last executing test programs: 30m10.952491811s ago: executing program 32 (id=58): socket$inet_icmp(0x2, 0x2, 0x1) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$incfs(0xffffffffffffffff, &(0x7f0000000b80)='.pending_reads\x00', 0x1090c1, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000cc0)=0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff400, 0x0, 0x0, 0x0, 0x9}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chdir(0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r1, 0x100000000000011, 0x2000, 0x2f93) 30m5.762825931s ago: executing program 33 (id=62): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e2400000000000100000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffff"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 29m57.518445691s ago: executing program 34 (id=71): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) syz_usb_connect(0x4, 0x36, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="039d2086d42c3625f055d4661ae9ef4f", @ANYRESHEX=r2, @ANYBLOB="877397daf2703b81391822cbeabc7686be758c481832ffe387108acb530cf242619803c25296c87d643103217cddabd2b51e89b25f6e3cb02933223ca340fc9f385f595d5d7d9d2eb187af5b03fd7eec7c0c68a656e49691a08427d603c5c0858f12747c7b92bf725b5a558f962661b0fe6f5ab29b3f2f82526eac07cb75e1e7c38b2f06b0044a0f5f5e5f9cc97eb9"], 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000028c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlockall() openat$nvram(0xffffffffffffff9c, 0x0, 0xc0803, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x4, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r6, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x8, 0xffffffff, 0xe, "00602100000000f60000000000000000000800"}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000500)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x2, 0x8, 'syz1\x00'}) 25m41.664640149s ago: executing program 35 (id=393): syz_open_procfs(0x0, 0x0) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x80288100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0x7) sendto$inet6(r3, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x18) 25m5.438777019s ago: executing program 36 (id=445): fsopen(&(0x7f00000029c0)='adfs\x00', 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x5, 0x42c4ac2f}, 0x10) r1 = timerfd_create(0x0, 0x80000) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) 24m36.148652916s ago: executing program 37 (id=479): fsopen(&(0x7f00000029c0)='adfs\x00', 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x5, 0x42c4ac2f}, 0x10) r1 = timerfd_create(0x0, 0x80000) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) 19m46.857394998s ago: executing program 38 (id=803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd77c7000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f0000001200)=ANY=[@ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020077673200000000000000000000000000240001896a74fc3cc9b10300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff"], 0xdb4}, 0x1, 0x0, 0x0, 0x48001}, 0x2000c801) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r6, 0x1) close(0x3) close_range(r5, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x1000000, 0x0) syz_open_procfs$pagemap(r1, &(0x7f00000000c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 14m10.193277223s ago: executing program 39 (id=1220): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 8m47.58554998s ago: executing program 0 (id=1893): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 8m43.548690265s ago: executing program 0 (id=1900): r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m41.756292794s ago: executing program 5 (id=1905): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x24, r6, 0x601, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x8044) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x74) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e00000/0x3000)=nil, 0x3000, &(0x7f0000000000)='/dev/adsp1\x00') mmap(&(0x7f0000e00000/0x2000)=nil, 0x2000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 8m41.359193459s ago: executing program 0 (id=1906): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8m40.484282494s ago: executing program 5 (id=1907): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20004055) r0 = syz_io_uring_setup(0x6c40, &(0x7f0000000540)={0x0, 0xd128, 0x100, 0x0, 0x2083, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f0000000040)=[{0x3d, '\x00', @data, 0x4db6}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, 0x0, &(0x7f0000000040)=@IORING_OP_SETXATTR={0x2a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 8m39.371333118s ago: executing program 0 (id=1909): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0xff74) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f4"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8m36.71755067s ago: executing program 5 (id=1912): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 8m35.699431105s ago: executing program 0 (id=1913): ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x1895, &(0x7f0000000000)={0x0, 0x854d, 0xc00, 0x2002001, 0x39}, &(0x7f0000000200), 0x0, &(0x7f0000000180)) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) 8m33.913625568s ago: executing program 0 (id=1915): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001000330624c47000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, &(0x7f0000000140)="0e0412b60f0c0df0f2747782bb714a766118ff5aa3", 0x15) 8m32.982277983s ago: executing program 5 (id=1917): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4d}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) 8m30.432408655s ago: executing program 5 (id=1919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x30, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) 8m28.227738646s ago: executing program 5 (id=1921): r0 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) unshare(0x20000) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=@dellink={0x44, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_CARRIER={0x5}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}]}, 0x44}}, 0x0) 8m20.274098701s ago: executing program 40 (id=1911): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000002c0)={0x9d0000, 0x6, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9909de, 0x3, '\x00', @string=&(0x7f0000000080)}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187013, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x900}, 0x4000000) write(r3, &(0x7f0000000400)='!*:', 0x3) 8m16.928088389s ago: executing program 41 (id=1915): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001000330624c47000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, &(0x7f0000000140)="0e0412b60f0c0df0f2747782bb714a766118ff5aa3", 0x15) 8m10.80304429s ago: executing program 42 (id=1921): r0 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) unshare(0x20000) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=@dellink={0x44, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_CARRIER={0x5}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}]}, 0x44}}, 0x0) 6m11.389500227s ago: executing program 9 (id=2231): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5100, 0x0) 6m10.961986152s ago: executing program 9 (id=2234): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180040000000000000000000000000000d030000000000000000000003000000000200000002000000fdffffff00"/67], 0x0, 0x4e}, 0x28) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x0) bind$x25(r3, &(0x7f0000000080), 0x12) connect$x25(r3, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) r5 = openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB], 0x68}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(r5, 0x807c6406, &(0x7f0000002140)=""/29) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c3f00000000000000000000020000000000000f040000a109005f08"], 0x0, 0x28}, 0x28) 6m10.408776531s ago: executing program 9 (id=2237): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f0000000040)="1c00", 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000001b00)={0x2020}, 0x173f) pipe(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r2, &(0x7f0000000280)='1', 0x1) 6m8.686619354s ago: executing program 9 (id=2241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 6m7.108452446s ago: executing program 9 (id=2245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) 6m4.492868122s ago: executing program 9 (id=2253): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x24, 0x0, 0x601, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x8044) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x74) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e00000/0x3000)=nil, 0x3000, &(0x7f0000000000)='/dev/adsp1\x00') 5m47.09382586s ago: executing program 43 (id=2253): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x24, 0x0, 0x601, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x8044) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x74) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e00000/0x3000)=nil, 0x3000, &(0x7f0000000000)='/dev/adsp1\x00') 4m55.92283872s ago: executing program 4 (id=2400): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) openat(r0, &(0x7f0000000080)='./proc/thread-self/fail-nth\x00', 0x2, 0x3) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x5b) 4m54.702805359s ago: executing program 4 (id=2405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 4m49.09415635s ago: executing program 4 (id=2415): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) capset(&(0x7f0000000380)={0x20080522}, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002140), 0x40801, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) write$tun(r3, &(0x7f0000000600)={@val={0x0, 0x200}, @val={0x0, 0x1, 0x0, 0x6, 0x6, 0x8001}, @llc={@snap={0xaa, 0x1, '\x00', "96c574", 0x6005}}}, 0x16) r4 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40043d0d, 0x0) 4m47.452271145s ago: executing program 4 (id=2417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m44.454373398s ago: executing program 4 (id=2421): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) 4m34.677729948s ago: executing program 4 (id=2433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002140), 0x40801, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) write$tun(r3, &(0x7f0000000600)={@val={0x0, 0x200}, @val={0x0, 0x1, 0x0, 0x6, 0x6, 0x8001}, @llc={@snap={0xaa, 0x1, '\x00', "96c574", 0x6005}}}, 0x16) r4 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40043d0d, 0x0) 4m18.121854395s ago: executing program 44 (id=2433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002140), 0x40801, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) write$tun(r3, &(0x7f0000000600)={@val={0x0, 0x200}, @val={0x0, 0x1, 0x0, 0x6, 0x6, 0x8001}, @llc={@snap={0xaa, 0x1, '\x00', "96c574", 0x6005}}}, 0x16) r4 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40043d0d, 0x0) 19.306822168s ago: executing program 1 (id=3260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0xa}}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00890d0180c20000"], 0x4e) 15.54799006s ago: executing program 6 (id=3264): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000") r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-loop0/offset\x00', 0x0, 0x0) read(r4, &(0x7f0000000900)=""/32, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/dev-loop0/size\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/dev-loop0/slot\x00', 0x0, 0x0) read(r5, &(0x7f0000000940)=""/32, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/block/md0/md/dev-loop0/state\x00', 0x0, 0x0) read(r6, &(0x7f0000000960)=""/32, 0x20) 15.312996684s ago: executing program 1 (id=3267): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000100)="00000000010000", 0x7) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000240)=[@in={0x2, 0x0, @loopback}], 0x10) 15.151511s ago: executing program 8 (id=3269): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setns(0xc9, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x120) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) poll(&(0x7f0000000200)=[{r1, 0x1d06b1002b1f496f}], 0x1, 0xffff) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x24004010) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xbb) 14.909378457s ago: executing program 1 (id=3270): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='4420', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='ipv4', 0x4) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='tcp', 0x3) close(r3) symlinkat(&(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 14.327424279s ago: executing program 1 (id=3273): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setns(0xc9, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x120) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) poll(&(0x7f0000000200)=[{r1, 0x1d06b1002b1f496f}], 0x1, 0xffff) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)="d380b0", 0x3}, 0x1, 0x0, 0x0, 0x4081}, 0x24004010) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xbb) 12.735978272s ago: executing program 7 (id=3275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c00)={0x250, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x234, 0x33, @beacon={{{}, {0xde1}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @random=0x3f, 0x4803, @val={0x0, 0x2, @random="d6da"}, @val, @void, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7, 0x30, 0x44}}, @val={0x2d, 0x1a, {0x1, 0x2, 0x1, 0x0, {0x1, 0x4, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x4, 0x81}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x4, 0xb9, 0x1c, 0x50}}, [{0xdd, 0xf, "0c60681bc586ff28437fffbfc7f75c"}, {0xdd, 0xc3, "f8c3961ce98e91b32e81abacf287e8b5878cdad0070e21161c384daad889176e9609a895bb11705c74c9bd624403dd44733d30daa0efb9ee06ea9fc287e9ce53040e2667308cf468960e9b21491aef8a2850c1c1634e131d45c1b1c7bc19023c224148021496dfa34f64ffb6f96ffc7051b6f83802f7ffb6f86f5456c60fc70c766b1e896324753aa1546c41bac46b789ed612be29ab384f3f0ab10f043718eb818c6bfa8d1787209da10fa86ecea5d4549e7d7e57ec53918d365c30d24f1597a3d1ac"}, {0xdd, 0x6, "631a7b625093"}, {0xdd, 0x9f, "964b18a16014064898538784287b51066e3a8eca226f99822acfd624b51e56b32b7775dddfb9499c20760cde453c2139aa45a40c9b08024404878da035be318a29434555ef58feebea6311d3ca9cf590403d171c9719079fc50290c0dfe783abc64da64c306e9f959a91ba6516433393670016643af48211f7433dc8bc76cc63c2b09d9f0fd10780bb0e41c8988442bb139a88f080e1e651678342c67ac087"}, {0xdd, 0x4c, "d43f657c794ae9f91d87386676e0f1a7b97668a5a7a49cb14448f889e3338e742a760e17556708aafbb0df3b926f2a7ac720af3d169ab65ab4d90e4cf0a01927192d63390371afa4343ad30d"}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x4}, 0x0) 12.309525688s ago: executing program 1 (id=3276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd77c7000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r4, 0x1) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0xd931d3864d39dcfb) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x1000000, 0x0) syz_open_procfs$pagemap(r1, &(0x7f00000000c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 12.22111744s ago: executing program 3 (id=3277): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000") ioctl(r3, 0x400c0930, &(0x7f0000000700)='\x00'/12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-loop0/offset\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./offset_val\x00', 0x42, 0x1ff) sendfile(r5, r4, 0x0, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./offset_val\x00', 0x2, 0x0) pwrite64(r6, &(0x7f0000000900)='\x00', 0x1, 0x1) 10.833892609s ago: executing program 1 (id=3279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0xa}}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00890d0180c20000"], 0x4e) 10.792853337s ago: executing program 7 (id=3280): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setns(0xc9, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x120) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) poll(&(0x7f0000000200)=[{r1, 0x1d06b1002b1f496f}], 0x1, 0xffff) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)}, 0x1, 0x0, 0x0, 0x4081}, 0x24004010) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xbb) 10.537590601s ago: executing program 3 (id=3281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9.39962262s ago: executing program 7 (id=3283): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='check\n\x00', 0x6) 8.400665422s ago: executing program 7 (id=3286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffbfff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r4, {0xb, 0x8}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x5, 0xfffffffffffffff7, 0x81, 0x7ff}, 0x46}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x814}, 0x20000080) 7.037607755s ago: executing program 6 (id=3287): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000100)='0\n', 0x2) close(r0) write(0xffffffffffffffff, &(0x7f0000000100)='0', 0x1) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='3\n', 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000100)='1\n', 0x2) 7.001211614s ago: executing program 3 (id=3288): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000") r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-loop0/offset\x00', 0x2, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-loop0/size\x00', 0x2, 0x0) write(r5, &(0x7f0000000840)='65500\x00', 0x6) close(r5) ioctl(r3, 0x400c0930, &(0x7f0000000700)='\x00'/12) write(0xffffffffffffffff, &(0x7f0000000940)='8\x00', 0x2) close(0xffffffffffffffff) 6.61575612s ago: executing program 2 (id=3289): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setns(0xc9, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x120) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) poll(&(0x7f0000000200)=[{r1, 0x1d06b1002b1f496f}], 0x1, 0xffff) sendmsg$802154_raw(r0, 0x0, 0x24004010) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xbb) 5.78578612s ago: executing program 8 (id=3290): socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, 0x0, 0x101a40, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x2000, 0x48) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 5.635176092s ago: executing program 7 (id=3291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd77c7000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r4, 0x1) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0xd931d3864d39dcfb) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x1000000, 0x0) syz_open_procfs$pagemap(r1, &(0x7f00000000c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 5.540289302s ago: executing program 6 (id=3292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c00)={0x250, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x234, 0x33, @beacon={{{}, {0xde1}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @random=0x3f, 0x4803, @val={0x0, 0x2, @random="d6da"}, @val, @void, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7, 0x30, 0x44}}, @val={0x2d, 0x1a, {0x1, 0x2, 0x1, 0x0, {0x1, 0x4, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x4, 0x81}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x4, 0xb9, 0x1c, 0x50}}, [{0xdd, 0xf, "0c60681bc586ff28437fffbfc7f75c"}, {0xdd, 