last executing test programs:

22.100561306s ago: executing program 1 (id=1575):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000)
ioctl$I2C_SMBUS(r1, 0x720, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071101800000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
msgget$private(0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
r6 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000004c0)={<r8=>0x0, 0x50000000}, &(0x7f0000000500)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000580)={r8, 0xe6}, &(0x7f00000005c0)=0x8)
add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000022ee0000000006bb55a2a630bf7c045f94cd977", 0x28, 0xffffffffffffffff)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r10, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:run_init_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

21.815032007s ago: executing program 3 (id=1576):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xb}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x24041090}, 0x0)

19.644299427s ago: executing program 5 (id=1579):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101c02, 0x955d817884a8436e)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1ff003, 0x81, 0x1, 0x1, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x700000000000000}, 0x50)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x102, 0x166)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x1000008, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000100)={"4cf36a628ca84ddd2961bd42a3b25f1e2273a95c6ff8aa046bd8aca774d0a64b", r2})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xf, 0xb, 0xff}, 0x3d, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x5, 0x4, 0x10007e, 0x20000006, 0x53, 0x6, 0x10001, 0x80005, 0x102, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x2, 0x2, 0x7, 0x4, 0x200ffff, 0x40000026, 0xd, 0x53b7, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x201, 0x0, 0x4, 0x5, 0x8, 0x800080eb, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x2, 0x4, 0x9, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0xd, 0x9, 0x80000130, 0x8004, 0x8001, 0xfffffff3, 0x2, 0xfffffff7, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x2, 0xffff, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f2f, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x7, 0x6, 0x8, 0x9, 0x5, 0x47, 0x8020, 0x4, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x200, 0x101, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x6, 0x9], [0x7, 0xa, 0x0, 0x7, 0xfffffffe, 0x100, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x14, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000808, 0x2, 0x6d03, 0x5, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x1, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x128, 0x4, 0x2000001, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x1000, 0x80aaed, 0x4, 0x24], [0x9, 0x840bb33, 0x7ffffffd, 0xb, 0x5, 0x100093a, 0x7, 0x1000006, 0x1, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x80101, 0x10003, 0x2, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x4, 0x1000, 0x7, 0xaf, 0x8, 0x400, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x1000a1f, 0xffffffff, 0x7, 0x2, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc2, 0x200, 0xffff2441, 0xf7f]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

18.33446125s ago: executing program 1 (id=1580):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getchain={0x24, 0x66, 0x903, 0x70bd2e, 0x25dfdc03, {0x0, 0x0, 0x0, r5, {0xffe0, 0xa}, {0x6, 0xfff1}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x8000)

18.101928042s ago: executing program 4 (id=1581):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x101400, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x8)

17.885506532s ago: executing program 5 (id=1583):
getpid()
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
socket$inet6(0xa, 0x802, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x106, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x10}, r1}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, r1, 0x9dff7ffc}}, 0x4d)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800)

17.844832345s ago: executing program 0 (id=1584):
bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='md0\x00', 0x3)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/block/md0/md/array_state\x00', 0x81ff, 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r3, 0xda90)
accept4(r3, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/level\x00', 0x2, 0x0)
write(r4, &(0x7f0000000600)='raid1\x00', 0x5)
r5 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)='1\x00', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r6, &(0x7f0000000a00)='1:0\x00', 0x3)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0)
write$khugepaged_scan(r7, &(0x7f0000000080), 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000e00)='active\x00', 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x17, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000866d6eb740945a1c0000008e513b38eaf8718517cdd0c8d9c1fc18110000c07d720ce5e01f379022000a75d0193ba60a74c776906f57b992ae61a16c9c677baa8867154be4efee1309", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c251801000020646c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0xfffffe36, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))

17.838005525s ago: executing program 3 (id=1585):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x40082104, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', <r5=>0x0, 0x29, 0x7, 0x1, 0x324e, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, 0x40, 0x8, 0x4, 0x200}})
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=@delsa={0x2a8, 0x11, 0x10, 0x70bd2b, 0x25dfdbfe, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0xa, 0x6c}, [@sa={0xe0, 0x6, {{@in=@empty, @in6=@empty, 0x4e22, 0x6, 0x4e21, 0xfffc, 0x2, 0xa0, 0xe0, 0x32, r5}, {@in6=@private2, 0x4d5, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, {0x1000, 0x9, 0x7, 0x3, 0x58, 0xfffffffffffffeff, 0x0, 0x401}, {0x7, 0x100, 0x8, 0x10}, {0x6, 0x5, 0x6}, 0x70bd2a, 0x3505, 0xa, 0x5, 0xa, 0x14}}, @policy_type={0xa}, @algo_crypt={0xa0, 0x2, {{'ecb-cast5-avx\x00'}, 0x2c0, "2f2703a0886bf770741835d0baeeb7a09491c050662fa7475c97299f003b8b997f996cdc9cc9037277eaa55f76061e4adf53f624d278e8cc64a4ecd6ba7536aa88972e839648c6a1f0a6ab800cfd5f51a09c8daa38ab881b"}}, @algo_auth={0xf3, 0x1, {{'ghash-generic\x00'}, 0x558, "bf0aacc9462510abe2de568c40b6f9333c527414321a6d745f49f38f834700eb5ea095c3c1faa0d04990ccf1312653500aa2b356ee4ca444e275ef4c26a2a6f981a493b57e0054f4855ecd331567f541cf2942accc04608f0414805c9001635531b35ccd3f22b13d9c3ee37a54dffdd6611c58d2204d270ca6ab11f101898012ec816532b4ac2e1ac704b3f776f3bef9d4248fea57a1cde91c54d00847f15b66b38f196ba5e09714a6b926"}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x20000115}, 0x0)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x200)
write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setuid(0xee01)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x59)
quotactl_fd$Q_GETNEXTQUOTA(r7, 0xffffffff80000900, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x4040001)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8814}, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1)
sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x4840)

16.066162344s ago: executing program 2 (id=1586):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x44)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

15.07217185s ago: executing program 5 (id=1587):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000003c0)}, 0xb}], 0x1, 0x10, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)

13.869811611s ago: executing program 1 (id=1588):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7e81eb72c00000000d0d26b5069f8a98f7dc8f76b74635fde9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f000000008b260000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bf1339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x80, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x20, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]})
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd})
r2 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0xe, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f54016d1a85a056f5d759ded130e04d528539f3d328973747a75d1f3d000017deb7d6193b3e7772fd29f35239d200000000008000", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}})

13.861186029s ago: executing program 4 (id=1589):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x80, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x20, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]})
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd})
r3 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0xe, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f54016d1a85a056f5d759ded130e04d528539f3d328973747a75d1f3d000017deb7d6193b3e7772fd29f35239d200000000008000", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}})

13.75606318s ago: executing program 0 (id=1590):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[], 0x48)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)
mkdir(&(0x7f0000000140)='./file1\x00', 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4841}, 0x80)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x7, 0x0, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x8050)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f0000000040)="94", 0x1}, {0x0}], 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f00000001c0))
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}})
r4 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20)

13.670217356s ago: executing program 2 (id=1591):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getchain={0x24, 0x66, 0x903, 0x70bd2e, 0x25dfdc03, {0x0, 0x0, 0x0, r5, {0xffe0, 0xa}, {0x6, 0xfff1}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x8000)

13.296301162s ago: executing program 3 (id=1592):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
recvfrom(r1, 0x0, 0x0, 0x40002042, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
write(r3, 0x0, 0x0)
write(r3, &(0x7f0000000700)='\x00'/32, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PREF={0x5, 0x14, 0x3}]}, 0x24}}, 0x0)
write(r3, &(0x7f0000000700)='\x00'/32, 0x20)
openat2$dir(0xffffff9c, &(0x7f0000000040)='./mnt/test2\x00', &(0x7f00000000c0)={0x100, 0xf0, 0x32}, 0x18)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x334, 0x103500)
ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, 0x0)

12.757342866s ago: executing program 5 (id=1593):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
listen(0xffffffffffffffff, 0x5)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xb52]}})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'})

12.419887135s ago: executing program 1 (id=1594):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000)
ioctl$I2C_SMBUS(r1, 0x720, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
msgget$private(0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
r6 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000004c0)={<r8=>0x0, 0x50000000}, &(0x7f0000000500)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000580)={r8, 0xe6}, &(0x7f00000005c0)=0x8)
add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000022ee0000000006bb55a2a630bf7c045f94cd977", 0x28, 0xffffffffffffffff)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r10, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:run_init_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

11.239332913s ago: executing program 4 (id=1595):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000240)="44001d000000000000ffff0100006bddc65b99fba9d5c8ef68ff58efbe93a0629498d350fee76658d4aa1d0e2d8f1d3c7405171a2c2065144cf5de98818512ac0ff961817366b82d6754b7ef2e2cb1a114d1c7df", 0x54, 0x2004c015, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xd, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1)
r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
ioctl$MON_IOCX_MFETCH(r1, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x7fff})
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050)
readv(r1, &(0x7f0000000040), 0x2000000000000213)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x40280, 0x41)

11.163976895s ago: executing program 3 (id=1596):
bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='md0\x00', 0x3)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/block/md0/md/array_state\x00', 0x81ff, 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r3, 0xda90)
accept4(r3, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/level\x00', 0x2, 0x0)
write(r4, &(0x7f0000000600)='raid1\x00', 0x5)
fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)='1\x00', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a00)='1:0\x00', 0x3)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0)
write$khugepaged_scan(r6, &(0x7f0000000080), 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000e00)='active\x00', 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x17, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000866d6eb740945a1c0000008e513b38eaf8718517cdd0c8d9c1fc18110000c07d720ce5e01f379022000a75d0193ba60a74c776906f57b992ae61a16c9c677baa8867154be4efee1309", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c251801000020646c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0xfffffe36, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))

10.139508752s ago: executing program 0 (id=1597):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x44)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

10.111392491s ago: executing program 2 (id=1598):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x44)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0001}]})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)

9.740976407s ago: executing program 4 (id=1599):
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x101400, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x8)

8.835568917s ago: executing program 0 (id=1600):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000240)="44001d000000000000ffff0100006bddc65b99fba9d5c8ef68ff58efbe93a0629498d350fee76658d4aa1d0e2d8f1d3c7405171a2c2065144cf5de98818512ac0ff961817366b82d6754b7ef2e2cb1a114d1c7df", 0x54, 0x2004c015, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xd, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1)
r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
ioctl$MON_IOCX_MFETCH(r1, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x7fff})
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050)
readv(r1, &(0x7f0000000040), 0x2000000000000213)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x1, 0x0)
r4 = open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x40280, 0x41)
linkat(r4, &(0x7f0000000400)='./file0\x00', r3, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1400)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000540)={0x76, 0xff, {}, {<r5=>0xee00}, 0x4, 0x9})
mount$binder(0x0, &(0x7f0000000480)='./config\x00', &(0x7f0000000500), 0x1000484, &(0x7f0000000580)={[{@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x1}}], [{@hash}, {@euid_gt={'euid>', r5}}, {@smackfstransmute}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]})
write(r3, &(0x7f00000001c0)='my_midi_interface\x00', 0x12)

8.048931797s ago: executing program 3 (id=1601):
unshare(0x6a060000)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc0bc5310, &(0x7f0000000300)={0x18, 0xffffffff, 0x0, 'queue1\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x800, 0x408003)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000300)={{0x1, 0x6, 0x7, 0x1ff, '\x00', 0x8}, 0x3, 0x0, 0x1ff, 0x0, 0x9, 0x0, 'syz1\x00', &(0x7f0000000200)=['syz1\x00', '}/@\x9f-$\'\x00', '\x00', '\x00', '\x00', '\x03&!]\x99\x00', 'hash:net,port\x00', 'hash:net,port\x00', '\\\x00'], 0x34})
socket$inet6_icmp(0xa, 0x2, 0x3a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r4, &(0x7f0000000280)='tcp', 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r5, &(0x7f0000000300)='127.0.0.1', 0x9)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0)
write(r6, &(0x7f0000000380)='8', 0x1)
r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r7, &(0x7f0000000400)='ipv', 0x3)
symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00')

7.447686229s ago: executing program 2 (id=1602):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x44)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0001}]})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)

6.549533203s ago: executing program 0 (id=1603):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
write(0xffffffffffffffff, &(0x7f0000000380)='10', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c61677300070200000000020000000002000000000802000000000200000000020000000002", 0x4b)

5.403387412s ago: executing program 5 (id=1604):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x9, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
recvfrom(r1, 0x0, 0x0, 0x40002042, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
write(r3, 0x0, 0x0)
write(r3, &(0x7f0000000700)='\x00'/32, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PREF={0x5, 0x14, 0x3}]}, 0x24}}, 0x0)
write(r3, &(0x7f0000000700)='\x00'/32, 0x20)
r5 = openat2$dir(0xffffff9c, &(0x7f0000000040)='./mnt/test2\x00', &(0x7f00000000c0)={0x100, 0xf0, 0x32}, 0x18)
unlinkat(r5, &(0x7f0000000140)='./dev\x00', 0x200)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x334, 0x103500)
ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, 0x0)

5.394890976s ago: executing program 1 (id=1605):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000240)="44001d000000000000ffff0100006bddc65b99fba9d5c8ef68ff58efbe93a0629498d350fee76658d4aa1d0e2d8f1d3c7405171a2c2065144cf5de98818512ac0ff961817366b82d6754b7ef2e2cb1a114d1c7df", 0x54, 0x2004c015, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xd, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1)
r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
ioctl$MON_IOCX_MFETCH(r1, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x7fff})
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050)
readv(r1, &(0x7f0000000040), 0x2000000000000213)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x1, 0x0)
open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x40280, 0x41)

5.361091563s ago: executing program 2 (id=1606):
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x58, &(0x7f0000000440)}, 0x10)
prctl$PR_SET_TIMERSLACK(0x1d, 0x0)
r4 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d022bbd7000fedbdf25010000000500068005000000050005000400000008000300060000000800040026000000"], 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000000)='@+]\x00', &(0x7f00000000c0)="86", 0x1)
tkill(r4, 0xb)
setrlimit(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
ptrace$pokeuser(0x6, r4, 0x5, 0x2f7ae232)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70)
socket$inet6_udp(0xa, 0x2, 0x0)

5.282647138s ago: executing program 4 (id=1607):
r0 = socket(0x10, 0x80002, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x10001}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50)
socket$inet6_icmp(0xa, 0x2, 0x3a)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd18, 0x5cd3f9da, 0x7, 0x7f, {0x1, 0x5, 0x7, 0x6, 0x0, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, 0x0, 0x0, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), 0xc)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r5, 0x0, r4, 0x0, 0x6, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r6, r6, 0x0, 0x200000)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9)

5.126786114s ago: executing program 0 (id=1608):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x8, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x5)
setreuid(r3, 0x0)
setreuid(0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94)

2.704286737s ago: executing program 3 (id=1609):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x9, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
recvfrom(r1, 0x0, 0x0, 0x40002042, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
write(r3, 0x0, 0x0)
write(r3, &(0x7f0000000700)='\x00'/32, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PREF={0x5, 0x14, 0x3}]}, 0x24}}, 0x0)
write(r3, &(0x7f0000000700)='\x00'/32, 0x20)
r5 = openat2$dir(0xffffff9c, &(0x7f0000000040)='./mnt/test2\x00', &(0x7f00000000c0)={0x100, 0xf0, 0x32}, 0x18)
unlinkat(r5, &(0x7f0000000140)='./dev\x00', 0x200)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x334, 0x103500)
ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, 0x0)

2.474952384s ago: executing program 5 (id=1610):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000)
ioctl$I2C_SMBUS(r1, 0x720, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
msgget$private(0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
r6 = socket(0x10, 0x803, 0x8)
getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000004c0)={<r9=>0x0, 0x50000000}, &(0x7f0000000500)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000580)={r9, 0xe6}, &(0x7f00000005c0)=0x8)
add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000022ee0000000006bb55a2a630bf7c045f94cd977", 0x28, 0xffffffffffffffff)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r11, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:run_init_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

2.345037179s ago: executing program 2 (id=1611):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x4, 0x3, 0x2, 0x40}, 0x2c, 0x0, 0x5, 0xb, 0x8001, 0x1, 0x12, 0xe, 0x5, 0x7db8, {0x1, 0x8, 0xffff, 0x80, 0xffffffff, 0xd7d}}}}]}, 0x78}}, 0x20000000)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

800.060197ms ago: executing program 1 (id=1612):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7e81eb72c00000000d0d26b5069f8a98f7dc8f76b74635fde9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f000000008b260000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bf1339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00'}, 0x48)
r1 = socket(0xa, 0x3, 0x3a)
bind$alg(r1, 0x0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000018000000080000004002000042000000136f071263f3f1c2e9824092e5ab45b52e23dc779274af816df3c848ad7039bf0ebd4d77f7ff0e58702669c27611357348db4d59c178d382fb1094cccdd5164812b35698f689034ade96d8875d17239d0382c4", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x80, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x20, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd})
r4 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0xe, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f54016d1a85a056f5d759ded130e04d528539f3d328973747a75d1f3d000017deb7d6193b3e7772fd29f35239d200000000008000", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}})

0s ago: executing program 4 (id=1613):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x1, 0x0)
r1 = open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x40280, 0x41)
linkat(r1, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1400)
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000540)={0x76, 0xff, {}, {<r2=>0xee00}, 0x4, 0x9})
mount$binder(0x0, &(0x7f0000000480)='./config\x00', &(0x7f0000000500), 0x1000484, &(0x7f0000000580)={[{@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x1}}], [{@hash}, {@euid_gt={'euid>', r2}}, {@smackfstransmute}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]})
write(r0, &(0x7f00000001c0)='my_midi_interface\x00', 0x12)

kernel console output (not intermixed with test programs):

