e534f2c10ccd3c0360b3c8b884a057cdafdfdf423f6875b8db083c147b23dcc20fe0bfde8e3b82cccff6663dcdb3dd59b74efae91d24e2bdeac04ff4c10aff115d581a23afdf6c1997df2d4e2a3ea19fc7f84768a2e60b085fc86fa7132d9ffc95533a91dcaf793c4ec915f857d2ac23cab300cc417db3619550f7e8f3fb59762181a025bc32e3cfea9ec0e3c090c52340c1cddd7780bed2fe82bb75abcae6dd369ef68110beeeb3c192f8ba40792e02fbc0ea7560ee09fe5bdfc71f9e86148a4e68d2a6945e43413dfb37a245982a2178a7feed87758389887443d2e79141cb2947efa4095e009c140ea1756b304a4d70e37920b2e25537dad53f3343ce6b0e5fd7cbdb410821cf2031fc184129f0c61cc1a8f09e4db90db1bc5ee6b46b29a3f83168dfab3ff3cf1097d0fde30d625de7041f0f467c2b71472e6c693e09ddd01562eed93061da146b9385cb24207e00af93bf57e67d77bac8020ac5eafc3d9b18346623c885da8b6a8c574538cf08038a62a796ff5b3814a185cd1b3f137504e6b334333b21cfcbbd3c1b607aa366cd58a4720e9251871b132d091a8a219840dedb9b46887f0dc07f81ba17b24c1f2d068790d965dc96e2f75188032a9c2cf76f10db43f4de77dd3dc0955d40b9880fbc8dbd5b62d6e63c3f9344731e5e166cc89996dfb0fd04856ba1d972489e028a116be2fb7332cbca53934faeb2b95d1c0e52c8c236d38cfa99503cf23bd90e4bc2ca2adf757338e14edc347ae7d2dcc64778c27ddc5e09993e370762f1e6976bed3017d721f940c5a4d3bbe11a93ce16528f0456e164526fa1f33fe7fe52a871af1d2cb718ffea1970b30255405c1a63359264cc252280e86e90ca9f6632c9ed7af786958c3e3ea593a690c279158117e44a3125c28217f81b07c39acf0c7d3c43d19c51582ddfaa9c0d20dc7b79b4c41562c821edfe7b1efa406b33593bb1504926443e3c93875d88df28cd455248b48041196d88ef08e5bc1d59dfd5c6bff7ba6fdd2cb1a8400d3e35a98958aa2fb9815cb3699e5696d0daf0871513d381572e96771e607fdff3081727753d3f6b491917ecf3ba51f68d6d5c4d8027d0cc58dcf8c839a030c1d8ca606fcb7840634ca4a570cf3db8b466dc867e7a0301f4457e466649e36fd7920d7219ff0433a1c0a3dcd42125329554d45659271164e14ef9cbafb73946ac2d44d12683b6695108497af86dcf4abf1a4b7cdb538f41222734ee82f319ee303294cd777efa9fe6b210672f940e72e79ee3d721d5800d5f4d649483dfeb73781c035977a1fdf36f2677710194acec92af22baccc322424b4e11d8550ce97a5467d4caaeaf55a93320f506463f86c6c994af4a1cb4071ee1e9d014618c5d55d31727e808c8b103ba6b792888e35adba6aaee93184e7173fd4949a6243ccf67886e036b45cb2571b9fdd41b0136ac246032b9dd0f8d7e304f84c23ed9c15c6c71c0b9e152c05134fdeee56f782c44d82b79b83ccd08281e0f996fbdb08500402fda6200d3a613f4e40a21098cd8297eccef15161736e7e53343e6e4528d06bdc32c96d84763e10ce8f813f50be07e70efa1c29de68ab631458d71d3526cb4a523c2744a6dd0f83c0de68fe7b3365c07699ff76c6f4113776e79ac30795591fbc3e226baf92b1645a222f955bf279df1c5f7105a3aebf45da552566f6f543d2e9bafcbe9d3ccad4bb30e507728a1175cbfe6cc90ffd1303e17c3eb947c88f96441c11b44c65af2acb2888aa29d771d653a1d585dba9ad0b91eb23f03f79560971f88473ffb362e2c000a7a16119de1838cfb2635493436446bfa6917643cf80c6d8686f8199304cbc91ead9f742c1a00ecc2da176a31d936f11b48c5354eec3c829b56d4fe6558255c3542f9165ab4c9c18c8ddbaf3a3ce4cfe481461d6069809d536623869716eafd5a6b5c2191f84fd6db198a82995a7e6a4535a41cecacd75dd869fc4e274c9f0ba5fd4d4b92cff159c943437826856f08846509fac53aa185aff6315fcf28b584d083ab34acf752af90b657e03bb07b2a087c10771408ecfb91a6c783719821a27688da15d8a54578069829a92e7bb7972fd9b3f669c33e81ae79cfaade0162d2e54b6a8f0c6fbb7325984d1a565841fa272d0e7278fa85714d76d00fa89e4fef862330a89481f336323313f32d78797a21d2cf130b1845eb51b5d4d49eed79656100af46eb03c1911cc093bc10b1f6b599331f1bd181ed1814bae2e02b3583a27a33c1b8901a82e7713e6f237fd9456e95eb7725d5c24d27d4e7d396c4abf6e2a3ff927cb984c9c3573065b0f4c7566fbf99451d7dfe7a1080bc6c5ad3de586d5fa4bdc051b4d841060526f466455c286b63adc25be2efdbcbca16e99c1b7969398df1e21443f7809ac61d7837a46bf96bb4e6284b6aca8f36790dbbd138a9633dfd87f0f584e88ebe2f8d4249b2edaf1449db36ca7dc917ec5105faa15a79ae17179cea52713cde790ad910ce556fec8f15b4b02108339da9e0816830ac0a74e37cdc36107ac08c9197a1bbf406339235e59294e5b31da2f21c06d0a0693b77caa8fb703a57d82cb7f2a5b604cd054d51057d38405f4582bc5196eebecd648f304bd0963936cc0a7072657dc0e45445d18e3b5719273a0b2eb129a541abe95fd8bbfd1517694f385e0a3117dd0917f14bbb63df74b5f2404a5f49f8c5c080751d4f1d71377eeb4ceaa826ae341adf63a624ea0cac9e476397eaf39c4c8b91817b648a088715a46c699769512680eb6dfa7f9b524ba4d15ae6be5cb48f22a1c664b7e678208b4195a8c0fba7165fa2eea8d21a649dcce2b0f8aa6da49ed8be839c51957e06cbd7825b3fd92c8010530e0321026214f3f6ecd4ba5a983983da40602a4a61b773b7d453f1d0cd18bbc602e103e3e03f0d665223592b235415a8ba1b100b6b4a2b3b244b1bc5255c67f06b517eaf554378e976a677ad83b777afea88bb8489a7fbd27b1af96bed46f0b78bac4ece4980ceb8097140820e0c00c3ea791226cfe91c5d6c4e42b4472dbb161b22a7df082d5d5490fe32dec005467e88f1fb025ed336570f10ee1b6ababc7629b82c6aeef314970ff7cd8851e3b7bd49a767dd7a272f75b892070e637591fa377ce28a6fcac44d79543d2e2dfd1d738f5d8cfc54e70568388b5c6f417be592615fa9d554769a9bd252052bdf856ebd028366a27c19761de8c62faec3e9eb0129f74a23f150f6a7935c7229753809799c9c050326a60c8481b2f232924ca57d35f5564285dc7202ee4d51bda1f5b21f040068f4d975279c2481a0ab74d631c4ccf3f656c5e9033317854116768fd6161772fe58f1c6704762817f887bd927542f004d6ba591db997c6bac519c994165ab088874eeb4414b49a1230c86144fa309c00bb70c8306bf4f88551354a06922d0b42e181950058a0c93a3e8e39d0a93cf8e6f3342ae28b91350a7dcca281f4bb67588c2a415cf1f07825d4b493637fd9ec7d2cef6a1513aa469bbbc400f6ee1d2e369f791c909fc9b7385450b37150ebf3ac15c611ad955b297d55525020c5aafb06d2b0cd351d7867a88b35fea54d253276d734f0a50d9b5d3b9cbfb5f7b7c8c8e7142ab070563012ab5c340061367740c37574", 0xc00}], 0x2) 8m45.444771586s ago: executing program 6 (id=2978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 8m42.591637844s ago: executing program 6 (id=2982): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'sit0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="f0ffffff00000000000000000000000000400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 8m27.396025062s ago: executing program 39 (id=2982): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'sit0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="f0ffffff00000000000000000000000000400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 4m27.456493053s ago: executing program 1 (id=3370): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 4m26.93612459s ago: executing program 1 (id=3373): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000024c0)={@mcast1, 0x0}, &(0x7f0000002500)=0x14) sendmsg$inet(r0, &(0x7f0000002640)={&(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000002440)=[{0x0}, {&(0x7f00000012c0)="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", 0x158}, {0x0}, {0x0}], 0x4, 0x0, 0x108}, 0x40) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = epoll_create1(0x80000) r5 = getpid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r4, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x5, &(0x7f0000000540)=ANY=[@ANYRES8], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000000), &(0x7f0000000140)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m23.770267985s ago: executing program 1 (id=3388): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) 4m19.492403864s ago: executing program 1 (id=3401): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000202010400000000000000000a0000053c0002802c0001801400030000000000000000000008ffff0a01010214000400000000000000000000000000000000000c00028005"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x200048c0) 4m19.295380597s ago: executing program 1 (id=3404): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffb29d, 0x8001, 0xd1ad045825a3ada6, 0x4, 0x7}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) 4m18.650351715s ago: executing program 1 (id=3411): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 4m2.635428703s ago: executing program 40 (id=3411): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 2m45.79702904s ago: executing program 4 (id=3624): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/64, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$inet(r0, &(0x7f0000002b00)=[{{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="92", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002980)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="f3434550311d78be4764e081131f1591d1f183ef75184eacf2369b7164dab0ae48f04f6e5903183b45b3bb29e96e16084c7798492384e09a028ef6f93af34068a9e16a6ac95b07b7ec333557b33e846fed31d306591e379de03fc7111ac04f4e73a5c5d48a4fd01316f4e65faff5ac2d34bdeacf5af38195ac01574b01ff2c8d9441e8ffaedeb5dca4a53704d0662b97b9568dab3f8c9553943302bf381ab47451c3cab4f119e961cb4e2aff5cc1b4", 0xaf}, {&(0x7f0000002580)="3744c68a751a89afdf4bcff54470e656f2e0a7444631a6d4d10ad38cfdde477367350a716f504802068c3637deed69eccc2d565ea3b6540e7fc63f9760d51dfd745f89561efbe9309c574be211a0a8b01ddf66c42db2580e2162a23714adabe67875d7bf450d2343acf77f042ce203e7f39331316d1a10ad823c5b5b448bab89a8681f2d1fbddc0b2523ce7c024d5c74311aea4be8a896a0ec835e06c1615c4c8fc94510dadd1b10f3b2fbf3eff9d4ec135cf86711d14782200afff587987b363b56d9ac15607c1d1b1137e653ec826715ccc48df9c39ac1881a2675ce0b81ffe2624a6efa75ccb1e5c6c3b8fb2fbeb24dd23737ad1fc30d49", 0xf9}, {&(0x7f0000002680)="ffbf6c55acfa993be790c9a728eea26ce4aedd2c699883e6d332d343ad06e8e9417bdbf742da86a8a613732093789ce985eb4b27501fc91c83caa7541fbac91175b4d3bd4994053ab2f0a92379c558dd5aac083c8e2a581021a060758940815f51e3727c741c97f02f6680e59789d9a1851d0561901c37ae4768dabbf4631832d2c9e5cbb01451bebb35d4ef2572344096089e36dfe3f0249e2189ec40c5dcad568c27fa28ce69ba1301afb7adcf4dd3b6", 0xb1}, {&(0x7f0000002740)="9dc1e7bdce2242fb9106d21184c0ea58db897547130408e3f384e4b0a3d088cba5955af1e75b13384604804eefa0631ab13951a527fc5290bac20d67dd77edeb69abbe5226e6a9020998044828e96091b8a7f06fd48d5e8b1e630411ff73653229364a6a4ffd85b007d8e34e9a196bc7fcc48c057c80332a8eae061577d5bcc4f7f0b93c844bb9aa2464dec8813e42d9d28fab5e6f17fdaa1357d57d85c6779e71", 0xa1}, {&(0x7f0000002800)="9b7d3fd423d5860d75c9a63f8154b5ce2baa5040c15936c6d0373a655c1b61dd21d53b51ef6b16d780cc916c969a8da7fe906be1472b9af7203cb5b1f80673f474104354b6650a9416b405129569390e1f885226448ca7ed4efe3d44d98f92966d6c10d11a50066281629c1e1674812dcbf265eef3110bfef488a7deec0cbbe26124b18a1f4fe0293c4f593134c4c279cdc12e885c1581829b4b1595349c84394dbe9d3e1318c9cfc83ac47db5aebb983041f79cb4058cf341fcd574eeb00e02411b107e951e598caa7baaa08903e260cacc1ba0c13ebf373b1d818193c05186c81641bc45b523d420f8d59e", 0xec}, {&(0x7f0000002900)="fd9e70e71cdaf73ff18fab0ac6587d322447eed508d43df21c24990b769580652568c3c5416bbb52f60fd8043b8800feedfd46aa427842ab2f7c40e3c408f195f6ceca8c559bc3cbf3e18b5fb61071a6", 0x50}], 0x7, &(0x7f0000002a00)=ANY=[@ANYBLOB="140000000000000200000006000000000000002000000000000000000000000700007a5bae80fd0000000000000014000000000000200000000001000000000000000000000014000000000000000000000001000000070000000000000070000000000000000000000007000000070fff7f000001ac141430ac1e0101444c9e630a01010200000008e000000100000001e000000100000401ac1414bbfffffff80000000000000002ac1e0101000000abffffffff00000006ffffffff0000000564010102000035d194040100011c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000"], 0x100}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000400)={{}, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x50012, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=ANY=[@ANYBLOB="680000001000ffff25bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021610200400012800c0001006d6163766c616e003000028008000300030000000800010010000000100005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r7, @ANYBLOB="3e40a1282dcfea99c0051c97ec6fda43be662f09000090f5de4a0d54b56ac1842cac6612be4b3cef"], 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x14) 2m41.695764684s ago: executing program 4 (id=3632): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(0xffffffffffffffff, 0x0, 0x0) 2m37.366951969s ago: executing program 4 (id=3639): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 2m37.186098351s ago: executing program 4 (id=3641): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0xc53}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x20040010) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_TDX_CAPABILITIES(r3, 0xc008aeba, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000480)}) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) pipe(&(0x7f00000002c0)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m35.075473882s ago: executing program 4 (id=3652): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 2m35.011909639s ago: executing program 4 (id=3653): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 2m30.137952895s ago: executing program 9 (id=3675): ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="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", 0x150) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x1, "90"}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m29.541261074s ago: executing program 5 (id=3679): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") ioctl(r1, 0x40140921, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0x0, &(0x7f0000000440)) ioctl(r1, 0x400c0930, &(0x7f0000000500)='\x00'/12) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0xfcf9, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0xf3d378653a9c3a7e, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl(r1, 0x40140921, &(0x7f0000000440)="020000000100000002000000ffffffff00000000") openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) 2m29.311457497s ago: executing program 5 (id=3680): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") 2m29.198909689s ago: executing program 5 (id=3681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_TDX_CAPABILITIES(r1, 0xc008aeba, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000480)}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m29.07746777s ago: executing program 5 (id=3683): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000180), 0x0, 0x2b2, &(0x7f0000002c80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, 0x0, 0x0) 2m28.930086502s ago: executing program 5 (id=3684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$igmp(0x2, 0x3, 0x2) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900001100000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000850000007d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) close(r6) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5, r4}, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) 2m28.418879165s ago: executing program 5 (id=3686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m27.477554979s ago: executing program 41 (id=3686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m26.95797189s ago: executing program 9 (id=3693): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @loopback}}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m26.656179959s ago: executing program 9 (id=3695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x4, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x40}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x3a85ef35342a412e) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x7, 0x5, 0xa, 0x9, 0x9, 0x3, 0x1041, 0x4, 0x0, 0x33a, 0x2000003, 0x2000000100000002, 0x49, 0x9, 0x800005, 0x6b], 0xd000, 0x101052}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m26.500708669s ago: executing program 9 (id=3696): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000180), 0x0, 0x2b2, &(0x7f0000002c80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, 0x0, 0x0) 2m26.309017883s ago: executing program 9 (id=3697): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x8, &(0x7f0000000280)=@string={0x8, 0x3, "6a37df7d66ee"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000280)=ANY=[]) 2m25.632863284s ago: executing program 9 (id=3700): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000004c0)={[{@init_itable}, {@barrier}, {@nogrpid}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nojournal_checksum}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xfd, 0xbb4, &(0x7f0000001140)="$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") 2m25.326045687s ago: executing program 42 (id=3700): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000004c0)={[{@init_itable}, {@barrier}, {@nogrpid}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nojournal_checksum}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xfd, 0xbb4, &(0x7f0000001140)="$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") 2m18.618803526s ago: executing program 43 (id=3653): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 20.883437105s ago: executing program 2 (id=3973): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f"], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r5) keyctl$read(0xb, r5, 0x0, 0x0) close(r4) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0x14}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@getsa={0x30, 0x12, 0x200, 0x70bd2d, 0x25dfdbfe, {@in6=@mcast2, 0x4d3, 0xa, 0x3c}, [@iptfs_pkt_size={0x8, 0x29, 0x200}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 17.021907753s ago: executing program 2 (id=3978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) creat(0x0, 0xd931d3864d39dcfb) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000000, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 11.94665861s ago: executing program 3 (id=3983): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c21"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESDEC, @ANYBLOB=',wfd', @ANYRESHEX]) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.531451261s ago: executing program 7 (id=3985): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x6d, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d04", 0x2d, 0xfffffffffffffffe) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.859065279s ago: executing program 8 (id=3987): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.713052128s ago: executing program 0 (id=3988): socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(r0, 0xfcc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, 0x0, &(0x7f0000004880)=@udp}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) write$UHID_INPUT(r2, &(0x7f0000001700)={0x17, {"a2e3ad214fc752f91b5d0a3087f70e06d038e7ff7fc6e5539b326d078b089b0708385d090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd446383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede0900b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70c0300000086d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ca4d24ad92f243941ed274f12a29ff962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aadeecc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9b97474a5966a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d73994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b88373771b40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285000000000000007007ad1519ad5470de3dd6d6080caf0c53a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e8918ac32a308e15fc37d06aeac289c0523f483e1ff740987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741258c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a941f0000005f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759be0daf60a842b09eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f49013a3a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 10.471566463s ago: executing program 7 (id=3989): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e04003100002200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, 0x0) 10.435506078s ago: executing program 3 (id=3990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) tgkill(r1, r0, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 9.404242048s ago: executing program 2 (id=3991): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000") 9.383347779s ago: executing program 0 (id=3992): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x10, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xccd, 0xb1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xbd, 0x20, 0x5, {0x8, 0xb, 0x0, 0x2, 0x1, 0xb, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2319, 0x4, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x80, 0xd, {0x8, 0x25, 0x1, 0x101, 0x33, 0x6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x8, 0x8, {0x8, 0x25, 0x1, 0x80, 0x3, 0x0, 0x400}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/module/firmware_class/parameters/path\x00', 