0xc3, "f8c3961ce98e91b32e81abacf287e8b5878cdad0070e21161c384daad889176e9609a895bb11705c74c9bd624403dd44733d30daa0efb9ee06ea9fc287e9ce53040e2667308cf468960e9b21491aef8a2850c1c1634e131d45c1b1c7bc19023c224148021496dfa34f64ffb6f96ffc7051b6f83802f7ffb6f86f5456c60fc70c766b1e896324753aa1546c41bac46b789ed612be29ab384f3f0ab10f043718eb818c6bfa8d1787209da10fa86ecea5d4549e7d7e57ec53918d365c30d24f1597a3d1ac"}, {0xdd, 0x6, "631a7b625093"}, {0xdd, 0x9f, "964b18a16014064898538784287b51066e3a8eca226f99822acfd624b51e56b32b7775dddfb9499c20760cde453c2139aa45a40c9b08024404878da035be318a29434555ef58feebea6311d3ca9cf590403d171c9719079fc50290c0dfe783abc64da64c306e9f959a91ba6516433393670016643af48211f7433dc8bc76cc63c2b09d9f0fd10780bb0e41c8988442bb139a88f080e1e651678342c67ac087"}, {0xdd, 0x4c, "d43f657c794ae9f91d87386676e0f1a7b97668a5a7a49cb14448f889e3338e742a760e17556708aafbb0df3b926f2a7ac720af3d169ab65ab4d90e4cf0a01927192d63390371afa4343ad30d"}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.699983476s ago: executing program 7 (id=3293): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x412, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0xffffffff8509852a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x9, 0x5, 0x0, {0xfffffffffffffffc, 0x8e, 0x0, 0x0, 0x0, 0x10000006, 0x0, 0x0, 0x0, 0x6000, 0x7, 0x0, 0x0, 0x1ff, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) unshare(0x22020600) fstat(r1, 0x0) 3.262760585s ago: executing program 2 (id=3294): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x4c, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14}]}, 0x4c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x44, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x44}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x34, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x4c, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14}]}, 0x4c}}, 0x0) 3.146683422s ago: executing program 8 (id=3295): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x8880}, 0x0) 3.04432109s ago: executing program 3 (id=3296): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x5, [@datasec={0x1, 0x5, 0x0, 0xf, 0x3, [{0x5, 0x3, 0x8d}, {0x3, 0x7f, 0x7}, {0x2, 0x1, 0x10}, {0x3, 0x8001, 0x9}, {0x3, 0x9, 0x4b}], 'M6U'}, @datasec={0x10, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}, {0x0, [0x5f, 0x2e, 0x61]}}, &(0x7f0000001b00)=""/3, 0x75, 0x3, 0x1, 0x5}, 0x28) 2.941863749s ago: executing program 8 (id=3297): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000009c0)={0xaa, 0xb1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) 2.925024737s ago: executing program 2 (id=3298): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x24044014}, 0x8004) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0xb8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_MASK={0xa4, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40010}, 0x24040095) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.87129766s ago: executing program 6 (id=3299): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000") write(0xffffffffffffffff, &(0x7f0000000700)='16\x00', 0x3) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-loop0/size\x00', 0x2, 0x0) write(r4, &(0x7f0000000840)='65500\x00', 0x6) close(r4) ioctl(r3, 0x400c0930, &(0x7f0000000700)='\x00'/12) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/bitmap/location\x00', 0x2, 0x0) write(r5, &(0x7f0000000940)='8\x00', 0x2) close(r5) 2.473416809s ago: executing program 3 (id=3300): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp\x00', 0x1ff) mount$cgroup2(0x0, &(0x7f0000000000)='./cgrp\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgrp/cgroup.subtree_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='+io\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgrp/io.cost.qos\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='8:0 enable=1\n\x00', 0xd) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgrp/io.cost.model\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='8:0 ctrl=user model=linear rbps=1048576 wbps=1048576 rseqiops=100 wseqiops=100 rrandiops=100 wrandiops=100\n\x00', 0x5a) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./cgrp/cg1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgrp/cg1/io.weight\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='1\n\x00', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgrp/cg1/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='0\n\x00', 0x2) 2.448609426s ago: executing program 2 (id=3301): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000") r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-loop0/offset\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='16\x00', 0x3) close(r4) write(0xffffffffffffffff, &(0x7f0000000840)='65500\x00', 0x6) close(0xffffffffffffffff) ioctl(r3, 0x400c0930, &(0x7f0000000700)='\x00'/12) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/bitmap/location\x00', 0x2, 0x0) write(r5, &(0x7f0000000940)='8\x00', 0x2) close(r5) 2.401854647s ago: executing program 8 (id=3302): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x8880}, 0x0) 2.094851876s ago: executing program 6 (id=3303): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x8880}, 0x0) 1.898568222s ago: executing program 8 (id=3304): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='00:02\x00', 0x6) write(r1, &(0x7f00000001c0)='00:03\x00', 0x6) write(r1, &(0x7f0000000200)='00:04\x00', 0x6) write(r1, &(0x7f0000000240)='00:05\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pnp/devices/00:05/resources\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='disable\n\x00', 0x9) write(r3, &(0x7f00000003c0)='disable\n\x00', 0x9) write(r4, &(0x7f0000000400)='disable\n\x00', 0x9) write(r5, &(0x7f0000000440)='disable\n\x00', 0x9) write(r2, &(0x7f0000000480)='set io 0x3f8-0x3ff irq 4\n\x00', 0x1a) write(r3, &(0x7f00000004c0)='auto\n\x00', 0x6) 1.567061943s ago: executing program 2 (id=3305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd77c7000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r4, 0x1) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0xd931d3864d39dcfb) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x1000000, 0x0) syz_open_procfs$pagemap(r1, &(0x7f00000000c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 1.515068934s ago: executing program 6 (id=3306): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 1.514061782s ago: executing program 3 (id=3307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000090)={&(0x7f0000000300)=@newtclass={0x40, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000000a0)={&(0x7f0000000400)=@newtclass={0x40, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x2, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x64}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000000b0)={&(0x7f0000000500)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x41, 0x1}}, 0x20}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000700)={0x11, 0x300, r2}, 0x14) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f00000005c0)=0x10001, 0x4) write(r3, &(0x7f0000000600)='\x00'/1000, 0x3e8) 0s ago: executing program 2 (id=3308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080083850000002d0000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 119321][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2599'. [ 1773.627379][T18928] hsr_slave_0 (unregistering): left promiscuous mode [ 1773.837054][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1773.837079][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1774.086864][T18940] ALSA: mixer_oss: invalid OSS volume '' [ 1774.107346][T18940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2604'. [ 1776.149945][T18961] bridge0: port 3(syz_tun) entered blocking state [ 1776.150116][T18961] bridge0: port 3(syz_tun) entered disabled state [ 1776.150303][T18961] syz_tun: entered allmulticast mode [ 1776.157949][T18961] syz_tun: entered promiscuous mode [ 1776.158635][T18961] bridge0: port 3(syz_tun) entered blocking state [ 1776.158751][T18961] bridge0: port 3(syz_tun) entered forwarding state [ 1777.423765][T18978] netlink: 444 bytes leftover after parsing attributes in process `syz.8.2613'. [ 1777.626501][T18982] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.33554432.133495060), cmd(2) [ 1780.283733][T19025] tipc: Started in network mode [ 1780.283770][T19025] tipc: Node identity 366297837ffd, cluster identity 4711 [ 1780.283927][T19025] tipc: Enabled bearer , priority 0 [ 1780.416869][T19021] tipc: Resetting bearer [ 1780.649655][T19029] syzkaller0: entered promiscuous mode [ 1780.649677][T19029] syzkaller0: entered allmulticast mode [ 1780.653519][T19019] tipc: Resetting bearer [ 1780.746447][T19019] tipc: Disabling bearer [ 1781.858375][ T25] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1782.322665][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 1782.331976][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1782.332035][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1782.364171][ T25] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1782.404515][ T25] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.404572][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.412325][ T25] usb 9-1: config 0 descriptor?? [ 1782.441094][ T25] iowarrior 9-1:0.0: no interrupt-in endpoint found [ 1784.395225][T19080] ALSA: mixer_oss: invalid OSS volume '' [ 1784.397185][T19080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2640'. [ 1784.856203][T19087] gre2: entered promiscuous mode [ 1786.464571][ T9] usb 9-1: USB disconnect, device number 8 [ 1786.604300][T19117] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.2649'. [ 1786.743641][T19118] FAULT_INJECTION: forcing a failure. [ 1786.743641][T19118] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.743694][T19118] CPU: 1 UID: 0 PID: 19118 Comm: syz.8.2652 Not tainted syzkaller #0 PREEMPT(full) [ 1786.743715][T19118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1786.743727][T19118] Call Trace: [ 1786.743735][T19118] [ 1786.743745][T19118] dump_stack_lvl+0xe8/0x150 [ 1786.743778][T19118] should_fail_ex+0x410/0x560 [ 1786.743811][T19118] should_failslab+0xa8/0x100 [ 1786.743836][T19118] ? new_userfaultfd+0x88/0x3d0 [ 1786.743864][T19118] kmem_cache_alloc_noprof+0xa1/0x600 [ 1786.743897][T19118] ? new_userfaultfd+0x88/0x3d0 [ 1786.743930][T19118] new_userfaultfd+0x88/0x3d0 [ 1786.743967][T19118] __x64_sys_userfaultfd+0x81/0xa0 [ 1786.744006][T19118] do_syscall_64+0x166/0x520 [ 1786.744035][T19118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.744060][T19118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.744079][T19118] RIP: 0033:0x7f689d59e159 [ 1786.744097][T19118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1786.744113][T19118] RSP: 002b:00007f689e3ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1786.744141][T19118] RAX: ffffffffffffffda RBX: 00007f689d825fa0 RCX: 00007f689d59e159 [ 1786.744161][T19118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1786.744178][T19118] RBP: 00007f689d63506b R08: 0000000000000000 R09: 0000000000000000 [ 1786.744197][T19118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1786.744211][T19118] R13: 00007f689d826038 R14: 00007f689d825fa0 R15: 00007ffe10027c58 [ 1786.744242][T19118] [ 1794.305384][T13896] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1794.602825][T13896] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1794.656006][T13896] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1794.656396][T13896] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1794.656616][T13896] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1794.658816][T13896] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1794.701685][T13896] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1794.747555][T13896] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1794.748274][T13896] usb 8-1: Product: syz [ 1794.748437][T13896] usb 8-1: Manufacturer: syz [ 1795.351659][T13896] cdc_wdm 8-1:1.0: skipping garbage [ 1795.351685][T13896] cdc_wdm 8-1:1.0: skipping garbage [ 1795.387615][T13896] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1795.387643][T13896] cdc_wdm 8-1:1.0: Unknown control protocol [ 1797.711739][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 7 bytes [ 1797.837930][T19207] ALSA: mixer_oss: invalid OSS volume '' [ 1797.845176][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2661'. [ 1797.981590][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1797.981622][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1797.981838][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1797.981861][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1797.982067][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1797.982089][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1797.982304][T10510] usb 8-1: USB disconnect, device number 38 [ 1797.982318][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1797.982339][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1797.982357][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1802.112454][T19236] syzkaller0: entered promiscuous mode [ 1802.112481][T19236] syzkaller0: entered allmulticast mode [ 1803.161742][ T5866] IPVS: starting estimator thread 0... [ 1803.255769][T19249] IPVS: using max 27 ests per chain, 64800 per kthread [ 1804.248087][T19260] (syz.8.2692,19260,1):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 1804.249480][T19260] (syz.8.2692,19260,1):o2hb_region_dev_store:1944 ERROR: status = -5 [ 1804.400452][T19272] FAULT_INJECTION: forcing a failure. [ 1804.400452][T19272] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.400512][T19272] CPU: 1 UID: 0 PID: 19272 Comm: syz.3.2697 Not tainted syzkaller #0 PREEMPT(full) [ 1804.400542][T19272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1804.400558][T19272] Call Trace: [ 1804.400568][T19272] [ 1804.400580][T19272] dump_stack_lvl+0xe8/0x150 [ 1804.400622][T19272] should_fail_ex+0x410/0x560 [ 1804.400658][T19272] should_failslab+0xa8/0x100 [ 1804.400691][T19272] ? new_userfaultfd+0x88/0x3d0 [ 1804.400728][T19272] kmem_cache_alloc_noprof+0xa1/0x600 [ 1804.400771][T19272] ? new_userfaultfd+0x88/0x3d0 [ 1804.400815][T19272] new_userfaultfd+0x88/0x3d0 [ 1804.400854][T19272] __x64_sys_userfaultfd+0x81/0xa0 [ 1804.400890][T19272] do_syscall_64+0x166/0x520 [ 1804.400923][T19272] ? trace_irq_disable+0x3b/0x140 [ 1804.400950][T19272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.400984][T19272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.401010][T19272] RIP: 0033:0x7fe8f219e159 [ 1804.401033][T19272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1804.401055][T19272] RSP: 002b:00007fe8f2fac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1804.401082][T19272] RAX: ffffffffffffffda RBX: 00007fe8f2425fa0 RCX: 00007fe8f219e159 [ 1804.401102][T19272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1804.401118][T19272] RBP: 00007fe8f223506b R08: 0000000000000000 R09: 0000000000000000 [ 1804.401135][T19272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1804.401151][T19272] R13: 00007fe8f2426038 R14: 00007fe8f2425fa0 R15: 00007ffd1f779708 [ 1804.401191][T19272] [ 1804.644198][T19280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1804.644228][T19280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1804.760715][T19280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1804.760744][T19280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1805.995264][T19291] (syz.1.2702,19291,0):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 1805.995363][T19291] (syz.1.2702,19291,0):o2hb_region_dev_store:1944 ERROR: status = -5 [ 1806.540859][T19308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1806.540889][T19308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1806.582375][T19308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1806.582402][T19308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1806.839509][T19319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1807.968341][T19324] FAULT_INJECTION: forcing a failure. [ 1807.968341][T19324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1807.968380][T19324] CPU: 0 UID: 0 PID: 19324 Comm: syz.7.2712 Not tainted syzkaller #0 PREEMPT(full) [ 1807.968409][T19324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1807.968425][T19324] Call Trace: [ 1807.968435][T19324] [ 1807.968447][T19324] dump_stack_lvl+0xe8/0x150 [ 1807.968490][T19324] should_fail_ex+0x410/0x560 [ 1807.968527][T19324] _copy_to_user+0x31/0xb0 [ 1807.968565][T19324] bpf_verifier_vlog+0x496/0x900 [ 1807.968607][T19324] __btf_verifier_log+0xe2/0x140 [ 1807.968644][T19324] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1807.968682][T19324] ? __pfx___btf_verifier_log+0x10/0x10 [ 1807.968734][T19324] __btf_verifier_log_type+0x4fd/0x6a0 [ 1807.968786][T19324] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 1807.968846][T19324] btf_datasec_check_meta+0x40e/0xad0 [ 1807.968882][T19324] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 1807.968910][T19324] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1807.968952][T19324] btf_parse_type_sec+0x3cf/0x2360 [ 1807.968989][T19324] ? btf_parse_hdr+0x1da/0x810 [ 1807.969023][T19324] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1807.969053][T19324] ? btf_parse_str_sec+0x244/0x2f0 [ 1807.969078][T19324] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1807.969115][T19324] btf_new_fd+0x487/0xbb0 [ 1807.969148][T19324] ? do_accept+0x600/0x750 [ 1807.969183][T19324] __sys_bpf+0xd2e/0xd90 [ 1807.969221][T19324] ? do_accept+0x600/0x750 [ 1807.969251][T19324] ? __pfx___sys_bpf+0x10/0x10 [ 1807.969285][T19324] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1807.969316][T19324] ? do_futex+0x3e7/0x4e0 [ 1807.969351][T19324] ? do_accept+0x600/0x750 [ 1807.969411][T19324] ? rcu_is_watching+0x16/0xb0 [ 1807.969444][T19324] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1807.969481][T19324] __x64_sys_bpf+0xba/0xd0 [ 1807.969512][T19324] do_syscall_64+0x166/0x520 [ 1807.969547][T19324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.969580][T19324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.969606][T19324] RIP: 0033:0x7fd121b9e159 [ 1807.969629][T19324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1807.969659][T19324] RSP: 002b:00007fd122b17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1807.969687][T19324] RAX: ffffffffffffffda RBX: 00007fd121e25fa0 RCX: 00007fd121b9e159 [ 1807.969707][T19324] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1807.969724][T19324] RBP: 00007fd121c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1807.969741][T19324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1807.969758][T19324] R13: 00007fd121e26038 R14: 00007fd121e25fa0 R15: 00007fffe52d1a08 [ 1807.969806][T19324] [ 1808.290806][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 1813.798044][T19368] syzkaller0: entered promiscuous mode [ 1813.798074][T19368] syzkaller0: entered allmulticast mode [ 1813.981355][T19380] ALSA: mixer_oss: invalid OSS volume '' [ 1813.999820][T19380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2727'. [ 1818.698813][T19395] (syz.1.2734,19395,1):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 1818.771036][T19395] (syz.1.2734,19395,1):o2hb_region_dev_store:1944 