=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  633.676136][T11242] loop2: detected capacity change from 0 to 1024
[  633.702718][   T10] libceph: connect (1)[c::]:6789 error -101
[  633.711729][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  633.727818][   T30] audit: type=1326 audit(1787349061.207:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11230 comm="syz.1.1328" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  633.753758][T11242] busy
[  633.823207][   T30] audit: type=1326 audit(1787349061.207:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11230 comm="syz.1.1328" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  634.030319][   T10] libceph: connect (1)[c::]:6789 error -101
[  634.059549][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'.
[  634.084322][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'.
[  634.099238][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'.
[  634.111884][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'.
[  634.154104][T11249] 9pnet_virtio: no channels available for device syz
[  634.269524][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1330'.
[  634.293046][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1330'.
[  634.307350][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1330'.
[  634.318589][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1330'.
[  634.362552][T11238] 9pnet_virtio: no channels available for device syz
[  635.044311][T11237] ceph: No mds server is up or the cluster is laggy
[  636.545435][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  636.588974][   T30] audit: type=1326 audit(1787349061.217:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11230 comm="syz.1.1328" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  636.879087][   T30] audit: type=1326 audit(1787349061.217:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11230 comm="syz.1.1328" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  636.915945][   T30] audit: type=1326 audit(1787349061.227:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11230 comm="syz.1.1328" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  637.720388][   T10] libceph: connect (1)[c::]:6789 error -101
[  637.726638][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  637.733705][ T5751] libceph: connect (1)[c::]:6789 error -101
[  637.739880][ T5751] libceph: mon0 (1)[c::]:6789 connect error
[  638.170983][T11260] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  638.179751][T11260] CPU: 1 UID: 0 PID: 11260 Comm: syz.3.1333 Not tainted syzkaller #0 PREEMPT(full) 
[  638.179801][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  638.179824][T11260] Call Trace:
[  638.179835][T11260]  <TASK>
[  638.179849][T11260]  dump_stack_lvl+0x100/0x190
[  638.179904][T11260]  sysfs_warn_dup.cold+0x1c/0x28
[  638.179966][T11260]  sysfs_create_dir_ns+0x24b/0x2b0
[  638.180017][T11260]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  638.180067][T11260]  ? find_held_lock+0x2b/0x80
[  638.180108][T11260]  ? kobject_add_internal+0x25f/0x930
[  638.180167][T11260]  ? kobject_add_internal+0x25f/0x930
[  638.180228][T11260]  ? srso_alias_return_thunk+0x5/0xfbef5
[  638.180275][T11260]  ? class_dir_child_ns_type+0xd/0x60
[  638.180331][T11260]  kobject_add_internal+0x2c8/0x930
[  638.180397][T11260]  kobject_add+0x16a/0x1e0
[  638.180454][T11260]  ? __pfx_kobject_add+0x10/0x10
[  638.180526][T11260]  ? srso_alias_return_thunk+0x5/0xfbef5
[  638.180575][T11260]  ? kobject_put+0xb9/0x640
[  638.180641][T11260]  device_add+0x294/0x1970
[  638.180694][T11260]  ? srso_alias_return_thunk+0x5/0xfbef5
[  638.180740][T11260]  ? lockdep_init_map_type+0x5c/0x250
[  638.180797][T11260]  ? __pfx_device_add+0x10/0x10
[  638.180846][T11260]  ? srso_alias_return_thunk+0x5/0xfbef5
[  638.180892][T11260]  ? lockdep_init_map_type+0x5c/0x250
[  638.180948][T11260]  ? srso_alias_return_thunk+0x5/0xfbef5
[  638.180995][T11260]  ? __init_waitqueue_head+0xca/0x150
[  638.181055][T11260]  ? srso_alias_return_thunk+0x5/0xfbef5
[  638.181104][T11260]  ? srso_alias_return_thunk+0x5/0xfbef5
[  638.181157][T11260]  tty_register_device_attr+0x388/0x7f0
[  638.181204][T11260]  ? __pfx_tty_register_device_attr+0x10/0x10
[  638.181258][T11260]  ? srso_alias_return_thunk+0x5/0xfbef5
[  638.181305][T11260]  ? tty_port_init+0x156/0x1c0
[  638.181345][T11260]  ? srso_alias_return_thunk+0x5/0xfbef5
[  638.181399][T11260]  gsm_activate_mux+0x155/0x2a0
[  638.181444][T11260]  gsmld_ioctl+0xbbc/0x15c0
[  638.181511][T11260]  ? __pfx_gsmld_ioctl+0x10/0x10
[  638.181569][T11260]  ? srso_alias_return_thunk+0x5/0xfbef5
[  638.181615][T11260]  ? rcu_is_watching+0x13/0xc0
[  638.181677][T11260]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  638.181734][T11260]  ? __pfx_pty_unix98_ioctl+0x10/0x10
[  638.181799][T11260]  ? __pfx_gsmld_ioctl+0x10/0x10
[  638.181847][T11260]  tty_ioctl+0x11b4/0x1640
[  638.181889][T11260]  ? __pfx_tty_ioctl+0x10/0x10
[  638.181927][T11260]  ? srso_alias_return_thunk+0x5/0xfbef5
[  638.181976][T11260]  ? irqentry_exit+0x24d/0xa10
[  638.182019][T11260]  ? srso_alias_return_thunk+0x5/0xfbef5
[  638.182064][T11260]  ? lockdep_hardirqs_on+0x7d/0x110
[  638.182107][T11260]  ? srso_alias_return_thunk+0x5/0xfbef5
[  638.182153][T11260]  ? irqentry_exit+0x24d/0xa10
[  638.182195][T11260]  ? srso_alias_return_thunk+0x5/0xfbef5
[  638.182264][T11260]  ? security_file_ioctl+0xed/0x230
[  638.182310][T11260]  ? __sanitizer_cov_trace_pc+0x62/0x70
[  638.182368][T11260]  ? __pfx_tty_ioctl+0x10/0x10
[  638.182410][T11260]  __x64_sys_ioctl+0x18e/0x210
[  638.182452][T11260]  do_syscall_64+0x123/0x790
[  638.182509][T11260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.182549][T11260] RIP: 0033:0x7f58f419e0d9
[  638.182579][T11260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  638.182616][T11260] RSP: 002b:00007f58f5011028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  638.182653][T11260] RAX: ffffffffffffffda RBX: 00007f58f4426180 RCX: 00007f58f419e0d9
[  638.182679][T11260] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007
[  638.182703][T11260] RBP: 00007f58f4235024 R08: 0000000000000000 R09: 0000000000000000
[  638.182727][T11260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  638.182750][T11260] R13: 00007f58f4426218 R14: 00007f58f4426180 R15: 00007ffc94893cc8
[  638.182799][T11260]  </TASK>
[  638.183005][T11260] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  639.405671][ T5616] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  639.416335][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) 
[  639.416382][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  639.416407][ T5616] Workqueue: hci2 hci_rx_work
[  639.416445][ T5616] Call Trace:
[  639.416457][ T5616]  <TASK>
[  639.416471][ T5616]  dump_stack_lvl+0x100/0x190
[  639.416525][ T5616]  sysfs_warn_dup.cold+0x1c/0x28
[  639.416591][ T5616]  sysfs_create_dir_ns+0x24b/0x2b0
[  639.416644][ T5616]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  639.416691][ T5616]  ? find_held_lock+0x2b/0x80
[  639.416731][ T5616]  ? kobject_add_internal+0x25f/0x930
[  639.416789][ T5616]  ? kobject_add_internal+0x25f/0x930
[  639.416847][ T5616]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.416887][ T5616]  ? do_raw_spin_unlock+0x145/0x1e0
[  639.416948][ T5616]  kobject_add_internal+0x2c8/0x930
[  639.417008][ T5616]  kobject_add+0x16a/0x1e0
[  639.417059][ T5616]  ? __pfx_kobject_add+0x10/0x10
[  639.417107][ T5616]  ? class_to_subsys+0x10f/0x150
[  639.417165][ T5616]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.417209][ T5616]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.417254][ T5616]  ? kobject_put+0xb9/0x640
[  639.417303][ T5616]  ? _raw_spin_unlock+0x28/0x50
[  639.417351][ T5616]  device_add+0x294/0x1970
[  639.417400][ T5616]  ? __pfx_dev_set_name+0x10/0x10
[  639.417464][ T5616]  ? __pfx_device_add+0x10/0x10
[  639.417514][ T5616]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.417568][ T5616]  ? mgmt_send_event_skb+0x2fb/0x460
[  639.417621][ T5616]  hci_conn_add_sysfs+0x1a3/0x260
[  639.417672][ T5616]  le_conn_complete_evt+0x121b/0x2120
[  639.417724][ T5616]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  639.417785][ T5616]  ? hci_event_packet+0x186/0xcd0
[  639.417819][ T5616]  ? hci_event_packet+0x186/0xcd0
[  639.417863][ T5616]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.417924][ T5616]  hci_le_enh_conn_complete_evt+0x23d/0x3b0
[  639.417969][ T5616]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.418017][ T5616]  ? skb_pull_data+0x15f/0x1e0
[  639.418077][ T5616]  hci_le_meta_evt+0x34a/0x5f0
[  639.418121][ T5616]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  639.418170][ T5616]  hci_event_packet+0x51c/0xcd0
[  639.418212][ T5616]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  639.418257][ T5616]  ? __pfx_hci_event_packet+0x10/0x10
[  639.418298][ T5616]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.418350][ T5616]  ? kcov_remote_start+0x387/0x670
[  639.418407][ T5616]  ? lockdep_hardirqs_on+0x7d/0x110
[  639.418452][ T5616]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.418511][ T5616]  hci_rx_work+0x451/0xfc0
[  639.418565][ T5616]  process_one_work+0xac7/0x1b10
[  639.418637][ T5616]  ? __pfx_process_one_work+0x10/0x10
[  639.418689][ T5616]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.418752][ T5616]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.418808][ T5616]  worker_thread+0x5ef/0xe50
[  639.418870][ T5616]  ? __pfx_worker_thread+0x10/0x10
[  639.418921][ T5616]  ? kthread+0x13a/0x450
[  639.418961][ T5616]  ? __pfx_worker_thread+0x10/0x10
[  639.419007][ T5616]  kthread+0x373/0x450
[  639.419048][ T5616]  ? __pfx_kthread+0x10/0x10
[  639.419093][ T5616]  ret_from_fork+0x730/0xd60
[  639.419155][ T5616]  ? __pfx_ret_from_fork+0x10/0x10
[  639.419215][ T5616]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.419262][ T5616]  ? __switch_to+0x800/0x10f0
[  639.419303][ T5616]  ? __switch_to_asm+0x39/0x70
[  639.419364][ T5616]  ? __pfx_kthread+0x10/0x10
[  639.419410][ T5616]  ret_from_fork_asm+0x1a/0x30
[  639.419497][ T5616]  </TASK>
[  639.420326][ T5616] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  639.778192][ T5616] Bluetooth: hci2: failed to register connection device
[  640.034643][T11278] usb usb8: usbfs: process 11278 (syz.4.1336) did not claim interface 0 before use
[  640.459532][T11273] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  640.484646][T11273] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  640.610817][T11283] bridge0: entered promiscuous mode
[  640.703127][T11273] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  640.724063][T11273] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  640.766934][T11273] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  640.825044][T11273] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  640.939797][T11273] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  640.986160][T11273] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  641.028429][T11273] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  641.110549][T11273] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  641.209854][T11273] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  641.305019][T11273] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  641.317237][T11281] bridge0: left promiscuous mode
[  641.326256][T11273] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  641.472121][T11289] bridge0: entered promiscuous mode
[  641.633400][ T5775] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  641.787154][ T5784] libceph: connect (1)[c::]:6789 error -101
[  641.838602][ T5784] libceph: mon0 (1)[c::]:6789 connect error
[  641.875254][T11274] Bluetooth: hci0: command 0x0406 tx timeout
[  641.887668][ T5775] usb 3-1: Using ep0 maxpacket: 16
[  641.899221][T11295] ceph: No mds server is up or the cluster is laggy
[  641.996687][ T5775] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  642.009000][T11298] loop4: detected capacity change from 0 to 2640
[  642.015820][T11298] buffer_io_error: 6 callbacks suppressed
[  642.015837][T11298] Buffer I/O error on dev loop4, logical block 0, async page read
[  642.029592][T11298] Buffer I/O error on dev loop4, logical block 0, async page read
[  642.037466][T11298] Buffer I/O error on dev loop4, logical block 0, async page read
[  642.045477][T11298] Buffer I/O error on dev loop4, logical block 0, async page read
[  642.053309][T11298] Buffer I/O error on dev loop4, logical block 0, async page read
[  642.061189][T11298] Buffer I/O error on dev loop4, logical block 0, async page read
[  642.069362][T11298] Buffer I/O error on dev loop4, logical block 0, async page read
[  642.077280][T11298] Buffer I/O error on dev loop4, logical block 0, async page read
[  642.086705][T11298] ldm_validate_partition_table(): Disk read failed.
[  642.093327][T11298] Buffer I/O error on dev loop4, logical block 0, async page read
[  642.101242][T11298] Buffer I/O error on dev loop4, logical block 0, async page read
[  642.109145][T11298] Dev loop4: unable to read RDB block 0
[  642.114842][T11298]  loop4: unable to read partition table
[  642.120949][T11298] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  642.181001][ T5775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.198148][ T5775] usb 3-1: Product: syz
[  642.249928][ T5775] usb 3-1: Manufacturer: syz
[  642.259469][ T5784] libceph: connect (1)[c::]:6789 error -101
[  642.270157][ T5784] libceph: mon0 (1)[c::]:6789 connect error
[  642.355885][ T5775] usb 3-1: SerialNumber: syz
[  642.755366][T11274] Bluetooth: hci1: command 0x0406 tx timeout
[  642.847086][T11274] Bluetooth: hci2: command 0x0406 tx timeout
[  643.075307][T11274] Bluetooth: hci3: command 0x0406 tx timeout
[  643.096436][T11286] bridge0: left promiscuous mode
[  643.113574][ T5775] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  643.132857][ T5775] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  643.145653][ T5775] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  643.162414][ T5775] usb 3-1: media controller created
[  643.167848][T11274] Bluetooth: hci4: command 0x0406 tx timeout
[  643.204817][ T5775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  643.316613][T11274] Bluetooth: hci5: command 0x0405 tx timeout
[  643.367136][ T5775] zl10353_read_register: readreg error (reg=127, ret==-71)
[  643.965365][T11274] Bluetooth: hci0: command 0x0406 tx timeout
[  644.646712][ T5775] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  644.677902][ T5775] usb 3-1: USB disconnect, device number 28
[  644.845159][T11274] Bluetooth: hci1: command 0x0406 tx timeout
[  644.919064][T11274] Bluetooth: hci2: command 0x0406 tx timeout
[  645.287641][T11274] Bluetooth: hci3: command 0x0406 tx timeout
[  645.293885][T11274] Bluetooth: hci4: command 0x0406 tx timeout
[  645.415695][ T5620] Bluetooth: hci5: command 0x0405 tx timeout
[  645.425750][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  645.425801][   T30] audit: type=1326 audit(1787349073.767:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.4.1352" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  645.867316][   T30] audit: type=1326 audit(1787349073.767:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.4.1352" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  645.905501][   T30] audit: type=1326 audit(1787349073.777:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.4.1352" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc18415e90e code=0x7ffc0000
[  645.981715][   T30] audit: type=1326 audit(1787349073.777:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.4.1352" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  646.008455][   T30] audit: type=1326 audit(1787349073.777:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.4.1352" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  646.065638][T11330] bridge0: entered promiscuous mode
[  646.099099][   T30] audit: type=1326 audit(1787349073.777:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.4.1352" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  646.995889][ T5620] Bluetooth: hci2: command 0x0406 tx timeout
[  648.513161][   T30] audit: type=1326 audit(1787349073.787:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.4.1352" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  648.769966][   T30] audit: type=1326 audit(1787349073.787:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.4.1352" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  649.172609][   T30] audit: type=1326 audit(1787349073.787:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.4.1352" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  649.221989][   T30] audit: type=1326 audit(1787349073.797:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.4.1352" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  650.654868][T11351] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  650.682090][T11325] bridge0: left promiscuous mode
[  651.543334][T11344] loop3: detected capacity change from 0 to 32768
[  651.582655][T11344] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1357 (11344)
[  651.593012][T11361] Config c/1 of g1 needs at least one function.
[  651.641799][T11361] udc usbip-vudc.0: failed to start g1: -22
[  651.680936][T11344] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  651.689079][T11361] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22
[  651.952062][T11361] UDC core: g1: couldn't find an available UDC or it's busy
[  651.987090][T11344] BTRFS info (device loop3): using crc32c checksum algorithm
[  652.213876][T11350] md: could not open device unknown-block(1,0).
[  654.631651][T11344] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  654.633523][T11344] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  654.646369][T11344] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  654.680447][T11344] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  654.694592][T11344] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  654.704404][T11344] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  654.714857][T11344] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  654.729745][T11344] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  654.742404][T11344] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  654.762935][T11344] BTRFS error (device loop3): open_ctree failed: -ENOMEM
[  655.000936][T11381] loop4: detected capacity change from 0 to 2640
[  655.007808][T11381] buffer_io_error: 11 callbacks suppressed
[  655.007825][T11381] Buffer I/O error on dev loop4, logical block 0, async page read
[  655.021502][T11381] Buffer I/O error on dev loop4, logical block 0, async page read
[  655.029385][T11381] Buffer I/O error on dev loop4, logical block 0, async page read
[  655.037514][T11381] Buffer I/O error on dev loop4, logical block 0, async page read
[  655.045383][T11381] Buffer I/O error on dev loop4, logical block 0, async page read
[  655.053219][T11381] Buffer I/O error on dev loop4, logical block 0, async page read
[  655.061329][T11381] Buffer I/O error on dev loop4, logical block 0, async page read
[  655.069231][T11381] Buffer I/O error on dev loop4, logical block 0, async page read
[  655.077533][T11381] ldm_validate_partition_table(): Disk read failed.
[  655.084176][T11381] Buffer I/O error on dev loop4, logical block 0, async page read
[  655.093650][T11381] Buffer I/O error on dev loop4, logical block 0, async page read
[  655.101571][T11381] Dev loop4: unable to read RDB block 0
[  655.107315][T11381]  loop4: unable to read partition table
[  655.113142][T11381] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  655.611814][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  655.611864][   T30] audit: type=1326 audit(1787349084.097:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11382 comm="syz.1.1364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  656.424029][ T5751] libceph: connect (1)[c::]:6789 error -101
[  656.464337][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1367'.
[  656.487045][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1367'.
[  656.500139][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1367'.
[  656.513210][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1367'.
[  656.577365][T11397] 9pnet_virtio: no channels available for device syz
[  657.256948][   T30] audit: type=1326 audit(1787349084.097:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11382 comm="syz.1.1364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  657.276685][ T5751] libceph: mon0 (1)[c::]:6789 connect error