0x101002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) 9.009826902s ago: executing program 8 (id=3993): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000005c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x406, r5) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) modify_ldt$write2(0x11, 0x0, 0x0) 7.26104315s ago: executing program 8 (id=3994): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") ioctl(r1, 0x40140921, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r2 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, 0x0, &(0x7f0000000440)) ioctl(r1, 0x400c0930, &(0x7f0000000500)='\x00'/12) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0xfcf9, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0xf3d378653a9c3a7e, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl(r1, 0x40140921, &(0x7f0000000440)="020000000100000002000000ffffffff00000000") openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) 6.912922276s ago: executing program 3 (id=3995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000202010400000000000000000a0000053c0002802c0001801400030000000000000000000008ffff0a01010214000400000000000000000000000000000000000c000280"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x200048c0) 6.525699516s ago: executing program 3 (id=3996): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.510962611s ago: executing program 7 (id=3997): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x80) 6.414481966s ago: executing program 8 (id=3998): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x1234\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1234567890\n', 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(0x3) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000600)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='dummy_udc.0\n', 0xc) 6.254863807s ago: executing program 7 (id=3999): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f0000000140), &(0x7f0000000280)=0x6e) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x4c0, @local, 0xc}}, 0x0, 0x0, 0x16, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000480)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_dump={0x3e, 0x9, 0x6, 0x54, "ad53a3712b67940eda0a0159c9030ecbb9013538fc898ae4948b99d24a3703d5de077c92c17fca16650dd3d1863e167c25284504a36c08d595f670de8c4cabc52e50a32382e6252f542ce48d30d371f88c949838"}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x21c, 0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42000000) unshare(0x64000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe}, 0x38) unshare(0x10010400) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000fc0)={'security\x00', 0x2, [{}, {}]}, 0x48) 6.062633825s ago: executing program 0 (id=4000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x6d, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d04", 0x2d, 0xfffffffffffffffe) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.848391431s ago: executing program 7 (id=4001): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x10, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xccd, 0xb1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xbd, 0x20, 0x5, {0x8, 0xb, 0x0, 0x2, 0x1, 0xb, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2319, 0x4, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x80, 0xd, {0x8, 0x25, 0x1, 0x101, 0x33, 0x6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x8, 0x8, {0x8, 0x25, 0x1, 0x80, 0x3, 0x0, 0x400}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/module/firmware_class/parameters/path\x00', 0x101002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) 4.388862135s ago: executing program 8 (id=4002): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @loopback}}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.267765445s ago: executing program 3 (id=4003): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x1234\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1234567890\n', 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(0x3) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000600)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r6, &(0x7f00000004c0)='\n', 0x1) unlinkat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000500)="d6e3471b2a72a3249beea3354268dfbefda5adc37b22df29bd36ada2253a336dbf9046506b09eed081d4af798150002d6c2a85b825d764a09745648d5ff7ab05fd4a8296666e8fd17a83f7931405da910c144897ceabb7038ee39eef743dd600aeafe6f4808cb3ec9a20397afc87f5ba87a3b708591fe7fea854c19264480315ce2a25703ac290d0f2a2c3eb4052a8593a65edfd8ea88e8cdcd93017ecd4c81ab7b2929701a09ea60aa0860a6307038e5ba7fac8f92e3174e7c033bb7a5440dfde8494e09e373df6b3ac7bdf944361b93cda40279d5453a689e5afc9e47c09ec991577047648adb4329498", 0xeb) 3.700375857s ago: executing program 2 (id=4004): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000005c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) modify_ldt$write2(0x11, 0x0, 0x0) 3.583110705s ago: executing program 0 (id=4005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.370681596s ago: executing program 2 (id=4006): socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(r0, 0xfcc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) write$UHID_INPUT(r2, &(0x7f0000001700)={0x17, {"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", 0x1000}}, 0x1006) 2.317249846s ago: executing program 0 (id=4007): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f0000000140), &(0x7f0000000280)=0x6e) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000480)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_dump={0x3e, 0x9, 0x6, 0x54, "ad53a3712b67940eda0a0159c9030ecbb9013538fc898ae4948b99d24a3703d5de077c92c17fca16650dd3d1863e167c25284504a36c08d595f670de8c4cabc52e50a32382e6252f542ce48d30d371f88c949838"}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x21c, 0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42000000) unshare(0x64000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe}, 0x38) unshare(0x10010400) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000fc0)={'security\x00', 0x2, [{}, {}]}, 0x48) 2.097665509s ago: executing program 3 (id=4008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mount$9p_fd(0x0, 0x0, 0x0, 0x2000, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@nodevmap}, {@version_L}, {@privport}, {@cachetag={'cachetag', 0x3d, 'status\x00'}}, {@cache_readahead}, {@dfltgid}, {@privport}, {@fscache}], [{@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@flag='dirsync'}, {@subj_user={'subj_user', 0x3d, '[-(({:*^)'}}]}}) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x276}, {&(0x7f00000005c0)="0456d4856c4b88b97e45594f0ae6bff7d3ae9a40b7bd9bc564c9516b939abd7e0e204453a9bffc037cb73bc5fef9de25180231f9dd5f0663c0093c594de5dc81cb1f638308ba1228e76cd56d8f18cf325b5608e2fd59232cdab01480b8e36c6b8b179ae19b388dea13c9a8429dd4e528929af3733ecd6b773c10132ee6bc3b7430be9233c4fcb610439ee8e2414966e88d0b05868fe5aa421397c33560a46fe8cbd9e02fda254d68d3308c0efc3c02c4845691aacc963d04f433dda8b8c0d00d0df4f8d165e0dd9ad1123fa4", 0xcc}], 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 2.095930428s ago: executing program 7 (id=4009): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0xf, 0x7fff8001}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) 1.064649839s ago: executing program 8 (id=4010): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 854.574752ms ago: executing program 0 (id=4011): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100"/63) ioctl(r1, 0x40140921, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0x0, &(0x7f0000000440)) ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006000000") 0s ago: executing program 2 (id=4012): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000200)=0x8000000) setrlimit(0x7, &(0x7f0000000400)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r1, &(0x7f0000002f80)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000d40)="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", 0x1000}], 0x1, &(0x7f0000001d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000000}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x44, [@broadcast, @remote, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x51, 0x1, 0x4, [{@broadcast, 0x280}, {@loopback, 0x9}, {@local, 0x9}]}]}}}], 0xe8}}, {{&(0x7f0000001e80)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000002240)=[{&(0x7f0000001ec0)="bff218c6c70a087738bdb356ac40cd0793c6262a4aea1343b7bb4c5d6fbffa80a7c29c1a389d11dcd8870b380a7e2069101eff45f574105f105a7c553473230a0fdf11cb5baac9a61ccf06eb9b2b01c7fcdc43070adb56ed9c55d279bfa9b4a1b825fd3560a76196f14d89a64111285d0ae68c31db9304b05b575e53f5576cc2a353a7531097cf4dbd5d19bf3642d8eac654beaab5de132414fe185ebffc9a59cbde0b913f3dc57f5fb58ad193815aaab496881dacbad6524d6e6571c3affc34ddbcd4d9dfc65bfd1d1b1b8b30158aef3886964479000539b3c534d3a8393931202fc662378f30857dd8e36e0d2ba99c54ab99c6dc30b81744617ffe0595", 0xfe}, {&(0x7f0000001fc0)="fc2c0e872c998770dd3203bbc66fa7f2c9b7c353f1826c0d7c5f63d7a32ff2b64f6ad40724d6e093eb6c3e98", 0x2c}, {&(0x7f0000002000)="6c7e10eca8984c8d06131937aa28917a8659c08cfc01ab38153832588057d312ff508c961e6a459e32856063e40cb1cd", 0x30}, {&(0x7f0000002040)="04892650371e868078e283d7764d52a3b446b1768c4c2925ef219f649f8b078b07e6d87c84ff799e1563497bd6396924064918b9498106de192f96e70900f18dfa0a12f8a0954cff7779ee92b32ec2eb9b4a2d796b76ab1982aef913d0a9a485fe1a4ae7a49167effb01a687afbb7b478b3b64308c5d6b654824db0cd7224519ed553bf04ccbd56767c50f4f811fb331ffb4a30cf44536627f2c55bbcf0f863546d207fb8f8d64985110889f95352248c0c8d34aadb8845a58d5aa4af0c48d1e842e578fd4dc5afdd84af2f18d56e99c982e640b07410e77d413", 0xda}, {&(0x7f0000002140)="c47fd9a23b3b66462fdd102eb1cf18cd70c9e94c224ee3cbda22f7325945559304171754a027e17e5be5db0da3b11345932f3424ee9d6908f26be4ef38dd047e39ea6ddb51578d4f1357622f6e410975bd8b4c817cf7378ddf7cced28886538ab64b3480b113bed61888f17a45305de4e544f897d5600094f567c6be202e904ad82cf84c42abc46ab8ff525a93d7561db635d561911efa42fbf0bae5526e682a0363cf57230ab2eee9772b9b8afcc5d32be0f0cfcb695f054be434276360691a602b45713c79236baad0", 0xca}], 0x5, &(0x7f00000022c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast2}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}}, {{&(0x7f0000002340)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000002380)="a25a705d90ca7324e88d9f27ac1061113fd4460337bdb93d9865eeb2c29752e6", 0x20}, {&(0x7f00000023c0)="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", 0xfc}], 0x2, &(0x7f0000002540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0x1a, [@rand_addr=0x64010101, @private=0xa010101, @broadcast, @multicast2, @private=0xa010101, @local, @multicast1]}, @timestamp={0x44, 0x1c, 0xfe, 0x0, 0x0, [0x3, 0x3, 0x0, 0x8, 0x8ee0, 0x5]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xce}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}], 0x128}}, {{&(0x7f0000002680)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000029c0)=[{&(0x7f00000026c0)="9257dc186ed4a1e489a7da53d1a3ebde9bd85d0e3de2a1bc42dc0c40d88952b9100e033699c1e830aa1e7bbfef6c9b088a55a01da12b66b6351c6fc43b4deaf6f43aad5f3c455e664b4d8ed31efe4c2374b54c60fc6c1c2d3918055d56dae216827273c38cf1032169b5e8a3e1735b5d490f6d9b19a3b8d2cf4c3a9f6dcf8cdf8cc033481fc65fdb96776301244671d9ce8deba8182f7938aa2bed2ef96a6ce802dc4992e2d450d7eba1742335b47a16bf8f056ff1c1ec898990b977b23d62555ac79dd40d2ceafb339fb7d07756c707cfb5f067f135", 0xd6}, {&(0x7f00000027c0)="84d16fa0a16e6f959089326307d8515eddcd58cdca86ce94cfc24ac45c1b1094a94319de93d90128e8b4d3f686490f4559ece408ceafba2167ab2b85b6645d6c500881289b0857dca4ad2dfcb2821c6ac7a774a6b4ae28215836", 0x5a}, {&(0x7f0000002840)="221d63580d5b217590777aead27b6704c2d44f19c81052631c4549bcd759025ce06fb7fe7bc147f9677e96cbdefc19cce4f7941e3ec69e2d8e07a8fe16687aabf3931629df036ea58708820a82e760d67ff8284865b8e58cad0982a4eec9274da3b7b4d38f82e528c9f667a9d7b4", 0x6e}, {&(0x7f00000028c0)="aff98f78b3341ee9e424980b9adc792fe402b7045c13ccd5be47f43dbb8f59ab3e66fd04a8e3ef6fb22b121cf00f0034c23789b39c3010500eef3f1165a29179e1edc6e6e8f59b6a4f1f293f84a050d7b242f23d49e8444231df4a8979de574668b7e8c067ae8ca855a3a1d197b0967dfdd7", 0x72}, {&(0x7f0000002940)="04b5a9dfa9f3cb800c6f0d054a3d642d8709ac706c232750cd6c2f30492d1e5c1ac0ff49ebd69a6aa0ea", 0x2a}, {&(0x7f0000002980)="f9346a85cb0da5f8d6808dc0ea223aae9d26d4452da4416a1691524d6433d80257f3d9", 0x23}], 0x6}}, {{&(0x7f0000002a40)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000002f00)=[{&(0x7f0000002a80)="6f09ad115d22282313c78cb514970da106d083a2442f042a0f86b3ee0542a6ad81314c3eabb30ad32172b7b3c7ffecce8d17356c56975c988cdf9a999aea5be6cf6f2a1fcdb490575f472c7b8aa19d717770cffb725e5b3cb66edbcb3a9a8bd8e3a1e91f9bdbe82a951cc9230ddaf4df5362846c2c69bc2259f027c254b61573fe635a02c0e5b97b3acae0cff8716073a411e1031c4076dfc49a92b19d8ebb22896f07a27ec3201b395a5b3a2ec53b21adde7c9bdac796918ee2fecf49f1801d97f2fec519f0692076dc10dd9519b4", 0xcf}, {&(0x7f0000002b80)="f8110bad08600b141ceb51c265968f9add5b1649515afb9202adba1f127be86c8ab4a70421d6cd61d7f4ee7c1605cbfe1909f74c805e1e4c803ff6bfed0a45008028fc309e9028d59bdbcedda85f052315cd5e1b880787eff56aed8004eea6e8b0e20989af24a0056a4bd205c58afc1c1ede6b6c00d6447f73b0c27aedc98b5777ad29509cf02dde3f54c3f05982fe247a51a06028838a59268f9ec91d7000ac9851c973903fb30fcbc3b2868d29fe3c46a8043803989c89d52a7a5912293fd422a2f6", 0xc3}, {&(0x7f0000002c80)="d4e50847ccfc19446213c30d16393085dff85dca3a512aeb33da7df7e28f29c3acb33b480114ae30bc182d9cc41a4c36e1669440c1873b6862d924dd0fa2694778bc44c8c6558063d6", 0x49}, {&(0x7f0000002d00)="b2dd44b8f78912f3d5fdf50c966362b014414d0703db3cf5793a2b8188edb7c818d58b2b823ecdfb1c3f498334fc4747275366405d673756da6060d7012e237a5d66b5699ecece715c5c9e92813fd2b2f33361b6abc8590cfb3fcd69217feb07d6e3a58edf292d3eed311d157be4bb348aa01c2a39201c2542ab495dd23968d5cf5274afb8ba9354ebd191605281c7be80a48a37093d482bd245779e", 0x9c}, {&(0x7f0000002dc0)}, {&(0x7f0000002e00)="47b1b26ac292c39e541b4033a89c3f60d08f7736226f14d53fe2996af3f0568655ff90016093e8696e90b4310f356b7175e7f3bbc49864c5290e8d1dfa19d2cbb9bedf76d64923f6f4019340845a05813da5270929e9f7d7fa39ccbcdbe4c3c91ea311588c3d3926c82574b8e035dc28bc0953893baf82901f7f7c9d05e073355c87615f156abab45cd95f0588918fae661a0d810d17ed9c5de07532c161379074dd1c6d45cd708eaa949bfa3f2f2765c6c17ebab91f34c1f32d2c5f9be8fc448d5c48ae76142b0ebab6d6ac33930bf7b973ef", 0xd3}], 0x6}}], 0x5, 0x40080) kernel console output (not intermixed with test programs): netlink: 144 bytes leftover after parsing attributes in process `syz.4.2964'. [ 1286.865463][T17164] veth0_macvtap: entered promiscuous mode [ 1287.059767][T17164] veth1_macvtap: entered promiscuous mode [ 1287.108017][T17221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.179019][T17164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1287.236366][T17164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1287.751439][T17221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.802146][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.802407][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.804770][ T83] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.836317][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.847303][ T580] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.884923][ T580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.885059][ T580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.051640][T16723] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.702159][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.702211][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.064997][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.065044][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.281244][T17221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.630104][T17221] veth0_vlan: entered promiscuous mode [ 1290.726509][T17221] veth1_vlan: entered promiscuous mode [ 1290.955424][T17221] veth0_macvtap: entered promiscuous mode [ 1290.981297][T17221] veth1_macvtap: entered promiscuous mode [ 1291.144745][T17221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1291.217867][T17221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1291.533170][ T580] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.533250][ T580] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.553233][ T83] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.564154][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.569156][ T580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.569203][ T580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.822846][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.822897][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.435005][T17519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2980'. [ 1297.333093][T17534] loop4: detected capacity change from 0 to 128 [ 1297.344935][T17534] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000°"ý„ ’«Ž¾9ÏÁ€¼)&”7¡Þ©ÊV1ÁKg÷©íÐØ |sdS:¶ÓÀÓ³ú•WÑ@q¶'Ùh ®{Õ€ÒÙý4E>Ïúè #Nrû㦠½RbÅ' [ 1300.263574][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.263669][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.294324][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1301.311066][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1301.312250][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1301.331811][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1301.343143][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1303.560036][ T5626] Bluetooth: hci2: command tx timeout [ 1305.888894][T13513] Bluetooth: hci2: command tx timeout [ 1308.476404][T13513] Bluetooth: hci2: command tx timeout [ 1310.512169][T13513] Bluetooth: hci2: command tx timeout [ 1310.674014][T17555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.694242][T17555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.703357][T17555] bridge_slave_0: entered allmulticast mode [ 1310.723002][T17555] bridge_slave_0: entered promiscuous mode [ 1310.788621][T16723] bridge_slave_1: left allmulticast mode [ 1310.788696][T16723] bridge_slave_1: left promiscuous mode [ 1310.793633][T16723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.947131][T16723] bridge_slave_0: left allmulticast mode [ 1310.947190][T16723] bridge_slave_0: left promiscuous mode [ 1310.947947][T16723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.694427][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1311.718754][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1311.728473][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1311.736675][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1311.745769][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1312.232335][T16723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1312.302094][T16723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.315184][T16723] bond0 (unregistering): Released all slaves [ 1312.343033][T17555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.343283][T17555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.343746][T17555] bridge_slave_1: entered allmulticast mode [ 1312.368493][T17555] bridge_slave_1: entered promiscuous mode [ 1312.552036][T16723] tipc: Left network mode [ 1312.786409][T17555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.889609][T17555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1313.288403][T17555] team0: Port device team_slave_0 added [ 1313.532245][T17629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2994'. [ 1313.860326][T13513] Bluetooth: hci4: command tx timeout [ 1313.915210][T17555] team0: Port device team_slave_1 added [ 1314.279733][T16723] hsr_slave_0: left promiscuous mode [ 1314.311271][T16723] hsr_slave_1: left promiscuous mode [ 1314.312291][T16723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1314.336358][T16723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.098296][T13513] Bluetooth: hci4: command tx timeout [ 1319.518727][T17652] Bluetooth: hci4: command tx timeout [ 1320.532607][T16723] team0 (unregistering): Port