ERROR: status = -5 [ 1818.880953][T19395] o2cb: Local heartbeat has not been started. [ 1818.880972][T19395] o2cb: Cluster check failed. Fix errors before retrying. [ 1818.881014][T19395] (syz.1.2734,19395,0):user_dlm_register:674 ERROR: status = -22 [ 1818.881042][T19395] (syz.1.2734,19395,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 1825.888551][T19553] FAULT_INJECTION: forcing a failure. [ 1825.888551][T19553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1825.888591][T19553] CPU: 0 UID: 0 PID: 19553 Comm: syz.1.2757 Not tainted syzkaller #0 PREEMPT(full) [ 1825.888620][T19553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1825.888637][T19553] Call Trace: [ 1825.888647][T19553] [ 1825.888659][T19553] dump_stack_lvl+0xe8/0x150 [ 1825.888703][T19553] should_fail_ex+0x410/0x560 [ 1825.888739][T19553] _copy_to_user+0x31/0xb0 [ 1825.888781][T19553] bpf_verifier_vlog+0x496/0x900 [ 1825.888828][T19553] __btf_verifier_log+0xe2/0x140 [ 1825.888866][T19553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1825.888903][T19553] ? __pfx___btf_verifier_log+0x10/0x10 [ 1825.888956][T19553] __btf_verifier_log_type+0x4fd/0x6a0 [ 1825.889008][T19553] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 1825.889061][T19553] btf_datasec_check_meta+0x40e/0xad0 [ 1825.889095][T19553] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 1825.889123][T19553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1825.889165][T19553] btf_parse_type_sec+0x3cf/0x2360 [ 1825.889202][T19553] ? btf_parse_hdr+0x1da/0x810 [ 1825.889235][T19553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1825.889266][T19553] ? btf_parse_str_sec+0x244/0x2f0 [ 1825.889291][T19553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1825.889327][T19553] btf_new_fd+0x487/0xbb0 [ 1825.889360][T19553] ? do_accept+0x600/0x750 [ 1825.889394][T19553] __sys_bpf+0xd2e/0xd90 [ 1825.889431][T19553] ? do_accept+0x600/0x750 [ 1825.889461][T19553] ? __pfx___sys_bpf+0x10/0x10 [ 1825.889496][T19553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1825.889526][T19553] ? do_futex+0x3e7/0x4e0 [ 1825.889563][T19553] ? do_accept+0x600/0x750 [ 1825.889623][T19553] ? rcu_is_watching+0x16/0xb0 [ 1825.889656][T19553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1825.889694][T19553] __x64_sys_bpf+0xba/0xd0 [ 1825.889724][T19553] do_syscall_64+0x166/0x520 [ 1825.889758][T19553] ? trace_irq_disable+0x3b/0x140 [ 1825.889785][T19553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.889826][T19553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.889853][T19553] RIP: 0033:0x7f5a6ed9e159 [ 1825.889876][T19553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1825.889899][T19553] RSP: 002b:00007f5a6fc87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1825.889927][T19553] RAX: ffffffffffffffda RBX: 00007f5a6f025fa0 RCX: 00007f5a6ed9e159 [ 1825.889946][T19553] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1825.889961][T19553] RBP: 00007f5a6ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 1825.889977][T19553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1825.889993][T19553] R13: 00007f5a6f026038 R14: 00007f5a6f025fa0 R15: 00007ffff88b1308 [ 1825.890034][T19553] [ 1826.197510][T13896] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1826.276540][T19559] FAULT_INJECTION: forcing a failure. [ 1826.276540][T19559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1826.276581][T19559] CPU: 0 UID: 0 PID: 19559 Comm: syz.1.2761 Not tainted syzkaller #0 PREEMPT(full) [ 1826.276610][T19559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1826.276627][T19559] Call Trace: [ 1826.276638][T19559] [ 1826.276650][T19559] dump_stack_lvl+0xe8/0x150 [ 1826.276694][T19559] should_fail_ex+0x410/0x560 [ 1826.276731][T19559] _copy_to_user+0x31/0xb0 [ 1826.276770][T19559] bpf_verifier_vlog+0x496/0x900 [ 1826.276821][T19559] __btf_verifier_log+0xe2/0x140 [ 1826.276859][T19559] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1826.276898][T19559] ? __pfx___btf_verifier_log+0x10/0x10 [ 1826.276952][T19559] __btf_verifier_log_type+0x4fd/0x6a0 [ 1826.277004][T19559] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 1826.277057][T19559] btf_datasec_check_meta+0x40e/0xad0 [ 1826.277092][T19559] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 1826.277121][T19559] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1826.277162][T19559] btf_parse_type_sec+0x3cf/0x2360 [ 1826.277200][T19559] ? btf_parse_hdr+0x1da/0x810 [ 1826.277234][T19559] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1826.277265][T19559] ? btf_parse_str_sec+0x244/0x2f0 [ 1826.277292][T19559] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1826.277329][T19559] btf_new_fd+0x487/0xbb0 [ 1826.277362][T19559] ? do_accept+0x600/0x750 [ 1826.277397][T19559] __sys_bpf+0xd2e/0xd90 [ 1826.277434][T19559] ? do_accept+0x600/0x750 [ 1826.277468][T19559] ? __pfx___sys_bpf+0x10/0x10 [ 1826.277502][T19559] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1826.277532][T19559] ? do_futex+0x3e7/0x4e0 [ 1826.277569][T19559] ? do_accept+0x600/0x750 [ 1826.277629][T19559] ? rcu_is_watching+0x16/0xb0 [ 1826.277662][T19559] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1826.277699][T19559] __x64_sys_bpf+0xba/0xd0 [ 1826.277731][T19559] do_syscall_64+0x166/0x520 [ 1826.277765][T19559] ? trace_irq_disable+0x3b/0x140 [ 1826.277792][T19559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1826.277831][T19559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1826.277859][T19559] RIP: 0033:0x7f5a6ed9e159 [ 1826.277882][T19559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1826.277905][T19559] RSP: 002b:00007f5a6fc87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1826.277934][T19559] RAX: ffffffffffffffda RBX: 00007f5a6f025fa0 RCX: 00007f5a6ed9e159 [ 1826.277954][T19559] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1826.277972][T19559] RBP: 00007f5a6ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 1826.277989][T19559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1826.278006][T19559] R13: 00007f5a6f026038 R14: 00007f5a6f025fa0 R15: 00007ffff88b1308 [ 1826.278047][T19559] [ 1826.364875][T13896] usb 9-1: Using ep0 maxpacket: 8 [ 1826.376708][T13896] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1826.398834][T13896] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1826.398884][T13896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.612257][T13896] usb 9-1: config 0 descriptor?? [ 1826.626665][T13896] iowarrior 9-1:0.0: no interrupt-in endpoint found [ 1827.345299][T19579] ALSA: mixer_oss: invalid OSS volume '' [ 1827.961099][T19585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 1828.473903][T13896] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1828.658303][T13896] usb 3-1: Using ep0 maxpacket: 32 [ 1828.659925][T13896] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1828.665509][T13896] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 1828.665536][T13896] usb 3-1: config 0 has no interface number 0 [ 1828.665580][T13896] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1828.665609][T13896] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1828.665634][T13896] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1828.675549][T13896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.675577][T13896] usb 3-1: Product: syz [ 1828.675595][T13896] usb 3-1: Manufacturer: syz [ 1828.675643][T13896] usb 3-1: SerialNumber: syz [ 1828.694086][T13896] usb 3-1: config 0 descriptor?? [ 1828.695219][T19589] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1828.872237][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1828.972828][ T9572] Bluetooth: hci4: command 0x0406 tx timeout [ 1829.019431][T13896] usb-storage 3-1:0.20: USB Mass Storage device detected [ 1829.052369][T13896] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1829.055161][T13896] scsi host1: usb-storage 3-1:0.20 [ 1829.061638][T19611] (syz.3.2775,19611,1):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 1829.061769][T19611] (syz.3.2775,19611,1):o2hb_region_dev_store:1944 ERROR: status = -5 [ 1829.090631][T19611] o2cb: Local heartbeat has not been started. [ 1829.090648][T19611] o2cb: Cluster check failed. Fix errors before retrying. [ 1829.090673][T19611] (syz.3.2775,19611,0):user_dlm_register:674 ERROR: status = -22 [ 1829.090701][T19611] (syz.3.2775,19611,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 1829.151795][T13896] usb 3-1: USB disconnect, device number 18 [ 1829.215174][ T25] usb 9-1: USB disconnect, device number 9 [ 1829.640724][T19636] (syz.8.2781,19636,1):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 1829.640829][T19636] (syz.8.2781,19636,1):o2hb_region_dev_store:1944 ERROR: status = -5 [ 1829.664667][T19636] o2cb: Local heartbeat has not been started. [ 1829.664684][T19636] o2cb: Cluster check failed. Fix errors before retrying. [ 1829.664709][T19636] (syz.8.2781,19636,1):user_dlm_register:674 ERROR: status = -22 [ 1829.664735][T19636] (syz.8.2781,19636,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 1829.852964][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2788'. [ 1832.122035][T19676] (syz.2.2796,19676,1):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 1832.122135][T19676] (syz.2.2796,19676,1):o2hb_region_dev_store:1944 ERROR: status = -5 [ 1832.125689][T13896] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1832.159877][T19676] o2cb: Local heartbeat has not been started. [ 1832.159897][T19676] o2cb: Cluster check failed. Fix errors before retrying. [ 1832.159923][T19676] (syz.2.2796,19676,0):user_dlm_register:674 ERROR: status = -22 [ 1832.159951][T19676] (syz.2.2796,19676,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 1832.288549][T13896] usb 9-1: Using ep0 maxpacket: 8 [ 1832.289282][T13896] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1832.290316][T13896] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1832.290357][T13896] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1832.290398][T13896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.314541][T13896] usb 9-1: config 0 descriptor?? [ 1832.367333][T19681] syzkaller1: entered promiscuous mode [ 1832.367358][T19681] syzkaller1: entered allmulticast mode [ 1832.604958][T13896] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1832.825517][T19668] iowarrior 9-1:0.0: Error -90 while submitting URB [ 1832.841784][ T25] usb 9-1: USB disconnect, device number 10 [ 1837.890298][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1837.924227][ T5763] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1838.089638][ T5763] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1838.099912][ T5763] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.099941][ T5763] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1838.099981][ T5763] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.111760][ T5763] usb 9-1: config 0 descriptor?? [ 1838.160145][T19776] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1838.371069][ T25] usb 9-1: USB disconnect, device number 11 [ 1840.450840][T19813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2833'. [ 1841.809287][T19815] (syz.7.2834,19815,1):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 1841.827971][T19815] (syz.7.2834,19815,1):o2hb_region_dev_store:1944 ERROR: status = -5 [ 1842.842529][T19832] Illegal XDP return value 4294967274 on prog (id 132) dev N/A, expect packet loss! [ 1844.221799][T16730] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1844.818994][T16730] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1844.820388][T16730] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1844.820415][T16730] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1844.820458][T16730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.912396][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1844.917623][T16730] usb 4-1: config 0 descriptor?? [ 1845.176532][ T25] usb 4-1: USB disconnect, device number 39 [ 1847.835693][T19891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1848.157466][T19898] (syz.8.2857,19898,0):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 1848.157582][T19898] (syz.8.2857,19898,0):o2hb_region_dev_store:1944 ERROR: status = -5 [ 1848.197072][T19898] o2cb: Local heartbeat has not been started. [ 1848.197092][T19898] o2cb: Cluster check failed. Fix errors before retrying. [ 1848.197118][T19898] (syz.8.2857,19898,1):user_dlm_register:674 ERROR: status = -22 [ 1848.197148][T19898] (syz.8.2857,19898,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 1848.415349][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1848.566526][ T25] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1848.707520][ T25] usb 4-1: device descriptor read/64, error -71 [ 1848.919798][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1848.919871][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1848.968951][ T25] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1849.110908][ T25] usb 4-1: device descriptor read/64, error -71 [ 1849.228056][ T25] usb usb4-port1: attempt power cycle [ 1849.596114][ T25] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1849.623648][ T25] usb 4-1: device descriptor read/8, error -71 [ 1849.639544][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1851.061980][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1851.063502][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1851.063527][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1851.063567][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.067408][T19940] bridge0: port 3(syz_tun) entered blocking state [ 1851.069249][T19940] bridge0: port 3(syz_tun) entered disabled state [ 1851.069422][T19940] syz_tun: entered allmulticast mode [ 1851.415017][ T25] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1851.416237][ T9] usb 3-1: config 0 descriptor?? [ 1851.436078][T19940] syz_tun: entered promiscuous mode [ 1851.436761][T19940] bridge0: port 3(syz_tun) entered blocking state [ 1851.438605][T19940] bridge0: port 3(syz_tun) entered forwarding state [ 1851.619023][ T25] usb 4-1: device descriptor read/8, error -71 [ 1851.727203][T10510] usb 3-1: USB disconnect, device number 19 [ 1851.731614][ T25] usb usb4-port1: unable to enumerate USB device [ 1852.412849][T19969] FAULT_INJECTION: forcing a failure. [ 1852.412849][T19969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1852.412892][T19969] CPU: 1 UID: 0 PID: 19969 Comm: syz.8.2877 Not tainted syzkaller #0 PREEMPT(full) [ 1852.412924][T19969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1852.412941][T19969] Call Trace: [ 1852.412952][T19969] [ 1852.412964][T19969] dump_stack_lvl+0xe8/0x150 [ 1852.413009][T19969] should_fail_ex+0x410/0x560 [ 1852.413046][T19969] _copy_to_user+0x31/0xb0 [ 1852.413084][T19969] bpf_verifier_vlog+0x52a/0x900 [ 1852.413125][T19969] btf_verifier_log+0x11d/0x1a0 [ 1852.413179][T19969] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1852.413211][T19969] ? trace_kmalloc+0x2a/0xf0 [ 1852.413241][T19969] ? __pfx_btf_verifier_log+0x10/0x10 [ 1852.413278][T19969] ? rcu_is_watching+0x16/0xb0 [ 1852.413311][T19969] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1852.413341][T19969] ? kfree+0x4d/0x650 [ 1852.413386][T19969] btf_parse_type_sec+0x2089/0x2360 [ 1852.413424][T19969] ? btf_parse_hdr+0x1da/0x810 [ 1852.413457][T19969] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1852.413487][T19969] ? btf_parse_str_sec+0x244/0x2f0 [ 1852.413513][T19969] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1852.413549][T19969] btf_new_fd+0x487/0xbb0 [ 1852.413587][T19969] __sys_bpf+0xd2e/0xd90 [ 1852.413628][T19969] ? __pfx___sys_bpf+0x10/0x10 [ 1852.413661][T19969] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1852.413690][T19969] ? do_futex+0x3e7/0x4e0 [ 1852.413764][T19969] ? rcu_is_watching+0x16/0xb0 [ 1852.413796][T19969] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1852.413834][T19969] __x64_sys_bpf+0xba/0xd0 [ 1852.413864][T19969] do_syscall_64+0x166/0x520 [ 1852.413898][T19969] ? trace_irq_disable+0x3b/0x140 [ 1852.413926][T19969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.413959][T19969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.413985][T19969] RIP: 0033:0x7f689d59e159 [ 1852.414008][T19969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1852.414029][T19969] RSP: 002b:00007f689e3ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1852.414056][T19969] RAX: ffffffffffffffda RBX: 00007f689d825fa0 RCX: 00007f689d59e159 [ 1852.414076][T19969] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1852.414093][T19969] RBP: 00007f689d63506b R08: 0000000000000000 R09: 0000000000000000 [ 1852.414111][T19969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1852.414127][T19969] R13: 00007f689d826038 R14: 00007f689d825fa0 R15: 00007ffe10027c58 [ 1852.414182][T19969] [ 1854.977760][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2881'. [ 1855.857585][T19990] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2884'. [ 1858.203792][T20020] FAULT_INJECTION: forcing a failure. [ 1858.203792][T20020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1858.203823][T20020] CPU: 1 UID: 0 PID: 20020 Comm: syz.6.2893 Not tainted syzkaller #0 PREEMPT(full) [ 1858.203850][T20020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1858.203862][T20020] Call Trace: [ 1858.203871][T20020] [ 1858.203880][T20020] dump_stack_lvl+0xe8/0x150 [ 1858.203913][T20020] should_fail_ex+0x410/0x560 [ 1858.203941][T20020] _copy_to_user+0x31/0xb0 [ 1858.203968][T20020] bpf_verifier_vlog+0x52a/0x900 [ 1858.203999][T20020] btf_verifier_log+0x11d/0x1a0 [ 1858.204027][T20020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.204050][T20020] ? trace_kmalloc+0x2a/0xf0 [ 1858.204072][T20020] ? __pfx_btf_verifier_log+0x10/0x10 [ 1858.204100][T20020] ? rcu_is_watching+0x16/0xb0 [ 1858.204124][T20020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.204147][T20020] ? kfree+0x4d/0x650 [ 1858.204180][T20020] btf_parse_type_sec+0x2089/0x2360 [ 1858.204208][T20020] ? btf_parse_hdr+0x1da/0x810 [ 1858.204234][T20020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.204256][T20020] ? btf_parse_str_sec+0x244/0x2f0 [ 1858.204275][T20020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.204302][T20020] btf_new_fd+0x487/0xbb0 [ 1858.204331][T20020] __sys_bpf+0xd2e/0xd90 [ 1858.204362][T20020] ? __pfx___sys_bpf+0x10/0x10 [ 1858.204386][T20020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.204409][T20020] ? do_futex+0x3e7/0x4e0 [ 1858.204461][T20020] ? rcu_is_watching+0x16/0xb0 [ 1858.204484][T20020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.204512][T20020] __x64_sys_bpf+0xba/0xd0 [ 1858.204535][T20020] do_syscall_64+0x166/0x520 [ 1858.204559][T20020] ? trace_irq_disable+0x3b/0x140 [ 1858.204579][T20020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.204604][T20020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.204623][T20020] RIP: 0033:0x7fd485b9e159 [ 1858.204641][T20020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1858.204657][T20020] RSP: 002b:00007fd486b0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1858.204678][T20020] RAX: ffffffffffffffda RBX: 