[  657.282812][   T30] audit: type=1326 audit(1787349084.107:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11382 comm="syz.1.1364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b2f35e90e code=0x7ffc0000
[  657.325476][   T30] audit: type=1326 audit(1787349084.107:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11382 comm="syz.1.1364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  657.355186][   T30] audit: type=1326 audit(1787349084.107:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11382 comm="syz.1.1364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  657.385461][   T30] audit: type=1326 audit(1787349084.107:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11382 comm="syz.1.1364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  657.425014][T11391] ceph: No mds server is up or the cluster is laggy
[  657.440511][   T10] libceph: connect (1)[c::]:6789 error -101
[  657.469965][T11387] Config c/1 of g1 needs at least one function.
[  657.491385][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  657.628707][   T30] audit: type=1326 audit(1787349084.117:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11382 comm="syz.1.1364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  657.741319][T11387] udc usbip-vudc.0: failed to start g1: -22
[  657.760157][   T30] audit: type=1326 audit(1787349084.117:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11382 comm="syz.1.1364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  657.952063][T11387] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22
[  658.036860][T10209] libceph: connect (1)[c::]:6789 error -101
[  658.083159][T10209] libceph: mon0 (1)[c::]:6789 connect error
[  658.295505][T11407] MTD: Couldn't look up './dev/mtdblock0': -2
[  658.395394][T11387] UDC core: g1: couldn't find an available UDC or it's busy
[  658.551148][   T30] audit: type=1326 audit(1787349084.117:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11382 comm="syz.1.1364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  658.794658][   T10] libceph: connect (1)[c::]:6789 error -101
[  658.921449][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  658.950674][T11410] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  659.028687][   T30] audit: type=1326 audit(1787349084.127:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11382 comm="syz.1.1364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  659.263630][T11415] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  659.272381][T11415] CPU: 0 UID: 0 PID: 11415 Comm: syz.5.1373 Not tainted syzkaller #0 PREEMPT(full) 
[  659.272430][T11415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  659.272455][T11415] Call Trace:
[  659.272467][T11415]  <TASK>
[  659.272481][T11415]  dump_stack_lvl+0x100/0x190
[  659.272572][T11415]  sysfs_warn_dup.cold+0x1c/0x28
[  659.272635][T11415]  sysfs_create_dir_ns+0x24b/0x2b0
[  659.272687][T11415]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  659.272737][T11415]  ? find_held_lock+0x2b/0x80
[  659.272778][T11415]  ? kobject_add_internal+0x25f/0x930
[  659.272839][T11415]  ? kobject_add_internal+0x25f/0x930
[  659.272904][T11415]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.272951][T11415]  ? class_dir_child_ns_type+0xd/0x60
[  659.273010][T11415]  kobject_add_internal+0x2c8/0x930
[  659.273077][T11415]  kobject_add+0x16a/0x1e0
[  659.273136][T11415]  ? __pfx_kobject_add+0x10/0x10
[  659.273198][T11415]  ? get_device_parent+0x1b3/0x4c0
[  659.273242][T11415]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.273291][T11415]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.273337][T11415]  ? kobject_put+0xb9/0x640
[  659.273405][T11415]  device_add+0x294/0x1970
[  659.273459][T11415]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.273506][T11415]  ? lockdep_init_map_type+0x5c/0x250
[  659.273571][T11415]  ? __pfx_device_add+0x10/0x10
[  659.273620][T11415]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.273667][T11415]  ? lockdep_init_map_type+0x5c/0x250
[  659.273723][T11415]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.273769][T11415]  ? __init_waitqueue_head+0xca/0x150
[  659.273830][T11415]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.273878][T11415]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.273933][T11415]  tty_register_device_attr+0x388/0x7f0
[  659.273978][T11415]  ? lockdep_init_map_type+0x5c/0x250
[  659.274033][T11415]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.274082][T11415]  ? __pfx_tty_register_device_attr+0x10/0x10
[  659.274135][T11415]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.274182][T11415]  ? tty_port_init+0x156/0x1c0
[  659.274224][T11415]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.274280][T11415]  gsm_activate_mux+0x155/0x2a0
[  659.274325][T11415]  gsmld_ioctl+0xbbc/0x15c0
[  659.274389][T11415]  ? __pfx_gsmld_ioctl+0x10/0x10
[  659.274445][T11415]  ? tomoyo_path_number_perm+0x28f/0x580
[  659.274492][T11415]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.274571][T11415]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  659.274631][T11415]  ? __pfx_pty_unix98_ioctl+0x10/0x10
[  659.274697][T11415]  ? __pfx_gsmld_ioctl+0x10/0x10
[  659.274746][T11415]  tty_ioctl+0x11b4/0x1640
[  659.274790][T11415]  ? __pfx_tty_ioctl+0x10/0x10
[  659.274844][T11415]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.274891][T11415]  ? find_held_lock+0x2b/0x80
[  659.274930][T11415]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.274976][T11415]  ? hook_file_ioctl_common+0x140/0x440
[  659.275035][T11415]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.275082][T11415]  ? __fget_files+0x21f/0x3d0
[  659.275137][T11415]  ? __pfx_tty_ioctl+0x10/0x10
[  659.275180][T11415]  __x64_sys_ioctl+0x18e/0x210
[  659.275224][T11415]  do_syscall_64+0x123/0x790
[  659.275274][T11415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.275314][T11415] RIP: 0033:0x7f5104f9e0d9
[  659.275345][T11415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  659.275383][T11415] RSP: 002b:00007f5105ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  659.275419][T11415] RAX: ffffffffffffffda RBX: 00007f5105226180 RCX: 00007f5104f9e0d9
[  659.275445][T11415] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007
[  659.275470][T11415] RBP: 00007f5105035024 R08: 0000000000000000 R09: 0000000000000000
[  659.275494][T11415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  659.275517][T11415] R13: 00007f5105226218 R14: 00007f5105226180 R15: 00007ffdd6060118
[  659.275577][T11415]  </TASK>
[  659.718001][T11415] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  660.553273][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'.
[  660.579628][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'.
[  660.592624][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'.
[  660.604131][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'.
[  660.656336][T11425] 9pnet_virtio: no channels available for device syz
[  661.511255][T11426] jffs2: notice: (11426) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  665.708635][T11445] jffs2: notice: (11445) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  666.966158][T11448] loop4: detected capacity change from 0 to 2640
[  666.974215][T11448] buffer_io_error: 6 callbacks suppressed
[  666.974232][T11448] Buffer I/O error on dev loop4, logical block 0, async page read
[  666.987901][T11448] Buffer I/O error on dev loop4, logical block 0, async page read
[  666.995785][T11448] Buffer I/O error on dev loop4, logical block 0, async page read
[  667.003616][T11448] Buffer I/O error on dev loop4, logical block 0, async page read
[  667.011489][T11448] Buffer I/O error on dev loop4, logical block 0, async page read
[  667.019421][T11448] Buffer I/O error on dev loop4, logical block 0, async page read
[  667.027291][T11448] Buffer I/O error on dev loop4, logical block 0, async page read
[  667.035555][T11448] Buffer I/O error on dev loop4, logical block 0, async page read
[  667.043372][T11448] ldm_validate_partition_table(): Disk read failed.
[  667.050062][T11448] Buffer I/O error on dev loop4, logical block 0, async page read
[  667.058101][T11448] Buffer I/O error on dev loop4, logical block 0, async page read
[  667.066019][T11448] Dev loop4: unable to read RDB block 0
[  667.073098][T11448]  loop4: unable to read partition table
[  667.078945][T11448] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  667.366373][T11457] jffs2: notice: (11457) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  668.450190][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  668.450242][   T30] audit: type=1326 audit(1787349096.767:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1385" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  668.963969][   T30] audit: type=1326 audit(1787349096.767:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1385" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  669.268160][   T30] audit: type=1326 audit(1787349096.777:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1385" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f58f415e90e code=0x7ffc0000
[  669.774407][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'.
[  669.799746][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'.
[  669.812014][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'.
[  669.823150][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'.
[  669.875027][T11467] 9pnet_virtio: no channels available for device syz
[  669.889428][   T30] audit: type=1326 audit(1787349096.777:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1385" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  670.401586][T11470] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  670.410279][T11470] CPU: 0 UID: 0 PID: 11470 Comm: syz.5.1390 Not tainted syzkaller #0 PREEMPT(full) 
[  670.410338][T11470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  670.410364][T11470] Call Trace:
[  670.410381][T11470]  <TASK>
[  670.410398][T11470]  dump_stack_lvl+0x100/0x190
[  670.410465][T11470]  sysfs_warn_dup.cold+0x1c/0x28
[  670.410539][T11470]  sysfs_create_dir_ns+0x24b/0x2b0
[  670.410611][T11470]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  670.410672][T11470]  ? find_held_lock+0x2b/0x80
[  670.410723][T11470]  ? kobject_add_internal+0x25f/0x930
[  670.410798][T11470]  ? kobject_add_internal+0x25f/0x930
[  670.410876][T11470]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.410933][T11470]  ? class_dir_child_ns_type+0xd/0x60
[  670.410996][T11470]  kobject_add_internal+0x2c8/0x930
[  670.411069][T11470]  kobject_add+0x16a/0x1e0
[  670.411133][T11470]  ? __pfx_kobject_add+0x10/0x10
[  670.411201][T11470]  ? get_device_parent+0x1b3/0x4c0
[  670.411249][T11470]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.411302][T11470]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.411353][T11470]  ? kobject_put+0xb9/0x640
[  670.411428][T11470]  device_add+0x294/0x1970
[  670.411485][T11470]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.411537][T11470]  ? lockdep_init_map_type+0x5c/0x250
[  670.411607][T11470]  ? __pfx_device_add+0x10/0x10
[  670.411660][T11470]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.411712][T11470]  ? lockdep_init_map_type+0x5c/0x250
[  670.411775][T11470]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.411826][T11470]  ? __init_waitqueue_head+0xca/0x150
[  670.411894][T11470]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.411945][T11470]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.412004][T11470]  tty_register_device_attr+0x388/0x7f0
[  670.412048][T11470]  ? lockdep_init_map_type+0x5c/0x250
[  670.412103][T11470]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.412152][T11470]  ? __pfx_tty_register_device_attr+0x10/0x10
[  670.412207][T11470]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.412254][T11470]  ? tty_port_init+0x156/0x1c0
[  670.412295][T11470]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.412351][T11470]  gsm_activate_mux+0x155/0x2a0
[  670.412397][T11470]  gsmld_ioctl+0xbbc/0x15c0
[  670.412461][T11470]  ? __pfx_gsmld_ioctl+0x10/0x10
[  670.412519][T11470]  ? tomoyo_path_number_perm+0x28f/0x580
[  670.412573][T11470]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.412649][T11470]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  670.412706][T11470]  ? __pfx_pty_unix98_ioctl+0x10/0x10
[  670.412773][T11470]  ? __pfx_gsmld_ioctl+0x10/0x10
[  670.412821][T11470]  tty_ioctl+0x11b4/0x1640
[  670.412866][T11470]  ? __pfx_tty_ioctl+0x10/0x10
[  670.412922][T11470]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.412969][T11470]  ? find_held_lock+0x2b/0x80
[  670.413008][T11470]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.413054][T11470]  ? hook_file_ioctl_common+0x140/0x440
[  670.413115][T11470]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.413162][T11470]  ? __fget_files+0x21f/0x3d0
[  670.413218][T11470]  ? __pfx_tty_ioctl+0x10/0x10
[  670.413262][T11470]  __x64_sys_ioctl+0x18e/0x210
[  670.413306][T11470]  do_syscall_64+0x123/0x790
[  670.413357][T11470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.413398][T11470] RIP: 0033:0x7f5104f9e0d9
[  670.413429][T11470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  670.413468][T11470] RSP: 002b:00007f5105ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  670.413505][T11470] RAX: ffffffffffffffda RBX: 00007f5105226180 RCX: 00007f5104f9e0d9
[  670.413532][T11470] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006
[  670.413563][T11470] RBP: 00007f5105035024 R08: 0000000000000000 R09: 0000000000000000
[  670.413587][T11470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  670.413611][T11470] R13: 00007f5105226218 R14: 00007f5105226180 R15: 00007ffdd6060118
[  670.413664][T11470]  </TASK>
[  670.413965][T11470] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  671.840278][   T30] audit: type=1326 audit(1787349096.777:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1385" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  671.925379][T11474] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty65'
[  671.934111][T11474] CPU: 1 UID: 0 PID: 11474 Comm: syz.1.1388 Not tainted syzkaller #0 PREEMPT(full) 
[  671.934158][T11474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  671.934181][T11474] Call Trace:
[  671.934194][T11474]  <TASK>
[  671.934208][T11474]  dump_stack_lvl+0x100/0x190
[  671.934265][T11474]  sysfs_warn_dup.cold+0x1c/0x28
[  671.934326][T11474]  sysfs_create_dir_ns+0x24b/0x2b0
[  671.934380][T11474]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  671.934445][T11474]  ? kobject_namespace+0x72/0x1a0
[  671.934505][T11474]  ? kobject_namespace+0x8c/0x1a0
[  671.934559][T11474]  ? srso_alias_return_thunk+0x5/0xfbef5
[  671.934607][T11474]  ? class_dir_child_ns_type+0xd/0x60
[  671.934665][T11474]  kobject_add_internal+0x2c8/0x930
[  671.934733][T11474]  kobject_add+0x16a/0x1e0
[  671.934791][T11474]  ? __pfx_kobject_add+0x10/0x10
[  671.934852][T11474]  ? get_device_parent+0x1b3/0x4c0
[  671.934896][T11474]  ? srso_alias_return_thunk+0x5/0xfbef5
[  671.934949][T11474]  ? srso_alias_return_thunk+0x5/0xfbef5
[  671.934995][T11474]  ? kobject_put+0xb9/0x640
[  671.935063][T11474]  device_add+0x294/0x1970
[  671.935117][T11474]  ? srso_alias_return_thunk+0x5/0xfbef5
[  671.935163][T11474]  ? lockdep_init_map_type+0x5c/0x250
[  671.935223][T11474]  ? __pfx_device_add+0x10/0x10
[  671.935272][T11474]  ? srso_alias_return_thunk+0x5/0xfbef5
[  671.935318][T11474]  ? lockdep_init_map_type+0x5c/0x250
[  671.935376][T11474]  ? srso_alias_return_thunk+0x5/0xfbef5
[  671.935432][T11474]  ? __init_waitqueue_head+0xca/0x150
[  671.935494][T11474]  ? srso_alias_return_thunk+0x5/0xfbef5
[  671.935545][T11474]  ? srso_alias_return_thunk+0x5/0xfbef5
[  671.935600][T11474]  tty_register_device_attr+0x388/0x7f0
[  671.935645][T11474]  ? lockdep_init_map_type+0x5c/0x250
[  671.935701][T11474]  ? srso_alias_return_thunk+0x5/0xfbef5
[  671.935750][T11474]  ? __pfx_tty_register_device_attr+0x10/0x10
[  671.935804][T11474]  ? srso_alias_return_thunk+0x5/0xfbef5
[  671.935851][T11474]  ? tty_port_init+0x156/0x1c0
[  671.935898][T11474]  ? srso_alias_return_thunk+0x5/0xfbef5
[  671.935953][T11474]  gsm_activate_mux+0x155/0x2a0
[  671.935999][T11474]  gsmld_ioctl+0xbbc/0x15c0
[  671.936066][T11474]  ? __pfx_gsmld_ioctl+0x10/0x10
[  671.936124][T11474]  ? tomoyo_path_number_perm+0x28f/0x580
[  671.936171][T11474]  ? srso_alias_return_thunk+0x5/0xfbef5
[  671.936246][T11474]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  671.936304][T11474]  ? __pfx_pty_unix98_ioctl+0x10/0x10
[  671.936370][T11474]  ? __pfx_gsmld_ioctl+0x10/0x10
[  671.936430][T11474]  tty_ioctl+0x11b4/0x1640
[  671.936474][T11474]  ? __pfx_tty_ioctl+0x10/0x10
[  671.936528][T11474]  ? srso_alias_return_thunk+0x5/0xfbef5
[  671.936576][T11474]  ? find_held_lock+0x2b/0x80
[  671.936616][T11474]  ? srso_alias_return_thunk+0x5/0xfbef5
[  671.936663][T11474]  ? hook_file_ioctl_common+0x140/0x440
[  671.936723][T11474]  ? srso_alias_return_thunk+0x5/0xfbef5
[  671.936769][T11474]  ? __fget_files+0x21f/0x3d0
[  671.936825][T11474]  ? __pfx_tty_ioctl+0x10/0x10
[  671.936869][T11474]  __x64_sys_ioctl+0x18e/0x210
[  671.936911][T11474]  do_syscall_64+0x123/0x790
[  671.936963][T11474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.937003][T11474] RIP: 0033:0x7f7b2f39e0d9
[  671.937033][T11474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  671.937071][T11474] RSP: 002b:00007f7b2d5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  671.937107][T11474] RAX: ffffffffffffffda RBX: 00007f7b2f626180 RCX: 00007f7b2f39e0d9
[  671.937133][T11474] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007
[  671.937158][T11474] RBP: 00007f7b2f435024 R08: 0000000000000000 R09: 0000000000000000
[  671.937182][T11474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  671.937205][T11474] R13: 00007f7b2f626218 R14: 00007f7b2f626180 R15: 00007fff0fac0c38
[  671.937258][T11474]  </TASK>
[  672.314139][T11474] kobject: kobject_add_internal failed for gsmtty65 with -EEXIST, don't try to register things with the same name in the same directory.
[  672.634607][   T30] audit: type=1326 audit(1787349096.787:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1385" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  672.776899][T11478] MTD: Couldn't look up './dev/mtdblock0': -2
[  675.100757][   T30] audit: type=1326 audit(1787349096.787:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1385" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  675.126718][   T30] audit: type=1326 audit(1787349096.787:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1385" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  675.170333][   T30] audit: type=1326 audit(1787349096.787:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1385" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  675.208287][   T30] audit: type=1326 audit(1787349096.797:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1385" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  675.432871][   T30] audit: type=1326 audit(1787349096.797:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1385" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  675.525496][   T30] audit: type=1326 audit(1787349096.807:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1385" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  676.501719][   T30] audit: type=1326 audit(1787349096.827:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1385" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  676.745831][   T30] audit: type=1326 audit(1787349096.827:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1385" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  677.539942][   T30] audit: type=1326 audit(1787349096.847:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1385" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  677.825058][T11487] loop4: detected capacity change from 0 to 2640
[  677.834539][T11487] buffer_io_error: 6 callbacks suppressed
[  677.834577][T11487] Buffer I/O error on dev loop4, logical block 0, async page read
[  677.848464][T11487] Buffer I/O error on dev loop4, logical block 0, async page read
[  677.856754][T11487] Buffer I/O error on dev loop4, logical block 0, async page read
[  677.864800][T11487] Buffer I/O error on dev loop4, logical block 0, async page read
[  677.873404][T11487] Buffer I/O error on dev loop4, logical block 0, async page read
[  677.882054][T11487] Buffer I/O error on dev loop4, logical block 0, async page read