device team_slave_1 removed [ 1320.614084][T16723] team0 (unregistering): Port device team_slave_0 removed [ 1322.286601][T17652] Bluetooth: hci4: command tx timeout [ 1322.608448][T17555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1322.618236][T17555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1322.646867][T17555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.678174][T17555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1322.678218][T17555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1322.678250][T17555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.239733][T17555] hsr_slave_0: entered promiscuous mode [ 1323.243568][T17555] hsr_slave_1: entered promiscuous mode [ 1323.244323][T17555] debugfs: 'hsr0' already exists in 'hsr' [ 1323.244351][T17555] Cannot create hsr debugfs directory [ 1323.285862][T17680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3009'. [ 1323.325920][T17680] xt_CONNSECMARK: invalid mode: 0 [ 1324.835112][T16723] IPVS: stop unused estimator thread 0... [ 1324.880357][T17696] loop1: detected capacity change from 0 to 1024 [ 1324.902662][T17696] EXT4-fs: Ignoring removed nobh option [ 1324.919898][T17696] EXT4-fs: Ignoring removed bh option [ 1324.976411][T17696] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e802c018, mo2=0002] [ 1324.984908][T17696] System zones: 0-1, 3-12 [ 1325.019035][T17696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1325.099318][ T30] audit: type=1800 audit(1787684291.428:954): pid=17696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3012" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1326.419670][T17164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1327.393565][T17613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.393653][T17613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.394143][T17613] bridge_slave_0: entered allmulticast mode [ 1327.395635][T17613] bridge_slave_0: entered promiscuous mode [ 1327.543097][T17613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.543387][T17613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.543745][T17613] bridge_slave_1: entered allmulticast mode [ 1327.563248][T17613] bridge_slave_1: entered promiscuous mode [ 1327.700231][T17613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.762326][T17613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.982332][T17744] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3019'. [ 1330.225988][T17613] team0: Port device team_slave_0 added [ 1330.604642][T17744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.605168][T17744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.885624][T17744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.923472][T17744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1331.394550][T17613] team0: Port device team_slave_1 added [ 1331.853047][T17613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1331.864164][T17613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.864235][T17613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1331.922446][T17613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1331.929667][T17613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.956045][T17613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1332.020857][ T83] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.020961][ T83] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.021029][ T83] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.618883][T17773] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1333.691825][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.148660][T17613] hsr_slave_0: entered promiscuous mode [ 1336.167690][T17613] hsr_slave_1: entered promiscuous mode [ 1336.183095][T17613] debugfs: 'hsr0' already exists in 'hsr' [ 1336.183145][T17613] Cannot create hsr debugfs directory [ 1336.202731][T17784] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3027'. [ 1337.864266][T16723] bridge_slave_1: left allmulticast mode [ 1337.864322][T16723] bridge_slave_1: left promiscuous mode [ 1337.864562][T16723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.938398][T16723] bridge_slave_0: left allmulticast mode [ 1337.938463][T16723] bridge_slave_0: left promiscuous mode [ 1337.939187][T16723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.916878][T16723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.946629][T16723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.971910][T16723] bond0 (unregistering): Released all slaves [ 1343.479125][T17817] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1344.064165][T16723] hsr_slave_0: left promiscuous mode [ 1344.083692][T16723] hsr_slave_1: left promiscuous mode [ 1344.091012][T16723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.115443][T16723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.583227][T16723] team0 (unregistering): Port device team_slave_1 removed [ 1346.633747][T16723] team0 (unregistering): Port device team_slave_0 removed [ 1347.265743][T17555] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1347.297559][T17555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1347.306815][T17555] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1347.374132][T17555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1347.383038][T17555] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1347.395497][T17555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1347.404333][T17555] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1347.624408][T17555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1348.834698][T17858] input: syz0 as /devices/virtual/input/input36 [ 1349.848418][T17863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3036'. [ 1350.135416][T16723] IPVS: stop unused estimator thread 0... [ 1353.286786][T17555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.331289][T17555] 8021q: adding VLAN 0 to HW filter on device team0 [ 1353.359704][T16617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.359957][T16617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.467795][T16723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.468030][T16723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1354.943028][T17555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1355.078522][T17911] loop9: detected capacity change from 0 to 1024 [ 1355.086948][T17911] EXT4-fs: Ignoring removed nobh option [ 1355.087203][T17911] EXT4-fs: Ignoring removed bh option [ 1355.145608][T17613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1355.173197][T17613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1355.178719][T17911] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e802c018, mo2=0002] [ 1355.179060][T17911] System zones: 0-1, 3-12 [ 1355.197542][T17613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1355.205264][T17911] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1355.228552][T17613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1355.241006][ T30] audit: type=1800 audit(1787684321.598:955): pid=17911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3043" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1355.262306][T17613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1355.282521][T17613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1355.301186][T17613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1355.503447][T17613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1357.597315][T17928] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1357.705353][T11982] team_slave_0: entered promiscuous mode [ 1357.705425][T11982] team_slave_1: entered promiscuous mode [ 1357.736157][T16953] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.145675][T17938] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3045'. [ 1358.199405][T17555] veth0_vlan: entered promiscuous mode [ 1358.258032][T17555] veth1_vlan: entered promiscuous mode [ 1358.933032][T17555] veth0_macvtap: entered promiscuous mode [ 1358.972155][T17613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1358.984006][T17555] veth1_macvtap: entered promiscuous mode [ 1359.042262][T17555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1359.086846][T17555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1359.104058][T17613] 8021q: adding VLAN 0 to HW filter on device team0 [ 1359.136749][T16617] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.152251][T16617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.152528][T16617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1359.181753][T16617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.181986][T16617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1359.298678][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.354698][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.563439][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.563480][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.620754][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.845620][T17952] loop1: detected capacity change from 0 to 1024 [ 1359.858679][T17952] EXT4-fs: Ignoring removed nobh option [ 1359.867040][T17952] EXT4-fs: Ignoring removed bh option [ 1359.896879][T17952] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e802c018, mo2=0002] [ 1359.911400][T17952] System zones: 0-1, 3-12 [ 1359.921945][T17952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1359.968306][ T30] audit: type=1800 audit(1787684326.328:956): pid=17952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3049" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1360.173553][T15146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.173595][T15146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1361.148993][T17164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.178871][T17613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.863019][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.863135][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.303702][T17613] veth0_vlan: entered promiscuous mode [ 1363.369109][T13513] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1363.407940][T13513] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1363.454841][T13513] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1364.210897][T17978] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1364.411308][T17978] xt_l2tp: wrong L2TP version: 0 [ 1364.495092][T13513] Bluetooth: hci1: command 0x0406 tx timeout [ 1364.497276][T13513] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1364.497986][T13513] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1364.643634][T17987] loop9: detected capacity change from 0 to 1024 [ 1364.655813][T17987] EXT4-fs: Ignoring removed nobh option [ 1364.662649][T17987] EXT4-fs: Ignoring removed bh option [ 1364.822141][T17987] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e802c018, mo2=0002] [ 1364.822407][T17987] System zones: 0-1, 3-12 [ 1364.906027][T17987] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1364.929157][ T30] audit: type=1800 audit(1787684331.288:957): pid=17987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3053" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1365.140929][T15146] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.002319][T16953] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.424421][T17613] veth1_vlan: entered promiscuous mode [ 1366.505718][T18006] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3055'. [ 1366.621221][T15146] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.660563][T17652] Bluetooth: hci5: command tx timeout [ 1366.702158][T18009] loop1: detected capacity change from 0 to 128 [ 1366.717384][T18009] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000°"ý„ ’«Ž¾9ÏÁ€¼)&”7¡Þ©ÊV1ÁKg÷©íÐØ |sdS:¶ÓÀÓ³ú•WÑ@q¶'Ùh ®{Õ€ÒÙý4E>Ïúè #Nrû㦠½RbÅ' [ 1366.835810][T11995] kernel write not supported for file [eventfd] (pid: 11995 comm: kworker/1:13) [ 1367.185679][T15146] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.657213][T15146] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.952217][T17613] veth0_macvtap: entered promiscuous mode [ 1368.146961][T17613] veth1_macvtap: entered promiscuous mode [ 1368.563604][T17613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1370.085743][ T5626] Bluetooth: hci5: command tx timeout [ 1370.380002][T18039] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1370.480185][T17613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1371.496593][ T6189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.690286][T16723] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.690361][T16723] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.690423][T16723] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.833400][T15146] bridge_slave_1: left allmulticast mode [ 1371.833450][T15146] bridge_slave_1: left promiscuous mode [ 1371.833668][T15146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.885223][T15146] bridge_slave_0: left allmulticast mode [ 1371.894053][T15146] bridge_slave_0: left promiscuous mode [ 1371.901508][T15146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.100564][T17652] Bluetooth: hci5: command tx timeout [ 1372.316501][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1372.327120][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1372.359405][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1372.374910][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1372.386632][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1373.324231][T18071] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3065'. [ 1373.837952][T15146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1373.885763][T15146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1373.921860][T15146] bond0 (unregistering): Released all slaves [ 1373.954194][T15146] bond1 (unregistering): Released all slaves [ 1374.038487][T17975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.045939][T17975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.054289][T17975] bridge_slave_0: entered allmulticast mode [ 1374.062707][T17975] bridge_slave_0: entered promiscuous mode [ 1374.085939][T17975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.105651][T17975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.106131][T17975] bridge_slave_1: entered allmulticast mode [ 1374.135996][T17975] bridge_slave_1: entered promiscuous mode [ 1374.197459][ T5626] Bluetooth: hci5: command tx timeout [ 1374.456287][T17975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1374.545713][T17975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1375.301065][T18088] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1375.503752][T18088] xt_l2tp: wrong L2TP version: 0 [ 1375.585042][ T5626] Bluetooth: hci2: command tx timeout [ 1375.702188][T18097] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3068'. [ 1376.261896][T17975] team0: Port device team_slave_0 added [ 1376.273056][T17975] team0: Port device team_slave_1 added [ 1377.405824][T15146] hsr_slave_0: left promiscuous mode [ 1377.449207][T15146] hsr_slave_1: left promiscuous mode [ 1377.449930][T15146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1377.449998][T15146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1377.511151][T15146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1377.518769][T15146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1377.590615][T15146] veth1_macvtap: left promiscuous mode [ 1377.590682][T15146] veth0_macvtap: left promiscuous mode [ 1377.620132][ T5626] Bluetooth: hci2: command tx timeout [ 1377.635284][T15146] veth1_vlan: left promiscuous mode [ 1377.635497][T15146] veth0_vlan: left promiscuous mode [ 1380.060423][ T5626] Bluetooth: hci2: command tx timeout [ 1380.570634][T18130] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3074'. [ 1380.681487][T15146] team0 (unregistering): Port device team_slave_1 removed [ 1380.772408][T15146] team0 (unregistering): Port device team_slave_0 removed [ 1381.293710][T17975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1381.293763][T17975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1381.293835][T17975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1381.387497][T18123] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1381.477475][T17975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1381.477522][T17975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1381.477553][T17975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1382.113303][ T5626] Bluetooth: hci2: command tx timeout [ 1384.377562][T17975] hsr_slave_0: entered promiscuous mode [ 1384.378704][T17975] hsr_slave_1: entered promiscuous mode [ 1387.708493][T18062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.708885][T18062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.709298][T18062] bridge_slave_0: entered allmulticast mode [ 1387.740442][T18062] bridge_slave_0: entered promiscuous mode [ 1387.758332][T18062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.758754][T18062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.766257][T18062] bridge_slave_1: entered allmulticast mode [ 1387.767552][T18062] bridge_slave_1: entered promiscuous mode [ 1389.683856][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 1390.105182][T15146] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.776171][T18062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.784537][T18203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3079'. [ 1390.888359][T18062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.051771][T17975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.699669][T15146] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.786854][T18062] team0: Port device team_slave_0 added [ 1392.848750][T18062] team0: Port device team_slave_1 added [ 1393.132165][T17975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.378435][T18224] udc dummy_udc.0: failed to start g1: -2 [ 1393.378497][T18224] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -2 [ 1393.487889][T18224] UDC core: g1: couldn't find an available UDC or it's busy [ 1393.514161][T15146] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.664163][T18062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1393.664203][T18062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.664648][T18062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1393.716388][T18062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1393.716441][T18062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.716477][T18062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1393.915383][T17975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.219603][T15146] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.507938][T17652] Bluetooth: hci0: command 0x0406 tx timeout [ 1394.538284][T18062] hsr_slave_0: entered promiscuous mode [ 1394.557353][T18062] hsr_slave_1: entered promiscuous mode [ 1394.562254][T18062] debugfs: 'hsr0' already exists in 'hsr' [ 1394.562326][T18062] Cannot create hsr debugfs directory [ 1394.777297][T17975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.804618][T18270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3095'. [ 1399.012518][T18287] overlayfs: overlapping lowerdir path [ 1399.849765][T18290] udc dummy_udc.0: failed to start g1: -2 [ 1399.849824][T18290] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -2 [ 1399.872878][T18290] UDC core: g1: couldn't find an available UDC or it's busy [ 1399.913628][T18288] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1400.007663][T11982] team_slave_0: entered promiscuous mode [ 1400.007747][T11982] team_slave_1: entered promiscuous mode [ 1400.167296][T15146] bridge_slave_1: left allmulticast mode [ 1400.167347][T15146] bridge_slave_1: left promiscuous mode [ 1400.167590][T15146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.207765][T15146] bridge_slave_0: left allmulticast mode [ 1400.209576][T15146] bridge_slave_0: left promiscuous mode [ 1400.237479][T15146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.364725][T15146] bridge_slave_1: left allmulticast mode [ 1400.364784][T15146] bridge_slave_1: left promiscuous mode [ 1400.365447][T15146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.529483][T15146] bridge_slave_0: left allmulticast mode [ 1400.529539][T15146] bridge_slave_0: left promiscuous mode [ 1400.533869][T15146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.667572][T18306] 9p: Bad value for 'wfdno' [ 1401.345455][T18315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3105'. [ 1401.545813][T15146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1401.574644][T15146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1401.601984][T15146] bond0 (unregistering): Released all slaves [ 1402.042089][T15146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1402.059523][T15146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1402.077850][T15146] bond0 (unregistering): Released all slaves [ 1402.307851][T17975] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1402.447263][T17975] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1402.463191][T17975] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1402.561308][T17975] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1402.623625][T17975] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1402.647984][T18321] fuse: Bad value for 'fd' [ 1402.697073][T17975] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1402.927609][T17975] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1402.986199][T17975] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1404.924360][T18344] overlayfs: conflicting lowerdir path [ 1405.210334][T18346] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1407.422862][T15146] hsr_slave_0: left promiscuous mode [ 1407.436348][T15146] hsr_slave_1: left promiscuous mode [ 1407.447679][T15146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1407.447752][T15146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.478285][T15146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1407.478342][T15146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1407.577656][T15146] hsr_slave_0: left promiscuous mode [ 1407.588870][T15146] hsr_slave_1: left promiscuous mode [ 1407.606074][T15146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1407.606131][T15146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.622207][T15146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1407.622273][T15146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1407.824877][T15146] veth1_macvtap: left promiscuous mode [ 1407.824951][T15146] veth0_macvtap: left promiscuous mode [ 1407.830707][T15146] veth1_vlan: left promiscuous mode [ 1407.830795][T15146] veth0_vlan: left promiscuous mode [ 1407.876707][T15146] veth1_macvtap: left promiscuous mode [ 1407.876770][T15146] veth0_macvtap: left promiscuous mode [ 1407.877237][T15146] veth1_vlan: left promiscuous mode [ 1407.877426][T15146] veth0_vlan: left promiscuous mode [ 1408.325654][T18381] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3115'. [ 1409.218551][T18391] 9p: Bad value for 'wfdno' [ 1409.456199][T15146] team0 (unregistering): Port device team_slave_1 removed [ 1409.543975][T15146] team0 (unregistering): Port device team_slave_0 removed [ 1410.639594][T15146] team0 (unregistering): Port device team_slave_1 removed [ 1410.696364][T15146] team0 (unregistering): Port device team_slave_0 removed [ 1412.435284][T18411] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1413.400760][T18418] xt_l2tp: wrong L2TP version: 0 [ 1414.533736][T17975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1414.619443][T17975] 8021q: adding VLAN 0 to HW filter on device team0 [ 1414.647576][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.647717][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1414.747440][T16617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.747571][T16617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1415.947350][T18062] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1415.996881][T18062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1416.010233][T18062] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1416.048860][T18062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1416.062988][T18062] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1416.095091][T18062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1416.161215][T17975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.178207][T18062] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1416.201242][T18062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1416.432841][T17975] veth0_vlan: entered promiscuous mode [ 1416.476352][T17975] veth1_vlan: entered promiscuous mode [ 1416.552784][T18062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.566218][T17975] veth0_macvtap: entered promiscuous mode [ 1416.594078][T17975] veth1_macvtap: entered promiscuous mode [ 1416.682307][T18062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1416.719870][T17975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1416.766029][T16617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.766394][T16617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1416.787203][T17975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.894594][T16617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.894735][T16617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.175179][T15146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.175285][T15146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.181702][T16437] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.253746][T16617] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.385170][T18062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1417.729644][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.738181][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.870289][T16617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.870335][T16617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.318242][T18492] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1419.570720][T18062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1420.259046][T18503] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1421.337176][T18062] veth0_vlan: entered promiscuous mode [ 1421.372937][T18062] veth1_vlan: entered promiscuous mode [ 1421.512597][T18062] veth0_macvtap: entered promiscuous mode [ 1421.541634][T18062] veth1_macvtap: entered promiscuous mode [ 1421.634649][T18062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1421.709127][T18062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.775120][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.779268][ T83] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.779390][ T83] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.796055][ T83] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.216889][T16617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.216933][T16617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.489137][T16437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.489177][T16437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.145851][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.145934][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.252824][T18545] xt_l2tp: wrong L2TP version: 0 [ 1430.986640][T18590] xt_l2tp: wrong L2TP version: 0 [ 1432.462821][T18600] netlink: 'syz.1.3150': attribute type 13 has an invalid length. [ 1433.940652][T18604] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1439.393440][T18650] xt_l2tp: wrong L2TP version: 0 [ 1446.015453][T18703] xt_l2tp: wrong L2TP version: 0 [ 1455.093238][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1460.902515][T18824] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1463.171170][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1466.381798][T18866] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1467.177497][T18878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3201'. [ 1469.228683][T18887] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1470.167414][T18884] kvm: pic: non byte write [ 1474.359537][T18938] kvm: pic: non byte write [ 1474.513935][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1476.807591][T18950] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 1478.823916][T18959] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1479.559094][ T5749] team_slave_0: entered promiscuous mode [ 1479.559154][ T5749] team_slave_1: entered promiscuous mode [ 1482.663745][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1484.979744][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.979842][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.921382][T19058] netlink: 'syz.0.3248': attribute type 13 has an invalid length. [ 1491.915192][T19068] loop0: detected capacity change from 0 to 8192 [ 1492.502735][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 1494.951266][T19091] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1496.032726][T19118] xt_limit: Overflow, try lower: 1207959552/384 [ 1496.052864][T19118] loop1: detected capacity change from 0 to 64 [ 1496.666193][T19113] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1496.980625][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 1497.613508][T19143] input: syz0 as /devices/virtual/input/input37 [ 1498.444288][T19032] udevd[19032]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1501.608243][T19179] netlink: 'syz.4.3275': attribute type 13 has an invalid length. [ 1502.556136][T19199] syz.4.3280 uses obsolete (PF_INET,SOCK_PACKET) [ 1504.396310][T19220] overlayfs: missing 'lowerdir' [ 1508.721257][T19258] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1509.577302][T17369] team_slave_0: entered promiscuous mode [ 1509.577373][T17369] team_slave_1: entered promiscuous mode [ 1510.190782][T19262] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1510.207390][T19262] xt_l2tp: wrong L2TP version: 0 [ 1513.927355][T19283] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3298'. [ 1513.927671][T19283] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3298'. [ 1516.058955][T19294] syzkaller0: create flow: hash 1167716957 index 2 [ 1516.327643][T16723] syzkaller0: tun_net_xmit 76 [ 1516.341217][T16723] syzkaller0: tun_net_xmit 48 [ 1516.350334][ T5749] syzkaller0: tun_net_xmit 76 [ 1516.521157][T19299] overlayfs: failed to resolve 'lower': -2 [ 1516.542455][T17369] syzkaller0: tun_net_xmit 76 [ 1516.741357][T17369] syzkaller0: tun_net_xmit 76 [ 1517.330445][T11994] syzkaller0: tun_net_xmit 76 [ 1517.333987][T19292] syzkaller0: delete flow: hash 1167716957 index 2 [ 1517.365143][T19317] loop3: detected capacity change from 0 to 128 [ 1517.388472][T19317] FAT-fs (loop3): data area starts beyond volume (33 > 0) [ 1517.388532][T19317] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1519.661674][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3310'. [ 1519.661963][T19349] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3310'. [ 1526.239691][T19397] input: syz0 as /devices/virtual/input/input38 [ 1533.103728][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3329'. [ 1533.103817][T19445] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3329'. [ 1540.267487][T19500] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1541.479858][T19510] loop4: detected capacity change from 0 to 16 [ 1541.502908][T19510] erofs (device loop4): mounted with root inode @ nid 36. [ 1542.109660][T19524] kvm: pic: non byte write [ 1542.207776][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1542.718568][T19545] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1542.718618][T19545] overlayfs: failed to set xattr on upper [ 1542.753539][T19545] overlayfs: ...falling back to redirect_dir=nofollow. [ 1542.754923][T19545] overlayfs: ...falling back to index=off. [ 1542.754957][T19545] overlayfs: ...falling back to uuid=null. [ 1546.147288][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.147374][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.552871][T19588] loop1: detected capacity change from 0 to 16 [ 1546.569536][T19588] erofs (device loop1): mounted with root inode @ nid 36. [ 1547.070526][T19589] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3362'. [ 1547.768218][T19588] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1547.768300][T19588] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1547.846957][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1551.138200][T19631] overlayfs: overlapping lowerdir path [ 1551.327432][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1552.814298][T19670] kvm: pic: non byte write [ 1553.283526][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1556.751516][T19728] loop3: detected capacity change from 0 to 764 [ 1558.040001][T19737] kvm: pic: non byte write [ 1559.012606][T19763] netlink: 'syz.0.3400': attribute type 4 has an invalid length. [ 1559.047686][T19765] fuse: Unknown parameter 'user_i00000000000000000000' [ 1563.228256][T19832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3420'. [ 1569.552997][T19875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3434'. [ 1573.230306][T11993] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1573.916717][T11993] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1573.925289][T11993] usb 4-1: not running at top speed; connect to a high speed hub [ 1573.925353][T11993] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 1573.960834][T11993] usb 4-1: config 1 interface 0 altsetting 126 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1573.960893][T11993] usb 4-1: config 1 interface 0 altsetting 126 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1573.960940][T11993] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1574.014179][T11993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.022807][T11993] usb 4-1: Product: syz [ 1574.030534][T11993] usb 4-1: Manufacturer: syz [ 1574.030584][T11993] usb 4-1: SerialNumber: syz [ 1574.056241][T19906] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1574.488829][T19906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.501676][T19906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.559662][T11993] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input39 [ 1574.573838][ T4969] bcm5974 4-1:1.0: could not read from device [ 1574.608578][ T4969] bcm5974 4-1:1.0: could not read from device [ 1574.627284][T11993] usb 4-1: USB disconnect, device number 64 [ 1574.627453][ T4969] bcm5974 4-1:1.0: could not read from device [ 1576.140585][T19928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1576.440942][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1576.464013][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1576.476429][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1576.484608][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1576.492543][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1578.580149][T17652] Bluetooth: hci4: command tx timeout [ 1580.820558][T17652] Bluetooth: hci4: command tx timeout [ 1581.582895][T19930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.583259][T19930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.587170][T19930] bridge_slave_0: entered allmulticast mode [ 1581.619078][T19930] bridge_slave_0: entered promiscuous mode [ 1581.643178][T19930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.650944][T19930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.651449][T19930] bridge_slave_1: entered allmulticast mode [ 1581.690048][T19930] bridge_slave_1: entered promiscuous mode [ 1582.056880][T19930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1582.111224][T19930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1582.923454][T17652] Bluetooth: hci4: command tx timeout [ 1583.037462][T19930] team0: Port device team_slave_0 added [ 1583.151115][T19930] team0: Port device team_slave_1 added [ 1583.266441][T19989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1583.426298][T19930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1583.426348][T19930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1583.429301][T19930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1583.494765][T19930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1583.494826][T19930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1583.497660][T19930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1583.885321][T19930] hsr_slave_0: entered promiscuous mode [ 1583.897686][T19930] hsr_slave_1: entered promiscuous mode [ 1583.910786][T19930] debugfs: 'hsr0' already exists in 'hsr' [ 1583.919892][T19930] Cannot create hsr debugfs directory [ 1584.996214][T17652] Bluetooth: hci4: command tx timeout [ 1590.830358][T17369] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1590.996068][T17369] usb 10-1: Using ep0 maxpacket: 32 [ 1591.003463][T17369] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1591.023724][T17369] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1591.023777][T17369] usb 10-1: config 0 has no interface number 0 [ 1591.060516][T17369] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.060574][T17369] usb 10-1: Product: syz [ 1591.060591][T17369] usb 10-1: Manufacturer: syz [ 1591.060656][T17369] usb 10-1: SerialNumber: syz [ 1591.099147][T17369] usb 10-1: config 0 descriptor?? [ 1591.657955][T17369] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1591.658011][T17369] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1593.688861][T17369] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 1593.689188][T17369] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1593.751479][T17369] usb 10-1: USB disconnect, device number 2 [ 1596.952580][T19930] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1596.984059][T20087] kvm: pic: non byte write [ 1597.043649][T19930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1597.059729][T19930] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1597.138696][T19930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1597.170645][T19930] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1597.230490][T19930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1597.244805][T19930] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1597.282585][T19930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1598.023681][T20110] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1598.201667][T19930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1598.345808][T19930] 8021q: adding VLAN 0 to HW filter on device team0 [ 1598.427033][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.427159][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1598.506238][T16770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.506370][T16770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1600.318567][T19930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1600.748122][T19930] veth0_vlan: entered promiscuous mode [ 1600.834141][T19930] veth1_vlan: entered promiscuous mode [ 1601.055984][T19930] veth0_macvtap: entered promiscuous mode [ 1601.117558][T19930] veth1_macvtap: entered promiscuous mode [ 1601.279577][T19930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1601.379088][T19930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1601.520180][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.525841][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.841383][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.858595][T15146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.675732][T15146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1602.675774][T15146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.001346][T15146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.001395][T15146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.650907][T11995] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1604.823419][T11995] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1604.843602][T11995] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.843696][T11995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.897404][T11995] usb 