00007fd485e25fa0 RCX: 00007fd485b9e159 [ 1858.204692][T20020] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1858.204705][T20020] RBP: 00007fd485c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1858.204718][T20020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1858.204729][T20020] R13: 00007fd485e26038 R14: 00007fd485e25fa0 R15: 00007ffec3d56578 [ 1858.204760][T20020] [ 1858.229114][ T25] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1858.521125][ T25] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1858.534632][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2868'. [ 1858.581660][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.607785][ T25] usb 9-1: config 0 descriptor?? [ 1859.265910][T16994] usb 9-1: USB disconnect, device number 12 [ 1859.978264][T20047] bridge0: port 3(syz_tun) entered blocking state [ 1859.978460][T20047] bridge0: port 3(syz_tun) entered disabled state [ 1859.979136][T20047] syz_tun: entered allmulticast mode [ 1859.981430][T20047] syz_tun: entered promiscuous mode [ 1859.982114][T20047] bridge0: port 3(syz_tun) entered blocking state [ 1859.982238][T20047] bridge0: port 3(syz_tun) entered forwarding state [ 1862.200753][T20051] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2901'. [ 1862.369756][ T9572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1862.382511][ T9572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1862.386139][ T9572] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1862.387976][ T9572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1862.389104][ T9572] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1862.902042][T20071] FAULT_INJECTION: forcing a failure. [ 1862.902042][T20071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1862.902082][T20071] CPU: 0 UID: 0 PID: 20071 Comm: syz.2.2908 Not tainted syzkaller #0 PREEMPT(full) [ 1862.902110][T20071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1862.902126][T20071] Call Trace: [ 1862.902137][T20071] [ 1862.902148][T20071] dump_stack_lvl+0xe8/0x150 [ 1862.902191][T20071] should_fail_ex+0x410/0x560 [ 1862.902227][T20071] _copy_to_user+0x31/0xb0 [ 1862.902265][T20071] bpf_verifier_vlog+0x52a/0x900 [ 1862.902305][T20071] btf_verifier_log+0x11d/0x1a0 [ 1862.902342][T20071] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1862.902373][T20071] ? trace_kmalloc+0x2a/0xf0 [ 1862.902401][T20071] ? __pfx_btf_verifier_log+0x10/0x10 [ 1862.902439][T20071] ? rcu_is_watching+0x16/0xb0 [ 1862.902470][T20071] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1862.902500][T20071] ? kfree+0x4d/0x650 [ 1862.902545][T20071] btf_parse_type_sec+0x2089/0x2360 [ 1862.902582][T20071] ? btf_parse_hdr+0x1da/0x810 [ 1862.902615][T20071] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1862.902647][T20071] ? btf_parse_str_sec+0x244/0x2f0 [ 1862.902674][T20071] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1862.902710][T20071] btf_new_fd+0x487/0xbb0 [ 1862.902750][T20071] __sys_bpf+0xd2e/0xd90 [ 1862.902791][T20071] ? __pfx___sys_bpf+0x10/0x10 [ 1862.902825][T20071] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1862.902865][T20071] ? do_futex+0x3e7/0x4e0 [ 1862.902934][T20071] ? rcu_is_watching+0x16/0xb0 [ 1862.902966][T20071] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1862.903004][T20071] __x64_sys_bpf+0xba/0xd0 [ 1862.903039][T20071] do_syscall_64+0x166/0x520 [ 1862.903072][T20071] ? trace_irq_disable+0x3b/0x140 [ 1862.903099][T20071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1862.903133][T20071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1862.903160][T20071] RIP: 0033:0x7f6b4339e159 [ 1862.903184][T20071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1862.903207][T20071] RSP: 002b:00007f6b44279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1862.903235][T20071] RAX: ffffffffffffffda RBX: 00007f6b43625fa0 RCX: 00007f6b4339e159 [ 1862.903255][T20071] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1862.903274][T20071] RBP: 00007f6b4343506b R08: 0000000000000000 R09: 0000000000000000 [ 1862.903291][T20071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1862.903307][T20071] R13: 00007f6b43626038 R14: 00007f6b43625fa0 R15: 00007ffd652f0558 [ 1862.903346][T20071] [ 1864.018302][T20094] bridge0: port 3(syz_tun) entered blocking state [ 1864.018419][T20094] bridge0: port 3(syz_tun) entered disabled state [ 1864.018597][T20094] syz_tun: entered allmulticast mode [ 1864.025592][T20094] syz_tun: entered promiscuous mode [ 1864.031566][T20094] bridge0: port 3(syz_tun) entered blocking state [ 1864.031683][T20094] bridge0: port 3(syz_tun) entered forwarding state [ 1864.139121][T20097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2914'. [ 1864.610505][T17891] Bluetooth: hci0: command tx timeout [ 1864.907232][T19995] bridge0: port 3(syz_tun) entered disabled state [ 1865.234247][T19995] syz_tun (unregistering): left allmulticast mode [ 1865.234270][T19995] syz_tun (unregistering): left promiscuous mode [ 1865.234334][T19995] bridge0: port 3(syz_tun) entered disabled state [ 1866.379572][T20113] syzkaller0: entered promiscuous mode [ 1866.379601][T20113] syzkaller0: entered allmulticast mode [ 1866.864194][T17891] Bluetooth: hci0: command tx timeout [ 1867.021543][ T5901] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1869.074076][T17891] Bluetooth: hci5: command 0x0406 tx timeout [ 1869.202155][T17891] Bluetooth: hci0: command tx timeout [ 1869.371668][T20138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2922'. [ 1869.401463][ T5901] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1869.905487][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 1869.905520][ T31] audit: type=1326 audit(1790068633.197:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20140 comm="syz.6.2912" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd485b9e159 code=0x7ffc0000 [ 1869.955473][ T31] audit: type=1326 audit(1790068633.252:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20140 comm="syz.6.2912" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd485b9e159 code=0x7ffc0000 [ 1870.043007][ T31] audit: type=1326 audit(1790068633.335:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20140 comm="syz.6.2912" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd485b9e159 code=0x7ffc0000 [ 1870.043071][ T31] audit: type=1326 audit(1790068633.335:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20140 comm="syz.6.2912" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd485b9e159 code=0x7ffc0000 [ 1870.043121][ T31] audit: type=1326 audit(1790068633.335:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20140 comm="syz.6.2912" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd485b9e159 code=0x7ffc0000 [ 1870.079544][ T31] audit: type=1326 audit(1790068633.363:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20140 comm="syz.6.2912" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd485b9e159 code=0x7ffc0000 [ 1870.079604][ T31] audit: type=1326 audit(1790068633.363:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20140 comm="syz.6.2912" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd485b9e159 code=0x7ffc0000 [ 1870.130879][ T31] audit: type=1326 audit(1790068633.418:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20140 comm="syz.6.2912" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fd485b9e159 code=0x7ffc0000 [ 1870.130937][ T31] audit: type=1326 audit(1790068633.418:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20140 comm="syz.6.2912" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd485b9e159 code=0x7ffc0000 [ 1870.130988][ T31] audit: type=1326 audit(1790068633.418:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20140 comm="syz.6.2912" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd485b9e159 code=0x7ffc0000 [ 1870.451458][ T5901] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1870.782689][ T5901] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1871.251940][T20164] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 1871.460331][ T9572] Bluetooth: hci0: command tx timeout [ 1871.491003][ T5901] bridge_slave_1: left allmulticast mode [ 1871.491032][ T5901] bridge_slave_1: left promiscuous mode [ 1871.491259][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1871.579852][ T5901] bridge_slave_0: left allmulticast mode [ 1871.579885][ T5901] bridge_slave_0: left promiscuous mode [ 1871.581825][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1872.633457][ T5901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1872.654095][ T5901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1872.662880][ T5901] bond0 (unregistering): Released all slaves [ 1872.731134][T20183] bridge0: port 3(syz_tun) entered blocking state [ 1872.731249][T20183] bridge0: port 3(syz_tun) entered disabled state [ 1872.731404][T20183] syz_tun: entered allmulticast mode [ 1872.753891][T20183] syz_tun: entered promiscuous mode [ 1872.786367][T20183] bridge0: port 3(syz_tun) entered blocking state [ 1872.786486][T20183] bridge0: port 3(syz_tun) entered forwarding state [ 1872.944839][ T5901] tipc: Left network mode [ 1873.239206][T20200] netlink: 'syz.1.2937': attribute type 1 has an invalid length. [ 1873.885493][T20223] syzkaller0: entered promiscuous mode [ 1873.885520][T20223] syzkaller0: entered allmulticast mode [ 1873.908635][T20058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1873.908864][T20058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1873.909011][T20058] bridge_slave_0: entered allmulticast mode [ 1873.939283][T20058] bridge_slave_0: entered promiscuous mode [ 1873.951803][T20058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1873.951919][T20058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1873.952057][T20058] bridge_slave_1: entered allmulticast mode [ 1873.955342][T20058] bridge_slave_1: entered promiscuous mode [ 1874.110478][ T5901] hsr_slave_1: left promiscuous mode [ 1874.134890][ T5901] veth1_vlan: left promiscuous mode [ 1874.134991][ T5901] veth0_vlan: left promiscuous mode [ 1874.381533][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2946'. [ 1874.964336][T16730] nfc nfc0: NFC: nfcsim_send: Device is down [ 1874.965495][T16730] digital: digital_wq_cmd: in_send_command returned err -19 [ 1875.833997][T20270] FAULT_INJECTION: forcing a failure. [ 1875.833997][T20270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1875.834036][T20270] CPU: 0 UID: 0 PID: 20270 Comm: syz.6.2953 Not tainted syzkaller #0 PREEMPT(full) [ 1875.834065][T20270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1875.834080][T20270] Call Trace: [ 1875.834091][T20270] [ 1875.834103][T20270] dump_stack_lvl+0xe8/0x150 [ 1875.834145][T20270] should_fail_ex+0x410/0x560 [ 1875.834186][T20270] _copy_to_user+0x31/0xb0 [ 1875.834226][T20270] bpf_verifier_vlog+0x52a/0x900 [ 1875.834268][T20270] __btf_verifier_log+0xe2/0x140 [ 1875.834307][T20270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1875.834353][T20270] ? __pfx___btf_verifier_log+0x10/0x10 [ 1875.834408][T20270] __btf_verifier_log_type+0x4fd/0x6a0 [ 1875.834462][T20270] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 1875.834517][T20270] btf_datasec_check_meta+0x40e/0xad0 [ 1875.834552][T20270] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 1875.834580][T20270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1875.834623][T20270] btf_parse_type_sec+0x3cf/0x2360 [ 1875.834661][T20270] ? btf_parse_hdr+0x1da/0x810 [ 1875.834695][T20270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1875.834725][T20270] ? btf_parse_str_sec+0x244/0x2f0 [ 1875.834751][T20270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1875.834788][T20270] btf_new_fd+0x487/0xbb0 [ 1875.834821][T20270] ? do_accept+0x600/0x750 [ 1875.834856][T20270] __sys_bpf+0xd2e/0xd90 [ 1875.834894][T20270] ? do_accept+0x600/0x750 [ 1875.834925][T20270] ? __pfx___sys_bpf+0x10/0x10 [ 1875.834958][T20270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1875.834989][T20270] ? do_futex+0x3e7/0x4e0 [ 1875.835025][T20270] ? do_accept+0x600/0x750 [ 1875.835087][T20270] ? rcu_is_watching+0x16/0xb0 [ 1875.835120][T20270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1875.835157][T20270] __x64_sys_bpf+0xba/0xd0 [ 1875.835188][T20270] do_syscall_64+0x166/0x520 [ 1875.835222][T20270] ? trace_irq_disable+0x3b/0x140 [ 1875.835249][T20270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1875.835283][T20270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1875.835310][T20270] RIP: 0033:0x7fd485b9e159 [ 1875.835333][T20270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1875.835361][T20270] RSP: 002b:00007fd486b0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1875.835389][T20270] RAX: ffffffffffffffda RBX: 00007fd485e25fa0 RCX: 00007fd485b9e159 [ 1875.835409][T20270] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1875.835426][T20270] RBP: 00007fd485c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1875.835444][T20270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1875.835461][T20270] R13: 00007fd485e26038 R14: 00007fd485e25fa0 R15: 00007ffec3d56578 [ 1875.835503][T20270] [ 1876.443008][ T5901] team0 (unregistering): Port device team_slave_1 removed [ 1876.547760][ T5901] team0 (unregistering): Port device team_slave_0 removed [ 1878.716760][T20306] Bluetooth: MGMT ver 1.23 [ 1881.121235][T20058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1881.143215][T20058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1881.402474][T20058] team0: Port device team_slave_0 added [ 1881.418381][T20058] team0: Port device team_slave_1 added [ 1881.476367][T20058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1881.476389][T20058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1881.476422][T20058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1881.478421][T20058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1881.478438][T20058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1881.478470][T20058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1881.640377][T20058] hsr_slave_0: entered promiscuous mode [ 1881.685068][T20319] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1881.707689][T20058] hsr_slave_1: entered promiscuous mode [ 1881.714381][T20058] debugfs: 'hsr0' already exists in 'hsr' [ 1881.714403][T20058] Cannot create hsr debugfs directory [ 1881.744225][T20319] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1882.378413][T20319] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1882.679189][T20333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 1882.761082][T20333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 1882.787004][ T5901] IPVS: stop unused estimator thread 0... [ 1885.151875][T20369] FAULT_INJECTION: forcing a failure. [ 1885.151875][T20369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1885.151914][T20369] CPU: 1 UID: 0 PID: 20369 Comm: syz.2.2978 Not tainted syzkaller #0 PREEMPT(full) [ 1885.151945][T20369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1885.151959][T20369] Call Trace: [ 1885.151971][T20369] [ 1885.151987][T20369] dump_stack_lvl+0xe8/0x150 [ 1885.152032][T20369] should_fail_ex+0x410/0x560 [ 1885.152071][T20369] _copy_to_user+0x31/0xb0 [ 1885.152113][T20369] bpf_verifier_vlog+0x496/0x900 [ 1885.152157][T20369] __btf_verifier_log+0xe2/0x140 [ 1885.152206][T20369] ? __pfx___btf_verifier_log+0x10/0x10 [ 1885.152265][T20369] btf_verifier_log_vsi+0x1fc/0x3e0 [ 1885.152308][T20369] ? __pfx_btf_verifier_log_vsi+0x10/0x10 [ 1885.152354][T20369] btf_datasec_check_meta+0x95c/0xad0 [ 1885.152407][T20369] btf_parse_type_sec+0x3cf/0x2360 [ 1885.152448][T20369] ? btf_parse_hdr+0x1da/0x810 [ 1885.152485][T20369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1885.152518][T20369] ? btf_parse_str_sec+0x244/0x2f0 [ 1885.152546][T20369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1885.152585][T20369] btf_new_fd+0x487/0xbb0 [ 1885.152627][T20369] __sys_bpf+0xd2e/0xd90 [ 1885.152672][T20369] ? __pfx___sys_bpf+0x10/0x10 [ 1885.152707][T20369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1885.152740][T20369] ? do_futex+0x3e7/0x4e0 [ 1885.152815][T20369] ? rcu_is_watching+0x16/0xb0 [ 1885.152857][T20369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1885.152898][T20369] __x64_sys_bpf+0xba/0xd0 [ 1885.152931][T20369] do_syscall_64+0x166/0x520 [ 1885.152968][T20369] ? trace_irq_disable+0x3b/0x140 [ 1885.152997][T20369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1885.153034][T20369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1885.153063][T20369] RIP: 0033:0x7f6b4339e159 [ 1885.153087][T20369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1885.153111][T20369] RSP: 002b:00007f6b44279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1885.153141][T20369] RAX: ffffffffffffffda RBX: 00007f6b43625fa0 RCX: 00007f6b4339e159 [ 1885.153163][T20369] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1885.153182][T20369] RBP: 00007f6b4343506b R08: 0000000000000000 R09: 0000000000000000 [ 1885.153200][T20369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1885.153218][T20369] R13: 00007f6b43626038 R14: 00007f6b43625fa0 R15: 00007ffd652f0558 [ 1885.153263][T20369] [ 1886.275658][T20395] (syz.2.2986,20395,1):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 1886.275759][T20395] (syz.2.2986,20395,1):o2hb_region_dev_store:1944 ERROR: status = -5 [ 1888.407131][T20409] FAULT_INJECTION: forcing a failure. [ 1888.407131][T20409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1888.407170][T20409] CPU: 1 UID: 0 PID: 20409 Comm: syz.8.2990 Not tainted syzkaller #0 PREEMPT(full) [ 1888.407199][T20409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1888.407215][T20409] Call Trace: [ 1888.407225][T20409] [ 1888.407237][T20409] dump_stack_lvl+0xe8/0x150 [ 1888.407281][T20409] should_fail_ex+0x410/0x560 [ 1888.407317][T20409] _copy_to_user+0x31/0xb0 [ 1888.407355][T20409] bpf_verifier_vlog+0x496/0x900 [ 1888.407402][T20409] __btf_verifier_log+0xe2/0x140 [ 1888.407447][T20409] ? __pfx___btf_verifier_log+0x10/0x10 [ 1888.407499][T20409] btf_verifier_log_vsi+0x1fc/0x3e0 [ 1888.407538][T20409] ? __pfx_btf_verifier_log_vsi+0x10/0x10 [ 1888.407581][T20409] btf_datasec_check_meta+0x95c/0xad0 [ 1888.407629][T20409] btf_parse_type_sec+0x3cf/0x2360 [ 1888.407666][T20409] ? btf_parse_hdr+0x1da/0x810 [ 1888.407699][T20409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1888.407730][T20409] ? btf_parse_str_sec+0x244/0x2f0 [ 1888.407755][T20409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1888.407791][T20409] btf_new_fd+0x487/0xbb0 [ 1888.407830][T20409] __sys_bpf+0xd2e/0xd90 [ 1888.407870][T20409] ? __pfx___sys_bpf+0x10/0x10 [ 1888.407904][T20409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1888.407932][T20409] ? do_futex+0x3e7/0x4e0 [ 1888.408002][T20409] ? rcu_is_watching+0x16/0xb0 [ 1888.408035][T20409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1888.408072][T20409] __x64_sys_bpf+0xba/0xd0 [ 1888.408103][T20409] do_syscall_64+0x166/0x520 [ 1888.408136][T20409] ? trace_irq_disable+0x3b/0x140 [ 1888.408163][T20409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.408196][T20409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.408223][T20409] RIP: 