[  677.890584][T11487] Buffer I/O error on dev loop4, logical block 0, async page read
[  677.898814][T11487] Buffer I/O error on dev loop4, logical block 0, async page read
[  677.907015][T11487] ldm_validate_partition_table(): Disk read failed.
[  677.914053][T11487] Buffer I/O error on dev loop4, logical block 0, async page read
[  677.922239][T11487] Buffer I/O error on dev loop4, logical block 0, async page read
[  677.933305][T11487] Dev loop4: unable to read RDB block 0
[  677.940482][T11487]  loop4: unable to read partition table
[  677.947996][T11487] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  678.136394][   T30] audit: type=1326 audit(1787349096.847:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1385" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  678.674165][T11493] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99)
[  679.259331][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'.
[  679.283265][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'.
[  679.295599][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'.
[  679.307583][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'.
[  679.358880][T11504] 9pnet_virtio: no channels available for device syz
[  680.350061][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'.
[  680.412824][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'.
[  680.460137][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'.
[  680.493018][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'.
[  680.547058][T11508] 9pnet_virtio: no channels available for device syz
[  680.583452][T11513] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  680.717646][T11516] loop4: detected capacity change from 0 to 2640
[  680.724636][T11516] ldm_validate_partition_table(): Disk read failed.
[  680.731444][T11516] Dev loop4: unable to read RDB block 0
[  680.737202][T11516]  loop4: unable to read partition table
[  680.743025][T11516] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  681.047375][T11515] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  681.111694][T11519] loop3: detected capacity change from 0 to 1024
[  681.157686][T11510] md: could not open device unknown-block(1,0).
[  681.366083][T11515] md: could not open device unknown-block(1,0).
[  683.025535][T11537] loop4: detected capacity change from 0 to 2640
[  683.038597][T11537] buffer_io_error: 22 callbacks suppressed
[  683.038621][T11537] Buffer I/O error on dev loop4, logical block 0, async page read
[  683.056174][T11537] Buffer I/O error on dev loop4, logical block 0, async page read
[  683.064613][T11537] Buffer I/O error on dev loop4, logical block 0, async page read
[  683.073023][T11537] Buffer I/O error on dev loop4, logical block 0, async page read
[  683.079854][T11536] bridge0: entered promiscuous mode
[  683.086827][T11537] Buffer I/O error on dev loop4, logical block 0, async page read
[  683.095666][T11537] Buffer I/O error on dev loop4, logical block 0, async page read
[  683.104075][T11537] Buffer I/O error on dev loop4, logical block 0, async page read
[  683.112648][T11537] Buffer I/O error on dev loop4, logical block 0, async page read
[  683.120916][T11537] ldm_validate_partition_table(): Disk read failed.
[  683.128119][T11537] Buffer I/O error on dev loop4, logical block 0, async page read
[  683.136641][T11537] Buffer I/O error on dev loop4, logical block 0, async page read
[  683.145386][T11537] Dev loop4: unable to read RDB block 0
[  683.156085][T11537]  loop4: unable to read partition table
[  683.164345][T11537] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  685.158468][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  685.164989][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  685.651974][    T9] libceph: connect (1)[c::]:6789 error -101
[  685.679816][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  685.920230][T11542] ceph: No mds server is up or the cluster is laggy
[  685.987974][    T9] libceph: connect (1)[c::]:6789 error -101
[  686.067810][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  686.284395][T11530] bridge0: left promiscuous mode
[  688.042434][T11558] jffs2: notice: (11558) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  688.448175][T11550] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  688.598345][T11550] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  688.676954][T11274] Bluetooth: hci0: command 0x0406 tx timeout
[  688.702970][T11550] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  688.793239][T11550] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  688.849024][T11550] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  688.937858][T11550] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  688.964852][T11550] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  689.151353][T11565] bridge0: entered promiscuous mode
[  689.418064][T11567] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  690.485267][   T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  691.259129][T11274] Bluetooth: hci1: command 0x0406 tx timeout
[  691.265264][T11274] Bluetooth: hci2: command 0x0406 tx timeout
[  691.271276][T11274] Bluetooth: hci3: command 0x0406 tx timeout
[  691.277370][T11274] Bluetooth: hci5: command 0x0405 tx timeout
[  691.283381][T11274] Bluetooth: hci4: command 0x0406 tx timeout
[  692.196800][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  692.196830][   T30] audit: type=1326 audit(1787349119.407:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.4.1418" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  692.278707][   T10] usb 6-1: Using ep0 maxpacket: 16
[  692.368963][   T30] audit: type=1326 audit(1787349119.407:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.4.1418" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  692.398340][   T30] audit: type=1326 audit(1787349119.557:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.4.1418" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc18415e90e code=0x7ffc0000
[  692.433274][   T30] audit: type=1326 audit(1787349119.557:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.4.1418" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  692.566258][   T30] audit: type=1326 audit(1787349119.557:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.4.1418" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  692.878185][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1419'.
[  692.938635][   T30] audit: type=1326 audit(1787349119.697:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.4.1418" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  693.012450][   T10] usb 6-1: device descriptor read/all, error -71
[  693.062222][T11562] bridge0: left promiscuous mode
[  693.106215][   T30] audit: type=1326 audit(1787349119.697:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.4.1418" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  693.177180][T11585] jffs2: notice: (11585) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  693.422428][ T5620] Bluetooth: hci3: command 0x0406 tx timeout
[  693.454012][   T30] audit: type=1326 audit(1787349119.697:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.4.1418" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  694.884432][   T30] audit: type=1326 audit(1787349119.837:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.4.1418" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  695.053793][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1422'.
[  695.088671][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1422'.
[  695.101925][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1422'.
[  695.117665][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1422'.
[  695.142256][   T30] audit: type=1326 audit(1787349119.837:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.4.1418" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18419e0d9 code=0x7ffc0000
[  695.200731][T11596] 9pnet_virtio: no channels available for device syz
[  695.906895][T11607] jffs2: notice: (11607) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  698.280489][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  698.280540][   T30] audit: type=1326 audit(1787349126.757:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  698.885309][   T30] audit: type=1326 audit(1787349126.757:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  698.940959][   T30] audit: type=1326 audit(1787349126.767:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f58f415e90e code=0x7ffc0000
[  699.043500][T11601] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  699.163571][   T30] audit: type=1326 audit(1787349126.767:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  699.250256][   T30] audit: type=1326 audit(1787349126.767:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  699.276154][   T30] audit: type=1326 audit(1787349126.777:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  699.302496][   T30] audit: type=1326 audit(1787349126.777:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  699.366381][T11601] md: could not open device unknown-block(1,0).
[  699.372204][   T30] audit: type=1326 audit(1787349126.777:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  699.417554][   T30] audit: type=1326 audit(1787349126.777:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  699.513621][T11627] loop4: detected capacity change from 0 to 2640
[  699.524680][T11627] buffer_io_error: 6 callbacks suppressed
[  699.524712][T11627] Buffer I/O error on dev loop4, logical block 0, async page read
[  699.541042][T11627] Buffer I/O error on dev loop4, logical block 0, async page read
[  699.549224][T11627] Buffer I/O error on dev loop4, logical block 0, async page read
[  699.557316][T11627] Buffer I/O error on dev loop4, logical block 0, async page read
[  699.565811][T11627] Buffer I/O error on dev loop4, logical block 0, async page read
[  699.574062][T11627] Buffer I/O error on dev loop4, logical block 0, async page read
[  699.582276][T11627] Buffer I/O error on dev loop4, logical block 0, async page read
[  699.590387][T11627] Buffer I/O error on dev loop4, logical block 0, async page read
[  699.598417][T11627] ldm_validate_partition_table(): Disk read failed.
[  699.605123][T11627] Buffer I/O error on dev loop4, logical block 0, async page read
[  699.613177][T11627] Buffer I/O error on dev loop4, logical block 0, async page read
[  699.621239][T11627] Dev loop4: unable to read RDB block 0
[  699.627761][T11627]  loop4: unable to read partition table
[  699.636602][T11627] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  699.886995][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'.
[  699.929478][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'.
[  699.951608][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'.
[  699.965296][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'.
[  699.986282][T11626] 9pnet_virtio: no channels available for device syz
[  702.328270][   T30] audit: type=1326 audit(1787349126.787:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.3.1426" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  704.046733][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  704.046785][   T30] audit: type=1326 audit(1787349132.617:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11639 comm="syz.5.1436" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5104f9e0d9 code=0x7ffc0000
[  704.216805][   T30] audit: type=1326 audit(1787349132.617:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11639 comm="syz.5.1436" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5104f9e0d9 code=0x7ffc0000
[  704.252743][T11637] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  704.315434][T11640] jffs2: notice: (11640) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  704.540341][T11660] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1439'.
[  706.280363][T11670] loop4: detected capacity change from 0 to 2640
[  706.292010][T11670] buffer_io_error: 11 callbacks suppressed
[  706.292046][T11670] Buffer I/O error on dev loop4, logical block 0, async page read
[  706.306272][T11670] Buffer I/O error on dev loop4, logical block 0, async page read
[  706.314349][T11670] Buffer I/O error on dev loop4, logical block 0, async page read
[  706.322654][T11670] Buffer I/O error on dev loop4, logical block 0, async page read
[  706.331474][T11670] Buffer I/O error on dev loop4, logical block 0, async page read
[  706.340122][T11670] Buffer I/O error on dev loop4, logical block 0, async page read
[  706.348899][T11670] Buffer I/O error on dev loop4, logical block 0, async page read
[  706.358176][T11670] Buffer I/O error on dev loop4, logical block 0, async page read
[  706.366374][T11670] ldm_validate_partition_table(): Disk read failed.
[  706.373255][T11670] Buffer I/O error on dev loop4, logical block 0, async page read
[  706.381482][T11670] Buffer I/O error on dev loop4, logical block 0, async page read
[  706.390048][T11670] Dev loop4: unable to read RDB block 0
[  706.398841][T11670]  loop4: unable to read partition table
[  706.407413][T11670] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  709.576176][T11677] MTD: Couldn't look up './dev/mtdblock0': -2
[  710.492115][T11684] bridge0: entered promiscuous mode
[  711.440707][T11683] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  711.468815][T11686] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  711.539637][T11683] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  711.582919][T11683] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  711.732075][T11683] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  711.797730][T11683] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  711.831067][T11683] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  711.871186][T11683] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  711.953071][T11680] bridge0: left promiscuous mode
[  712.411281][T11717] jffs2: notice: (11717) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  712.595976][T11274] Bluetooth: hci0: command 0x0406 tx timeout
[  712.805188][ T5775] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  713.523669][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'.
[  713.537422][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'.
[  713.549777][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'.
[  713.565546][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'.
[  713.575858][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'.
[  713.595429][T11274] Bluetooth: hci1: command 0x0406 tx timeout
[  713.603686][T11727] 9pnet_virtio: no channels available for device syz
[  713.661680][ T5775] usb 3-1: Using ep0 maxpacket: 16
[  713.795256][T11274] Bluetooth: hci2: command 0x0406 tx timeout
[  713.885557][ T5620] Bluetooth: hci4: command 0x0406 tx timeout
[  713.892858][ T5620] Bluetooth: hci3: command 0x0406 tx timeout
[  713.902720][T11274] Bluetooth: hci5: command 0x0405 tx timeout
[  714.475292][ T5775] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  714.493066][ T5775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.502051][ T5775] usb 3-1: Product: syz
[  714.506447][ T5775] usb 3-1: Manufacturer: syz
[  714.511063][ T5775] usb 3-1: SerialNumber: syz
[  714.857672][   T10] libceph: connect (1)[c::]:6789 error -101
[  714.942219][T11737] ceph: No mds server is up or the cluster is laggy
[  714.968675][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  715.265682][T11742] jffs2: notice: (11742) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  715.697648][T11728] Bluetooth: hci1: command 0x0406 tx timeout
[  717.037564][ T5775] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  717.260018][ T5775] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  717.321889][ T5775] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  717.371736][ T5775] usb 3-1: media controller created
[  717.596731][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'.
[  717.624065][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'.
[  717.636743][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'.
[  717.651164][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'.
[  717.663865][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'.
[  717.691311][T11754] 9pnet_virtio: no channels available for device syz
[  718.105937][ T5775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  718.606429][ T5775] zl10353_read_register: readreg error (reg=127, ret==-71)
[  718.803353][T11769] loop4: detected capacity change from 0 to 2640
[  718.816930][T11769] buffer_io_error: 6 callbacks suppressed
[  718.816994][T11769] Buffer I/O error on dev loop4, logical block 0, async page read
[  718.831187][T11769] Buffer I/O error on dev loop4, logical block 0, async page read
[  718.839380][T11769] Buffer I/O error on dev loop4, logical block 0, async page read
[  718.847660][T11769] Buffer I/O error on dev loop4, logical block 0, async page read
[  718.855791][T11769] Buffer I/O error on dev loop4, logical block 0, async page read
[  718.864337][T11769] Buffer I/O error on dev loop4, logical block 0, async page read
[  718.872815][T11769] Buffer I/O error on dev loop4, logical block 0, async page read
[  718.881194][T11769] Buffer I/O error on dev loop4, logical block 0, async page read
[  718.890726][T11769] ldm_validate_partition_table(): Disk read failed.
[  718.899906][T11769] Buffer I/O error on dev loop4, logical block 0, async page read
[  718.909202][T11769] Buffer I/O error on dev loop4, logical block 0, async page read
[  718.917518][T11769] Dev loop4: unable to read RDB block 0
[  718.924126][T11769]  loop4: unable to read partition table
[  718.931390][T11769] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  719.572241][T11752] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  720.026083][T11765] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  720.666749][ T4975] ldm_validate_partition_table(): Disk read failed.
[  720.674249][ T4975] Dev loop4: unable to read RDB block 0
[  721.533015][ T4975]  loop4: unable to read partition table
[  721.540715][   T30] audit: type=1326 audit(1787349149.347:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.1.1467" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  721.763344][T11765] md: could not open device unknown-block(1,0).
[  721.774863][T11777] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  721.833475][   T30] audit: type=1326 audit(1787349149.347:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.1.1467" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  721.867229][ T5775] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  721.910486][ T5775] usb 3-1: USB disconnect, device number 29
[  721.953976][   T30] audit: type=1326 audit(1787349149.357:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.1.1467" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b2f35e90e code=0x7ffc0000
[  722.052827][   T30] audit: type=1326 audit(1787349149.357:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.1.1467" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  722.138864][   T30] audit: type=1326 audit(1787349149.357:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.1.1467" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  722.142540][T11788] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  722.197167][   T30] audit: type=1326 audit(1787349149.367:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.1.1467" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  722.347767][   T30] audit: type=1326 audit(1787349149.367:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.1.1467" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  722.378389][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'.
[  722.391407][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'.
[  722.403380][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'.
[  722.414821][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'.
[  723.337036][T11786] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  723.432610][   T30] audit: type=1326 audit(1787349149.367:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.1.1467" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  723.553898][T11791] ceph: No mds server is up or the cluster is laggy
[  723.590364][   T30] audit: type=1326 audit(1787349149.377:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.1.1467" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  723.600570][ T5341] libceph: connect (1)[c::]:6789 error -101
[  723.622282][ T5341] libceph: mon0 (1)[c::]:6789 connect error