5-1: config 0 descriptor?? [ 1604.928585][T11995] pwc: Askey VC010 type 2 USB webcam detected. [ 1605.402484][T11995] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1605.419966][T11995] pwc: recv_control_msg error -32 req 02 val 2700 [ 1605.433868][T11995] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1605.445116][T11995] pwc: recv_control_msg error -32 req 04 val 1000 [ 1605.454780][T11995] pwc: recv_control_msg error -32 req 04 val 1300 [ 1605.491040][T11995] pwc: recv_control_msg error -32 req 04 val 1400 [ 1605.506579][T11995] pwc: recv_control_msg error -32 req 02 val 2000 [ 1605.519892][T11995] pwc: recv_control_msg error -32 req 02 val 2100 [ 1605.534515][T11995] pwc: recv_control_msg error -32 req 04 val 1500 [ 1605.549259][T11995] pwc: recv_control_msg error -32 req 02 val 2500 [ 1605.798868][T11995] pwc: recv_control_msg error -71 req 02 val 2600 [ 1605.806138][T11995] pwc: recv_control_msg error -71 req 02 val 2900 [ 1605.813572][T11995] pwc: recv_control_msg error -71 req 02 val 2800 [ 1605.822058][T11995] pwc: recv_control_msg error -71 req 04 val 1100 [ 1605.828950][T11995] pwc: recv_control_msg error -71 req 04 val 1200 [ 1605.841612][T11995] pwc: Registered as video103. [ 1605.909905][T11995] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40 [ 1605.942624][T11995] usb 5-1: USB disconnect, device number 59 [ 1606.078213][ T5729] kernel write not supported for file [eventfd] (pid: 5729 comm: kworker/1:5) [ 1606.156577][T20214] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1606.250909][T20214] md: array md0 already has disks! [ 1606.364526][T20214] md: could not open device unknown-block(1,1). [ 1606.364590][T20214] md: error, md_import_device() returned -16 [ 1606.849813][T20225] fuse: Bad value for 'group_id' [ 1606.849861][T20225] fuse: Bad value for 'group_id' [ 1607.317183][T20229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1607.470242][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.470306][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.283099][T20245] fuse: Unknown parameter 'group_i00000000000000000000' [ 1611.930781][T20262] fuse: Bad value for 'group_id' [ 1611.930812][T20262] fuse: Bad value for 'group_id' [ 1612.280755][T20266] gadgetfs: bound to dummy_udc driver [ 1619.990898][ T5729] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1620.150044][ T5729] usb 10-1: Using ep0 maxpacket: 16 [ 1620.157820][ T5729] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1620.170728][ T5729] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 1620.170774][ T5729] usb 10-1: config 0 has no interface number 0 [ 1620.170846][ T5729] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1620.170882][ T5729] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1620.214169][ T5729] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.224364][ T5729] usb 10-1: Product: syz [ 1620.224426][ T5729] usb 10-1: Manufacturer: syz [ 1620.224450][ T5729] usb 10-1: SerialNumber: syz [ 1620.249239][ T5729] usb 10-1: config 0 descriptor?? [ 1620.255611][T20333] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1620.264287][T20333] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1620.509165][T20333] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1620.509352][T20333] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1620.562648][T20341] fuse: Bad value for 'group_id' [ 1620.567817][T20341] fuse: Bad value for 'group_id' [ 1620.718818][T20343] loop4: detected capacity change from 0 to 1024 [ 1620.745740][T20343] EXT4-fs: Ignoring removed nobh option [ 1620.746033][T20343] EXT4-fs: Ignoring removed bh option [ 1620.778504][ T5729] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1620.807865][T20343] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e802c018, mo2=0002] [ 1620.808158][T20343] System zones: 0-1, 3-12 [ 1620.835467][T20343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1620.885216][ T30] audit: type=1800 audit(1787684587.248:958): pid=20343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3538" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1622.136672][T17975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1622.435825][T20358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1624.232470][T17369] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1624.313298][ T5729] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1624.313352][ T5729] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1624.313711][ T5729] asix 10-1:0.34: probe with driver asix failed with error -71 [ 1624.364790][ T5729] usb 10-1: USB disconnect, device number 3 [ 1624.400370][T17369] usb 6-1: Using ep0 maxpacket: 16 [ 1624.404637][T17369] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1624.415996][T17369] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.416042][T17369] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1624.449052][T17369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.449108][T17369] usb 6-1: Product: syz [ 1624.449149][T17369] usb 6-1: Manufacturer: syz [ 1624.449225][T17369] usb 6-1: SerialNumber: syz [ 1624.528559][T17369] usb 6-1: 0:2 : does not exist [ 1624.742623][T17369] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1625.413781][T17369] usb 6-1: USB disconnect, device number 19 [ 1625.758166][T19266] udevd[19266]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1629.672944][T20457] fuse: Unknown parameter 'fd0xffffffffffffffffÿÿÿÿÿÿÿÿ' [ 1629.817222][T20460] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1629.890402][T20460] md: array md0 already has disks! [ 1631.531899][T20460] md: could not open device unknown-block(1,1). [ 1631.531989][T20460] md: error, md_import_device() returned -16 [ 1632.608032][T20483] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 1633.262028][T20482] fuse: Unknown parameter 'group_id00000000000000000000' [ 1634.861933][T20522] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3579'. [ 1636.295374][T11982] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1636.461049][T11982] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1636.473555][T11982] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1636.473631][T11982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1636.473668][T11982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1636.473697][T11982] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1636.473747][T11982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.534746][T11982] usb 6-1: config 0 descriptor?? [ 1637.548138][T20535] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 1640.599667][T11982] usbhid 6-1:0.0: can't add hid device: -71 [ 1640.600149][T11982] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1640.619496][T11982] usb 6-1: USB disconnect, device number 20 [ 1641.002773][T20554] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1641.080512][T20554] md: array md0 already has disks! [ 1641.210363][T20554] md: could not open device unknown-block(1,1). [ 1641.210447][T20554] md: error, md_import_device() returned -16 [ 1641.278162][T20554] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1641.278222][T20554] md: pers->run() failed ... [ 1641.331040][T20554] md: could not open device unknown-block(1,2). [ 1641.331132][T20554] md: error, md_import_device() returned -16 [ 1642.888658][T20573] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3590'. [ 1644.611511][T20590] fuse: Bad value for 'user_id' [ 1644.611561][T20590] fuse: Bad value for 'user_id' [ 1644.873119][T20595] loop3: detected capacity change from 0 to 1024 [ 1644.874144][T20595] EXT4-fs: Ignoring removed nobh option [ 1644.874285][T20595] EXT4-fs: Ignoring removed bh option [ 1644.919331][T20595] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e802c018, mo2=0002] [ 1644.928832][T20595] System zones: 0-1, 3-12 [ 1644.938157][T20595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1644.953457][ T30] audit: type=1800 audit(1787684611.318:959): pid=20595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3595" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1645.150303][T20597] md: array md0 already has disks! [ 1645.467769][T20597] md: could not open device unknown-block(1,1). [ 1645.474416][T20597] md: error, md_import_device() returned -16 [ 1645.476226][T20602] md: could not open device unknown-block(1,2). [ 1645.588750][T20602] md: error, md_import_device() returned -16 [ 1645.985924][T18062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1646.144766][T20613] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3597'. [ 1646.508056][T20625] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1646.525822][T20626] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1646.551370][T20625] md: array md0 already has disks! [ 1646.571224][T20626] md: array md0 already has disks! [ 1646.722535][T20625] md: could not open device unknown-block(1,1). [ 1646.724121][T20625] md: error, md_import_device() returned -16 [ 1646.737869][T20631] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1646.737914][T20631] md: pers->run() failed ... [ 1646.760809][T20626] md: could not open device unknown-block(1,1). [ 1646.760893][T20626] md: error, md_import_device() returned -16 [ 1648.743907][T20658] fuse: Bad value for 'user_id' [ 1648.743961][T20658] fuse: Bad value for 'user_id' [ 1649.300112][T17369] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1649.452814][T17369] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1649.452886][T17369] usb 4-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=ea.e7 [ 1649.472615][T17369] usb 4-1: config 0 has no interfaces? [ 1649.500202][T17369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.500255][T17369] usb 4-1: Product: syz [ 1649.500303][T17369] usb 4-1: Manufacturer: syz [ 1649.500326][T17369] usb 4-1: SerialNumber: syz [ 1649.532450][T17369] usb 4-1: config 0 descriptor?? [ 1650.038044][T20689] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1650.078935][T20689] md: array md0 already has disks! [ 1650.191197][T20692] md: array md0 already has disks! [ 1650.203496][T20695] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1650.203542][T20695] md: pers->run() failed ... [ 1650.222537][T20689] md: could not open device unknown-block(1,1). [ 1650.222737][T20689] md: error, md_import_device() returned -16 [ 1650.502686][T20705] fuse: Bad value for 'user_id' [ 1650.502726][T20705] fuse: Bad value for 'user_id' [ 1650.660292][T17369] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1650.824715][T17369] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1650.847138][T17369] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1650.859434][T17369] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1650.859471][T17369] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1650.859521][T17369] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.905536][T20700] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1651.010267][T20718] md: array md0 already has disks! [ 1651.100159][T20718] md: could not open device unknown-block(1,1). [ 1651.100274][T20718] md: error, md_import_device() returned -16 [ 1652.389325][ T5729] usb 4-1: USB disconnect, device number 65 [ 1652.989752][T20738] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1653.030573][T20738] md: array md0 already has disks! [ 1653.084570][T20738] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1653.084627][T20738] md: pers->run() failed ... [ 1653.110387][T20738] md: could not open device unknown-block(1,2). [ 1653.110466][T20738] md: error, md_import_device() returned -16 [ 1653.859253][T20744] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1655.352949][T20748] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1656.629340][T17369] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 1656.684794][T17369] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input41 [ 1656.737549][T17369] usb 10-1: USB disconnect, device number 4 [ 1656.743723][ C0] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1660.912863][T20770] md: array md0 already has disks! [ 1661.194512][T20779] fuse: Unknown parameter 'grou00000000000000000000' [ 1663.113420][T20805] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1663.180204][T20805] md: array md0 already has disks! [ 1663.276220][T20805] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1663.276266][T20805] md: pers->run() failed ... [ 1663.321092][T20812] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1663.330806][T20805] md: could not open device unknown-block(1,2). [ 1663.330929][T20805] md: error, md_import_device() returned -16 [ 1663.390239][T20812] md: array md0 already has disks! [ 1663.454335][T20812] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1663.454380][T20812] md: pers->run() failed ... [ 1663.501491][T20812] md: could not open device unknown-block(1,2). [ 1663.501612][T20812] md: error, md_import_device() returned -16 [ 1663.970919][T20825] md: array md0 already has disks! [ 1664.010673][ T5749] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1664.527985][T20829] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1664.553239][T20829] xt_l2tp: wrong L2TP version: 0 [ 1665.502292][T20825] md: could not open device unknown-block(1,1). [ 1665.502373][T20825] md: error, md_import_device() returned -16 [ 1665.560783][ T5749] usb 6-1: Using ep0 maxpacket: 32 [ 1665.562548][ T5749] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1665.566945][ T5749] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1665.567021][ T5749] usb 6-1: config 0 has no interface number 0 [ 1665.598085][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.598137][ T5749] usb 6-1: Product: syz [ 1665.598174][ T5749] usb 6-1: Manufacturer: syz [ 1665.598243][ T5749] usb 6-1: SerialNumber: syz [ 1665.624760][ T5749] usb 6-1: config 0 descriptor?? [ 1666.051740][ T5749] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1666.051800][ T5749] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1666.385773][T20845] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1666.460344][T20845] md: array md0 already has disks! [ 1666.490385][T20845] md: could not open device unknown-block(1,1). [ 1666.490688][T20845] md: error, md_import_device() returned -16 [ 1666.509836][T20845] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1666.510081][T20845] md: pers->run() failed ... [ 1666.570368][T20845] md: could not open device unknown-block(1,2). [ 1666.570464][T20845] md: error, md_import_device() returned -16 [ 1666.800011][T11994] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1666.962895][T11994] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1666.973887][T11994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1666.984661][T11994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.997397][T11994] usb 4-1: config 0 descriptor?? [ 1667.010382][T11994] pwc: Askey VC010 type 2 USB webcam detected. [ 1667.295998][ T5749] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1667.296741][ T5749] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1667.324402][ T5749] usb 6-1: USB disconnect, device number 21 [ 1667.415474][T11994] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1667.424171][T11994] pwc: recv_control_msg error -32 req 02 val 2700 [ 1667.434807][T11994] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1667.442253][T11994] pwc: recv_control_msg error -32 req 04 val 1000 [ 1667.451200][T11994] pwc: recv_control_msg error -32 req 04 val 1300 [ 1667.458464][T11994] pwc: recv_control_msg error -32 req 04 val 1400 [ 1667.466249][T11994] pwc: recv_control_msg error -32 req 02 val 2000 [ 1667.473713][T11994] pwc: recv_control_msg error -32 req 02 val 2100 [ 1667.682999][T11994] pwc: recv_control_msg error -71 req 02 val 2500 [ 1667.690326][T11994] pwc: recv_control_msg error -71 req 02 val 2400 [ 1667.697655][T11994] pwc: recv_control_msg error -71 req 02 val 2600 [ 1667.704821][T11994] pwc: recv_control_msg error -71 req 02 val 2900 [ 1667.712393][T11994] pwc: recv_control_msg error -71 req 02 val 2800 [ 1667.719601][T11994] pwc: recv_control_msg error -71 req 04 val 1100 [ 1667.732639][T11994] pwc: recv_control_msg error -71 req 04 val 1200 [ 1667.742401][T11994] pwc: Registered as video103. [ 1667.751780][T11994] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input42 [ 1667.806282][T11994] usb 4-1: USB disconnect, device number 66 [ 1668.384465][T20878] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1668.400576][T20878] md: array md0 already has disks! [ 1668.410066][ T5749] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1668.480730][T20878] md: could not open device unknown-block(1,1). [ 1668.480826][T20878] md: error, md_import_device() returned -16 [ 1668.486397][T20878] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1668.486453][T20878] md: pers->run() failed ... [ 1668.540714][T20878] md: could not open device unknown-block(1,2). [ 1668.540804][T20878] md: error, md_import_device() returned -16 [ 1668.562012][ T5749] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1668.566219][ T5749] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.566359][ T5749] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.593381][ T5749] usb 10-1: config 0 descriptor?? [ 1668.765972][T20883] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1668.807120][ T5749] usbhid 10-1:0.0: can't add hid device: -71 [ 1668.807430][ T5749] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1668.815602][T20883] md: array md0 already has disks! [ 1668.826521][ T5749] usb 10-1: USB disconnect, device number 5 [ 1668.868033][T20883] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1668.868081][T20883] md: pers->run() failed ... [ 1668.903512][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.903609][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.919454][T20883] md: could not open device unknown-block(1,2). [ 1668.919510][T20883] md: error, md_import_device() returned -16 [ 1669.252620][T20894] loop5: detected capacity change from 0 to 128 [ 1669.260067][T11995] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1669.343491][T19930] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1669.364259][T19930] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1669.431343][T11995] usb 10-1: Using ep0 maxpacket: 16 [ 1669.433868][T11995] usb 10-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1669.444597][T11995] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1669.444759][T11995] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.476227][T11995] usb 10-1: config 0 descriptor?? [ 1669.520751][T20896] loop3: detected capacity change from 0 to 128 [ 1669.534036][T20896] ext4: Unknown parameter 'measure' [ 1670.532082][T11995] aquacomputer_d5next 0003:0C70:F00D.0012: unknown main item tag 0x0 [ 1670.532154][T11995] aquacomputer_d5next 0003:0C70:F00D.0012: unknown main item tag 0x0 [ 1670.532226][T11995] aquacomputer_d5next 0003:0C70:F00D.0012: unknown main item tag 0x0 [ 1670.532322][T11995] aquacomputer_d5next 0003:0C70:F00D.0012: unknown main item tag 0x0 [ 1670.532397][T11995] aquacomputer_d5next 0003:0C70:F00D.0012: unknown main item tag 0x0 [ 1670.532480][T11995] aquacomputer_d5next 0003:0C70:F00D.0012: unknown main item tag 0x0 [ 1670.532975][T11995] aquacomputer_d5next 0003:0C70:F00D.0012: unknown main item tag 0x0 [ 1670.533057][T11995] aquacomputer_d5next 0003:0C70:F00D.0012: unknown main item tag 0x0 [ 1670.533133][T11995] aquacomputer_d5next 