0033:0x7f689d59e159 [ 1888.408247][T20409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1888.408269][T20409] RSP: 002b:00007f689e3ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1888.408296][T20409] RAX: ffffffffffffffda RBX: 00007f689d825fa0 RCX: 00007f689d59e159 [ 1888.408320][T20409] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1888.408338][T20409] RBP: 00007f689d63506b R08: 0000000000000000 R09: 0000000000000000 [ 1888.408355][T20409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1888.408376][T20409] R13: 00007f689d826038 R14: 00007f689d825fa0 R15: 00007ffe10027c58 [ 1888.408418][T20409] [ 1888.890828][T20424] syzkaller0: entered promiscuous mode [ 1888.890855][T20424] syzkaller0: entered allmulticast mode [ 1888.990623][T20058] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1889.016718][T20058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1889.448425][T20058] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1889.467368][T20058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1889.485193][T20058] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1889.525265][T20058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1889.529580][T20058] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1889.554176][T20058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1889.702021][T20457] (syz.2.2999,20457,1):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 1889.702119][T20457] (syz.2.2999,20457,1):o2hb_region_dev_store:1944 ERROR: status = -5 [ 1890.011150][T20058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1891.707770][T20058] 8021q: adding VLAN 0 to HW filter on device team0 [ 1891.730325][T20461] syzkaller0: entered promiscuous mode [ 1891.730358][T20461] syzkaller0: entered allmulticast mode [ 1891.757913][ T6585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.758022][ T6585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1891.796335][ T6585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.796454][ T6585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1892.266845][T20476] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1893.213131][T20506] syzkaller0: entered promiscuous mode [ 1893.213161][T20506] syzkaller0: entered allmulticast mode [ 1893.267772][T20510] (syz.1.3011,20510,1):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 1893.267871][T20510] (syz.1.3011,20510,1):o2hb_region_dev_store:1944 ERROR: status = -5 [ 1893.568988][T20058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1894.066631][T20517] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1894.069713][T20521] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1894.347893][T20540] FAULT_INJECTION: forcing a failure. [ 1894.347893][T20540] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1894.347935][T20540] CPU: 1 UID: 0 PID: 20540 Comm: syz.1.3018 Not tainted syzkaller #0 PREEMPT(full) [ 1894.347965][T20540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1894.347981][T20540] Call Trace: [ 1894.347992][T20540] [ 1894.348004][T20540] dump_stack_lvl+0xe8/0x150 [ 1894.348045][T20540] should_fail_ex+0x410/0x560 [ 1894.348081][T20540] get_futex_key+0x1b4/0x1580 [ 1894.348117][T20540] ? __pfx_futex_wake_mark+0x10/0x10 [ 1894.348164][T20540] ? __pfx_get_futex_key+0x10/0x10 [ 1894.348198][T20540] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1894.348228][T20540] ? __lock_acquire+0x747/0x2de0 [ 1894.348265][T20540] futex_wake+0x119/0x5f0 [ 1894.348302][T20540] ? __lock_acquire+0x747/0x2de0 [ 1894.348335][T20540] ? __pfx_futex_wake+0x10/0x10 [ 1894.348393][T20540] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1894.348423][T20540] ? do_accept+0x60b/0x750 [ 1894.348462][T20540] do_futex+0x458/0x4e0 [ 1894.348503][T20540] ? __pfx_do_futex+0x10/0x10 [ 1894.348535][T20540] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1894.348567][T20540] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1894.348607][T20540] __se_sys_futex+0x3a8/0x450 [ 1894.348650][T20540] ? __pfx___se_sys_futex+0x10/0x10 [ 1894.348694][T20540] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1894.348724][T20540] ? __x64_sys_futex+0x21/0xf0 [ 1894.348763][T20540] do_syscall_64+0x166/0x520 [ 1894.348796][T20540] ? trace_irq_disable+0x3b/0x140 [ 1894.348823][T20540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1894.348856][T20540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1894.348883][T20540] RIP: 0033:0x7f5a6ed9e159 [ 1894.348907][T20540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1894.348929][T20540] RSP: 002b:00007f5a6fc870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1894.348956][T20540] RAX: ffffffffffffffda RBX: 00007f5a6f025fa8 RCX: 00007f5a6ed9e159 [ 1894.348977][T20540] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5a6f025fac [ 1894.348995][T20540] RBP: 00007f5a6f025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1894.349014][T20540] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1894.349031][T20540] R13: 00007f5a6f026038 R14: 00007ffff88b1220 R15: 00007ffff88b1308 [ 1894.349072][T20540] [ 1894.919213][T20058] veth0_vlan: entered promiscuous mode [ 1894.979007][T20058] veth1_vlan: entered promiscuous mode [ 1894.980701][T20559] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1895.084555][T20058] veth0_macvtap: entered promiscuous mode [ 1895.108345][T20058] veth1_macvtap: entered promiscuous mode [ 1895.159312][T20058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1895.180923][T20058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1895.193179][T14002] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.193364][T14002] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.193426][T14002] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.193467][T14002] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.405915][T14002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.405941][T14002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.565914][T20568] (syz.6.3026,20568,0):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 1895.566014][T20568] (syz.6.3026,20568,0):o2hb_region_dev_store:1944 ERROR: status = -5 [ 1895.579892][T12372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.579913][T12372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1896.157752][T20587] digital: digital_start_poll: A target is already active [ 1896.518865][T20604] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1896.535400][T16994] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1896.536144][T20604] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1896.543449][T20604] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1896.550310][T20604] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1896.841344][T16994] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1896.842770][T16994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.853004][T16994] usb 2-1: config 0 descriptor?? [ 1897.116414][T16994] usb 2-1: USB disconnect, device number 12 [ 1897.167251][T20619] (syz.7.3039,20619,0):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 1897.167354][T20619] (syz.7.3039,20619,0):o2hb_region_dev_store:1944 ERROR: status = -5 [ 1897.288357][T20626] syz_tun: left allmulticast mode [ 1897.288388][T20626] syz_tun: left promiscuous mode [ 1897.288648][T20626] bridge0: port 3(syz_tun) entered disabled state [ 1897.634215][T20635] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1897.928710][T20646] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1898.437835][T20654] device-mapper: ioctl: The device has no table. [ 1898.882709][T20652] md: loop0 has zero or unknown size, marking faulty! [ 1898.883212][T20652] md: error, md_import_device() returned -22 [ 1898.928568][T20645] device-mapper: table: 248:1: thin-pool: Error opening metadata block device (-EBUSY) [ 1898.928611][T20645] device-mapper: ioctl: error adding target to table [ 1899.075354][T20645] device-mapper: ioctl: Invalid ioctl structure: name mythin, dev f802 [ 1899.173776][T20663] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1899.321294][T20663] md: array md0 already initialised! [ 1899.376560][T20663] md: loop0 has zero or unknown size, marking faulty! [ 1899.376647][T20663] md: error, md_import_device() returned -22 [ 1899.478818][T20676] o2cb: Local heartbeat has not been started. [ 1899.478839][T20676] o2cb: Cluster check failed. Fix errors before retrying. [ 1899.478865][T20676] (syz.1.3053,20676,1):user_dlm_register:674 ERROR: status = -22 [ 1899.478893][T20676] (syz.1.3053,20676,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 1899.692323][T20678] (syz.6.3052,20678,1):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 1899.692429][T20678] (syz.6.3052,20678,1):o2hb_region_dev_store:1944 ERROR: status = -5 [ 1899.759615][T20679] (syz.7.3055,20679,0):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 1899.759711][T20679] (syz.7.3055,20679,0):o2hb_region_dev_store:1944 ERROR: status = -5 [ 1899.846458][T20691] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1899.895110][T20691] md: array md0 already initialised! [ 1899.938145][T20691] md: loop0 has zero or unknown size, marking faulty! [ 1899.939889][T20691] md: error, md_import_device() returned -22 [ 1900.132616][ T5763] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1900.233417][T20668] svc: failed to register lockdv1 RPC service (errno 512). [ 1900.233680][T20668] lockd_up: makesock failed, error=-512 [ 1900.313894][ T5763] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1900.318849][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.322255][ T5763] usb 4-1: config 0 descriptor?? [ 1900.560085][ T5763] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1900.560579][ T5763] [drm:udl_init] *ERROR* Selecting channel failed [ 1900.636389][T20668] svc: failed to register nfsdv3 RPC service (errno 512). [ 1900.636582][T20668] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1900.636601][T20668] failed to unregister tcp with rpcbind [ 1900.647123][ T5763] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1900.647147][ T5763] [drm] Initialized udl on minor 1 [ 1900.652086][T20668] svc: failed to register nfsdv3 RPC service (errno 97). [ 1900.652108][T20668] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1900.652124][T20668] failed to unregister tcp with rpcbind [ 1900.658736][ T5763] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1900.672582][ T5763] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1900.679330][T16733] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1900.697153][T16733] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1900.697358][T16733] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1900.783985][ T5763] usb 4-1: USB disconnect, device number 44 [ 1900.901445][T20704] svc: failed to register lockdv1 RPC service (errno 111). [ 1901.104659][T20704] svc: failed to register nfsdv3 RPC service (errno 512). [ 1901.104996][T20704] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1901.105052][T20704] failed to unregister tcp with rpcbind [ 1901.105269][T20704] svc: failed to register nfsdv3 RPC service (errno 97). [ 1901.105290][T20704] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1901.105306][T20704] failed to unregister tcp with rpcbind [ 1901.805849][T20741] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1901.861728][T20737] md: array md0 already initialised! [ 1901.881192][T20737] md: loop0 has zero or unknown size, marking faulty! [ 1901.881713][T20737] md: error, md_import_device() returned -22 [ 1901.886914][T20715] svc: failed to register nfsdv3 RPC service (errno 512). [ 1901.887154][T20715] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1901.887173][T20715] failed to unregister tcp with rpcbind [ 1901.887367][T20715] svc: failed to register nfsdv3 RPC service (errno 97). [ 1901.887386][T20715] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1901.887402][T20715] failed to unregister tcp with rpcbind [ 1902.579931][T20749] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1902.616855][T20747] o2cb: Local heartbeat has not been started. [ 1902.616874][T20747] o2cb: Cluster check failed. Fix errors before retrying. [ 1902.616902][T20747] (syz.6.3070,20747,0):user_dlm_register:674 ERROR: status = -22 [ 1902.616932][T20747] (syz.6.3070,20747,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 1902.625868][T20749] md: array md0 already initialised! [ 1902.719475][T20722] svc: failed to register nfsdv3 RPC service (errno 512). [ 1902.720684][T20722] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1902.720705][T20722] failed to unregister tcp with rpcbind [ 1902.720877][T20722] svc: failed to register nfsdv3 RPC service (errno 97). [ 1902.720897][T20722] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1902.720920][T20722] failed to unregister tcp with rpcbind [ 1902.807945][T20743] svc: failed to register lockdv1 RPC service (errno 111). [ 1903.141522][T20743] svc: failed to register nfsdv3 RPC service (errno 111). [ 1903.144195][T20743] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1903.144216][T20743] failed to unregister tcp with rpcbind [ 1903.144392][T20743] svc: failed to register nfsdv3 RPC service (errno 97). [ 1903.144413][T20743] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1903.144429][T20743] failed to unregister tcp with rpcbind [ 1903.270591][T20764] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1903.384196][T20764] md: array md0 already initialised! [ 1903.412454][T20766] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1903.451404][T20772] md: array md0 already initialised! [ 1905.111603][T20764] md: loop0 has zero or unknown size, marking faulty! [ 1905.111690][T20764] md: error, md_import_device() returned -22 [ 1905.154159][T20776] FAULT_INJECTION: forcing a failure. [ 1905.154159][T20776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1905.154199][T20776] CPU: 1 UID: 0 PID: 20776 Comm: syz.1.3071 Not tainted syzkaller #0 PREEMPT(full) [ 1905.154228][T20776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1905.154245][T20776] Call Trace: [ 1905.154255][T20776] [ 1905.154266][T20776] dump_stack_lvl+0xe8/0x150 [ 1905.154310][T20776] should_fail_ex+0x410/0x560 [ 1905.154347][T20776] _copy_from_user+0x2d/0xb0 [ 1905.154383][T20776] bpf_vlog_reverse_ubuf+0xb1/0x3e0 [ 1905.154419][T20776] bpf_vlog_finalize+0x189/0x3f0 [ 1905.154451][T20776] bpf_log_attr_finalize+0x80/0x1e0 [ 1905.154480][T20776] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 1905.154512][T20776] ? btf_parse_hdr+0x5f2/0x810 [ 1905.154546][T20776] btf_new_fd+0x35e/0xbb0 [ 1905.154584][T20776] __sys_bpf+0xd2e/0xd90 [ 1905.154630][T20776] ? __pfx___sys_bpf+0x10/0x10 [ 1905.154663][T20776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1905.154695][T20776] ? do_futex+0x3e7/0x4e0 [ 1905.154764][T20776] ? rcu_is_watching+0x16/0xb0 [ 1905.154796][T20776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1905.154834][T20776] __x64_sys_bpf+0xba/0xd0 [ 1905.154871][T20776] do_syscall_64+0x166/0x520 [ 1905.154904][T20776] ? trace_irq_disable+0x3b/0x140 [ 1905.154931][T20776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1905.154964][T20776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1905.154991][T20776] RIP: 0033:0x7f5a6ed9e159 [ 1905.155014][T20776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1905.155036][T20776] RSP: 002b:00007f5a6fc87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1905.155064][T20776] RAX: ffffffffffffffda RBX: 00007f5a6f025fa0 RCX: 00007f5a6ed9e159 [ 1905.155084][T20776] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1905.155102][T20776] RBP: 00007f5a6ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 1905.155119][T20776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1905.155136][T20776] R13: 00007f5a6f026038 R14: 00007f5a6f025fa0 R15: 00007ffff88b1308 [ 1905.155176][T20776] [ 1905.346193][T20766] md: loop0 has zero or unknown size, marking faulty! [ 1905.346273][T20766] md: error, md_import_device() returned -22 [ 1905.384168][T20788] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1905.497759][ T5763] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1905.562889][T20788] md: array md0 already initialised! [ 1905.607163][T20788] md: loop0 has zero or unknown size, marking faulty! [ 1905.607240][T20788] md: error, md_import_device() returned -22 [ 1905.660681][ T5763] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1905.668330][ T5763] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.695696][ T5763] usb 8-1: config 0 descriptor?? [ 1905.731583][T20793] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1905.871061][T20793] md: array md0 already initialised! [ 1905.928182][ T5763] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1905.928626][ T5763] [drm:udl_init] *ERROR* Selecting channel failed [ 1905.945119][T20793] md: loop0 has zero or unknown size, marking faulty! [ 1905.945212][T20793] md: error, md_import_device() returned -22 [ 1905.978330][ T5763] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 1905.978366][ T5763] [drm] Initialized udl on minor 1 [ 1905.997311][ T5763] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1905.997749][ T5763] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1906.002490][ T5763] usb 8-1: USB disconnect, device number 39 [ 1906.002876][T16730] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1906.003252][T16730] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1906.003496][T16730] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1906.104771][T20797] md: array md0 already initialised! [ 1906.126616][T20797] md: loop0 has zero or unknown size, marking faulty! [ 1906.126691][T20797] md: error, md_import_device() returned -22 [ 1906.243943][T20802] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1906.244221][T20800] svc: failed to register lockdv1 RPC service (errno 111). [ 1906.387497][T20802] md: array md0 already initialised! [ 1906.408145][T20804] md: loop0 has zero or unknown size, marking faulty! [ 1906.408219][T20804] md: error, md_import_device() returned -22 [ 1906.579733][T20807] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1906.690167][T20800] svc: failed to register nfsdv3 RPC service (errno 512). [ 1906.690421][T20800] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1906.690441][T20800] failed to unregister tcp with rpcbind [ 1906.690619][T20800] svc: failed to register nfsdv3 RPC service (errno 97). [ 1906.690640][T20800] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1906.690656][T20800] failed to unregister tcp with rpcbind [ 1906.715942][T20807] md: array md0 already initialised! [ 1906.779988][T20811] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1906.802478][T20807] md: could not open device unknown-block(7,0). [ 1906.802543][T20807] md: error, md_import_device() returned -16 [ 1906.856992][T20818] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1906.887837][T20811] md: array md0 already initialised! [ 1906.919529][T20811] md: could not open device unknown-block(7,0). [ 1906.919594][T20811] md: error, md_import_device() returned -16 [ 1907.102094][T20827] bonding: bond1 is being created... [ 