[  723.678784][   T30] audit: type=1326 audit(1787349149.377:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.1.1467" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2f39e0d9 code=0x7ffc0000
[  723.936106][T11803] bridge0: entered promiscuous mode
[  724.160589][T11806] loop4: detected capacity change from 0 to 2640
[  724.171451][T11806] buffer_io_error: 22 callbacks suppressed
[  724.171483][T11806] Buffer I/O error on dev loop4, logical block 0, async page read
[  724.185666][T11806] Buffer I/O error on dev loop4, logical block 0, async page read
[  724.193780][T11806] Buffer I/O error on dev loop4, logical block 0, async page read
[  724.202149][T11806] Buffer I/O error on dev loop4, logical block 0, async page read
[  724.211588][T11806] Buffer I/O error on dev loop4, logical block 0, async page read
[  724.220884][T11806] Buffer I/O error on dev loop4, logical block 0, async page read
[  724.229267][T11806] Buffer I/O error on dev loop4, logical block 0, async page read
[  724.237315][T11806] Buffer I/O error on dev loop4, logical block 0, async page read
[  724.245452][T11806] ldm_validate_partition_table(): Disk read failed.
[  724.252364][T11806] Buffer I/O error on dev loop4, logical block 0, async page read
[  724.260410][T11806] Buffer I/O error on dev loop4, logical block 0, async page read
[  724.268594][T11806] Dev loop4: unable to read RDB block 0
[  724.275148][T11806]  loop4: unable to read partition table
[  724.282455][T11806] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  727.412516][T11802] bridge0: left promiscuous mode
[  727.428931][T11809] jffs2: notice: (11809) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  728.760167][ T5341] libceph: connect (1)[c::]:6789 error -101
[  728.775367][ T5341] libceph: mon0 (1)[c::]:6789 connect error
[  729.613771][ T5341] libceph: connect (1)[c::]:6789 error -101
[  729.670488][ T9017] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  729.687830][ T5341] libceph: mon0 (1)[c::]:6789 connect error
[  729.873891][T11818] ceph: No mds server is up or the cluster is laggy
[  730.069650][T11829] loop4: detected capacity change from 0 to 2640
[  730.119225][T11829] buffer_io_error: 6 callbacks suppressed
[  730.119575][T11829] Buffer I/O error on dev loop4, logical block 0, async page read
[  730.133543][T11829] Buffer I/O error on dev loop4, logical block 0, async page read
[  730.143313][T11829] Buffer I/O error on dev loop4, logical block 0, async page read
[  730.152469][T11829] Buffer I/O error on dev loop4, logical block 0, async page read
[  730.161650][T11829] Buffer I/O error on dev loop4, logical block 0, async page read
[  730.171287][T11829] Buffer I/O error on dev loop4, logical block 0, async page read
[  730.179728][T11829] Buffer I/O error on dev loop4, logical block 0, async page read
[  730.230356][T11829] Buffer I/O error on dev loop4, logical block 0, async page read
[  730.243082][T11829] ldm_validate_partition_table(): Disk read failed.
[  730.259819][T11829] Buffer I/O error on dev loop4, logical block 0, async page read
[  730.435244][T11829] Buffer I/O error on dev loop4, logical block 0, async page read
[  730.501181][T11829] Dev loop4: unable to read RDB block 0
[  730.550123][T11829]  loop4: unable to read partition table
[  730.561674][   T10] libceph: connect (1)[c::]:6789 error -101
[  730.568261][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  730.594620][T11829] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  730.775234][T11822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  730.851012][   T10] libceph: connect (1)[c::]:6789 error -101
[  730.880023][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  731.693959][    T9] libceph: connect (1)[c::]:6789 error -101
[  731.715655][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  731.967106][T11839] ceph: No mds server is up or the cluster is laggy
[  732.217945][T11855] loop4: detected capacity change from 0 to 2640
[  732.240187][T11855] ldm_validate_partition_table(): Disk read failed.
[  732.250632][T11855] Dev loop4: unable to read RDB block 0
[  732.257772][T11855]  loop4: unable to read partition table
[  732.265051][T11855] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  733.052083][T11859] jffs2: notice: (11859) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  738.923277][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  738.923329][   T30] audit: type=1326 audit(1787349167.397:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.2.1491" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  739.682894][   T30] audit: type=1326 audit(1787349167.397:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.2.1491" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  739.725513][   T30] audit: type=1326 audit(1787349167.407:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.2.1491" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f115ef5e90e code=0x7ffc0000
[  740.022763][   T30] audit: type=1326 audit(1787349167.407:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.2.1491" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  740.093238][   T30] audit: type=1326 audit(1787349167.407:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.2.1491" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  741.020428][   T30] audit: type=1326 audit(1787349167.407:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.2.1491" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  741.303643][T11898] jffs2: notice: (11898) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  742.368933][   T30] audit: type=1326 audit(1787349167.417:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.2.1491" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  742.398012][   T30] audit: type=1326 audit(1787349167.417:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.2.1491" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  742.425334][   T30] audit: type=1326 audit(1787349167.417:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.2.1491" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  742.426713][T11895] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  742.453376][   T30] audit: type=1326 audit(1787349167.427:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.2.1491" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  744.269059][T11895] md: could not open device unknown-block(1,0).
[  745.133725][T11917] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  745.513644][    T9] libceph: connect (1)[c::]:6789 error -101
[  745.553191][T11926] ceph: No mds server is up or the cluster is laggy
[  745.582446][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  745.968271][    T9] libceph: connect (1)[c::]:6789 error -101
[  746.081884][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  746.621741][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  746.679190][    T9] libceph: connect (1)[c::]:6789 error -101
[  746.789897][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  746.801924][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  747.034926][T11937] jffs2: notice: (11937) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  747.285450][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  747.285493][   T30] audit: type=1400 audit(1787349175.837:402): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="/" pid=11939 comm="syz.2.1503" name="/" offset=59
[  748.511658][T11954] bridge0: entered promiscuous mode
[  748.779753][T11953] loop4: detected capacity change from 0 to 2640
[  748.794148][T11953] buffer_io_error: 32 callbacks suppressed
[  748.794276][T11953] Buffer I/O error on dev loop4, logical block 0, async page read
[  748.808260][T11953] Buffer I/O error on dev loop4, logical block 0, async page read
[  748.816463][T11953] Buffer I/O error on dev loop4, logical block 0, async page read
[  748.824764][T11953] Buffer I/O error on dev loop4, logical block 0, async page read
[  748.833097][T11953] Buffer I/O error on dev loop4, logical block 0, async page read
[  748.841482][T11953] Buffer I/O error on dev loop4, logical block 0, async page read
[  748.851631][T11953] Buffer I/O error on dev loop4, logical block 0, async page read
[  748.860101][T11953] Buffer I/O error on dev loop4, logical block 0, async page read
[  748.868276][T11953] ldm_validate_partition_table(): Disk read failed.
[  748.875275][T11953] Buffer I/O error on dev loop4, logical block 0, async page read
[  748.883706][T11953] Buffer I/O error on dev loop4, logical block 0, async page read
[  748.895114][T11953] Dev loop4: unable to read RDB block 0
[  748.901933][T11953]  loop4: unable to read partition table
[  748.909912][T11953] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  750.421652][T11945] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  750.763106][T11961] jffs2: notice: (11961) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  752.120045][T11947] bridge0: left promiscuous mode
[  752.581386][T11971] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  752.688267][T11980] loop4: detected capacity change from 0 to 2640
[  752.701449][T11980] ldm_validate_partition_table(): Disk read failed.
[  752.708981][T11980] Dev loop4: unable to read RDB block 0
[  752.716204][T11980]  loop4: unable to read partition table
[  752.723573][T11980] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  753.334407][T11979] bridge0: entered promiscuous mode
[  754.085927][T11974] bridge0: left promiscuous mode
[  754.277907][   T30] audit: type=1326 audit(1787349182.737:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.5.1515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5104f9e0d9 code=0x7ffc0000
[  754.881054][   T30] audit: type=1326 audit(1787349182.737:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.5.1515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5104f9e0d9 code=0x7ffc0000
[  754.975409][T11990] syz_tun: entered allmulticast mode
[  755.053226][   T30] audit: type=1326 audit(1787349182.747:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.5.1515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5104f5e90e code=0x7ffc0000
[  755.128952][T11993] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  755.160223][T11993] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  755.161805][   T30] audit: type=1326 audit(1787349182.747:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.5.1515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5104f9e0d9 code=0x7ffc0000
[  755.219958][T11993] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  755.327870][   T30] audit: type=1326 audit(1787349182.747:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.5.1515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5104f9e0d9 code=0x7ffc0000
[  755.372646][T11999] jffs2: notice: (11999) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  755.637956][   T30] audit: type=1326 audit(1787349182.757:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.5.1515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5104f9e0d9 code=0x7ffc0000
[  755.867972][   T30] audit: type=1326 audit(1787349182.757:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.5.1515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5104f9e0d9 code=0x7ffc0000
[  756.151169][   T30] audit: type=1326 audit(1787349182.757:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.5.1515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5104f9e0d9 code=0x7ffc0000
[  756.266392][T11993] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  756.276309][T11993] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  756.283162][T11993] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  756.289561][T11993] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  756.378549][   T30] audit: type=1326 audit(1787349182.757:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.5.1515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5104f9e0d9 code=0x7ffc0000
[  756.633856][T12010] jffs2: notice: (12010) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  757.155166][ T5616] Bluetooth: hci0: command 0x0406 tx timeout
[  757.179718][   T30] audit: type=1326 audit(1787349182.767:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.5.1515" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5104f9e0d9 code=0x7ffc0000
[  757.235282][ T5616] Bluetooth: hci1: command 0x0406 tx timeout
[  758.275380][ T5616] Bluetooth: hci2: command 0x0406 tx timeout
[  758.355336][T11728] Bluetooth: hci4: command 0x0406 tx timeout
[  758.361482][T11274] Bluetooth: hci3: command 0x0406 tx timeout
[  758.368025][ T5616] Bluetooth: hci5: command 0x0405 tx timeout
[  759.236052][ T5616] Bluetooth: hci0: command 0x0406 tx timeout
[  759.330408][T12019] loop4: detected capacity change from 0 to 2640
[  759.342176][T12019] buffer_io_error: 27 callbacks suppressed
[  759.342193][T12019] Buffer I/O error on dev loop4, logical block 0, async page read
[  759.356335][T12019] Buffer I/O error on dev loop4, logical block 0, async page read
[  759.364203][T12019] Buffer I/O error on dev loop4, logical block 0, async page read
[  759.372076][T12019] Buffer I/O error on dev loop4, logical block 0, async page read
[  759.379925][T12019] Buffer I/O error on dev loop4, logical block 0, async page read
[  759.387820][T12019] Buffer I/O error on dev loop4, logical block 0, async page read
[  759.395866][T12019] Buffer I/O error on dev loop4, logical block 0, async page read
[  759.403704][T12019] Buffer I/O error on dev loop4, logical block 0, async page read
[  759.411542][T12019] ldm_validate_partition_table(): Disk read failed.
[  759.418175][T12019] Buffer I/O error on dev loop4, logical block 0, async page read
[  759.426058][T12019] Buffer I/O error on dev loop4, logical block 0, async page read
[  759.435191][T12019] Dev loop4: unable to read RDB block 0
[  759.440928][T12019]  loop4: unable to read partition table
[  759.447353][T12019] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  759.618767][T12023] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  759.679705][T12023] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  759.701757][T12023] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  759.735783][T12025] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  759.768891][T12025] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  759.783357][T12025] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  759.792560][T12025] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  759.804698][T12025] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  759.812179][T12025] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  759.986258][T12038] jffs2: notice: (12038) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  760.095871][    T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  761.036281][    T9] usb 4-1: Using ep0 maxpacket: 16
[  761.050074][    T9] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  761.098984][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.141601][    T9] usb 4-1: Product: syz
[  761.177958][    T9] usb 4-1: Manufacturer: syz
[  761.201235][    T9] usb 4-1: SerialNumber: syz
[  761.306950][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  761.306976][   T30] audit: type=1400 audit(1787349189.877:432): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=12048 comm="syz.0.1530" name="p" offset=69
[  761.351759][T12052] bridge0: entered promiscuous mode
[  761.556344][T12057] jffs2: notice: (12057) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  761.814726][T12062] 9pnet_virtio: no channels available for device syz
[  761.853219][T11274] Bluetooth: hci1: command 0x0406 tx timeout
[  761.859489][T11728] Bluetooth: hci2: command 0x0406 tx timeout
[  761.865768][ T5616] Bluetooth: hci3: command 0x0406 tx timeout
[  761.899962][ T5616] Bluetooth: hci0: command 0x0406 tx timeout
[  761.926134][T11274] Bluetooth: hci5: command 0x0405 tx timeout
[  761.930638][ T5616] Bluetooth: hci4: command 0x0406 tx timeout
[  764.521713][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'.
[  764.681291][    T9] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  764.750178][    T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  764.793049][    T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  764.831712][    T9] usb 4-1: media controller created
[  764.975235][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  765.027944][T12045] bridge0: left promiscuous mode
[  765.083142][    T9] zl10353_read_register: readreg error (reg=127, ret==-71)
[  765.478486][   T30] audit: type=1326 audit(1787349193.907:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.0.1535" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e19e0d9 code=0x7ffc0000
[  766.101464][    T9] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  766.141566][    T9] usb 4-1: USB disconnect, device number 27
[  766.243394][   T30] audit: type=1326 audit(1787349193.907:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.0.1535" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e19e0d9 code=0x7ffc0000
[  766.316724][   T30] audit: type=1326 audit(1787349193.917:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.0.1535" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3b4e15e90e code=0x7ffc0000
[  766.342548][   T30] audit: type=1326 audit(1787349193.917:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.0.1535" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e19e0d9 code=0x7ffc0000
[  766.368876][   T30] audit: type=1326 audit(1787349193.917:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.0.1535" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e19e0d9 code=0x7ffc0000
[  766.383005][T12078] syz_tun: entered allmulticast mode
[  766.409870][   T30] audit: type=1326 audit(1787349193.927:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.0.1535" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b4e19e0d9 code=0x7ffc0000
[  766.554679][   T30] audit: type=1326 audit(1787349193.927:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.0.1535" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e19e0d9 code=0x7ffc0000
[  766.605986][   T30] audit: type=1326 audit(1787349193.927:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.0.1535" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e19e0d9 code=0x7ffc0000
[  766.707573][T12087] jffs2: notice: (12087) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  766.743530][   T30] audit: type=1326 audit(1787349193.937:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.0.1535" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b4e19e0d9 code=0x7ffc0000
[  766.840165][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'.
[  766.851525][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'.
[  766.860919][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'.
[  766.870178][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'.
[  766.911038][T12073] 9pnet_virtio: no channels available for device syz
[  766.982000][   T30] audit: type=1326 audit(1787349193.957:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.0.1535" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e19e0d9 code=0x7ffc0000
[  767.195252][   T29] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  767.295267][   T30] audit: type=1326 audit(1787349193.957:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.0.1535" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e19e0d9 code=0x7ffc0000
[  767.464042][   T29] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  767.911362][T12100] ceph: No mds server is up or the cluster is laggy
[  767.969776][  T982] libceph: connect (1)[c::]:6789 error -101
[  768.506119][   T29] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  768.903478][   T30] audit: type=1326 audit(1787349193.977:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.0.1535" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3b4e19e0d9 code=0x7ffc0000
[  769.015409][  T982] libceph: mon0 (1)[c::]:6789 connect error
[  769.127527][   T29] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  769.154401][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.164295][   T29] usb 1-1: Product: syz
[  769.173895][   T29] usb 1-1: Manufacturer: syz
[  769.186718][   T29] usb 1-1: SerialNumber: syz
[  769.245354][   T29] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected
[  769.403383][   T29] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  769.505876][   T29] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  769.753673][    T9] usb 1-1: USB disconnect, device number 24
[  769.814562][T12114] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  769.829419][    T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  771.181126][T12118] loop4: detected capacity change from 0 to 2640