0003:0C70:F00D.0012: unknown main item tag 0x0 [ 1670.533208][T11995] aquacomputer_d5next 0003:0C70:F00D.0012: unknown main item tag 0x0 [ 1670.557263][T11995] aquacomputer_d5next 0003:0C70:F00D.0012: unbalanced collection at end of report description [ 1670.559731][T11995] aquacomputer_d5next 0003:0C70:F00D.0012: probe with driver aquacomputer_d5next failed with error -22 [ 1670.590568][T11995] usb 10-1: USB disconnect, device number 6 [ 1670.712798][T15146] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.966342][T15146] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.991603][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1671.011648][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1671.023431][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1671.034664][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1671.035220][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1671.145259][T15146] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.469271][T15146] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.842051][T20938] loop9: detected capacity change from 0 to 128 [ 1671.957711][T16953] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 1671.959753][T16953] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 1672.022134][T15146] bridge_slave_1: left allmulticast mode [ 1672.022189][T15146] bridge_slave_1: left promiscuous mode [ 1672.022484][T15146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.073635][T15146] bridge_slave_0: left allmulticast mode [ 1672.073690][T15146] bridge_slave_0: left promiscuous mode [ 1672.074396][T15146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.354754][T15146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1672.373330][T15146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1672.383965][T15146] bond0 (unregistering): Released all slaves [ 1672.548267][T20905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.548727][T20905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.553618][T20905] bridge_slave_0: entered allmulticast mode [ 1672.556931][T20905] bridge_slave_0: entered promiscuous mode [ 1672.578820][T20905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.582083][T20905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.585753][T20905] bridge_slave_1: entered allmulticast mode [ 1672.606929][T20905] bridge_slave_1: entered promiscuous mode [ 1672.782147][T20905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.810367][T20905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.982716][T15146] hsr_slave_0: left promiscuous mode [ 1672.988736][T15146] hsr_slave_1: left promiscuous mode [ 1672.995394][T15146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1672.995444][T15146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1673.013262][T15146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1673.013315][T15146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1673.068877][T15146] veth1_macvtap: left promiscuous mode [ 1673.068962][T15146] veth0_macvtap: left promiscuous mode [ 1673.087803][T15146] veth1_vlan: left promiscuous mode [ 1673.088059][T15146] veth0_vlan: left promiscuous mode [ 1673.140213][ T5626] Bluetooth: hci4: command tx timeout [ 1673.166532][T17652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1673.183549][T17652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1673.190866][T17652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1673.191766][T17652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1673.192398][T17652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1675.093081][T20973] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1675.134078][T20973] md: array md0 already has disks! [ 1675.179121][T20973] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1675.189540][T20973] md: pers->run() failed ... [ 1675.204161][T15146] team0 (unregistering): Port device team_slave_1 removed [ 1675.213219][T20973] md: could not open device unknown-block(1,2). [ 1675.219711][T20973] md: error, md_import_device() returned -16 [ 1675.226137][T17652] Bluetooth: hci4: command tx timeout [ 1675.276618][T15146] team0 (unregistering): Port device team_slave_0 removed [ 1675.300202][T17652] Bluetooth: hci1: command tx timeout [ 1675.386611][T20978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3706'. [ 1675.626908][T20905] team0: Port device team_slave_0 added [ 1675.635847][T20905] team0: Port device team_slave_1 added [ 1675.648545][ T5279] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1675.692447][T20905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.699872][T20905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.727560][T20905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.741454][T20905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.748694][T20905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.776733][T20905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.901041][T20905] hsr_slave_0: entered promiscuous mode [ 1675.908669][T20905] hsr_slave_1: entered promiscuous mode [ 1675.915317][T20905] debugfs: 'hsr0' already exists in 'hsr' [ 1675.921522][T20905] Cannot create hsr debugfs directory [ 1676.970915][ T5279] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1677.081556][T11982] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1677.108322][T20957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.108563][T20957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.109113][T20957] bridge_slave_0: entered allmulticast mode [ 1677.115487][T20957] bridge_slave_0: entered promiscuous mode [ 1677.135038][T20957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.138811][T20957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.139267][T20957] bridge_slave_1: entered allmulticast mode [ 1677.162477][T20957] bridge_slave_1: entered promiscuous mode [ 1677.242504][T11982] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1677.251173][T11982] usb 4-1: not running at top speed; connect to a high speed hub [ 1677.259061][T11982] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 1677.275224][T11982] usb 4-1: config 1 interface 0 altsetting 126 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1677.275287][T11982] usb 4-1: config 1 interface 0 altsetting 126 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1677.275335][T11982] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1677.305597][T17652] Bluetooth: hci4: command tx timeout [ 1677.313347][T20957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.326382][T11982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.326442][T11982] usb 4-1: Product: syz [ 1677.326474][T11982] usb 4-1: Manufacturer: syz [ 1677.326495][T11982] usb 4-1: SerialNumber: syz [ 1677.352040][T20957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.364145][T21015] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1677.380284][T17652] Bluetooth: hci1: command tx timeout [ 1677.434423][T20957] team0: Port device team_slave_0 added [ 1677.507584][T20957] team0: Port device team_slave_1 added [ 1677.559618][T20957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1677.568062][T20957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.568099][T20957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1677.607482][T20957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1677.614889][T20957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.644546][T20957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1677.674956][T21015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.688103][T21015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.712930][T11982] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input43 [ 1677.729215][ T4969] bcm5974 4-1:1.0: could not read from device [ 1677.753518][ T4969] bcm5974 4-1:1.0: could not read from device [ 1677.763716][ T4969] bcm5974 4-1:1.0: could not read from device [ 1677.772574][T11982] usb 4-1: USB disconnect, device number 67 [ 1677.780958][ T4969] bcm5974 4-1:1.0: could not read from device [ 1678.013404][T20957] hsr_slave_0: entered promiscuous mode [ 1678.023124][T20957] hsr_slave_1: entered promiscuous mode [ 1678.033456][T20957] debugfs: 'hsr0' already exists in 'hsr' [ 1678.033510][T20957] Cannot create hsr debugfs directory [ 1679.584204][T17652] Bluetooth: hci4: command tx timeout [ 1679.584209][ T5626] Bluetooth: hci1: command tx timeout [ 1679.880519][T21043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3715'. [ 1679.994752][T17652] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1680.007493][T17652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1680.015016][T17652] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1680.028287][T17652] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1680.036394][T17652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1680.207006][ T5279] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1680.212257][T21052] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1680.270360][T21052] md: array md0 already has disks! [ 1680.293612][T21052] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1680.293658][T21052] md: pers->run() failed ... [ 1680.339732][T21052] md: could not open device unknown-block(1,2). [ 1680.339858][T21052] md: error, md_import_device() returned -16 [ 1680.363704][T20905] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1680.397789][T20905] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1680.414678][T20905] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1680.437659][T20905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1680.464010][T20905] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1680.484575][T20905] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1680.485491][T20905] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1680.517243][T20905] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1680.808124][T21071] loop0: detected capacity change from 0 to 128 [ 1680.817011][T21071] ext4: Unknown parameter 'measure' [ 1681.620246][T17652] Bluetooth: hci1: command tx timeout [ 1682.101031][T17652] Bluetooth: hci6: command tx timeout [ 1682.362971][ T5279] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1682.641774][T21098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3719'. [ 1682.698997][T21106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3719'. [ 1682.782429][T21106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1682.799590][T21044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.799779][T21044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.800132][T21044] bridge_slave_0: entered allmulticast mode [ 1682.810065][T21044] bridge_slave_0: entered promiscuous mode [ 1682.854606][T21044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.857216][T21044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.857409][T21044] bridge_slave_1: entered allmulticast mode [ 1682.887425][T21044] bridge_slave_1: entered promiscuous mode [ 1684.459210][T17652] Bluetooth: hci6: command tx timeout [ 1684.546130][T21044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1684.730714][T21044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1684.898096][T21044] team0: Port device team_slave_0 added [ 1685.875999][T21044] team0: Port device team_slave_1 added [ 1686.184365][T21044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1686.184403][T21044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1686.185468][T21044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1686.214732][T20905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.267226][T21044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1686.267295][T21044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1686.267326][T21044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1686.464366][T20957] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1686.500423][T20957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1686.510775][T17652] Bluetooth: hci6: command tx timeout [ 1686.548596][T21044] hsr_slave_0: entered promiscuous mode [ 1686.562868][T21044] hsr_slave_1: entered promiscuous mode [ 1686.573055][T21044] debugfs: 'hsr0' already exists in 'hsr' [ 1686.573118][T21044] Cannot create hsr debugfs directory [ 1686.575604][T20957] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1686.606796][T20957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1686.694372][T20957] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1686.709073][T20957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1686.723069][T20905] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.822719][T20957] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1686.846249][T20957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1686.857771][T16723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.858010][T16723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1688.457215][T21140] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 1688.580040][T17652] Bluetooth: hci6: command tx timeout [ 1688.605140][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.605375][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1689.947685][T21165] netlink: 'syz.3.3727': attribute type 12 has an invalid length. [ 1690.172446][T20905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1692.069583][T20957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1692.466535][T21187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3729'. [ 1692.473653][T20957] 8021q: adding VLAN 0 to HW filter on device team0 [ 1692.532472][T21189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3729'. [ 1692.608862][T21189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1692.639172][T16437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.639297][T16437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1692.718393][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.718505][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1692.903249][T20905] veth0_vlan: entered promiscuous mode [ 1692.959329][T20905] veth1_vlan: entered promiscuous mode [ 1693.947862][T20957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1693.947926][T20957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1695.623663][T21205] md: array md0 already has disks! [ 1695.834485][T20905] veth0_macvtap: entered promiscuous mode [ 1695.855527][T21044] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1695.887025][T21044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1695.895617][T21044] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1695.924393][T21044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1695.934069][T20905] veth1_macvtap: entered promiscuous mode [ 1695.977847][T21044] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1696.006186][T21044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1696.034546][T21044] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1696.059836][T21044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1696.075011][T20957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1697.053503][T20905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1697.216043][T20905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1697.864940][T20957] veth0_vlan: entered promiscuous mode [ 1697.903124][ T83] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.018027][T20957] veth1_vlan: entered promiscuous mode [ 1698.595093][ T1189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.605125][ T1831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.619059][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.864969][T16723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.865019][T16723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.198459][T16352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.198501][T16352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.229719][T20957] veth0_macvtap: entered promiscuous mode [ 1700.281650][T20957] veth1_macvtap: entered promiscuous mode [ 1700.325645][T21044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1700.385129][T20957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1700.401637][T11995] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1700.415242][T20957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1700.473150][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.473435][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.497034][T21044] 8021q: adding VLAN 0 to HW filter on device team0 [ 1700.534559][ T83] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.563549][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.563682][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1700.586930][T11995] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1700.616266][T11995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.616340][T11995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.639669][T11995] usb 4-1: config 0 descriptor?? [ 1700.650639][T16770] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.723033][T16770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.723385][T16770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1700.916230][T21268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.930348][T21268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.013803][T11995] usbhid 4-1:0.0: can't add hid device: -71 [ 1701.013967][T11995] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1701.055958][T11995] usb 4-1: USB disconnect, device number 68 [ 1701.155333][T16723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1701.155383][T16723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.362598][T16437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1701.371140][T16437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.546590][T21044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1702.918950][T21044] veth0_vlan: entered promiscuous mode [ 1702.953895][T21044] veth1_vlan: entered promiscuous mode [ 1703.072895][T21044] veth0_macvtap: entered promiscuous mode [ 1703.101643][T21315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1703.134078][T21044] veth1_macvtap: entered promiscuous mode [ 1703.233243][T21044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1703.305812][T21044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1703.471191][T16723] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.472640][T16723] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.472755][T16723] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.472874][T16723] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.827254][ T1189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1703.827315][ T1189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1704.590053][T17369] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1704.719613][T16723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1704.719669][T16723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1704.771276][T17369] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1704.783493][T17369] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.783563][T17369] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.823768][T17369] usb 8-1: config 0 descriptor?? [ 1704.966524][T21328] netlink: 'syz.2.3745': attribute type 12 has an invalid length. [ 1706.381078][T17369] usbhid 8-1:0.0: can't add hid device: -71 [ 1706.381208][T17369] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1706.405689][T17369] usb 8-1: USB disconnect, device number 6 [ 1707.350771][T17369] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1707.500117][T17369] usb 8-1: Using ep0 maxpacket: 16 [ 1707.506988][T17369] usb 8-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1707.525190][T17369] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1707.525270][T17369] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.564187][T17369] usb 8-1: config 0 descriptor?? [ 