1907.106757][T20822] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1907.150617][T20828] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1907.175462][T20815] device-mapper: table: 248:2: thin: Error opening pool device (-ENOENT) [ 1907.175492][T20815] device-mapper: ioctl: error adding target to table [ 1907.204154][T20812] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO) [ 1907.204182][T20812] device-mapper: ioctl: error adding target to table [ 1907.278049][T20811] md/raid1:md0: active with 1 out of 1 mirrors [ 1907.293803][T20811] md0: detected capacity change from 0 to 2048 [ 1907.321230][T20822] md: loop0 has zero or unknown size, marking faulty! [ 1907.321311][T20822] md: md_import_device returned -22 [ 1907.321368][T20828] md: couldn't update array info. -22 [ 1907.326089][T20833] md: loop0 has zero or unknown size, marking faulty! [ 1907.326154][T20833] md: md_import_device returned -22 [ 1907.634551][T20843] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1907.737061][T20843] md: couldn't update array info. -22 [ 1907.774119][T20852] md: loop0 has zero or unknown size, marking faulty! [ 1907.774196][T20852] md: md_import_device returned -22 [ 1907.855426][T20855] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1907.920614][T20854] bonding: bond1 is being created... [ 1907.928185][T20855] md: couldn't update array info. -22 [ 1907.951354][T20861] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1907.981599][T20855] md: could not open device unknown-block(1,0). [ 1907.981675][T20855] md: md_import_device returned -16 [ 1907.987046][T20861] md: couldn't update array info. -22 [ 1908.020157][T20861] md: loop0 has zero or unknown size, marking faulty! [ 1908.020233][T20861] md: md_import_device returned -22 [ 1908.066001][T20843] syz.2.3092: attempt to access beyond end of device [ 1908.066001][T20843] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1908.066193][T20843] syz.2.3092: attempt to access beyond end of device [ 1908.066193][T20843] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1908.066224][T20843] md: md0: failed to read bitmap from any device [ 1908.301357][T20854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1908.354356][T20869] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1908.403308][T20869] md: couldn't update array info. -22 [ 1908.446589][T20869] md: loop0 has zero or unknown size, marking faulty! [ 1908.446662][T20869] md: md_import_device returned -22 [ 1908.524636][T20869] syz.3.3099: attempt to access beyond end of device [ 1908.524636][T20869] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1908.524727][T20869] syz.3.3099: attempt to access beyond end of device [ 1908.524727][T20869] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1908.524758][T20869] md: md0: failed to read bitmap from any device [ 1908.653354][T20854] bond0: (slave bond_slave_0): Releasing backup interface [ 1908.688925][T20878] bonding: bond1 is being created... [ 1908.759250][T20878] bonding: bond1 already exists [ 1908.800027][T20888] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1908.818107][T20859] bond0: (slave bond_slave_1): Releasing backup interface [ 1908.826304][T10510] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1908.840437][T20886] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1908.859152][T20888] md: couldn't update array info. -22 [ 1908.902679][T20890] md: could not open device unknown-block(1,0). [ 1908.902745][T20890] md: md_import_device returned -16 [ 1908.946664][T20886] md: couldn't update array info. -22 [ 1908.961589][T20878] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1908.961824][T20854] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 1908.973596][T20893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1908.994047][T10510] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1909.001304][T10510] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.021107][T10510] usb 3-1: config 0 descriptor?? [ 1909.036075][T20892] md: loop0 has zero or unknown size, marking faulty! [ 1909.036180][T20892] md: md_import_device returned -22 [ 1909.075505][T20897] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1909.127489][T20898] md: check of RAID array md0 [ 1909.133812][T20897] md: couldn't update array info. -22 [ 1909.151044][T20897] md: could not open device unknown-block(1,0). [ 1909.151106][T20897] md: md_import_device returned -16 [ 1909.319693][T10510] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1909.321961][T10510] [drm:udl_init] *ERROR* Selecting channel failed [ 1909.354242][T20898] md: md0: check done. [ 1909.421129][T20878] bond0: (slave bond_slave_0): Releasing backup interface [ 1909.426822][T10510] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1909.426850][T10510] [drm] Initialized udl on minor 1 [ 1909.445818][T10510] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1909.446312][T10510] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1909.450240][T16994] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1909.453771][T16994] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1909.453971][T16994] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1909.464298][T10510] usb 3-1: USB disconnect, device number 20 [ 1909.502448][T20906] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1909.526270][T20909] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1909.538084][T20907] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1909.547405][T20883] bond0: (slave bond_slave_1): Releasing backup interface [ 1909.626686][T20906] md: couldn't update array info. -22 [ 1909.636963][T20912] md: check of RAID array md0 [ 1909.659387][T20907] md: couldn't update array info. -22 [ 1909.672922][T20906] md: loop0 has zero or unknown size, marking faulty! [ 1909.672993][T20906] md: md_import_device returned -22 [ 1909.740934][T20912] md: md0: check done. [ 1909.772328][T20915] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1909.802863][T20915] md: couldn't update array info. -22 [ 1909.940352][T20920] md: check of RAID array md0 [ 1910.064825][T20921] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1910.073827][T20920] md: md0: check done. [ 1910.108231][T20925] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1910.146802][T20921] md: couldn't update array info. -22 [ 1910.220278][T20929] md: could not open device unknown-block(1,0). [ 1910.220347][T20929] md: md_import_device returned -16 [ 1910.220481][T20924] md: couldn't update array info. -22 [ 1910.220624][T20925] md: couldn't update array info. -22 [ 1910.306060][T20930] md: could not open device unknown-block(1,0). [ 1910.306125][T20930] md: md_import_device returned -16 [ 1910.311009][T20938] md: check of RAID array md0 [ 1910.476128][T20938] md: md0: check done. [ 1910.795224][T20952] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1910.813722][T20953] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1910.852817][T20952] md: couldn't update array info. -22 [ 1910.886167][T20952] md: could not open device unknown-block(1,0). [ 1910.886230][T20952] md: md_import_device returned -16 [ 1910.914845][T20955] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1910.927933][T20953] md: couldn't update array info. -22 [ 1911.022711][T20966] md: check of RAID array md0 [ 1911.024940][T20963] md: could not open device unknown-block(1,0). [ 1911.025002][T20963] md: md_import_device returned -16 [ 1911.025332][T20959] md: loop0 has zero or unknown size, marking faulty! [ 1911.025400][T20959] md: md_import_device returned -22 [ 1911.025567][T20955] md: couldn't update array info. -22 [ 1911.174172][T20968] device-mapper: ioctl: The device has no table. [ 1911.194783][T20966] md: md0: check done. [ 1911.249760][T20971] device-mapper: table: 248:2: too large device [ 1911.249782][T20971] device-mapper: ioctl: error adding target to table [ 1911.449016][T20962] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO) [ 1911.449046][T20962] device-mapper: ioctl: error adding target to table [ 1911.605219][T20981] device-mapper: ioctl: The device has no table. [ 1911.682870][T20981] device-mapper: table: 248:2: too large device [ 1911.682891][T20981] device-mapper: ioctl: error adding target to table [ 1911.833916][T20993] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1911.868827][T20988] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1911.957092][T20993] md: couldn't update array info. -22 [ 1911.991167][T20995] md: could not open device unknown-block(7,0). [ 1911.991230][T20995] md: md_import_device returned -16 [ 1912.068788][T20988] md: couldn't update array info. -22 [ 1912.146394][T21003] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1912.168844][T20973] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO) [ 1912.168874][T20973] device-mapper: ioctl: error adding target to table [ 1912.170621][T20999] md: could not open device unknown-block(1,0). [ 1912.170692][T20999] md: md_import_device returned -16 [ 1912.174576][T20993] syz.2.3135: attempt to access beyond end of device [ 1912.174576][T20993] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1912.174656][T20993] syz.2.3135: attempt to access beyond end of device [ 1912.174656][T20993] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1912.174684][T20993] md: md0: failed to read bitmap from any device [ 1912.176642][T21003] md: couldn't update array info. -22 [ 1912.238886][T21003] md: could not open device unknown-block(1,0). [ 1912.238953][T21003] md: md_import_device returned -16 [ 1912.262920][T21004] md: check of RAID array md0 [ 1912.311407][T21004] md: md0: check done. [ 1912.410023][T21011] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1912.466373][T21011] md: couldn't update array info. -22 [ 1912.499613][T21011] md: loop0 has zero or unknown size, marking faulty! [ 1912.499686][T21011] md: md_import_device returned -22 [ 1912.553908][T21011] syz.6.3140: attempt to access beyond end of device [ 1912.553908][T21011] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1912.553995][T21011] syz.6.3140: attempt to access beyond end of device [ 1912.553995][T21011] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1912.554024][T21011] md: md0: failed to read bitmap from any device [ 1912.639474][T21016] bonding: bond1 is being created... [ 1913.212857][T21020] syzkaller0: entered promiscuous mode [ 1913.212885][T21020] syzkaller0: entered allmulticast mode [ 1913.228567][T21043] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1913.263122][T21044] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1913.266353][T21016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1913.338360][T21051] md: check of RAID array md0 [ 1913.348749][T21044] md: couldn't update array info. -22 [ 1913.367786][T21044] md: loop0 has zero or unknown size, marking faulty! [ 1913.367874][T21044] md: md_import_device returned -22 [ 1913.396574][T21049] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1913.471471][T21051] md: md0: check done. [ 1913.518147][T21049] md: couldn't update array info. -22 [ 1913.586484][T21049] md: loop0 has zero or unknown size, marking faulty! [ 1913.586558][T21049] md: md_import_device returned -22 [ 1913.736311][T21049] syz.7.3150: attempt to access beyond end of device [ 1913.736311][T21049] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1913.736408][T21049] syz.7.3150: attempt to access beyond end of device [ 1913.736408][T21049] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1913.736438][T21049] md: md0: failed to read bitmap from any device [ 1913.870218][T21061] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1913.875899][T21063] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1913.953273][T21061] md: couldn't update array info. -22 [ 1914.016187][T21061] md: loop0 has zero or unknown size, marking faulty! [ 1914.016266][T21061] md: md_import_device returned -22 [ 1914.016401][T21063] syz.3.3152: attempt to access beyond end of device [ 1914.016401][T21063] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1914.016478][T21063] syz.3.3152: attempt to access beyond end of device [ 1914.016478][T21063] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1914.016506][T21063] md: md0: failed to read bitmap from any device [ 1915.509151][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.509216][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.564988][T21098] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1915.590826][T21098] md: couldn't update array info. -22 [ 1915.601849][T21099] bonding: bond1 is being created... [ 1915.619877][T21098] md: loop0 has zero or unknown size, marking faulty! [ 1915.619962][T21098] md: md_import_device returned -22 [ 1915.635060][T21098] syz.7.3163: attempt to access beyond end of device [ 1915.635060][T21098] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1915.635149][T21098] syz.7.3163: attempt to access beyond end of device [ 1915.635149][T21098] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1915.635177][T21098] md: md0: failed to read bitmap from any device [ 1915.948373][T21110] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3165'. [ 1917.616309][T21046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1917.819345][T21124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1917.957177][T21132] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1917.996638][T21132] md: couldn't update array info. -22 [ 1918.731276][T21132] md: loop0 has zero or unknown size, marking faulty! [ 1918.731354][T21132] md: md_import_device returned -22 [ 1918.750925][T21144] netlink: 316 bytes leftover after parsing attributes in process `syz.1.3174'. [ 1919.000224][T21147] bonding: bond1 is being created... [ 1919.048363][T21149] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1919.182868][T21158] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1919.254454][T21157] md: couldn't update array info. -22 [ 1919.295464][T21159] md: couldn't update array info. -22 [ 1919.316847][T21158] md: couldn't update array info. -22 [ 1919.321532][T21147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1919.350025][T21171] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1919.369925][T21165] md: could not open device unknown-block(1,0). [ 1919.369994][T21165] md: md_import_device returned -16 [ 1919.413259][T21161] md: couldn't update array info. -22 [ 1919.417303][T21177] md: check of RAID array md0 [ 1919.458656][T21166] md: loop0 has zero or unknown size, marking faulty! [ 1919.458739][T21166] md: md_import_device returned -22 [ 1919.486522][T21177] md: md0: check done. [ 1919.499954][T21167] md: loop0 has zero or unknown size, marking faulty! [ 1919.500032][T21167] md: md_import_device returned -22 [ 1919.559129][T21163] md: loop0 has zero or unknown size, marking faulty! [ 1919.559201][T21163] md: md_import_device returned -22 [ 1919.692800][T21147] bond0: (slave bond_slave_0): Releasing backup interface [ 1919.789710][T21155] bond0: (slave bond_slave_1): Releasing backup interface [ 1919.944967][T21147] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 1919.981448][T21147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1920.121829][T21201] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.3184'. [ 1920.375890][T21210] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1920.447892][T21210] md: couldn't update array info. -22 [ 1920.475836][T21214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1920.486036][T21210] md: loop0 has zero or unknown size, marking faulty! [ 1920.486115][T21210] md: md_import_device returned -22 [ 1920.540756][T21210] syz.3.3189: attempt to access beyond end of device [ 1920.540756][T21210] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1920.540919][T21210] syz.3.3189: attempt to access beyond end of device [ 1920.540919][T21210] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1920.540949][T21210] md: md0: failed to read bitmap from any device [ 1920.764638][T21224] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3193'. [ 1920.793268][T21224] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3193'. [ 1920.803707][T21225] FAULT_INJECTION: forcing a failure. [ 1920.803707][T21225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1920.803743][T21225] CPU: 0 UID: 0 PID: 21225 Comm: syz.3.3194 Not tainted syzkaller #0 PREEMPT(full) [ 1920.803771][T21225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1920.803787][T21225] Call Trace: [ 1920.803798][T21225] [ 1920.803809][T21225] dump_stack_lvl+0xe8/0x150 [ 1920.803853][T21225] should_fail_ex+0x410/0x560 [ 1920.803901][T21225] _copy_from_user+0x2d/0xb0 [ 1920.803937][T21225] __sys_bpf+0x2e7/0xd90 [ 1920.803976][T21225] ? do_accept+0x600/0x750 [ 1920.804008][T21225] ? __pfx___sys_bpf+0x10/0x10 [ 1920.804041][T21225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.804071][T21225] ? do_futex+0x458/0x4e0 [ 1920.804140][T21225] ? rcu_is_watching+0x16/0xb0 [ 1920.804172][T21225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.804209][T21225] __x64_sys_bpf+0xba/0xd0 [ 1920.804240][T21225] do_syscall_64+0x166/0x520 [ 1920.804273][T21225] ? trace_irq_disable+0x3b/0x140 [ 1920.804300][T21225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1920.804333][T21225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1920.804359][T21225] RIP: 0033:0x7fe8f219e159 [ 1920.804382][T21225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1920.804404][T21225] RSP: 002b:00007fe8f2fac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1920.804432][T21225] RAX: ffffffffffffffda RBX: 00007fe8f2425fa0 RCX: 00007fe8f219e159 [ 1920.804451][T21225] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1920.804469][T21225] RBP: 00007fe8f223506b R08: 0000000000000000 R09: 0000000000000000 [ 1920.804485][T21225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1920.804502][T21225] R13: 00007fe8f2426038 R14: 00007fe8f2425fa0 R15: 00007ffd1f779708 [ 1920.804542][T21225] [ 1921.093426][T21228] md: couldn't update array info. -22 [ 1921.138206][T21228] md: loop0 has zero or unknown size, marking faulty! [ 1921.138286][T21228] md: md_import_device returned -22 [ 1921.278017][T21232] md: couldn't update array info. -22 [ 1921.310205][T21232] md: loop0 has zero or unknown size, marking faulty! [ 1921.310284][T21232] md: md_import_device returned -22 [ 1921.351974][T21239] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1921.386475][T21232] syz.1.3196: attempt to access beyond end of device [ 1921.386475][T21232] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1921.386561][T21232] syz.1.3196: attempt to access beyond end of device [ 1921.386561][T21232] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1921.386590][T21232] md: md0: failed to read bitmap from any device [ 1921.472443][T21239] md: couldn't update array info. -22 [ 1921.506047][T21239] md: loop0 has zero or unknown size, marking faulty! [ 1921.506121][T21239] md: md_import_device returned -22 [ 1921.642217][T21249] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1923.229617][T21259] md: couldn't update array info. -22 [ 1923.306580][T21259] md: loop0 has zero or unknown size, marking faulty! [ 1923.306659][T21259] md: md_import_device returned -22 [ 1923.424040][T21268] md: couldn't update array