[  771.188284][T12118] buffer_io_error: 11 callbacks suppressed
[  771.188308][T12118] Buffer I/O error on dev loop4, logical block 0, async page read
[  771.202247][T12118] Buffer I/O error on dev loop4, logical block 0, async page read
[  771.212156][T12118] Buffer I/O error on dev loop4, logical block 0, async page read
[  771.220447][T12118] Buffer I/O error on dev loop4, logical block 0, async page read
[  771.228433][T12118] Buffer I/O error on dev loop4, logical block 0, async page read
[  771.236535][T12118] Buffer I/O error on dev loop4, logical block 0, async page read
[  771.244415][T12118] Buffer I/O error on dev loop4, logical block 0, async page read
[  771.252382][T12118] Buffer I/O error on dev loop4, logical block 0, async page read
[  771.260342][T12118] ldm_validate_partition_table(): Disk read failed.
[  771.267010][T12118] Buffer I/O error on dev loop4, logical block 0, async page read
[  771.275058][T12118] Buffer I/O error on dev loop4, logical block 0, async page read
[  771.283154][T12118] Dev loop4: unable to read RDB block 0
[  771.289145][T12118]  loop4: unable to read partition table
[  771.295121][T12118] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  771.360365][    T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  771.440388][    T9] ti_usb_3410_5052 1-1:2.0: device disconnected
[  771.445832][T12112] md: could not open device unknown-block(1,0).
[  771.450798][T12121] bridge0: entered promiscuous mode
[  771.478747][T12128] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1547'.
[  773.114076][T12140] loop4: detected capacity change from 0 to 2640
[  773.127700][T12140] ldm_validate_partition_table(): Disk read failed.
[  773.135822][T12140] Dev loop4: unable to read RDB block 0
[  773.143950][T12140]  loop4: unable to read partition table
[  773.152436][T12140] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  773.306951][T12138] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  773.316472][T12138] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  773.326168][T12138] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  773.922327][T12148] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1554'.
[  773.997688][T12119] bridge0: left promiscuous mode
[  775.130929][T12145] jffs2: notice: (12145) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  775.149104][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  775.149193][   T30] audit: type=1326 audit(1787349202.897:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12141 comm="syz.2.1551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  776.368278][   T30] audit: type=1326 audit(1787349202.907:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12141 comm="syz.2.1551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  776.867148][   T30] audit: type=1326 audit(1787349202.917:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12141 comm="syz.2.1551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f115ef5e90e code=0x7ffc0000
[  777.061381][   T30] audit: type=1326 audit(1787349202.917:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12141 comm="syz.2.1551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  777.319473][T12168] MTD: Couldn't look up './dev/mtdblock0': -2
[  777.686339][T12173] MTD: Couldn't look up './dev/mtdblock0': -2
[  778.077406][   T30] audit: type=1326 audit(1787349202.917:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12141 comm="syz.2.1551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  780.147186][   T30] audit: type=1326 audit(1787349202.917:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12141 comm="syz.2.1551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  780.550570][   T30] audit: type=1326 audit(1787349202.927:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12141 comm="syz.2.1551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  780.887654][   T30] audit: type=1326 audit(1787349202.927:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12141 comm="syz.2.1551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  781.738913][   T30] audit: type=1326 audit(1787349202.937:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12141 comm="syz.2.1551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  781.766536][   T30] audit: type=1326 audit(1787349202.957:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12141 comm="syz.2.1551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  781.955558][   T30] audit: type=1326 audit(1787349202.967:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12141 comm="syz.2.1551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  781.983168][   T30] audit: type=1326 audit(1787349202.987:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12141 comm="syz.2.1551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  782.016328][T12180] md: could not open device unknown-block(1,0).
[  782.042444][   T30] audit: type=1326 audit(1787349202.997:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12141 comm="syz.2.1551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  782.162031][T12189] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1563'.
[  782.164692][   T30] audit: type=1326 audit(1787349202.997:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12141 comm="syz.2.1551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  782.251006][   T30] audit: type=1326 audit(1787349202.997:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12141 comm="syz.2.1551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f115ef9e0d9 code=0x7ffc0000
[  782.352245][T12198] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1567'.
[  782.465163][ T5724] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  782.611183][ T5731] libceph: connect (1)[c::]:6789 error -101
[  784.514049][ T5731] libceph: mon0 (1)[c::]:6789 connect error
[  784.633269][T12196] ceph: No mds server is up or the cluster is laggy
[  784.717249][ T5724] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  784.749395][ T5724] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  784.782770][ T5724] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  784.808763][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  784.848150][ T5724] usb 5-1: Product: syz
[  784.855552][ T5724] usb 5-1: Manufacturer: syz
[  784.868164][ T5724] usb 5-1: SerialNumber: syz
[  784.901483][ T5724] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected
[  784.945278][    T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  784.978372][ T5724] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  784.993283][T12213] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1570'.
[  785.054624][ T5724] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  785.125404][    T9] usb 6-1: Using ep0 maxpacket: 16
[  785.169406][    T9] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  785.369941][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  785.423093][    T9] usb 6-1: Product: syz
[  785.442965][    T9] usb 6-1: Manufacturer: syz
[  785.480697][    T9] usb 6-1: SerialNumber: syz
[  786.198220][ T5751] usb 5-1: USB disconnect, device number 14
[  786.311737][    T9] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  786.351277][T10209] libceph: connect (1)[c::]:6789 error -101
[  786.392151][T12220] ceph: No mds server is up or the cluster is laggy
[  786.452707][T10209] libceph: mon0 (1)[c::]:6789 connect error
[  786.502215][T12214] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  786.915524][T12214] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  787.003491][T12225] netlink: 'syz.5.1568': attribute type 1 has an invalid length.
[  787.058770][T12214] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  787.229908][T12214] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  787.264195][    T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  787.292921][ T5751] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  787.317038][T12214] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  787.359171][T12214] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  787.370969][    T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  787.400463][    T9] usb 6-1: media controller created
[  787.406723][ T5751] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  787.436838][ T5751] ti_usb_3410_5052 5-1:2.0: device disconnected
[  787.510790][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  787.635217][  T982] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  788.215742][T12063] Bluetooth: hci0: command 0x0406 tx timeout
[  788.491383][T12225] 8021q: adding VLAN 0 to HW filter on device bond1
[  788.638441][  T982] usb 2-1: Using ep0 maxpacket: 16
[  788.776092][  T982] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  788.846617][T12237] ceph: No mds server is up or the cluster is laggy
[  789.012145][   T29] libceph: connect (1)[c::]:6789 error -101
[  789.066153][T12063] Bluetooth: hci1: command 0x0406 tx timeout
[  789.075445][ T5620] Bluetooth: hci2: command 0x0406 tx timeout
[  789.226571][   T29] libceph: mon0 (1)[c::]:6789 connect error
[  789.235380][ T5620] Bluetooth: hci3: command 0x0406 tx timeout
[  789.284161][  T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.303398][    T9] zl10353_read_register: readreg error (reg=127, ret==-110)
[  789.394682][  T982] usb 2-1: Product: syz
[  789.400526][ T5620] Bluetooth: hci5: command 0x0405 tx timeout
[  789.405394][T12063] Bluetooth: hci4: command 0x0406 tx timeout
[  789.450501][  T982] usb 2-1: Manufacturer: syz
[  789.469659][  T982] usb 2-1: SerialNumber: syz
[  789.594335][    T9] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  789.610801][T12247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1577'.
[  789.620408][T12247] bridge_slave_1: left allmulticast mode
[  789.626754][T12247] bridge_slave_1: left promiscuous mode
[  789.636800][T12247] bridge0: port 2(bridge_slave_1) entered disabled state
[  789.890845][    T9] usb 6-1: USB disconnect, device number 19
[  789.912001][T12247] bridge_slave_0: left allmulticast mode
[  789.917941][T12247] bridge_slave_0: left promiscuous mode
[  789.924735][T12247] bridge0: port 1(bridge_slave_0) entered disabled state
[  790.286422][   T29] libceph: connect (1)[c::]:6789 error -101
[  790.673101][   T29] libceph: mon0 (1)[c::]:6789 connect error
[  790.878216][T12254] jffs2: notice: (12254) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  790.961926][  T982] usb 2-1: can't set config #157, error -71
[  791.161133][  T982] usb 2-1: USB disconnect, device number 23
[  791.205033][T12260] 9pnet_virtio: no channels available for device syz
[  791.637261][T12267] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  791.662797][T12267] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  791.686637][T12267] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  791.697140][T12267] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  791.711872][T12267] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  791.732329][T12267] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  791.809708][T12277] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1583'.
[  791.913904][  T982] libceph: connect (1)[c::]:6789 error -101
[  791.951103][  T982] libceph: mon0 (1)[c::]:6789 connect error
[  792.007558][T12278] ceph: No mds server is up or the cluster is laggy
[  792.291999][  T982] libceph: connect (1)[c::]:6789 error -101
[  792.382946][  T982] libceph: mon0 (1)[c::]:6789 connect error
[  792.698119][T12283] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  792.948394][   T30] audit: type=1326 audit(1787349221.527:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.3.1585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  792.980633][   T30] audit: type=1326 audit(1787349221.527:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.3.1585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  792.985993][T12267] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  793.049951][   T30] audit: type=1326 audit(1787349221.627:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.3.1585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  793.181119][   T30] audit: type=1326 audit(1787349221.627:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.3.1585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  793.350584][   T30] audit: type=1326 audit(1787349221.627:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.3.1585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  793.551239][   T30] audit: type=1326 audit(1787349221.627:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.3.1585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58f415e90e code=0x7ffc0000
[  793.716235][T12063] Bluetooth: hci2: command 0x0406 tx timeout
[  793.722483][T12063] Bluetooth: hci1: command 0x0406 tx timeout
[  793.723935][T12283] md: could not open device unknown-block(1,0).
[  793.732635][T12063] Bluetooth: hci0: command 0x0406 tx timeout
[  793.742787][ T5620] Bluetooth: hci3: command 0x0406 tx timeout
[  793.801577][ T5616] Bluetooth: hci4: command 0x0406 tx timeout
[  793.833743][   T30] audit: type=1326 audit(1787349221.627:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.3.1585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  794.182901][   T30] audit: type=1326 audit(1787349221.627:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.3.1585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  794.530376][   T30] audit: type=1326 audit(1787349221.627:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.3.1585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  794.995613][ T5616] Bluetooth: hci5: command 0x0405 tx timeout
[  795.498301][   T30] audit: type=1326 audit(1787349221.627:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.3.1585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f419e0d9 code=0x7ffc0000
[  795.875354][ T5616] Bluetooth: hci4: command 0x0406 tx timeout
[  797.086840][T12305] loop4: detected capacity change from 0 to 2640
[  797.098129][T12305] buffer_io_error: 32 callbacks suppressed
[  797.098337][T12305] Buffer I/O error on dev loop4, logical block 0, async page read
[  797.112640][T12305] Buffer I/O error on dev loop4, logical block 0, async page read
[  797.122983][T12305] Buffer I/O error on dev loop4, logical block 0, async page read
[  797.131492][T12305] Buffer I/O error on dev loop4, logical block 0, async page read
[  797.139807][T12305] Buffer I/O error on dev loop4, logical block 0, async page read
[  797.148270][T12305] Buffer I/O error on dev loop4, logical block 0, async page read
[  797.156839][T12305] Buffer I/O error on dev loop4, logical block 0, async page read
[  797.164948][T12305] Buffer I/O error on dev loop4, logical block 0, async page read
[  797.173097][T12305] ldm_validate_partition_table(): Disk read failed.
[  797.180203][T12305] Buffer I/O error on dev loop4, logical block 0, async page read
[  797.188585][T12305] Buffer I/O error on dev loop4, logical block 0, async page read
[  797.196865][T12305] Dev loop4: unable to read RDB block 0
[  797.203904][T12305]  loop4: unable to read partition table
[  797.210955][T12305] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  798.136074][T12304] MTD: Couldn't look up './dev/mtdblock0': -2
[  798.328277][T12310] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  798.339512][T12310] CPU: 0 UID: 0 PID: 12310 Comm: syz.5.1593 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  798.339571][T12310] Tainted: [L]=SOFTLOCKUP
[  798.339584][T12310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  798.339608][T12310] Call Trace:
[  798.339619][T12310]  <TASK>
[  798.339632][T12310]  dump_stack_lvl+0x100/0x190
[  798.339689][T12310]  sysfs_warn_dup.cold+0x1c/0x28
[  798.339748][T12310]  sysfs_create_dir_ns+0x24b/0x2b0
[  798.339803][T12310]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  798.339852][T12310]  ? find_held_lock+0x2b/0x80
[  798.339894][T12310]  ? kobject_add_internal+0x25f/0x930
[  798.339952][T12310]  ? kobject_add_internal+0x25f/0x930
[  798.340013][T12310]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.340059][T12310]  ? class_dir_child_ns_type+0xd/0x60
[  798.340116][T12310]  kobject_add_internal+0x2c8/0x930
[  798.340193][T12310]  kobject_add+0x16a/0x1e0
[  798.340250][T12310]  ? __pfx_kobject_add+0x10/0x10
[  798.340318][T12310]  ? get_device_parent+0x1b3/0x4c0
[  798.340367][T12310]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.340417][T12310]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.340464][T12310]  ? kobject_put+0xb9/0x640
[  798.340532][T12310]  device_add+0x294/0x1970
[  798.340585][T12310]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.340632][T12310]  ? lockdep_init_map_type+0x5c/0x250
[  798.340689][T12310]  ? __pfx_device_add+0x10/0x10
[  798.340737][T12310]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.340784][T12310]  ? lockdep_init_map_type+0x5c/0x250
[  798.340841][T12310]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.340886][T12310]  ? __init_waitqueue_head+0xca/0x150
[  798.340949][T12310]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.340998][T12310]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.341052][T12310]  tty_register_device_attr+0x388/0x7f0
[  798.341096][T12310]  ? lockdep_init_map_type+0x5c/0x250
[  798.341162][T12310]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.341214][T12310]  ? __pfx_tty_register_device_attr+0x10/0x10
[  798.341267][T12310]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.341314][T12310]  ? tty_port_init+0x156/0x1c0
[  798.341354][T12310]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.341416][T12310]  gsm_activate_mux+0x155/0x2a0
[  798.341465][T12310]  gsmld_ioctl+0xbbc/0x15c0
[  798.341528][T12310]  ? __pfx_gsmld_ioctl+0x10/0x10
[  798.341585][T12310]  ? tomoyo_path_number_perm+0x28f/0x580
[  798.341631][T12310]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.341704][T12310]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  798.341762][T12310]  ? __pfx_pty_unix98_ioctl+0x10/0x10
[  798.341827][T12310]  ? __pfx_gsmld_ioctl+0x10/0x10
[  798.341876][T12310]  tty_ioctl+0x11b4/0x1640
[  798.341919][T12310]  ? __pfx_tty_ioctl+0x10/0x10
[  798.341973][T12310]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.342018][T12310]  ? find_held_lock+0x2b/0x80
[  798.342056][T12310]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.342102][T12310]  ? hook_file_ioctl_common+0x140/0x440
[  798.342175][T12310]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.342222][T12310]  ? __fget_files+0x21f/0x3d0
[  798.342276][T12310]  ? __pfx_tty_ioctl+0x10/0x10
[  798.342319][T12310]  __x64_sys_ioctl+0x18e/0x210
[  798.342363][T12310]  do_syscall_64+0x123/0x790
[  798.342414][T12310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  798.342452][T12310] RIP: 0033:0x7f5104f9e0d9
[  798.342482][T12310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  798.342520][T12310] RSP: 002b:00007f5105ec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  798.342556][T12310] RAX: ffffffffffffffda RBX: 00007f5105226090 RCX: 00007f5104f9e0d9
[  798.342582][T12310] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007
[  798.342606][T12310] RBP: 00007f5105035024 R08: 0000000000000000 R09: 0000000000000000
[  798.342630][T12310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  798.342654][T12310] R13: 00007f5105226128 R14: 00007f5105226090 R15: 00007ffdd6060118
[  798.342705][T12310]  </TASK>
[  798.507504][T12310] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  798.771088][ T5784] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  798.986122][ T5784] usb 2-1: Using ep0 maxpacket: 16
[  798.992839][ T5784] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  799.024079][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.045210][ T5784] usb 2-1: Product: syz
[  799.051035][ T5784] usb 2-1: Manufacturer: syz
[  799.081047][ T5784] usb 2-1: SerialNumber: syz
[  799.308239][   T30] kauditd_printk_skb: 39 callbacks suppressed
[  799.308283][   T30] audit: type=1800 audit(1787349227.837:526): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1595" name="iface_name" dev="configfs" ino=33985 res=0 errno=0
[  800.046186][T12333] netlink: 'syz.1.1594': attribute type 1 has an invalid length.
[  800.294091][ T5784] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  800.472095][ T5784] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  800.506853][ T5784] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  800.521417][ T5784] usb 2-1: media controller created