1707.883362][T17369] usbhid 8-1:0.0: can't add hid device: -71 [ 1707.883507][T17369] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1707.934239][T17369] usb 8-1: USB disconnect, device number 7 [ 1708.301169][T21355] gadgetfs: bound to dummy_udc driver [ 1708.560209][T17369] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1708.568027][ C0] gadgetfs: connected [ 1708.572477][T17369] gadgetfs: disconnected [ 1709.205298][T21375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1709.279989][T11993] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1709.464126][T11993] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1709.466655][T11993] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1709.466778][T11993] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1709.466853][T11993] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1709.467011][T11993] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.569597][T21373] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1710.368548][T21391] netlink: 'syz.0.3758': attribute type 12 has an invalid length. [ 1710.441622][T11993] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 1710.458844][T11993] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input44 [ 1710.639116][T21395] loop3: detected capacity change from 0 to 128 [ 1710.647830][T21395] ext4: Unknown parameter 'measure' [ 1712.416174][T21414] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3760'. [ 1712.423182][T21414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1713.021088][T11993] usb 8-1: USB disconnect, device number 8 [ 1713.027058][ C1] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1715.282320][T21429] loop2: detected capacity change from 0 to 128 [ 1715.308532][T21429] ext4: Unknown parameter 'measure' [ 1718.626644][T21456] netlink: 'syz.8.3769': attribute type 12 has an invalid length. [ 1719.980136][T17369] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1720.135348][T17369] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1720.152649][T17369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1720.152737][T17369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.191169][T17369] usb 3-1: config 0 descriptor?? [ 1720.453360][T17369] usbhid 3-1:0.0: can't add hid device: -71 [ 1720.453641][T17369] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1720.491087][T17369] usb 3-1: USB disconnect, device number 13 [ 1721.266878][T21502] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3780'. [ 1721.268822][T21502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1722.842024][T17369] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1722.936588][T21510] loop3: detected capacity change from 0 to 128 [ 1722.937663][T21510] ext4: Unknown parameter 'measure' [ 1727.955508][T21554] md: array md0 already has disks! [ 1728.413323][T21554] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1728.413374][T21554] md: pers->run() failed ... [ 1728.509597][T21558] loop0: detected capacity change from 0 to 1024 [ 1728.531405][T21554] md: could not open device unknown-block(1,2). [ 1728.531487][T21554] md: error, md_import_device() returned -16 [ 1729.022614][T21573] hfsplus: small dir entry [ 1729.778370][T21575] netlink: 'syz.8.3784': attribute type 12 has an invalid length. [ 1730.350098][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.356554][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.603676][T21593] loop7: detected capacity change from 0 to 1024 [ 1730.981706][T21593] EXT4-fs (loop7): first meta block group too large: 65024 (group descriptor block count 1) [ 1731.038469][T21592] udc dummy_udc.0: failed to start g1: -2 [ 1731.049909][T21592] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -2 [ 1731.061529][T21592] UDC core: g1: couldn't find an available UDC or it's busy [ 1731.612321][T21612] udc dummy_udc.0: failed to start g1: -2 [ 1731.612370][T21612] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -2 [ 1731.637396][T21612] UDC core: g1: couldn't find an available UDC or it's busy [ 1732.255687][T21628] fuse: Bad value for 'fd' [ 1732.660276][T21637] netlink: 'syz.7.3811': attribute type 12 has an invalid length. [ 1735.946958][T21681] fuse: Bad value for 'fd' [ 1736.220438][T21685] md: array md0 already has disks! [ 1739.737139][T21732] fuse: Bad value for 'fd' [ 1743.809233][T21777] loop2: detected capacity change from 0 to 128 [ 1743.826256][T21777] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1743.841376][T21777] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1743.975752][ T13] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1748.758393][T21836] loop7: detected capacity change from 0 to 256 [ 1749.789770][T21840] syz.8.3860 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 1749.789850][T21840] CPU: 0 UID: 0 PID: 21840 Comm: syz.8.3860 Tainted: G L syzkaller #0 PREEMPT(full) [ 1749.789882][T21840] Tainted: [L]=SOFTLOCKUP [ 1749.789892][T21840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1749.789906][T21840] Call Trace: [ 1749.789916][T21840] [ 1749.789928][T21840] dump_stack_lvl+0xe8/0x150 [ 1749.789992][T21840] dump_header+0xd3/0x4b0 [ 1749.790052][T21840] oom_kill_process+0x3ab/0x9e0 [ 1749.790101][T21840] out_of_memory+0x1064/0x1480 [ 1749.790129][T21840] ? try_charge_memcg+0xc32/0x15e0 [ 1749.790202][T21840] ? __pfx_out_of_memory+0x10/0x10 [ 1749.790229][T21840] ? do_raw_spin_unlock+0xf5/0x200 [ 1749.790281][T21840] try_charge_memcg+0xcdf/0x15e0 [ 1749.790338][T21840] ? __pfx_try_charge_memcg+0x10/0x10 [ 1749.790377][T21840] ? percpu_ref_tryget+0x15/0x180 [ 1749.790421][T21840] ? __memcg_kmem_charge_page+0x15a/0x510 [ 1749.790452][T21840] __memcg_kmem_charge_page+0x31c/0x510 [ 1749.790478][T21840] ? __memcg_kmem_charge_page+0x15a/0x510 [ 1749.790507][T21840] __alloc_frozen_pages_noprof+0x24a/0x5a0 [ 1749.790547][T21840] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1749.790579][T21840] ? __pfx_policy_nodemask+0x10/0x10 [ 1749.790610][T21840] ? __lock_acquire+0x6df/0x2e50 [ 1749.790636][T21840] ? percpu_ref_get_many+0x19/0x140 [ 1749.790674][T21840] alloc_pages_mpol+0x21e/0x390 [ 1749.790711][T21840] alloc_pages_noprof+0xb1/0x2b0 [ 1749.790745][T21840] __pud_alloc+0x3a/0x460 [ 1749.790788][T21840] copy_page_range+0xd20/0x1290 [ 1749.790839][T21840] ? __pfx_copy_page_range+0x10/0x10 [ 1749.790885][T21840] dup_mmap+0xf17/0x1dc0 [ 1749.790943][T21840] ? __pfx_dup_mmap+0x10/0x10 [ 1749.790980][T21840] ? do_raw_spin_lock+0x12b/0x2f0 [ 1749.791031][T21840] ? lock_acquire+0x115/0x350 [ 1749.791078][T21840] copy_mm+0x11a/0x480 [ 1749.791123][T21840] ? copy_process+0xd3c/0x43e0 [ 1749.791153][T21840] copy_process+0x1e75/0x43e0 [ 1749.791196][T21840] ? copy_process+0xd3c/0x43e0 [ 1749.791251][T21840] ? __pfx_copy_process+0x10/0x10 [ 1749.791298][T21840] kernel_clone+0x2d7/0x940 [ 1749.791349][T21840] ? __pfx_kernel_clone+0x10/0x10 [ 1749.791381][T21840] ? __raw_spin_lock_init+0x45/0x100 [ 1749.791426][T21840] ? do_futex+0x3e7/0x4e0 [ 1749.791465][T21840] __x64_sys_clone+0x1b6/0x230 [ 1749.791504][T21840] ? __pfx___x64_sys_clone+0x10/0x10 [ 1749.791560][T21840] ? rcu_is_watching+0x16/0xb0 [ 1749.791605][T21840] do_syscall_64+0x166/0x520 [ 1749.791669][T21840] ? trace_irq_disable+0x3b/0x140 [ 1749.791702][T21840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.791743][T21840] ? clear_bhb_loop+0x70/0xc0 [ 1749.791773][T21840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.791799][T21840] RIP: 0033:0x7f2d6fd9e0d9 [ 1749.791828][T21840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1749.791849][T21840] RSP: 002b:00007f2d70d4afd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1749.791882][T21840] RAX: ffffffffffffffda RBX: 00007f2d70025fa0 RCX: 00007f2d6fd9e0d9 [ 1749.791901][T21840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1749.791916][T21840] RBP: 00007f2d6fe35024 R08: 0000000000000000 R09: 0000000000000000 [ 1749.791932][T21840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1749.791947][T21840] R13: 00007f2d70026038 R14: 00007f2d70025fa0 R15: 00007ffec2765c38 [ 1749.791987][T21840] [ 1749.797906][T21840] memory: usage 96kB, limit 96kB, failcnt 40 [ 1749.797934][T21840] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1749.797956][T21840] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1749.797976][T21840] Memory cgroup stats for /syz8/test: [ 1749.798441][T21840] cache 0 [ 1749.798458][T21840] rss 0 [ 1749.798470][T21840] rss_huge 0 [ 1749.798483][T21840] shmem 0 [ 1749.798496][T21840] mapped_file 0 [ 1749.798509][T21840] dirty 0 [ 1749.798521][T21840] writeback 0 [ 1749.798535][T21840] workingset_refault_anon 0 [ 1749.798549][T21840] workingset_refault_file 0 [ 1749.798562][T21840] swap 0 [ 1749.798575][T21840] swapcached 0 [ 1749.798587][T21840] pgpgin 0 [ 1749.798600][T21840] pgpgout 0 [ 1749.798613][T21840] pgfault 0 [ 1749.798625][T21840] pgmajfault 0 [ 1749.798638][T21840] inactive_anon 0 [ 1749.798650][T21840] active_anon 0 [ 1749.798663][T21840] inactive_file 0 [ 1749.798676][T21840] active_file 0 [ 1749.798688][T21840] unevictable 0 [ 1749.798701][T21840] hierarchical_memory_limit 98304 [ 1749.798715][T21840] hierarchical_memsw_limit 9223372036854771712 [ 1749.798730][T21840] total_cache 0 [ 1749.798742][T21840] total_rss 0 [ 1749.798754][T21840] total_rss_huge 0 [ 1749.798767][T21840] total_shmem 0 [ 1749.798779][T21840] total_mapped_file 0 [ 1749.798792][T21840] total_dirty 0 [ 1749.798805][T21840] total_writeback 0 [ 1749.798819][T21840] total_workingset_refault_anon 0 [ 1749.798832][T21840] total_workingset_refault_file 0 [ 1749.798846][T21840] total_swap 0 [ 1749.798859][T21840] total_swapcached 0 [ 1749.798872][T21840] total_pgpgin 0 [ 1749.798885][T21840] total_pgpgout 0 [ 1749.798898][T21840] total_pgfault 0 [ 1749.798911][T21840] total_pgmajfault 0 [ 1749.798924][T21840] total_inactive_anon 0 [ 1749.798937][T21840] total_active_anon 0 [ 1749.798955][T21840] total_inactive_file 0 [ 1749.798969][T21840] total_active_file 0 [ 1749.798982][T21840] total_unevictable 0 [ 1749.798995][T21840] anon_cost 0 [ 1749.799007][T21840] file_cost 0 [ 1749.799021][T21840] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8/test,task_memcg=/syz8/test,task=syz.8.3860,pid=21838,uid=0 [ 1749.804836][T21840] Memory cgroup out of memory: Killed process 21838 (syz.8.3860) total-vm:102252kB, anon-rss:5524kB, file-rss:22868kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 1750.884533][T21865] loop8: detected capacity change from 0 to 256 [ 1754.083718][T21878] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 1755.052230][T21883] fuse: Unknown parameter 'user_id00000000000000000000' [ 1755.146859][T21886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1755.222081][T21887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1755.645149][T21897] loop8: detected capacity change from 0 to 256 [ 1755.780641][T21896] syz.2.3875 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 1755.780710][T21896] CPU: 0 UID: 0 PID: 21896 Comm: syz.2.3875 Tainted: G L syzkaller #0 PREEMPT(full) [ 1755.780746][T21896] Tainted: [L]=SOFTLOCKUP [ 1755.780756][T21896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1755.780772][T21896] Call Trace: [ 1755.780783][T21896] [ 1755.780795][T21896] dump_stack_lvl+0xe8/0x150 [ 1755.780839][T21896] dump_header+0xd3/0x4b0 [ 1755.780876][T21896] oom_kill_process+0x3ab/0x9e0 [ 1755.780913][T21896] out_of_memory+0x1064/0x1480 [ 1755.780942][T21896] ? try_charge_memcg+0xc32/0x15e0 [ 1755.780987][T21896] ? __pfx_out_of_memory+0x10/0x10 [ 1755.781015][T21896] ? do_raw_spin_unlock+0xf5/0x200 [ 1755.781062][T21896] try_charge_memcg+0xcdf/0x15e0 [ 1755.781115][T21896] ? __pfx_try_charge_memcg+0x10/0x10 [ 1755.781154][T21896] ? percpu_ref_tryget+0x15/0x180 [ 1755.781203][T21896] ? __memcg_kmem_charge_page+0x15a/0x510 [ 1755.781235][T21896] __memcg_kmem_charge_page+0x31c/0x510 [ 1755.781260][T21896] ? __memcg_kmem_charge_page+0x15a/0x510 [ 1755.781291][T21896] __alloc_frozen_pages_noprof+0x24a/0x5a0 [ 1755.781323][T21896] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1755.781355][T21896] ? __pfx_policy_nodemask+0x10/0x10 [ 1755.781386][T21896] ? __lock_acquire+0x6df/0x2e50 [ 1755.781413][T21896] ? percpu_ref_get_many+0x19/0x140 [ 1755.781450][T21896] alloc_pages_mpol+0x21e/0x390 [ 1755.781488][T21896] alloc_pages_noprof+0xb1/0x2b0 [ 1755.781522][T21896] __pud_alloc+0x3a/0x460 [ 1755.781561][T21896] copy_page_range+0xd20/0x1290 [ 1755.781640][T21896] ? __pfx_copy_page_range+0x10/0x10 [ 1755.781688][T21896] dup_mmap+0xf17/0x1dc0 [ 1755.781747][T21896] ? __pfx_dup_mmap+0x10/0x10 [ 1755.781785][T21896] ? do_raw_spin_lock+0x12b/0x2f0 [ 1755.781836][T21896] ? lock_acquire+0x115/0x350 [ 1755.781883][T21896] copy_mm+0x11a/0x480 [ 1755.781920][T21896] ? copy_process+0xd3c/0x43e0 [ 1755.781951][T21896] copy_process+0x1e75/0x43e0 [ 1755.781995][T21896] ? copy_process+0xd3c/0x43e0 [ 1755.782050][T21896] ? __pfx_copy_process+0x10/0x10 [ 1755.782100][T21896] kernel_clone+0x2d7/0x940 [ 1755.782143][T21896] ? __pfx_kernel_clone+0x10/0x10 [ 1755.782176][T21896] ? __raw_spin_lock_init+0x45/0x100 [ 1755.782222][T21896] ? do_futex+0x3e7/0x4e0 [ 1755.782261][T21896] __x64_sys_clone+0x1b6/0x230 [ 1755.782301][T21896] ? __pfx___x64_sys_clone+0x10/0x10 [ 1755.782356][T21896] ? rcu_is_watching+0x16/0xb0 [ 1755.782402][T21896] do_syscall_64+0x166/0x520 [ 1755.782440][T21896] ? trace_irq_disable+0x3b/0x140 [ 1755.782465][T21896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.782492][T21896] ? clear_bhb_loop+0x70/0xc0 [ 1755.782523][T21896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.782548][T21896] RIP: 0033:0x7f258339e0d9 [ 1755.782572][T21896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1755.782595][T21896] RSP: 002b:00007f25842dafd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1755.782629][T21896] RAX: ffffffffffffffda RBX: 00007f2583625fa0 RCX: 00007f258339e0d9 [ 1755.782648][T21896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1755.782664][T21896] RBP: 00007f2583435024 R08: 0000000000000000 R09: 0000000000000000 [ 1755.782681][T21896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1755.782697][T21896] R13: 00007f2583626038 R14: 00007f2583625fa0 R15: 00007ffd56a1e9f8 [ 1755.782737][T21896] [ 1756.011072][T21896] memory: usage 96kB, limit 96kB, failcnt 40 [ 1756.011096][T21896] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1756.011111][T21896] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1756.011126][T21896] Memory cgroup stats for /syz2/test: [ 1756.011267][T21896] cache 0 [ 1756.011277][T21896] rss 0 [ 1756.011285][T21896] rss_huge 0 [ 1756.011293][T21896] shmem 0 [ 1756.011301][T21896] mapped_file 0 [ 1756.011308][T21896] dirty 0 [ 1756.011316][T21896] writeback 0 [ 1756.011324][T21896] workingset_refault_anon 0 [ 1756.011332][T21896] workingset_refault_file 0 [ 1756.011341][T21896] swap 0 [ 1756.011348][T21896] swapcached 0 [ 1756.011356][T21896] pgpgin 0 [ 1756.011364][T21896] pgpgout 0 [ 1756.011372][T21896] pgfault 0 [ 1756.011379][T21896] pgmajfault 0 [ 1756.011387][T21896] inactive_anon 0 [ 1756.011395][T21896] active_anon 0 [ 1756.011403][T21896] inactive_file 0 [ 1756.011410][T21896] active_file 0 [ 1756.011418][T21896] unevictable 0 [ 1756.011426][T21896] hierarchical_memory_limit 98304 [ 1756.011434][T21896] hierarchical_memsw_limit 9223372036854771712 [ 1756.011443][T21896] total_cache 0 [ 1756.011451][T21896] total_rss 0 [ 1756.011458][T21896] total_rss_huge 0 [ 1756.011466][T21896] total_shmem 0 [ 1756.011473][T21896] total_mapped_file 0 [ 1756.011481][T21896] total_dirty 0 [ 1756.011488][T21896] total_writeback 0 [ 1756.011495][T21896] total_workingset_refault_anon 0 [ 1756.011504][T21896] total_workingset_refault_file 0 [ 1756.011512][T21896] total_swap 0 [ 1756.011519][T21896] total_swapcached 0 [ 1756.011527][T21896] total_pgpgin 0 [ 1756.011534][T21896] total_pgpgout 0 [ 1756.011542][T21896] total_pgfault 0 [ 1756.011549][T21896] total_pgmajfault 0 [ 1756.011557][T21896] total_inactive_anon 0 [ 1756.011564][T21896] total_active_anon 0 [ 1756.011572][T21896] total_inactive_file 0 [ 1756.011580][T21896] total_active_file 0 [ 1756.011588][T21896] total_unevictable 0 [ 1756.011596][T21896] anon_cost 0 [ 1756.011603][T21896] file_cost 0 [ 1756.011611][T21896] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.3875,pid=21894,uid=0 [ 1756.011740][T21896] Memory cgroup out of memory: Killed process 21894 (syz.2.3875) total-vm:102252kB, anon-rss:5524kB, file-rss:22868kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 1758.518959][T21912] loop3: detected capacity change from 0 to 1024 [ 1759.294105][T21928] hfsplus: small dir entry [ 1761.297255][T21942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1761.406803][T21942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1761.560564][T21952] loop3: detected capacity change from 0 to 1024 [ 1761.585228][T21952] hfsplus: invalid file type 0174377 for inode 21 [ 1765.603383][T22001] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3895'. [ 1765.603914][T22001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1765.615702][T22001] loop3: detected capacity change from 0 to 1024 [ 1765.687998][T22001] EXT4-fs (loop3): first meta block group too large: 65024 (group descriptor block count 1) [ 1766.412034][T22011] md: array md0 already has disks! [ 1766.600235][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1766.926869][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1767.551802][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1767.551887][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 1767.583000][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.583059][ T10] usb 3-1: Product: syz [ 1767.583097][ T10] usb 3-1: Manufacturer: syz [ 1767.583155][ T10] usb 3-1: SerialNumber: syz [ 1768.156160][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1768.208960][ T10] usb 3-1: USB disconnect, device number 15 [ 1771.200849][T21307] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1771.452522][T21307] usb 9-1: Using ep0 maxpacket: 32 [ 1771.584437][T21307] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1771.598443][T21307] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 1771.707530][T21307] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.721093][T21307] usb 9-1: Product: syz [ 1771.726187][T21307] usb 9-1: Manufacturer: syz [ 1771.732355][T21307] usb 9-1: SerialNumber: syz [ 1772.101262][T22078] loop3: detected capacity change from 0 to 512 [ 1772.108467][T21307] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1772.168942][T22078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1772.169093][T22078] ext4 filesystem being mounted at /183/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1772.226665][T21307] usb 9-1: USB disconnect, device number 5 [ 1772.342129][T22085] md: array md0 already has disks! [ 1772.956321][T18062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1774.287206][T22113] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3917'. [ 1774.302207][T22113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1774.362263][T22113] loop0: detected capacity change from 0 to 1024 [ 1774.469430][T22113] EXT4-fs (loop0): first meta block group too large: 65024 (group descriptor block count 1) [ 1775.833699][T22125] md: array md0 already has disks! [ 1777.693203][T22144] md: array md0 already has disks! [ 1778.324321][T22157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1778.451577][T22157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1778.564538][T22160] md: array md0 already has disks! [ 1778.566168][T22165] udc dummy_udc.0: failed to start g1: -2 [ 1778.566257][T22165] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -2 [ 1778.570961][T22165] UDC core: g1: couldn't find an available UDC or it's busy [ 1778.628785][T22167] loop7: detected capacity change from 0 to 1024 [ 