info. -22 [ 1923.452206][T21268] md: loop0 has zero or unknown size, marking faulty! [ 1923.452281][T21268] md: md_import_device returned -22 [ 1923.504485][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3210'. [ 1923.525068][T21268] syz.3.3207: attempt to access beyond end of device [ 1923.525068][T21268] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1923.525148][T21268] syz.3.3207: attempt to access beyond end of device [ 1923.525148][T21268] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1923.525198][T21268] md: md0: failed to read bitmap from any device [ 1923.536799][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3210'. [ 1923.539818][T21269] NFSD: Failed to start, no listeners configured. [ 1923.606772][T21279] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3209'. [ 1923.812304][T21287] FAULT_INJECTION: forcing a failure. [ 1923.812304][T21287] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1923.812348][T21287] CPU: 0 UID: 0 PID: 21287 Comm: syz.1.3211 Not tainted syzkaller #0 PREEMPT(full) [ 1923.812384][T21287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1923.812401][T21287] Call Trace: [ 1923.812412][T21287] [ 1923.812424][T21287] dump_stack_lvl+0xe8/0x150 [ 1923.812470][T21287] should_fail_ex+0x410/0x560 [ 1923.812508][T21287] get_futex_key+0x1b4/0x1580 [ 1923.812545][T21287] ? __pfx_futex_wake_mark+0x10/0x10 [ 1923.812593][T21287] ? __pfx_get_futex_key+0x10/0x10 [ 1923.812631][T21287] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1923.812663][T21287] ? __lock_acquire+0x747/0x2de0 [ 1923.812701][T21287] futex_wake+0x119/0x5f0 [ 1923.812739][T21287] ? __lock_acquire+0x747/0x2de0 [ 1923.812772][T21287] ? __pfx_futex_wake+0x10/0x10 [ 1923.812818][T21287] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1923.812849][T21287] ? do_accept+0x60b/0x750 [ 1923.812957][T21287] do_futex+0x458/0x4e0 [ 1923.813005][T21287] ? __pfx_do_futex+0x10/0x10 [ 1923.813051][T21287] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1923.813085][T21287] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1923.813120][T21287] __se_sys_futex+0x3a8/0x450 [ 1923.813172][T21287] ? __pfx___se_sys_futex+0x10/0x10 [ 1923.813232][T21287] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1923.813275][T21287] ? __x64_sys_futex+0x21/0xf0 [ 1923.813328][T21287] do_syscall_64+0x166/0x520 [ 1923.813404][T21287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1923.813456][T21287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1923.813490][T21287] RIP: 0033:0x7f5a6ed9e159 [ 1923.813521][T21287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1923.813552][T21287] RSP: 002b:00007f5a6fc870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1923.813590][T21287] RAX: ffffffffffffffda RBX: 00007f5a6f025fa8 RCX: 00007f5a6ed9e159 [ 1923.813618][T21287] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5a6f025fac [ 1923.813643][T21287] RBP: 00007f5a6f025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1923.813668][T21287] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1923.813693][T21287] R13: 00007f5a6f026038 R14: 00007ffff88b1220 R15: 00007ffff88b1308 [ 1923.813750][T21287] [ 1924.128288][T21293] md: couldn't update array info. -22 [ 1924.157205][T21293] md: could not open device unknown-block(1,0). [ 1924.157268][T21293] md: md_import_device returned -16 [ 1924.235375][T21295] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1924.341418][T21298] md: check of RAID array md0 [ 1924.391549][T21298] md: md0: check done. [ 1924.720174][T21310] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1924.830773][T21306] NFSD: Failed to start, no listeners configured. [ 1924.863084][T21315] FAULT_INJECTION: forcing a failure. [ 1924.863084][T21315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1924.863122][T21315] CPU: 1 UID: 0 PID: 21315 Comm: syz.3.3218 Not tainted syzkaller #0 PREEMPT(full) [ 1924.863150][T21315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1924.863167][T21315] Call Trace: [ 1924.863178][T21315] [ 1924.863189][T21315] dump_stack_lvl+0xe8/0x150 [ 1924.863232][T21315] should_fail_ex+0x410/0x560 [ 1924.863270][T21315] _copy_to_user+0x31/0xb0 [ 1924.863309][T21315] bpf_verifier_vlog+0x606/0x900 [ 1924.863349][T21315] __btf_verifier_log+0xe2/0x140 [ 1924.863393][T21315] ? __pfx___btf_verifier_log+0x10/0x10 [ 1924.863453][T21315] btf_verifier_log_vsi+0x1fc/0x3e0 [ 1924.863493][T21315] ? __pfx_btf_verifier_log_vsi+0x10/0x10 [ 1924.863536][T21315] btf_datasec_check_meta+0x93a/0xad0 [ 1924.863570][T21315] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 1924.863597][T21315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1924.863639][T21315] btf_parse_type_sec+0x3cf/0x2360 [ 1924.863676][T21315] ? btf_parse_hdr+0x1da/0x810 [ 1924.863710][T21315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1924.863739][T21315] ? btf_parse_str_sec+0x244/0x2f0 [ 1924.863765][T21315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1924.863800][T21315] btf_new_fd+0x487/0xbb0 [ 1924.863838][T21315] __sys_bpf+0xd2e/0xd90 [ 1924.863879][T21315] ? __pfx___sys_bpf+0x10/0x10 [ 1924.863912][T21315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1924.863942][T21315] ? do_futex+0x3e7/0x4e0 [ 1924.864011][T21315] ? rcu_is_watching+0x16/0xb0 [ 1924.864043][T21315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1924.864078][T21315] __x64_sys_bpf+0xba/0xd0 [ 1924.864112][T21315] do_syscall_64+0x166/0x520 [ 1924.864146][T21315] ? trace_irq_disable+0x3b/0x140 [ 1924.864174][T21315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.864207][T21315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.864234][T21315] RIP: 0033:0x7fe8f219e159 [ 1924.864258][T21315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1924.864279][T21315] RSP: 002b:00007fe8f2fac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1924.864306][T21315] RAX: ffffffffffffffda RBX: 00007fe8f2425fa0 RCX: 00007fe8f219e159 [ 1924.864326][T21315] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1924.864343][T21315] RBP: 00007fe8f223506b R08: 0000000000000000 R09: 0000000000000000 [ 1924.864360][T21315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1924.864377][T21315] R13: 00007fe8f2426038 R14: 00007fe8f2425fa0 R15: 00007ffd1f779708 [ 1924.864416][T21315] [ 1925.221095][T21322] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3224'. [ 1925.232272][T21322] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3224'. [ 1925.308034][T21327] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1925.354844][T21327] md: couldn't update array info. -22 [ 1925.395798][T21327] md: loop0 has zero or unknown size, marking faulty! [ 1925.395876][T21327] md: md_import_device returned -22 [ 1925.744566][T21341] FAULT_INJECTION: forcing a failure. [ 1925.744566][T21341] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1925.744606][T21341] CPU: 1 UID: 0 PID: 21341 Comm: syz.8.3226 Not tainted syzkaller #0 PREEMPT(full) [ 1925.744635][T21341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1925.744651][T21341] Call Trace: [ 1925.744662][T21341] [ 1925.744673][T21341] dump_stack_lvl+0xe8/0x150 [ 1925.744717][T21341] should_fail_ex+0x410/0x560 [ 1925.744753][T21341] get_futex_key+0x1b4/0x1580 [ 1925.744789][T21341] ? __pfx_futex_wake_mark+0x10/0x10 [ 1925.744836][T21341] ? __pfx_get_futex_key+0x10/0x10 [ 1925.744869][T21341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1925.744900][T21341] ? __lock_acquire+0x747/0x2de0 [ 1925.744938][T21341] futex_wake+0x119/0x5f0 [ 1925.744975][T21341] ? __lock_acquire+0x747/0x2de0 [ 1925.745008][T21341] ? __pfx_futex_wake+0x10/0x10 [ 1925.745052][T21341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1925.745082][T21341] ? do_accept+0x60b/0x750 [ 1925.745121][T21341] do_futex+0x458/0x4e0 [ 1925.745163][T21341] ? __pfx_do_futex+0x10/0x10 [ 1925.745216][T21341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1925.745248][T21341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1925.745287][T21341] __se_sys_futex+0x3a8/0x450 [ 1925.745329][T21341] ? __pfx___se_sys_futex+0x10/0x10 [ 1925.745378][T21341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1925.745408][T21341] ? __x64_sys_futex+0x21/0xf0 [ 1925.745446][T21341] do_syscall_64+0x166/0x520 [ 1925.745478][T21341] ? trace_irq_disable+0x3b/0x140 [ 1925.745506][T21341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1925.745538][T21341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1925.745564][T21341] RIP: 0033:0x7f689d59e159 [ 1925.745588][T21341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1925.745610][T21341] RSP: 002b:00007f689e3ca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1925.745637][T21341] RAX: ffffffffffffffda RBX: 00007f689d825fa8 RCX: 00007f689d59e159 [ 1925.745657][T21341] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f689d825fac [ 1925.745675][T21341] RBP: 00007f689d825fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1925.745694][T21341] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1925.745711][T21341] R13: 00007f689d826038 R14: 00007ffe10027b70 R15: 00007ffe10027c58 [ 1925.745750][T21341] [ 1925.963568][T21346] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1926.034936][T21346] md: couldn't update array info. -22 [ 1926.035007][T21351] md: couldn't update array info. -22 [ 1926.070495][T21351] md: could not open device unknown-block(1,0). [ 1926.070568][T21351] md: md_import_device returned -16 [ 1926.121981][T21346] md: loop0 has zero or unknown size, marking faulty! [ 1926.122058][T21346] md: md_import_device returned -22 [ 1926.122148][T21349] md: couldn't update array info. -22 [ 1926.122236][T21352] md: couldn't update array info. -22 [ 1926.176825][T21352] md: could not open device unknown-block(7,0). [ 1926.176900][T21352] md: md_import_device returned -16 [ 1926.179306][T21354] md: could not open device unknown-block(7,0). [ 1926.179373][T21354] md: md_import_device returned -16 [ 1926.266311][T21352] syz.1.3229: attempt to access beyond end of device [ 1926.266311][T21352] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1926.266446][T21352] syz.1.3229: attempt to access beyond end of device [ 1926.266446][T21352] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1926.266476][T21352] md: md0: failed to read bitmap from any device [ 1926.579856][T21356] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO) [ 1926.579893][T21356] device-mapper: ioctl: error adding target to table [ 1926.626485][T21368] FAULT_INJECTION: forcing a failure. [ 1926.626485][T21368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1926.626523][T21368] CPU: 0 UID: 0 PID: 21368 Comm: syz.1.3235 Not tainted syzkaller #0 PREEMPT(full) [ 1926.626552][T21368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1926.626568][T21368] Call Trace: [ 1926.626579][T21368] [ 1926.626590][T21368] dump_stack_lvl+0xe8/0x150 [ 1926.626633][T21368] should_fail_ex+0x410/0x560 [ 1926.626670][T21368] _copy_to_user+0x31/0xb0 [ 1926.626708][T21368] bpf_verifier_vlog+0x496/0x900 [ 1926.626749][T21368] __btf_verifier_log+0xe2/0x140 [ 1926.626793][T21368] ? __pfx___btf_verifier_log+0x10/0x10 [ 1926.626846][T21368] btf_verifier_log_vsi+0x23b/0x3e0 [ 1926.626892][T21368] ? __pfx_btf_verifier_log_vsi+0x10/0x10 [ 1926.626936][T21368] btf_datasec_check_meta+0x93a/0xad0 [ 1926.626970][T21368] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 1926.626998][T21368] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1926.627040][T21368] btf_parse_type_sec+0x3cf/0x2360 [ 1926.627078][T21368] ? btf_parse_hdr+0x1da/0x810 [ 1926.627112][T21368] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1926.627142][T21368] ? btf_parse_str_sec+0x244/0x2f0 [ 1926.627167][T21368] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1926.627204][T21368] btf_new_fd+0x487/0xbb0 [ 1926.627243][T21368] __sys_bpf+0xd2e/0xd90 [ 1926.627283][T21368] ? __pfx___sys_bpf+0x10/0x10 [ 1926.627316][T21368] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1926.627346][T21368] ? do_futex+0x458/0x4e0 [ 1926.627414][T21368] ? rcu_is_watching+0x16/0xb0 [ 1926.627446][T21368] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1926.627484][T21368] __x64_sys_bpf+0xba/0xd0 [ 1926.627514][T21368] do_syscall_64+0x166/0x520 [ 1926.627548][T21368] ? trace_irq_disable+0x3b/0x140 [ 1926.627575][T21368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1926.627609][T21368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1926.627635][T21368] RIP: 0033:0x7f5a6ed9e159 [ 1926.627662][T21368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1926.627685][T21368] RSP: 002b:00007f5a6fc87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1926.627712][T21368] RAX: ffffffffffffffda RBX: 00007f5a6f025fa0 RCX: 00007f5a6ed9e159 [ 1926.627733][T21368] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1926.627751][T21368] RBP: 00007f5a6ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 1926.627768][T21368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1926.627784][T21368] R13: 00007f5a6f026038 R14: 00007f5a6f025fa0 R15: 00007ffff88b1308 [ 1926.627824][T21368] [ 1926.936296][T21378] PM: suspend entry (s2idle) [ 1927.018322][T21380] md: couldn't update array info. -22 [ 1927.076312][T21380] md: loop0 has zero or unknown size, marking faulty! [ 1927.076390][T21380] md: md_import_device returned -22 [ 1927.351061][T21391] FAULT_INJECTION: forcing a failure. [ 1927.351061][T21391] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1927.351101][T21391] CPU: 1 UID: 0 PID: 21391 Comm: syz.1.3243 Not tainted syzkaller #0 PREEMPT(full) [ 1927.351130][T21391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1927.351146][T21391] Call Trace: [ 1927.351158][T21391] [ 1927.351169][T21391] dump_stack_lvl+0xe8/0x150 [ 1927.351211][T21391] should_fail_ex+0x410/0x560 [ 1927.351247][T21391] get_futex_key+0x1b4/0x1580 [ 1927.351283][T21391] ? __pfx_futex_wake_mark+0x10/0x10 [ 1927.351328][T21391] ? __pfx_get_futex_key+0x10/0x10 [ 1927.351362][T21391] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1927.351400][T21391] ? __lock_acquire+0x747/0x2de0 [ 1927.351436][T21391] futex_wake+0x119/0x5f0 [ 1927.351474][T21391] ? __lock_acquire+0x747/0x2de0 [ 1927.351507][T21391] ? __pfx_futex_wake+0x10/0x10 [ 1927.351553][T21391] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1927.351584][T21391] ? do_accept+0x60b/0x750 [ 1927.351623][T21391] do_futex+0x458/0x4e0 [ 1927.351665][T21391] ? __pfx_do_futex+0x10/0x10 [ 1927.351697][T21391] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1927.351730][T21391] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1927.351769][T21391] __se_sys_futex+0x3a8/0x450 [ 1927.351812][T21391] ? __pfx___se_sys_futex+0x10/0x10 [ 1927.351856][T21391] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1927.351887][T21391] ? __x64_sys_futex+0x21/0xf0 [ 1927.351926][T21391] do_syscall_64+0x166/0x520 [ 1927.351960][T21391] ? trace_irq_disable+0x3b/0x140 [ 1927.351986][T21391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1927.352020][T21391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1927.352046][T21391] RIP: 0033:0x7f5a6ed9e159 [ 1927.352070][T21391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1927.352092][T21391] RSP: 002b:00007f5a6fc870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1927.352119][T21391] RAX: ffffffffffffffda RBX: 00007f5a6f025fa8 RCX: 00007f5a6ed9e159 [ 1927.352139][T21391] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5a6f025fac [ 1927.352156][T21391] RBP: 00007f5a6f025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1927.352175][T21391] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1927.352192][T21391] R13: 00007f5a6f026038 R14: 00007ffff88b1220 R15: 00007ffff88b1308 [ 1927.352236][T21391] [ 1927.355981][T21389] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1927.382356][ T5889] Filesystems sync: 0.405 seconds [ 1927.500006][T21389] md: couldn't update array info. -22 [ 1927.877045][T21378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1927.879762][T21378] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1928.107594][T21410] ieee802154 phy0 wpan0: encryption failed: -22 [ 1928.775833][T21378] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1928.796807][T21378] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1929.932064][T21426] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1929.973727][T21378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1929.973819][T21378] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1930.025314][T21378] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1930.025404][T21378] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1930.050183][T21431] md: check of RAID array md0 [ 1930.062406][T21378] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1930.062490][T21378] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1930.067093][T17891] Bluetooth: hci1: command 0x0406 tx timeout [ 1930.125148][T21378] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1930.125243][T21378] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1930.549578][T21431] md: md0: check done. [ 1930.975521][T21378] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1931.021855][ T9572] Bluetooth: hci6: command 0x0406 tx timeout [ 1931.354170][T21437] bond0: (slave bond_slave_0): Releasing backup interface [ 1931.392546][T21442] bond0: (slave bond_slave_1): Releasing backup interface [ 1931.457473][T21448] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1931.473635][T21448] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1931.492933][T21444] device-mapper: table: 248:1: zero-length target [ 1931.492951][T21444] device-mapper: ioctl: error adding target to table [ 1931.508905][T21448] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1931.510167][T21444] device-mapper: table: 248:2: thin: Error opening pool device (-ENOENT) [ 1931.510189][T21444] device-mapper: ioctl: error adding target to table [ 1931.518356][T21448] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1931.533698][T21378] Freezing user space processes [ 1931.568291][T21449] NFSD: Failed to start, no listeners configured. [ 1931.736039][T21378] Freezing user space processes completed (elapsed 0.178 seconds) [ 1931.736234][T21378] OOM killer disabled. [ 1931.736243][T21378] Freezing remaining freezable tasks [ 1931.742860][T21378] Freezing remaining freezable tasks completed (elapsed 0.006 seconds) [ 1931.743012][T21378] printk: Suspending console(s) (use no_console_suspend to debug) [ 1932.050241][T21378] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 1932.050361][T21378] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 1932.050480][T21378] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 1932.050591][T21378] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 1932.050702][T21378] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 1932.050811][T21378] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 1932.050921][T21378] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 1932.051034][T21378] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 1932.051138][T21378] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 1932.051318][T21378] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 