[  800.543087][ T5784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  801.328157][ T5784] zl10353_read_register: readreg error (reg=127, ret==-110)
[  801.629247][T12333] 8021q: adding VLAN 0 to HW filter on device bond1
[  801.649420][T12314] 8021q: adding VLAN 0 to HW filter on device batadv3
[  801.663223][T12314] bond1: (slave batadv3): making interface the new active one
[  801.672633][T12314] bond1: (slave batadv3): Enslaving as an active interface with an up link
[  801.851663][T12345] binder: Unknown parameter 'hash'
[  801.851955][   T30] audit: type=1804 audit(1787349230.417:527): pid=12345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1600" name="/newroot/267/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=34010 res=1 errno=0
[  801.912270][   T30] audit: type=1800 audit(1787349230.427:528): pid=12345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1600" name="iface_name" dev="configfs" ino=34010 res=0 errno=0
[  801.983885][ T5784] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  801.996876][ T5784] usb 2-1: USB disconnect, device number 24
[  802.026443][T12341] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  802.044619][T12341] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  802.097705][T12341] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  802.144242][T12341] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  802.254079][T12341] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  802.392589][T12341] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  803.858904][T12341] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  804.035579][T12063] Bluetooth: hci0: command 0x0406 tx timeout
[  804.107803][ T5341] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  804.116542][T12063] Bluetooth: hci2: command 0x0406 tx timeout
[  804.116643][ T5616] Bluetooth: hci1: command 0x0406 tx timeout
[  804.136462][   T30] audit: type=1400 audit(1787349232.707:529): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="/" pid=12354 comm="syz.0.1603" name="/" offset=74
[  804.201954][ T5616] Bluetooth: hci3: command 0x0406 tx timeout
[  804.275201][ T5616] Bluetooth: hci4: command 0x0406 tx timeout
[  804.531832][T12372] MTD: Couldn't look up './dev/mtdblock0': -2
[  804.833849][T12365] ceph: No mds server is up or the cluster is laggy
[  805.497357][    T9] libceph: connect (1)[c::]:6789 error -101
[  805.950621][ T5616] Bluetooth: hci5: command 0x0405 tx timeout
[  806.355449][ T5616] Bluetooth: hci4: command 0x0406 tx timeout
[  806.401344][ T5341] usb 4-1: Using ep0 maxpacket: 8
[  806.486064][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  806.643993][ T5341] usb 4-1: device descriptor read/all, error -71
[  806.796734][   T30] audit: type=1804 audit(1787349235.377:530): pid=12364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1605" name="/newroot/271/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=33476 res=1 errno=0
[  806.908046][   T30] audit: type=1800 audit(1787349235.377:531): pid=12364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1605" name="iface_name" dev="configfs" ino=33476 res=0 errno=0
[  807.171587][T12382] jffs2: notice: (12382) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  808.091323][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  808.118150][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  808.643983][ T5784] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  809.110443][T12377] 9pnet_virtio: no channels available for device syz
[  809.158973][ T5784] usb 6-1: Using ep0 maxpacket: 16
[  809.297616][ T5784] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  809.693940][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.850041][ T5784] usb 6-1: Product: syz
[  809.897711][ T5784] usb 6-1: Manufacturer: syz
[  809.934475][ T5784] usb 6-1: SerialNumber: syz
[  810.049563][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'.
[  810.181438][T12395] loop4: detected capacity change from 0 to 2640
[  810.198860][T12395] buffer_io_error: 6 callbacks suppressed
[  810.198899][T12395] Buffer I/O error on dev loop4, logical block 0, async page read
[  810.212923][T12395] Buffer I/O error on dev loop4, logical block 0, async page read
[  810.221467][T12395] Buffer I/O error on dev loop4, logical block 0, async page read
[  810.232150][T12395] Buffer I/O error on dev loop4, logical block 0, async page read
[  810.240588][T12395] Buffer I/O error on dev loop4, logical block 0, async page read
[  810.249259][T12395] Buffer I/O error on dev loop4, logical block 0, async page read
[  810.257733][T12395] Buffer I/O error on dev loop4, logical block 0, async page read
[  810.266403][T12395] Buffer I/O error on dev loop4, logical block 0, async page read
[  810.274581][T12395] ldm_validate_partition_table(): Disk read failed.
[  810.282406][T12395] Buffer I/O error on dev loop4, logical block 0, async page read
[  810.291124][T12395] Buffer I/O error on dev loop4, logical block 0, async page read
[  810.301594][T12395] Dev loop4: unable to read RDB block 0
[  810.309328][T12395]  loop4: unable to read partition table
[  810.317263][T12395] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  810.594572][   T30] audit: type=1804 audit(1787349239.117:532): pid=12392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1613" name="/newroot/263/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=33502 res=1 errno=0
[  810.685511][T12392] ==================================================================
[  810.693630][T12392] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0
[  810.700608][T12392] Read of size 1 at addr ffff88807d448800 by task syz.4.1613/12392
[  810.708614][T12392] 
[  810.710954][T12392] CPU: 1 UID: 0 PID: 12392 Comm: syz.4.1613 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  810.711012][T12392] Tainted: [L]=SOFTLOCKUP
[  810.711026][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  810.711051][T12392] Call Trace:
[  810.711067][T12392]  <TASK>
[  810.711083][T12392]  dump_stack_lvl+0x100/0x190
[  810.711138][T12392]  print_report+0x13d/0x4b0
[  810.711200][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.711248][T12392]  ? __virt_addr_valid+0x239/0x430
[  810.711306][T12392]  ? string+0x471/0x4d0
[  810.711342][T12392]  kasan_report+0xdf/0x1c0
[  810.711395][T12392]  ? string+0x471/0x4d0
[  810.711438][T12392]  string+0x471/0x4d0
[  810.711475][T12392]  ? __pfx_string+0x10/0x10
[  810.711514][T12392]  ? preempt_schedule_thunk+0x16/0x40
[  810.711562][T12392]  vsnprintf+0x422/0x1300
[  810.711612][T12392]  ? __pfx_vsnprintf+0x10/0x10
[  810.711670][T12392]  scnprintf+0xdb/0x150
[  810.711712][T12392]  ? __pfx_scnprintf+0x10/0x10
[  810.711760][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.711809][T12392]  ? down_read+0x13b/0x4c0
[  810.711862][T12392]  ? __pfx_down_read+0x10/0x10
[  810.711917][T12392]  ? __pfx_f_midi2_opts_iface_name_show+0x10/0x10
[  810.711968][T12392]  f_midi2_opts_iface_name_show+0x6e/0xa0
[  810.712019][T12392]  configfs_read_iter+0x426/0x6f0
[  810.712082][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.712135][T12392]  __kernel_read+0x397/0xad0
[  810.712174][T12392]  ? __pfx___kernel_read+0x10/0x10
[  810.712233][T12392]  integrity_kernel_read+0x7e/0xb0
[  810.712294][T12392]  ? __pfx_integrity_kernel_read+0x10/0x10
[  810.712354][T12392]  ? ima_calc_file_hash_tfm+0x236/0x350
[  810.712407][T12392]  ima_calc_file_hash_tfm+0x25e/0x350
[  810.712458][T12392]  ? __pfx_ima_calc_file_hash_tfm+0x10/0x10
[  810.712506][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.712585][T12392]  ? trace_sched_exit_tp+0xc0/0x160
[  810.712629][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.712683][T12392]  ? ima_alloc_tfm+0x21a/0x2e0
[  810.712733][T12392]  ima_calc_file_hash+0x1e3/0x380
[  810.712779][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.712830][T12392]  ima_collect_measurement+0x94f/0xb30
[  810.712888][T12392]  ? __pfx_ima_collect_measurement+0x10/0x10
[  810.712958][T12392]  ? process_measurement+0x5ab/0x2350
[  810.713002][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.713050][T12392]  ? is_bad_inode+0xd/0x40
[  810.713091][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.713140][T12392]  ? xattr_resolve_name+0x27d/0x3f0
[  810.713192][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.713240][T12392]  ? vfs_getxattr_alloc+0xec/0x350
[  810.713298][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.713346][T12392]  ? ima_get_hash_algo+0x241/0x400
[  810.713385][T12392]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  810.713423][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.713478][T12392]  ? process_measurement+0xdfe/0x2350
[  810.713520][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.713568][T12392]  process_measurement+0xdfe/0x2350
[  810.713620][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.713677][T12392]  ? lockdep_hardirqs_on+0x7d/0x110
[  810.713723][T12392]  ? __pfx_process_measurement+0x10/0x10
[  810.713765][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.713856][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.713905][T12392]  ? __configfs_open_file+0x6ca/0x9c0
[  810.713964][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.714017][T12392]  ima_file_check+0xcc/0x120
[  810.714061][T12392]  ? __pfx_ima_file_check+0x10/0x10
[  810.714113][T12392]  security_file_post_open+0xc4/0x210
[  810.714163][T12392]  path_openat+0x5cd/0x2440
[  810.714217][T12392]  ? __pfx_path_openat+0x10/0x10
[  810.714274][T12392]  do_file_open+0x20e/0x430
[  810.714325][T12392]  ? __pfx_do_file_open+0x10/0x10
[  810.714374][T12392]  ? __pfx___schedule+0x10/0x10
[  810.714432][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.714481][T12392]  ? alloc_fd+0x471/0x7a0
[  810.714531][T12392]  ? do_getname+0x191/0x390
[  810.714592][T12392]  do_sys_openat2+0x10f/0x1e0
[  810.714648][T12392]  ? __pfx_do_sys_openat2+0x10/0x10
[  810.714722][T12392]  __x64_sys_open+0xfe/0x1d0
[  810.714776][T12392]  ? __pfx___x64_sys_open+0x10/0x10
[  810.714833][T12392]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  810.714903][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.714957][T12392]  do_syscall_64+0x123/0x790
[  810.715008][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.715049][T12392] RIP: 0033:0x7fc18419e0d9
[  810.715080][T12392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  810.715120][T12392] RSP: 002b:00007fc1850e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  810.715159][T12392] RAX: ffffffffffffffda RBX: 00007fc184425fa0 RCX: 00007fc18419e0d9
[  810.715185][T12392] RDX: 0000000000000041 RSI: 0000000000040280 RDI: 00002000000003c0
[  810.715212][T12392] RBP: 00007fc184235024 R08: 0000000000000000 R09: 0000000000000000
[  810.715237][T12392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  810.715262][T12392] R13: 00007fc184426038 R14: 00007fc184425fa0 R15: 00007ffd3236de18
[  810.715306][T12392]  </TASK>
[  810.715319][T12392] 
[  811.217037][T12392] Allocated by task 12345:
[  811.221637][T12392]  kasan_save_stack+0x30/0x50
[  811.226360][T12392]  kasan_save_track+0x14/0x30
[  811.231066][T12392]  __kasan_kmalloc+0xaa/0xb0
[  811.235776][T12392]  __kmalloc_node_track_caller_noprof+0x333/0x830
[  811.242228][T12392]  kstrndup+0x64/0x120
[  811.246323][T12392]  f_midi2_opts_str_store.constprop.0+0xbf/0x240
[  811.252693][T12392]  configfs_write_iter+0x302/0x4e0
[  811.257861][T12392]  vfs_write+0x6af/0x1050
[  811.262218][T12392]  ksys_write+0x12a/0x250
[  811.266574][T12392]  do_syscall_64+0x123/0x790
[  811.271200][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  811.277112][T12392] 
[  811.279438][T12392] Freed by task 12396:
[  811.283529][T12392]  kasan_save_stack+0x30/0x50
[  811.288237][T12392]  kasan_save_track+0x14/0x30
[  811.292954][T12392]  kasan_save_free_info+0x3b/0x70
[  811.298469][T12392]  __kasan_slab_free+0x5f/0x80
[  811.303285][T12392]  kfree+0x22b/0x6c0
[  811.307267][T12392]  f_midi2_opts_str_store.constprop.0+0xf0/0x240
[  811.313631][T12392]  configfs_write_iter+0x302/0x4e0
[  811.318789][T12392]  vfs_write+0x6af/0x1050
[  811.323148][T12392]  ksys_write+0x12a/0x250
[  811.327509][T12392]  do_syscall_64+0x123/0x790
[  811.332131][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  811.338060][T12392] 
[  811.340383][T12392] The buggy address belongs to the object at ffff88807d448800
[  811.340383][T12392]  which belongs to the cache kmalloc-32 of size 32
[  811.354289][T12392] The buggy address is located 0 bytes inside of
[  811.354289][T12392]  freed 32-byte region [ffff88807d448800, ffff88807d448820)
[  811.367850][T12392] 
[  811.370187][T12392] The buggy address belongs to the physical page:
[  811.376824][T12392] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d448740 pfn:0x7d448
[  811.386920][T12392] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[  811.395006][T12392] page_type: f5(slab)
[  811.399009][T12392] raw: 00fff00000000200 ffff88801c028780 ffffea0000cb0f10 ffffea0000a42e90
[  811.407625][T12392] raw: ffff88807d448740 0000000800400026 00000000f5000000 0000000000000000
[  811.416221][T12392] page dumped because: kasan: bad access detected
[  811.422638][T12392] page_owner tracks the page as allocated
[  811.428446][T12392] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5402, tgid 5402 (dhcpcd-run-hook), ts 64655838135
[  811.446643][T12392]  post_alloc_hook+0xfd/0x120
[  811.451374][T12392]  get_page_from_freelist+0x110d/0x35b0
[  811.456971][T12392]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  811.462915][T12392]  new_slab+0xa5/0x640
[  811.467118][T12392]  refill_objects+0xe3/0x410
[  811.471771][T12392]  __pcs_replace_empty_main+0x372/0x680
[  811.477403][T12392]  __kmalloc_cache_noprof+0x47b/0x6b0
[  811.482829][T12392]  kmem_cache_free+0x40f/0x6b0
[  811.487736][T12392]  tear_down_vmas+0x2a5/0x610
[  811.492448][T12392]  exit_mmap+0x469/0xa00
[  811.496726][T12392]  __mmput+0x12a/0x410
[  811.500836][T12392]  mmput+0x67/0x80
[  811.504607][T12392]  do_exit+0x8b1/0x2ae0
[  811.508783][T12392]  do_group_exit+0xd5/0x2a0
[  811.513307][T12392]  __x64_sys_exit_group+0x3e/0x50
[  811.518356][T12392]  x64_sys_call+0x1567/0x1570
[  811.523081][T12392] page last free pid 5402 tgid 5402 ts 64654489274 stack trace:
[  811.530721][T12392]  __free_frozen_pages+0x79f/0x10f0
[  811.535967][T12392]  tlb_finish_mmu+0x27d/0x810
[  811.540695][T12392]  exit_mmap+0x454/0xa00
[  811.544982][T12392]  __mmput+0x12a/0x410
[  811.549088][T12392]  mmput+0x67/0x80
[  811.552854][T12392]  do_exit+0x8b1/0x2ae0
[  811.557033][T12392]  do_group_exit+0xd5/0x2a0
[  811.561743][T12392]  __x64_sys_exit_group+0x3e/0x50
[  811.566803][T12392]  x64_sys_call+0x1567/0x1570
[  811.571534][T12392]  do_syscall_64+0x123/0x790
[  811.576233][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  811.582255][T12392] 
[  811.584592][T12392] Memory state around the buggy address:
[  811.590232][T12392]  ffff88807d448700: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  811.598316][T12392]  ffff88807d448780: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc
[  811.606405][T12392] >ffff88807d448800: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  811.614619][T12392]                    ^
[  811.618875][T12392]  ffff88807d448880: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  811.626959][T12392]  ffff88807d448900: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  811.635044][T12392] ==================================================================
[  812.006292][T12397] binder: Unknown parameter 'hash'
SYZFAIL: failed to send rpc
fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe)
[  813.841177][ T5784] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  813.959408][ T5784] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  813.970229][ T5784] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  813.978823][ T5784] usb 6-1: media controller created
[  814.180008][ T5784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  814.259062][T12392] Disabling lock debugging due to kernel taint
[  814.267851][T12392] ==================================================================
[  814.275965][T12392] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0
[  814.282932][T12392] Read of size 1 at addr ffff88807d448801 by task syz.4.1613/12392
[  814.290845][T12392] 
[  814.293195][T12392] CPU: 1 UID: 0 PID: 12392 Comm: syz.4.1613 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[  814.293256][T12392] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  814.293273][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  814.293298][T12392] Call Trace:
[  814.293310][T12392]  <TASK>
[  814.293324][T12392]  dump_stack_lvl+0x100/0x190
[  814.293377][T12392]  print_report+0x13d/0x4b0
[  814.293436][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.293484][T12392]  ? __virt_addr_valid+0x239/0x430
[  814.293541][T12392]  ? string+0x471/0x4d0
[  814.293576][T12392]  kasan_report+0xdf/0x1c0
[  814.293628][T12392]  ? string+0x471/0x4d0
[  814.293668][T12392]  string+0x471/0x4d0
[  814.293705][T12392]  ? __pfx_string+0x10/0x10
[  814.293741][T12392]  ? preempt_schedule_thunk+0x16/0x40
[  814.293788][T12392]  vsnprintf+0x422/0x1300
[  814.293837][T12392]  ? __pfx_vsnprintf+0x10/0x10
[  814.293886][T12392]  scnprintf+0xdb/0x150
[  814.293928][T12392]  ? __pfx_scnprintf+0x10/0x10
[  814.293975][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.294027][T12392]  ? down_read+0x13b/0x4c0
[  814.294079][T12392]  ? __pfx_down_read+0x10/0x10
[  814.294133][T12392]  ? __pfx_f_midi2_opts_iface_name_show+0x10/0x10
[  814.294184][T12392]  f_midi2_opts_iface_name_show+0x6e/0xa0
[  814.294261][T12392]  configfs_read_iter+0x426/0x6f0
[  814.294323][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.294375][T12392]  __kernel_read+0x397/0xad0
[  814.294413][T12392]  ? __pfx___kernel_read+0x10/0x10
[  814.294469][T12392]  integrity_kernel_read+0x7e/0xb0
[  814.294529][T12392]  ? __pfx_integrity_kernel_read+0x10/0x10
[  814.294589][T12392]  ? ima_calc_file_hash_tfm+0x236/0x350
[  814.294646][T12392]  ima_calc_file_hash_tfm+0x25e/0x350
[  814.294695][T12392]  ? __pfx_ima_calc_file_hash_tfm+0x10/0x10
[  814.294743][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.294818][T12392]  ? trace_sched_exit_tp+0xc0/0x160
[  814.294861][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.294910][T12392]  ? ima_alloc_tfm+0x21a/0x2e0
[  814.294958][T12392]  ima_calc_file_hash+0x1e3/0x380
[  814.295005][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.295056][T12392]  ima_collect_measurement+0x94f/0xb30
[  814.295110][T12392]  ? __pfx_ima_collect_measurement+0x10/0x10
[  814.295173][T12392]  ? process_measurement+0x5ab/0x2350
[  814.295224][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.295271][T12392]  ? is_bad_inode+0xd/0x40
[  814.295310][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.295357][T12392]  ? xattr_resolve_name+0x27d/0x3f0
[  814.295408][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.295456][T12392]  ? vfs_getxattr_alloc+0xec/0x350
[  814.295508][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.295553][T12392]  ? ima_get_hash_algo+0x241/0x400
[  814.295588][T12392]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  814.295624][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.295674][T12392]  ? process_measurement+0xdfe/0x2350
[  814.295713][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.295756][T12392]  process_measurement+0xdfe/0x2350
[  814.295802][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.295847][T12392]  ? lockdep_hardirqs_on+0x7d/0x110
[  814.295889][T12392]  ? __pfx_process_measurement+0x10/0x10
[  814.295927][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.296002][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.296045][T12392]  ? __configfs_open_file+0x6ca/0x9c0
[  814.296099][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.296147][T12392]  ima_file_check+0xcc/0x120
[  814.296185][T12392]  ? __pfx_ima_file_check+0x10/0x10
[  814.296235][T12392]  security_file_post_open+0xc4/0x210
[  814.296284][T12392]  path_openat+0x5cd/0x2440
[  814.296336][T12392]  ? __pfx_path_openat+0x10/0x10
[  814.296391][T12392]  do_file_open+0x20e/0x430
[  814.296441][T12392]  ? __pfx_do_file_open+0x10/0x10
[  814.296489][T12392]  ? __pfx___schedule+0x10/0x10
[  814.296544][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.296591][T12392]  ? alloc_fd+0x471/0x7a0
[  814.296641][T12392]  ? do_getname+0x191/0x390
[  814.296701][T12392]  do_sys_openat2+0x10f/0x1e0
[  814.296754][T12392]  ? __pfx_do_sys_openat2+0x10/0x10