1778.666856][T22157] hfsplus: invalid file type 0174377 for inode 21 [ 1778.708114][T22160] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1778.708170][T22160] md: pers->run() failed ... [ 1778.751722][T22160] md: could not open device unknown-block(1,2). [ 1778.751837][T22160] md: error, md_import_device() returned -16 [ 1779.189590][T22176] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.3930'. [ 1780.340159][T22190] fuse: Bad value for 'fd' [ 1781.061573][T22202] md: array md0 already has disks! [ 1787.113653][T22258] loop3: detected capacity change from 0 to 1024 [ 1787.392735][T22258] hfsplus: small dir entry [ 1787.663974][T22265] md: array md0 already has disks! [ 1788.821379][ T5729] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1788.977582][ T5729] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1789.001575][ T5729] usb 4-1: config 17 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1789.001757][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.121886][T22284] fuse: Bad value for 'fd' [ 1789.122783][T22284] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3956'. [ 1789.123608][T22284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1789.718701][T22284] loop7: detected capacity change from 0 to 1024 [ 1789.724151][T22284] EXT4-fs (loop7): first meta block group too large: 65024 (group descriptor block count 1) [ 1789.780674][ T5729] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1790.033155][T22293] udc dummy_udc.0: failed to start g1: -2 [ 1790.041360][T22293] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -2 [ 1790.062061][T22293] UDC core: g1: couldn't find an available UDC or it's busy [ 1791.407633][T11993] usb 4-1: USB disconnect, device number 69 [ 1791.792588][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.792654][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.395990][T22329] loop3: detected capacity change from 0 to 128 [ 1793.434535][T22329] ext4: Unknown parameter 'measure' [ 1793.904447][T22314] Bluetooth: hci4: command 0x0406 tx timeout [ 1794.411687][T22335] md: array md0 already has disks! [ 1796.730074][ T5749] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1796.894636][ T5749] usb 8-1: Using ep0 maxpacket: 32 [ 1796.905281][ T5749] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1796.932384][ T5749] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1796.932435][ T5749] usb 8-1: config 0 has no interface number 0 [ 1796.957573][ T5749] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.967129][ T5749] usb 8-1: Product: syz [ 1796.967202][ T5749] usb 8-1: Manufacturer: syz [ 1796.967228][ T5749] usb 8-1: SerialNumber: syz [ 1797.006199][ T5749] usb 8-1: config 0 descriptor?? [ 1797.012472][T22355] udc dummy_udc.0: failed to start g1: -2 [ 1797.012529][T22355] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -2 [ 1797.087551][T22355] UDC core: g1: couldn't find an available UDC or it's busy [ 1797.528895][ T5749] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1797.528954][ T5749] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1798.081912][T22363] fuse: Bad value for 'fd' [ 1798.083239][T22363] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3972'. [ 1798.083925][T22363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1798.100977][T22363] loop3: detected capacity change from 0 to 1024 [ 1798.682642][ T5749] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1798.683260][ T5749] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -32 [ 1798.709416][T22363] EXT4-fs (loop3): first meta block group too large: 65024 (group descriptor block count 1) [ 1798.982821][T17652] Bluetooth: hci1: command 0x0406 tx timeout [ 1799.959327][T11992] usb 8-1: USB disconnect, device number 9 [ 1803.172354][T22402] md: array md0 already has disks! [ 1804.530008][T22314] Bluetooth: hci6: command 0x0406 tx timeout [ 1805.384290][T22411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1805.533483][T22411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1806.788242][T22433] udc dummy_udc.0: failed to start g1: -2 [ 1806.788298][T22433] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -2 [ 1806.794557][T22433] UDC core: g1: couldn't find an available UDC or it's busy [ 1809.254722][T21307] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1809.870217][T21307] usb 8-1: Using ep0 maxpacket: 16 [ 1809.883233][T21307] usb 8-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1809.934228][T21307] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1809.934326][T21307] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1809.959611][T21307] usb 8-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1809.959661][T21307] usb 8-1: Manufacturer: syz [ 1809.985810][T21307] usb 8-1: config 0 descriptor?? [ 1810.724390][T21307] usbhid 8-1:0.0: can't add hid device: -71 [ 1810.732024][T21307] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1810.878495][T21307] usb 8-1: USB disconnect, device number 10 [ 1811.322836][T22480] md: array md0 already has disks! [ 1811.464449][T22480] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1811.464478][T22480] md: pers->run() failed ... [ 1811.581223][T22480] md: could not open device unknown-block(1,2). [ 1811.581349][T22480] md: error, md_import_device() returned -16 [ 1811.680190][T22486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3995'. [ 1813.483892][T22505] udc dummy_udc.0: failed to start g1: -2 [ 1813.483951][T22505] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -2 [ 1813.634584][T22505] UDC core: g1: couldn't find an available UDC or it's busy [ 1813.880051][ T5749] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1814.090362][ T5749] usb 8-1: Using ep0 maxpacket: 32 [ 1814.106946][ T5749] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1814.107020][ T5749] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 1814.150629][ T5749] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.150681][ T5749] usb 8-1: Product: syz [ 1814.150715][ T5749] usb 8-1: Manufacturer: syz [ 1814.150735][ T5749] usb 8-1: SerialNumber: syz [ 1814.366064][T22523] md: array md0 already has disks! [ 1814.567327][ T5749] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1814.588430][T22529] udc dummy_udc.0: failed to start g1: -2 [ 1814.588492][T22529] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -2 [ 1814.635776][T22529] UDC core: g1: couldn't find an available UDC or it's busy [ 1814.766862][ T5749] usb 8-1: USB disconnect, device number 11 [ 1818.355541][T22564] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1818.422234][T22564] md: array md0 already has disks! [ 1818.660090][ T31] INFO: task syz.4.3653:20810 blocked for more than 143 seconds. [ 1818.660137][ T31] Tainted: G L syzkaller #0 [ 1818.660170][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1818.689669][ T31] task:syz.4.3653 state:D stack:28248 pid:20810 tgid:20808 ppid:17975 task_flags:0x400140 flags:0x00080002 [ 1818.689869][ T31] Call Trace: [ 1818.689884][ T31] [ 1818.689903][ T31] __schedule+0x17db/0x58f0 [ 1818.689976][ T31] ? __pfx___schedule+0x10/0x10 [ 1818.690022][ T31] ? schedule+0x90/0x2b0 [ 1818.690062][ T31] schedule+0x164/0x2b0 [ 1818.690099][ T31] schedule_preempt_disabled+0x13/0x30 [ 1818.690135][ T31] __mutex_lock+0x7c1/0x1550 [ 1818.690172][ T31] ? kasan_save_track+0x3e/0x80 [ 1818.690206][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1818.690249][ T31] ? write_ports+0xb5/0xd10 [ 1818.690376][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1818.690436][ T31] write_ports+0xb5/0xd10 [ 1818.690472][ T31] ? __pfx_write_ports+0x10/0x10 [ 1818.690520][ T31] ? __might_fault+0xaf/0x130 [ 1818.690561][ T31] ? _copy_from_user+0x94/0xb0 [ 1818.690667][ T31] ? simple_transaction_get+0x12d/0x160 [ 1818.690752][ T31] nfsctl_transaction_write+0x10f/0x160 [ 1818.690788][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1818.690821][ T31] vfs_write+0x296/0xba0 [ 1818.690869][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1818.690909][ T31] ? __fget_files+0x2a/0x420 [ 1818.690949][ T31] ? __fget_files+0x3a2/0x420 [ 1818.690982][ T31] ? __fget_files+0x2a/0x420 [ 1818.691026][ T31] ksys_write+0x150/0x270 [ 1818.691065][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1818.691116][ T31] do_syscall_64+0x166/0x520 [ 1818.691153][ T31] ? trace_irq_disable+0x3b/0x140 [ 1818.691181][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.819314][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1818.823995][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.829024][ T31] RIP: 0033:0x7f3f9e19e0d9 [ 1818.829082][ T31] RSP: 002b:00007f3f9f0b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1818.829238][ T31] RAX: ffffffffffffffda RBX: 00007f3f9e425fa0 RCX: 00007f3f9e19e0d9 [ 1818.834155][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1818.839231][ T31] RBP: 00007f3f9e235024 R08: 0000000000000000 R09: 0000000000000000 [ 1818.839275][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1818.839313][ T31] R13: 00007f3f9e426038 R14: 00007f3f9e425fa0 R15: 00007fff24b82558 [ 1818.844202][ T31] [ 1818.854086][ T31] [ 1818.854086][ T31] Showing all locks held in the system: [ 1818.854218][ T31] locks held by pr/ttyS0/16: 1, last CPU#1: [ 1818.854316][ T31] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1818.868791][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 1818.868917][ T31] #0: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1819.315428][ T31] locks held by kworker/u8:4/61: 3, last CPU#0: [ 1819.315447][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1819.315512][ T31] #1: ffffc9000202fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1819.315577][ T31] #2: ffff88807d0a6258 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1819.315749][ T31] locks held by kworker/u8:6/580: 6, last CPU#0: [ 1819.315767][ T31] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1819.315829][ T31] #1: ffffc90003b97c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1819.315891][ T31] #2: ffffffff90242408 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1819.315986][ T31] #3: ffffffff90250c80 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1819.316047][ T31] #4: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 1819.316118][ T31] #5: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x44/0x80 [ 1819.316191][ T31] locks held by syslogd/4966: 2, last CPU#0: [ 1819.316207][ T31] #0: ffff88807ffc05f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 1819.316351][ T31] #1: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0 [ 1819.316413][ T31] locks held by klogd/4973: 1, last CPU#0: [ 1819.316429][ T31] #0: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1819.474476][ T31] locks held by udevd/4984: 1, last CPU#1: [ 1819.474506][ T31] #0: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 1819.474750][ T31] locks held by getty/5374: 2, on CPU#1: [ 1819.474796][ T31] #0: ffff8880356550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1819.475036][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1819.475190][ T31] locks held by kworker/u8:13/6189: 3, last CPU#1: [ 1819.475236][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1819.475446][ T31] #1: ffffc900056d7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1819.475611][ T31] #2: ffff8880223f5258 (&devlink->lock_key#18){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1819.475833][ T31] locks held by kworker/u8:0/15146: 2, last CPU#1: [ 1819.475878][ T31] #0: ffff888031fb4940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1819.481121][ T31] #1: ffffc9000611fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1819.481270][ T31] locks held by kworker/0:6/18516: 3, last CPU#0: [ 1819.481288][ T31] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1819.481349][ T31] #1: ffffc90003ff7c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1819.481411][ T31] #2: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 [ 1819.481546][ T31] locks held by syz.1.3411/19790: 3, on CPU#0: [ 1819.481562][ T31] #0: ffff88802bf4f7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1819.481625][ T31] #1: ffff888033c3e460 (sb_writers#32){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1819.481694][ T31] #2: ffffffff8f09e780 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1819.481755][ T31] locks held by udevd/20545: 1, last CPU#1: [ 1819.481771][ T31] #0: ffff88807f582460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1819.481830][ T31] locks held by udevd/20670: 1, last CPU#1: [ 1819.481847][ T31] #0: ffff88807f582460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1819.481905][ T31] locks held by syz.4.3653/20810: 3, on CPU#0: [ 1819.481921][ T31] #0: ffff88807c22d5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1819.481984][ T31] #1: ffff88804262e460 (sb_writers#32){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1819.482059][ T31] #2: ffffffff8f09e780 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1819.482123][ T31] locks held by syz.2.3947/22251: 1, last CPU#1: [ 1819.482140][ T31] #0: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0 [ 1819.482195][ T31] locks held by syz.3.3990/22465: 2, last CPU#0: [ 1819.482211][ T31] #0: ffff88807ac8c460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x3766/0x4530 [ 1819.482287][ T31] #1: ffff88802075d6f8 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 1819.482357][ T31] locks held by sed/22550: 4, last CPU#0: [ 1819.482373][ T31] #0: ffff88802897abc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1819.482437][ T31] #1: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 1819.487446][ T31] #2: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1819.487635][ T31] #3: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_change+0xc9/0x320 [ 1819.487839][ T31] locks held by syz.7.4009/22558: 1, last CPU#1: [ 1819.487892][ T31] #0: ffffffff8ed62938 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1819.488069][ T31] locks held by syz.8.4010/22571: 2, last CPU#1: [ 1819.488112][ T31] #0: ffffffff8ef01960 (epnested_mutex){+.+.}-{4:4}, at: do_epoll_ctl_file+0x9df/0xee0 [ 1819.488280][ T31] #1: ffff888056847060 (&ep->mtx/1){+.+.}-{4:4}, at: ep_loop_check_proc+0x9d/0x3a0 [ 1819.488449][ T31] locks held by syz.0.4011/22572: 1, last CPU#1: [ 1819.488499][ T31] #0: ffff88807d4e00a0 (&mddev->suspend_mutex){+.+.}-{4:4}, at: mddev_suspend+0x10f/0x6f0 [ 1819.488859][ T31] [ 1819.488880][ T31] ============================================= [ 1819.488880][ T31] [ 1819.488905][ T31] NMI backtrace for cpu 0 [ 1819.488962][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1819.489052][ T31] Tainted: [L]=SOFTLOCKUP [ 1819.489076][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1819.489111][ T31] Call Trace: [ 1819.489135][ T31] [ 1819.489167][ T31] dump_stack_lvl+0xe8/0x150 [ 1819.489260][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1819.489367][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1819.489487][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1819.489553][ T31] sys_info+0x135/0x170 [ 1819.489619][ T31] watchdog+0xfd7/0x1030 [ 1819.489698][ T31] ? watchdog+0x1c7/0x1030 [ 1819.489783][ T31] kthread+0x38b/0x480 [ 1819.489848][ T31] ? __pfx_watchdog+0x10/0x10 [ 1819.489902][ T31] ? __pfx_kthread+0x10/0x10 [ 1819.489967][ T31] ret_from_fork+0x514/0xb70 [ 1819.490045][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1819.490127][ T31] ? __switch_to+0xc89/0x1420 [ 1819.490232][ T31] ? __pfx_kthread+0x10/0x10 [ 1819.490296][ T31] ret_from_fork_asm+0x1a/0x30 [ 1819.490395][ T31] [ 1819.490806][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1819.490886][ C1] NMI backtrace for cpu 1 [ 1819.490905][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1819.490931][ C1] Tainted: [L]=SOFTLOCKUP [ 1819.490938][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1819.490950][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1819.491033][ C1] Code: e8 4e b4 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f a9 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 1a 40 75 06 cc 44 89 f9 80 e1 07 [ 1819.491118][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 1819.491136][ C1] RAX: 1ffffffff35a6c00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1819.491163][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1819.491175][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1819.491187][ C1] R10: dffffc0000000000 R11: ffffffff85720800 R12: dffffc0000000000 [ 1819.491202][ C1] R13: 0000000000000000 R14: ffffffff9ad360a0 R15: 0000000000000000 [ 1819.491215][ C1] FS: 0000000000000000(0000) GS:ffff888124dd5000(0000) knlGS:0000000000000000 [ 1819.491231][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1819.491244][ C1] CR2: 0000001b2d819ff8 CR3: 000000007d3de000 CR4: 00000000003526f0 [ 1819.491261][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1819.491274][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1819.491287][ C1] Call Trace: [ 1819.491297][ C1] [ 1819.491307][ C1] wait_for_lsr+0x184/0x2f0 [ 1819.491390][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1819.491419][ C1] serial8250_console_write+0xaa1/0x1200 [ 1819.491447][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1819.491486][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1819.491515][ C1] ? __schedule+0x17f1/0x58f0 [ 1819.491549][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 1819.491580][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1819.491611][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1819.491645][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1819.491674][ C1] nbcon_kthread_func+0x679/0x880 [ 1819.491698][ C1] ? nbcon_kthread_func+0x163/0x880 [ 1819.491717][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1819.491740][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1819.491770][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1819.491800][ C1] kthread+0x38b/0x480 [ 1819.491819][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1819.491837][ C1] ? __pfx_kthread+0x10/0x10 [ 1819.491856][ C1] ret_from_fork+0x514/0xb70 [ 1819.491877][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1819.491895][ C1] ? __switch_to+0xc89/0x1420 [ 1819.491924][ C1] ? __pfx_kthread+0x10/0x10 [ 1819.491943][ C1] ret_from_fork_asm+0x1a/0x30 [ 1819.491970][ C1] [ 1819.509154][T22572] md: could not open device unknown-block(1,1). [ 1819.509202][T22572] md: error, md_import_device() returned -16 [ 1819.550548][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1820.440168][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1820.450875][ T31] Tainted: [L]=SOFTLOCKUP [ 1820.455342][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1820.465531][ T31] Call Trace: [ 1820.468842][ T31] [ 1820.471792][ T31] vpanic+0x56d/0xa60 [ 1820.476093][ T31] ? __pfx___schedule+0x10/0x10 [ 1820.480974][ T31] ? __pfx_vpanic+0x10/0x10 [ 1820.485586][ T31] panic+0xc5/0xd0 [ 1820.489370][ T31] ? __pfx_panic+0x10/0x10 [ 1820.493836][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 1820.499341][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1820.504750][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1820.510957][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1820.517160][ T31] watchdog+0x1030/0x1030 [ 1820.521543][ T31] ? watchdog+0x1c7/0x1030 [ 1820.525998][ T31] kthread+0x38b/0x480 [ 1820.530101][ T31] ? __pfx_watchdog+0x10/0x10 [ 1820.534824][ T31] ? __pfx_kthread+0x10/0x10 [ 1820.539455][ T31] ret_from_fork+0x514/0xb70 [ 1820.544081][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1820.549227][ T31] ? __switch_to+0xc89/0x1420 [ 1820.553953][ T31] ? __pfx_kthread+0x10/0x10 [ 1820.558579][ T31] ret_from_fork_asm+0x1a/0x30 [ 1820.563391][ T31] [ 1820.567151][ T31] Kernel Offset: disabled [ 1820.571499][ T31] Rebooting in 86400 seconds..