1932.052175][T21378] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 1932.052282][T21378] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 1932.052387][T21378] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 1932.052489][T21378] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 1932.052586][T21378] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 1932.086653][ T60] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1932.148938][ T9572] Bluetooth: hci3: command 0x0406 tx timeout [ 1932.234106][T17891] Bluetooth: hci4: command 0x0406 tx timeout [ 1932.234783][ T9572] Bluetooth: hci5: command 0x0406 tx timeout [ 1932.321174][T17891] Bluetooth: hci1: command 0x0406 tx timeout [ 1932.321235][ T9572] Bluetooth: hci0: command 0x0c1a tx timeout [ 1932.420119][T21378] PM: suspend debug: Waiting for 0 second(s). [ 1932.442103][T21454] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 1932.820737][T21378] OOM killer enabled. [ 1932.820756][T21378] Restarting tasks: Starting [ 1932.869756][T21378] Restarting tasks: Done [ 1932.870113][T21378] random: crng reseeded on system resumption [ 1932.908026][T21378] hwrng_fill thread creation failed [ 1932.909241][T21378] PM: suspend exit [ 1933.158315][T21511] digital: digital_start_poll: A target is already active [ 1933.283853][ T9572] Bluetooth: hci6: command 0x0406 tx timeout [ 1933.294567][T16730] nfc nfc0: NFC: nfcsim_send: Device is down [ 1933.294623][T16730] digital: digital_wq_cmd: in_send_command returned err -19 [ 1934.775496][ T9572] Bluetooth: hci3: command 0x0406 tx timeout [ 1934.775500][T17891] Bluetooth: hci5: command 0x0406 tx timeout [ 1934.775557][T17891] Bluetooth: hci4: command 0x0406 tx timeout [ 1934.775565][ T9572] Bluetooth: hci0: command 0x0c1a tx timeout [ 1937.006281][T17891] Bluetooth: hci0: command 0x0c1a tx timeout [ 1937.243713][T21551] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1937.315957][T18488] svc: failed to register nfsdv3 RPC service (errno 111). [ 1937.317449][T18488] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1937.317471][T18488] failed to unregister tcp with rpcbind [ 1937.321128][T18488] svc: failed to register nfsdv3 RPC service (errno 97). [ 1937.321150][T18488] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1937.321166][T18488] failed to unregister tcp with rpcbind [ 1937.362237][T21559] md: check of RAID array md0 [ 1937.492835][T21559] md: md0: check done. [ 1937.695624][T21566] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1937.715573][T21566] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1937.726126][T21566] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1939.020703][T21578] bonding: bond1 is being created... [ 1939.120787][T21580] ieee802154 phy0 wpan0: encryption failed: -22 [ 1939.125762][T21578] bonding: bond1 already exists [ 1940.173948][T21573] bond0: (slave bond_slave_0): Releasing backup interface [ 1940.228386][T21578] bond0: (slave bond_slave_1): Releasing backup interface [ 1941.488160][T21573] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 1941.658597][T21593] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1941.797887][T21597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3278'. [ 1942.982207][T21604] FAULT_INJECTION: forcing a failure. [ 1942.982207][T21604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1942.982249][T21604] CPU: 0 UID: 0 PID: 21604 Comm: syz.2.3282 Not tainted syzkaller #0 PREEMPT(full) [ 1942.982280][T21604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1942.982295][T21604] Call Trace: [ 1942.982306][T21604] [ 1942.982317][T21604] dump_stack_lvl+0xe8/0x150 [ 1942.982360][T21604] should_fail_ex+0x410/0x560 [ 1942.982402][T21604] _copy_to_user+0x31/0xb0 [ 1942.982438][T21604] bpf_verifier_vlog+0x606/0x900 [ 1942.982478][T21604] __btf_verifier_log+0xe2/0x140 [ 1942.982522][T21604] ? __pfx___btf_verifier_log+0x10/0x10 [ 1942.982573][T21604] btf_verifier_log_vsi+0x1fc/0x3e0 [ 1942.982616][T21604] ? __pfx_btf_verifier_log_vsi+0x10/0x10 [ 1942.982659][T21604] btf_datasec_check_meta+0x93a/0xad0 [ 1942.982693][T21604] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 1942.982721][T21604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1942.982763][T21604] btf_parse_type_sec+0x3cf/0x2360 [ 1942.982800][T21604] ? btf_parse_hdr+0x1da/0x810 [ 1942.982834][T21604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1942.982864][T21604] ? btf_parse_str_sec+0x244/0x2f0 [ 1942.982890][T21604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1942.982926][T21604] btf_new_fd+0x487/0xbb0 [ 1942.982964][T21604] __sys_bpf+0xd2e/0xd90 [ 1942.983004][T21604] ? __pfx___sys_bpf+0x10/0x10 [ 1942.983037][T21604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1942.983066][T21604] ? do_futex+0x3e7/0x4e0 [ 1942.983134][T21604] ? rcu_is_watching+0x16/0xb0 [ 1942.983165][T21604] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1942.983201][T21604] __x64_sys_bpf+0xba/0xd0 [ 1942.983231][T21604] do_syscall_64+0x166/0x520 [ 1942.983272][T21604] ? trace_irq_disable+0x3b/0x140 [ 1942.983298][T21604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1942.983331][T21604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1942.983358][T21604] RIP: 0033:0x7f6b4339e159 [ 1942.983380][T21604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1942.983407][T21604] RSP: 002b:00007f6b44279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1942.983435][T21604] RAX: ffffffffffffffda RBX: 00007f6b43625fa0 RCX: 00007f6b4339e159 [ 1942.983455][T21604] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1942.983472][T21604] RBP: 00007f6b4343506b R08: 0000000000000000 R09: 0000000000000000 [ 1942.983489][T21604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1942.983506][T21604] R13: 00007f6b43626038 R14: 00007f6b43625fa0 R15: 00007ffd652f0558 [ 1942.983546][T21604] [ 1944.077593][T21619] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1944.166622][T21619] md: couldn't update array info. -22 [ 1944.586920][T21619] md: loop0 has zero or unknown size, marking faulty! [ 1944.587018][T21619] md: md_import_device returned -22 [ 1946.847016][T21645] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1949.416752][T21663] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3295'. [ 1949.418330][T21663] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3295'. [ 1949.419813][T21662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3294'. [ 1949.740444][T21670] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1949.755619][T21673] FAULT_INJECTION: forcing a failure. [ 1949.755619][T21673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1949.755657][T21673] CPU: 1 UID: 0 PID: 21673 Comm: syz.3.3296 Not tainted syzkaller #0 PREEMPT(full) [ 1949.755685][T21673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1949.755701][T21673] Call Trace: [ 1949.755711][T21673] [ 1949.755722][T21673] dump_stack_lvl+0xe8/0x150 [ 1949.755767][T21673] should_fail_ex+0x410/0x560 [ 1949.755804][T21673] _copy_to_user+0x31/0xb0 [ 1949.755844][T21673] bpf_verifier_vlog+0x606/0x900 [ 1949.755893][T21673] __btf_verifier_log+0xe2/0x140 [ 1949.755937][T21673] ? __pfx___btf_verifier_log+0x10/0x10 [ 1949.755989][T21673] btf_verifier_log_vsi+0x1fc/0x3e0 [ 1949.756029][T21673] ? __pfx_btf_verifier_log_vsi+0x10/0x10 [ 1949.756072][T21673] btf_datasec_check_meta+0x93a/0xad0 [ 1949.756106][T21673] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 1949.756133][T21673] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1949.756175][T21673] btf_parse_type_sec+0x3cf/0x2360 [ 1949.756212][T21673] ? btf_parse_hdr+0x1da/0x810 [ 1949.756245][T21673] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1949.756275][T21673] ? btf_parse_str_sec+0x244/0x2f0 [ 1949.756301][T21673] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1949.756337][T21673] btf_new_fd+0x487/0xbb0 [ 1949.756379][T21673] __sys_bpf+0xd2e/0xd90 [ 1949.756420][T21673] ? __pfx___sys_bpf+0x10/0x10 [ 1949.756454][T21673] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1949.756483][T21673] ? do_futex+0x3e7/0x4e0 [ 1949.756551][T21673] ? rcu_is_watching+0x16/0xb0 [ 1949.756584][T21673] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1949.756621][T21673] __x64_sys_bpf+0xba/0xd0 [ 1949.756651][T21673] do_syscall_64+0x166/0x520 [ 1949.756684][T21673] ? trace_irq_disable+0x3b/0x140 [ 1949.756711][T21673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1949.756744][T21673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1949.756770][T21673] RIP: 0033:0x7fe8f219e159 [ 1949.756794][T21673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1949.756816][T21673] RSP: 002b:00007fe8f2fac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1949.756844][T21673] RAX: ffffffffffffffda RBX: 00007fe8f2425fa0 RCX: 00007fe8f219e159 [ 1949.756863][T21673] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1949.756886][T21673] RBP: 00007fe8f223506b R08: 0000000000000000 R09: 0000000000000000 [ 1949.756903][T21673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1949.756919][T21673] R13: 00007fe8f2426038 R14: 00007fe8f2425fa0 R15: 00007ffd1f779708 [ 1949.756959][T21673] [ 1949.990957][T21674] md: couldn't update array info. -22 [ 1950.031764][T21670] md: loop0 has zero or unknown size, marking faulty! [ 1950.031842][T21670] md: md_import_device returned -22 [ 1950.138739][T21670] syz.6.3299: attempt to access beyond end of device [ 1950.138739][T21670] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1950.138805][T21670] syz.6.3299: attempt to access beyond end of device [ 1950.138805][T21670] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1950.138826][T21670] md: md0: failed to read bitmap from any device [ 1950.328925][T21678] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1950.330939][T21680] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3302'. [ 1950.362169][T21680] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3302'. [ 1950.475998][T21678] md: couldn't update array info. -22 [ 1950.517528][T21686] md: loop0 has zero or unknown size, marking faulty! [ 1950.517620][T21686] md: md_import_device returned -22 [ 1950.648419][T21678] syz.2.3301: attempt to access beyond end of device [ 1950.648419][T21678] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1950.648503][T21678] syz.2.3301: attempt to access beyond end of device [ 1950.648503][T21678] ram0: rw=2048, sector=8200, nr_sectors = 1 limit=8192 [ 1950.648531][T21678] md: md0: failed to read bitmap from any device [ 1950.956264][T21692] syzkaller1: entered promiscuous mode [ 1950.956293][T21692] syzkaller1: entered allmulticast mode [ 1952.458212][T21701] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 1952.475170][T21705] serial 00:02: in use; can't configure [ 1952.475593][T21705] serial 00:03: in use; can't configure [ 1952.475788][T21705] serial 00:04: in use; can't configure [ 1952.475939][T21705] serial 00:05: in use; can't configure [ 1952.476124][T21705] serial 00 ** replaying previous printk message ** [ 1952.476124][T21705] serial 00:02: in use; can't configure [ 1952.476274][T21705] serial 00:03: in use; can't configure [ 1952.503184][T21701] [ 1952.520342][T21701] ====================================================== [ 1952.527346][T21701] WARNING: possible circular locking dependency detected [ 1952.534362][T21701] syzkaller #0 Not tainted [ 1952.538774][T21701] ------------------------------------------------------ [ 1952.545783][T21701] syz.6.3306/21701 is trying to acquire lock: [ 1952.551823][T21701] ffff888023849900 (&sb->s_type->i_mutex_key#29){++++}-{4:4}, at: configfs_depend_item_unlocked+0x153/0x420 [ 1952.563317][T21701] [ 1952.563317][T21701] but task is already holding lock: [ 1952.570662][T21701] ffffffff8fc706c0 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0xf8/0x550 [ 1952.579899][T21701] [ 1952.579899][T21701] which lock already depends on the new lock. [ 1952.579899][T21701] [ 1952.590277][T21701] [ 1952.590277][T21701] the existing dependency chain (in reverse order) is: [ 1952.599269][T21701] [ 1952.599269][T21701] -> #3 (tpg_instances_lock){+.+.}-{4:4}: [ 1952.607168][T21701] __mutex_lock+0x19d/0x1550 [ 1952.612284][T21701] tcm_alloc_inst+0x65/0x1a0 [ 1952.617384][T21701] usb_get_function_instance+0xe3/0x2f0 [ 1952.623481][T21701] function_make+0x127/0x360 [ 1952.628580][T21701] configfs_mkdir+0x4f6/0x9e0 [ 1952.633787][T21701] vfs_mkdir+0x40c/0x620 [ 1952.638538][T21701] filename_mkdirat+0x285/0x510 [ 1952.643903][T21701] __se_sys_mkdirat+0x35/0x150 [ 1952.649189][T21701] do_syscall_64+0x166/0x520 [ 1952.654298][T21701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.660698][T21701] [ 1952.660698][T21701] -> #2 (func_lock){+.+.}-{4:4}: [ 1952.667923][T21701] __mutex_lock+0x19d/0x1550 [ 1952.673032][T21701] usb_get_function_instance+0x2e/0x2f0 [ 1952.679162][T21701] function_make+0x127/0x360 [ 1952.684277][T21701] configfs_mkdir+0x4f6/0x9e0 [ 1952.689485][T21701] vfs_mkdir+0x40c/0x620 [ 1952.694237][T21701] filename_mkdirat+0x285/0x510 [ 1952.699612][T21701] __se_sys_mkdirat+0x35/0x150 [ 1952.704887][T21701] do_syscall_64+0x166/0x520 [ 1952.709995][T21701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.716396][T21701] [ 1952.716396][T21701] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1952.724731][T21701] __mutex_lock+0x19d/0x1550 [ 1952.729858][T21701] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 1952.736582][T21701] configfs_symlink+0x74e/0x11d0 [ 1952.742077][T21701] vfs_symlink+0x18b/0x330 [ 1952.747108][T21701] filename_symlinkat+0x1cd/0x410 [ 1952.752912][T21701] __se_sys_symlinkat+0x4e/0x2b0 [ 1952.758366][T21701] do_syscall_64+0x166/0x520 [ 1952.763507][T21701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.769929][T21701] [ 1952.769929][T21701] -> #0 (&sb->s_type->i_mutex_key#29){++++}-{4:4}: [ 1952.778653][T21701] __lock_acquire+0x164c/0x2de0 [ 1952.784023][T21701] lock_acquire+0x115/0x350 [ 1952.789060][T21701] down_write+0x96/0x200 [ 1952.793834][T21701] configfs_depend_item_unlocked+0x153/0x420 [ 1952.800352][T21701] usbg_make_tpg+0x1e0/0x550 [ 1952.805498][T21701] target_fabric_make_tpg+0xa8/0x6d0 [ 1952.811324][T21701] configfs_mkdir+0x4f6/0x9e0 [ 1952.816522][T21701] vfs_mkdir+0x40c/0x620 [ 1952.821323][T21701] filename_mkdirat+0x285/0x510 [ 1952.827298][T21701] __se_sys_mkdirat+0x35/0x150 [ 1952.832587][T21701] do_syscall_64+0x166/0x520 [ 1952.837689][T21701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.844093][T21701] [ 1952.844093][T21701] other info that might help us debug this: [ 1952.844093][T21701] [ 1952.854302][T21701] Chain exists of: [ 1952.854302][T21701] &sb->s_type->i_mutex_key#29 --> func_lock --> tpg_instances_lock [ 1952.854302][T21701] [ 1952.868175][T21701] Possible unsafe locking scenario: [ 1952.868175][T21701] [ 1952.875610][T21701] CPU0 CPU1 [ 1952.880986][T21701] ---- ---- [ 1952.886336][T21701] lock(tpg_instances_lock); [ 1952.891010][T21701] lock(func_lock); [ 1952.897434][T21701] lock(tpg_instances_lock); [ 1952.904638][T21701] lock(&sb->s_type->i_mutex_key#29); [ 1952.910114][T21701] [ 1952.910114][T21701] *** DEADLOCK *** [ 1952.910114][T21701] [ 1952.918238][T21701] locks held by syz.6.3306/21701: 4, last CPU#1: [ 1952.924551][T21701] #0: ffff88801cfd6460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1952.933790][T21701] #1: ffff888052faf0c0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 1952.944597][T21701] #2: ffffffff8f93ae88 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b0/0x9e0 [ 1952.954447][T21701] #3: ffffffff8fc706c0 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0xf8/0x550 [ 1952.964157][T21701] [ 1952.964157][T21701] stack backtrace: [ 1952.970028][T21701] CPU: 1 UID: 0 PID: 21701 Comm: syz.6.3306 Not tainted syzkaller #0 PREEMPT(full) [ 1952.979378][T21701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1952.989415][T21701] Call Trace: [ 1952.992675][T21701] [ 1952.995586][T21701] dump_stack_lvl+0xe8/0x150 [ 1953.000173][T21701] print_circular_bug+0x2e2/0x300 [ 1953.005214][T21701] check_noncircular+0x12f/0x150 [ 1953.010150][T21701] __lock_acquire+0x164c/0x2de0 [ 1953.015009][T21701] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1953.020636][T21701] ? __mutex_trylock_common+0x15f/0x270 [ 1953.026191][T21701] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1953.032078][T21701] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1953.037701][T21701] ? rcu_is_watching+0x16/0xb0 [ 1953.042457][T21701] lock_acquire+0x115/0x350 [ 1953.046944][T21701] ? configfs_depend_item_unlocked+0x153/0x420 [ 1953.053090][T21701] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1953.058729][T21701] down_write+0x96/0x200 [ 1953.062969][T21701] ? configfs_depend_item_unlocked+0x153/0x420 [ 1953.069128][T21701] ? __pfx_down_write+0x10/0x10 [ 1953.073973][T21701] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1953.079595][T21701] ? kstrtoull+0x137/0x1d0 [ 1953.084014][T21701] configfs_depend_item_unlocked+0x153/0x420 [ 1953.089983][T21701] usbg_make_tpg+0x1e0/0x550 [ 1953.094566][T21701] ? configfs_mkdir+0x4b0/0x9e0 [ 1953.099409][T21701] ? __pfx___mutex_lock+0x10/0x10 [ 1953.104436][T21701] ? __pfx_usbg_make_tpg+0x10/0x10 [ 1953.109545][T21701] ? do_raw_spin_lock+0x12b/0x2f0 [ 1953.114570][T21701] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1953.120194][T21701] target_fabric_make_tpg+0xa8/0x6d0 [ 1953.125480][T21701] configfs_mkdir+0x4f6/0x9e0 [ 1953.130150][T21701] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1953.135770][T21701] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1953.141399][T21701] ? __pfx_configfs_mkdir+0x10/0x10 [ 1953.146587][T21701] ? generic_permission+0x2bf/0x670 [ 1953.151783][T21701] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1953.157489][T21701] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1953.163112][T21701] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1953.168740][T21701] vfs_mkdir+0x40c/0x620 [ 1953.173010][T21701] filename_mkdirat+0x285/0x510 [ 1953.177857][T21701] ? __pfx_filename_mkdirat+0x10/0x10 [ 1953.183225][T21701] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1953.188862][T21701] ? do_getname+0x151/0x250 [ 1953.193446][T21701] __se_sys_mkdirat+0x35/0x150 [ 1953.198197][T21701] do_syscall_64+0x166/0x520 [ 1953.202776][T21701] ? trace_irq_disable+0x3b/0x140 [ 1953.207910][T21701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1953.213986][T21701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1953.219868][T21701] RIP: 0033:0x7fd485b9e159 [ 1953.224271][T21701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1953.243862][T21701] RSP: 002b:00007fd486b0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1953.252268][T21701] RAX: ffffffffffffffda RBX: 00007fd485e25fa0 RCX: 00007fd485b9e159 [ 1953.260245][T21701] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 1953.268198][T21701] RBP: 00007fd485c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1953.276154][T21701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1953.284109][T21701] R13: 00007fd485e26038 R14: 00007fd485e25fa0 R15: 00007ffec3d56578 [ 1953.292098][T21701] [ 1953.337099][T21691] printk: console [ttyS0] disabled syzkaller