[  814.296817][T12392]  __x64_sys_open+0xfe/0x1d0
[  814.296871][T12392]  ? __pfx___x64_sys_open+0x10/0x10
[  814.296925][T12392]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  814.296988][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  814.297037][T12392]  do_syscall_64+0x123/0x790
[  814.297081][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  814.297120][T12392] RIP: 0033:0x7fc18419e0d9
[  814.297149][T12392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  814.297200][T12392] RSP: 002b:00007fc1850e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  814.297236][T12392] RAX: ffffffffffffffda RBX: 00007fc184425fa0 RCX: 00007fc18419e0d9
[  814.297262][T12392] RDX: 0000000000000041 RSI: 0000000000040280 RDI: 00002000000003c0
[  814.297287][T12392] RBP: 00007fc184235024 R08: 0000000000000000 R09: 0000000000000000
[  814.297311][T12392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  814.297336][T12392] R13: 00007fc184426038 R14: 00007fc184425fa0 R15: 00007ffd3236de18
[  814.297373][T12392]  </TASK>
[  814.297386][T12392] 
[  814.799098][T12392] Allocated by task 12345:
[  814.803510][T12392]  kasan_save_stack+0x30/0x50
[  814.808229][T12392]  kasan_save_track+0x14/0x30
[  814.812953][T12392]  __kasan_kmalloc+0xaa/0xb0
[  814.817727][T12392]  __kmalloc_node_track_caller_noprof+0x333/0x830
[  814.824160][T12392]  kstrndup+0x64/0x120
[  814.828270][T12392]  f_midi2_opts_str_store.constprop.0+0xbf/0x240
[  814.834620][T12392]  configfs_write_iter+0x302/0x4e0
[  814.839768][T12392]  vfs_write+0x6af/0x1050
[  814.844110][T12392]  ksys_write+0x12a/0x250
[  814.848453][T12392]  do_syscall_64+0x123/0x790
[  814.853062][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  814.858994][T12392] 
[  814.861333][T12392] Freed by task 12396:
[  814.865392][T12392]  kasan_save_stack+0x30/0x50
[  814.870171][T12392]  kasan_save_track+0x14/0x30
[  814.874898][T12392]  kasan_save_free_info+0x3b/0x70
[  814.879997][T12392]  __kasan_slab_free+0x5f/0x80
[  814.884812][T12392]  kfree+0x22b/0x6c0
[  814.888732][T12392]  f_midi2_opts_str_store.constprop.0+0xf0/0x240
[  814.895075][T12392]  configfs_write_iter+0x302/0x4e0
[  814.900427][T12392]  vfs_write+0x6af/0x1050
[  814.904759][T12392]  ksys_write+0x12a/0x250
[  814.909118][T12392]  do_syscall_64+0x123/0x790
[  814.913724][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  814.919624][T12392] 
[  814.921938][T12392] The buggy address belongs to the object at ffff88807d448800
[  814.921938][T12392]  which belongs to the cache kmalloc-32 of size 32
[  814.935823][T12392] The buggy address is located 1 bytes inside of
[  814.935823][T12392]  freed 32-byte region [ffff88807d448800, ffff88807d448820)
[  814.949974][T12392] 
[  814.952292][T12392] The buggy address belongs to the physical page:
[  814.958737][T12392] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d448740 pfn:0x7d448
[  814.968810][T12392] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[  814.976881][T12392] page_type: f5(slab)
[  814.980866][T12392] raw: 00fff00000000200 ffff88801c028780 ffffea0000cb0f10 ffffea0000a42e90
[  814.989461][T12392] raw: ffff88807d448740 0000000800400026 00000000f5000000 0000000000000000
[  814.998040][T12392] page dumped because: kasan: bad access detected
[  815.004443][T12392] page_owner tracks the page as allocated
[  815.010146][T12392] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5402, tgid 5402 (dhcpcd-run-hook), ts 64655838135
[  815.028229][T12392]  post_alloc_hook+0xfd/0x120
[  815.032942][T12392]  get_page_from_freelist+0x110d/0x35b0
[  815.038524][T12392]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  815.044486][T12392]  new_slab+0xa5/0x640
[  815.048585][T12392]  refill_objects+0xe3/0x410
[  815.053215][T12392]  __pcs_replace_empty_main+0x372/0x680
[  815.058789][T12392]  __kmalloc_cache_noprof+0x47b/0x6b0
[  815.064896][T12392]  kmem_cache_free+0x40f/0x6b0
[  815.069692][T12392]  tear_down_vmas+0x2a5/0x610
[  815.074388][T12392]  exit_mmap+0x469/0xa00
[  815.078646][T12392]  __mmput+0x12a/0x410
[  815.082739][T12392]  mmput+0x67/0x80
[  815.086479][T12392]  do_exit+0x8b1/0x2ae0
[  815.090645][T12392]  do_group_exit+0xd5/0x2a0
[  815.095154][T12392]  __x64_sys_exit_group+0x3e/0x50
[  815.100200][T12392]  x64_sys_call+0x1567/0x1570
[  815.104911][T12392] page last free pid 5402 tgid 5402 ts 64654489274 stack trace:
[  815.112541][T12392]  __free_frozen_pages+0x79f/0x10f0
[  815.117770][T12392]  tlb_finish_mmu+0x27d/0x810
[  815.122487][T12392]  exit_mmap+0x454/0xa00
[  815.126772][T12392]  __mmput+0x12a/0x410
[  815.130868][T12392]  mmput+0x67/0x80
[  815.134609][T12392]  do_exit+0x8b1/0x2ae0
[  815.138773][T12392]  do_group_exit+0xd5/0x2a0
[  815.143289][T12392]  __x64_sys_exit_group+0x3e/0x50
[  815.148367][T12392]  x64_sys_call+0x1567/0x1570
[  815.153107][T12392]  do_syscall_64+0x123/0x790
[  815.157782][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.163721][T12392] 
[  815.166132][T12392] Memory state around the buggy address:
[  815.171763][T12392]  ffff88807d448700: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  815.179850][T12392]  ffff88807d448780: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc
[  815.187929][T12392] >ffff88807d448800: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  815.195997][T12392]                    ^
[  815.200062][T12392]  ffff88807d448880: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  815.208131][T12392]  ffff88807d448900: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  815.216201][T12392] ==================================================================
[  815.285521][ T5784] zl10353_read_register: readreg error (reg=127, ret==-71)
[  815.303169][T12392] ==================================================================
[  815.311279][T12392] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0
[  815.318248][T12392] Read of size 1 at addr ffff88807d448802 by task syz.4.1613/12392
[  815.326159][T12392] 
[  815.328501][T12392] CPU: 1 UID: 0 PID: 12392 Comm: syz.4.1613 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[  815.328562][T12392] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  815.328579][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  815.328603][T12392] Call Trace:
[  815.328616][T12392]  <TASK>
[  815.328632][T12392]  dump_stack_lvl+0x100/0x190
[  815.328684][T12392]  print_report+0x13d/0x4b0
[  815.328748][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.328796][T12392]  ? __virt_addr_valid+0x239/0x430
[  815.328853][T12392]  ? string+0x471/0x4d0
[  815.328888][T12392]  kasan_report+0xdf/0x1c0
[  815.328940][T12392]  ? string+0x471/0x4d0
[  815.328980][T12392]  string+0x471/0x4d0
[  815.329017][T12392]  ? __pfx_string+0x10/0x10
[  815.329054][T12392]  ? preempt_schedule_thunk+0x16/0x40
[  815.329100][T12392]  vsnprintf+0x422/0x1300
[  815.329147][T12392]  ? __pfx_vsnprintf+0x10/0x10
[  815.329197][T12392]  scnprintf+0xdb/0x150
[  815.329237][T12392]  ? __pfx_scnprintf+0x10/0x10
[  815.329283][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.329330][T12392]  ? down_read+0x13b/0x4c0
[  815.329380][T12392]  ? __pfx_down_read+0x10/0x10
[  815.329434][T12392]  ? __pfx_f_midi2_opts_iface_name_show+0x10/0x10
[  815.329482][T12392]  f_midi2_opts_iface_name_show+0x6e/0xa0
[  815.329529][T12392]  configfs_read_iter+0x426/0x6f0
[  815.329591][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.329642][T12392]  __kernel_read+0x397/0xad0
[  815.329680][T12392]  ? __pfx___kernel_read+0x10/0x10
[  815.329742][T12392]  integrity_kernel_read+0x7e/0xb0
[  815.329801][T12392]  ? __pfx_integrity_kernel_read+0x10/0x10
[  815.329860][T12392]  ? ima_calc_file_hash_tfm+0x236/0x350
[  815.329912][T12392]  ima_calc_file_hash_tfm+0x25e/0x350
[  815.329960][T12392]  ? __pfx_ima_calc_file_hash_tfm+0x10/0x10
[  815.330008][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.330081][T12392]  ? trace_sched_exit_tp+0xc0/0x160
[  815.330123][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.330170][T12392]  ? ima_alloc_tfm+0x21a/0x2e0
[  815.330218][T12392]  ima_calc_file_hash+0x1e3/0x380
[  815.330264][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.330314][T12392]  ima_collect_measurement+0x94f/0xb30
[  815.330371][T12392]  ? __pfx_ima_collect_measurement+0x10/0x10
[  815.330436][T12392]  ? process_measurement+0x5ab/0x2350
[  815.330479][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.330528][T12392]  ? is_bad_inode+0xd/0x40
[  815.330568][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.330615][T12392]  ? xattr_resolve_name+0x27d/0x3f0
[  815.330667][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.330776][T12392]  ? vfs_getxattr_alloc+0xec/0x350
[  815.330833][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.330881][T12392]  ? ima_get_hash_algo+0x241/0x400
[  815.330919][T12392]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  815.330958][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.331011][T12392]  ? process_measurement+0xdfe/0x2350
[  815.331050][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.331096][T12392]  process_measurement+0xdfe/0x2350
[  815.331143][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.331188][T12392]  ? lockdep_hardirqs_on+0x7d/0x110
[  815.331231][T12392]  ? __pfx_process_measurement+0x10/0x10
[  815.331270][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.331348][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.331392][T12392]  ? __configfs_open_file+0x6ca/0x9c0
[  815.331446][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.331499][T12392]  ima_file_check+0xcc/0x120
[  815.331539][T12392]  ? __pfx_ima_file_check+0x10/0x10
[  815.331585][T12392]  security_file_post_open+0xc4/0x210
[  815.331629][T12392]  path_openat+0x5cd/0x2440
[  815.331676][T12392]  ? __pfx_path_openat+0x10/0x10
[  815.331730][T12392]  do_file_open+0x20e/0x430
[  815.331772][T12392]  ? __pfx_do_file_open+0x10/0x10
[  815.331813][T12392]  ? __pfx___schedule+0x10/0x10
[  815.331866][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.331913][T12392]  ? alloc_fd+0x471/0x7a0
[  815.331962][T12392]  ? do_getname+0x191/0x390
[  815.332021][T12392]  do_sys_openat2+0x10f/0x1e0
[  815.332074][T12392]  ? __pfx_do_sys_openat2+0x10/0x10
[  815.332137][T12392]  __x64_sys_open+0xfe/0x1d0
[  815.332189][T12392]  ? __pfx___x64_sys_open+0x10/0x10
[  815.332248][T12392]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  815.332315][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  815.332368][T12392]  do_syscall_64+0x123/0x790
[  815.332415][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.332456][T12392] RIP: 0033:0x7fc18419e0d9
[  815.332487][T12392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  815.332528][T12392] RSP: 002b:00007fc1850e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  815.332563][T12392] RAX: ffffffffffffffda RBX: 00007fc184425fa0 RCX: 00007fc18419e0d9
[  815.332591][T12392] RDX: 0000000000000041 RSI: 0000000000040280 RDI: 00002000000003c0
[  815.332617][T12392] RBP: 00007fc184235024 R08: 0000000000000000 R09: 0000000000000000
[  815.332643][T12392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  815.332669][T12392] R13: 00007fc184426038 R14: 00007fc184425fa0 R15: 00007ffd3236de18
[  815.332718][T12392]  </TASK>
[  815.332732][T12392] 
[  815.834662][T12392] Allocated by task 12345:
[  815.839077][T12392]  kasan_save_stack+0x30/0x50
[  815.843780][T12392]  kasan_save_track+0x14/0x30
[  815.848474][T12392]  __kasan_kmalloc+0xaa/0xb0
[  815.853168][T12392]  __kmalloc_node_track_caller_noprof+0x333/0x830
[  815.859601][T12392]  kstrndup+0x64/0x120
[  815.863674][T12392]  f_midi2_opts_str_store.constprop.0+0xbf/0x240
[  815.870022][T12392]  configfs_write_iter+0x302/0x4e0
[  815.875160][T12392]  vfs_write+0x6af/0x1050
[  815.879495][T12392]  ksys_write+0x12a/0x250
[  815.883828][T12392]  do_syscall_64+0x123/0x790
[  815.888429][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.894337][T12392] 
[  815.896654][T12392] Freed by task 12396:
[  815.900716][T12392]  kasan_save_stack+0x30/0x50
[  815.905406][T12392]  kasan_save_track+0x14/0x30
[  815.910095][T12392]  kasan_save_free_info+0x3b/0x70
[  815.915144][T12392]  __kasan_slab_free+0x5f/0x80
[  815.920011][T12392]  kfree+0x22b/0x6c0
[  815.924041][T12392]  f_midi2_opts_str_store.constprop.0+0xf0/0x240
[  815.930385][T12392]  configfs_write_iter+0x302/0x4e0
[  815.935523][T12392]  vfs_write+0x6af/0x1050
[  815.939856][T12392]  ksys_write+0x12a/0x250
[  815.944187][T12392]  do_syscall_64+0x123/0x790
[  815.948790][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.954694][T12392] 
[  815.957101][T12392] The buggy address belongs to the object at ffff88807d448800
[  815.957101][T12392]  which belongs to the cache kmalloc-32 of size 32
[  815.970990][T12392] The buggy address is located 2 bytes inside of
[  815.970990][T12392]  freed 32-byte region [ffff88807d448800, ffff88807d448820)
[  815.984542][T12392] 
[  815.986861][T12392] The buggy address belongs to the physical page:
[  815.993260][T12392] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d448740 pfn:0x7d448
[  816.003398][T12392] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[  816.011490][T12392] page_type: f5(slab)
[  816.015487][T12392] raw: 00fff00000000200 ffff88801c028780 ffffea0000cb0f10 ffffea0000a42e90
[  816.024089][T12392] raw: ffff88807d448740 0000000800400026 00000000f5000000 0000000000000000
[  816.032701][T12392] page dumped because: kasan: bad access detected
[  816.039125][T12392] page_owner tracks the page as allocated
[  816.044838][T12392] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5402, tgid 5402 (dhcpcd-run-hook), ts 64655838135
[  816.062929][T12392]  post_alloc_hook+0xfd/0x120
[  816.067662][T12392]  get_page_from_freelist+0x110d/0x35b0
[  816.073281][T12392]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  816.079223][T12392]  new_slab+0xa5/0x640
[  816.083339][T12392]  refill_objects+0xe3/0x410
[  816.087974][T12392]  __pcs_replace_empty_main+0x372/0x680
[  816.093564][T12392]  __kmalloc_cache_noprof+0x47b/0x6b0
[  816.099060][T12392]  kmem_cache_free+0x40f/0x6b0
[  816.103862][T12392]  tear_down_vmas+0x2a5/0x610
[  816.108610][T12392]  exit_mmap+0x469/0xa00
[  816.112877][T12392]  __mmput+0x12a/0x410
[  816.116971][T12392]  mmput+0x67/0x80
[  816.120725][T12392]  do_exit+0x8b1/0x2ae0
[  816.124886][T12392]  do_group_exit+0xd5/0x2a0
[  816.129485][T12392]  __x64_sys_exit_group+0x3e/0x50
[  816.134541][T12392]  x64_sys_call+0x1567/0x1570
[  816.139256][T12392] page last free pid 5402 tgid 5402 ts 64654489274 stack trace:
[  816.146891][T12392]  __free_frozen_pages+0x79f/0x10f0
[  816.152126][T12392]  tlb_finish_mmu+0x27d/0x810
[  816.156834][T12392]  exit_mmap+0x454/0xa00
[  816.161098][T12392]  __mmput+0x12a/0x410
[  816.165635][T12392]  mmput+0x67/0x80
[  816.169384][T12392]  do_exit+0x8b1/0x2ae0
[  816.173547][T12392]  do_group_exit+0xd5/0x2a0
[  816.178057][T12392]  __x64_sys_exit_group+0x3e/0x50
[  816.183108][T12392]  x64_sys_call+0x1567/0x1570
[  816.187823][T12392]  do_syscall_64+0x123/0x790
[  816.192430][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  816.198479][T12392] 
[  816.200802][T12392] Memory state around the buggy address:
[  816.206437][T12392]  ffff88807d448700: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  816.214507][T12392]  ffff88807d448780: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc
[  816.222612][T12392] >ffff88807d448800: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  816.230678][T12392]                    ^
[  816.234754][T12392]  ffff88807d448880: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  816.242828][T12392]  ffff88807d448900: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  816.250896][T12392] ==================================================================
[  816.288774][T12392] ==================================================================
[  816.296888][T12392] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0
[  816.303939][T12392] Read of size 1 at addr ffff88807d448803 by task syz.4.1613/12392
[  816.311837][T12392] 
[  816.314167][T12392] CPU: 1 UID: 0 PID: 12392 Comm: syz.4.1613 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[  816.314223][T12392] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  816.314239][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  816.314262][T12392] Call Trace:
[  816.314274][T12392]  <TASK>
[  816.314289][T12392]  dump_stack_lvl+0x100/0x190
[  816.314337][T12392]  print_report+0x13d/0x4b0
[  816.314392][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.314437][T12392]  ? __virt_addr_valid+0x239/0x430
[  816.314489][T12392]  ? string+0x471/0x4d0
[  816.314521][T12392]  kasan_report+0xdf/0x1c0
[  816.314569][T12392]  ? string+0x471/0x4d0
[  816.314606][T12392]  string+0x471/0x4d0
[  816.314640][T12392]  ? __pfx_string+0x10/0x10
[  816.314674][T12392]  ? preempt_schedule_thunk+0x16/0x40
[  816.314722][T12392]  vsnprintf+0x422/0x1300
[  816.314766][T12392]  ? __pfx_vsnprintf+0x10/0x10
[  816.314810][T12392]  scnprintf+0xdb/0x150
[  816.314848][T12392]  ? __pfx_scnprintf+0x10/0x10
[  816.314890][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.314933][T12392]  ? down_read+0x13b/0x4c0
[  816.314980][T12392]  ? __pfx_down_read+0x10/0x10
[  816.315029][T12392]  ? __pfx_f_midi2_opts_iface_name_show+0x10/0x10
[  816.315077][T12392]  f_midi2_opts_iface_name_show+0x6e/0xa0
[  816.315128][T12392]  configfs_read_iter+0x426/0x6f0
[  816.315195][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.315250][T12392]  __kernel_read+0x397/0xad0
[  816.315285][T12392]  ? __pfx___kernel_read+0x10/0x10
[  816.315335][T12392]  integrity_kernel_read+0x7e/0xb0
[  816.315389][T12392]  ? __pfx_integrity_kernel_read+0x10/0x10
[  816.315442][T12392]  ? ima_calc_file_hash_tfm+0x236/0x350
[  816.315490][T12392]  ima_calc_file_hash_tfm+0x25e/0x350
[  816.315534][T12392]  ? __pfx_ima_calc_file_hash_tfm+0x10/0x10
[  816.315578][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.315645][T12392]  ? trace_sched_exit_tp+0xc0/0x160
[  816.315683][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.315732][T12392]  ? ima_alloc_tfm+0x21a/0x2e0
[  816.315775][T12392]  ima_calc_file_hash+0x1e3/0x380
[  816.315816][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.315862][T12392]  ima_collect_measurement+0x94f/0xb30
[  816.315914][T12392]  ? __pfx_ima_collect_measurement+0x10/0x10
[  816.315973][T12392]  ? process_measurement+0x5ab/0x2350
[  816.316013][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.316056][T12392]  ? is_bad_inode+0xd/0x40
[  816.316092][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.316136][T12392]  ? xattr_resolve_name+0x27d/0x3f0
[  816.316183][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.316227][T12392]  ? vfs_getxattr_alloc+0xec/0x350
[  816.316277][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.316321][T12392]  ? ima_get_hash_algo+0x241/0x400
[  816.316356][T12392]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  816.316390][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.316439][T12392]  ? process_measurement+0xdfe/0x2350
[  816.316477][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.316520][T12392]  process_measurement+0xdfe/0x2350
[  816.316565][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.316608][T12392]  ? lockdep_hardirqs_on+0x7d/0x110
[  816.316649][T12392]  ? __pfx_process_measurement+0x10/0x10
[  816.316688][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.316768][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.316811][T12392]  ? __configfs_open_file+0x6ca/0x9c0
[  816.316865][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.316912][T12392]  ima_file_check+0xcc/0x120
[  816.316951][T12392]  ? __pfx_ima_file_check+0x10/0x10
[  816.316996][T12392]  security_file_post_open+0xc4/0x210
[  816.317042][T12392]  path_openat+0x5cd/0x2440
[  816.317089][T12392]  ? __pfx_path_openat+0x10/0x10
[  816.317139][T12392]  do_file_open+0x20e/0x430
[  816.317184][T12392]  ? __pfx_do_file_open+0x10/0x10
[  816.317228][T12392]  ? __pfx___schedule+0x10/0x10
[  816.317278][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.317321][T12392]  ? alloc_fd+0x471/0x7a0
[  816.317365][T12392]  ? do_getname+0x191/0x390
[  816.317419][T12392]  do_sys_openat2+0x10f/0x1e0
[  816.317468][T12392]  ? __pfx_do_sys_openat2+0x10/0x10
[  816.317525][T12392]  __x64_sys_open+0xfe/0x1d0
[  816.317572][T12392]  ? __pfx___x64_sys_open+0x10/0x10
[  816.317622][T12392]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  816.317683][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  816.317735][T12392]  do_syscall_64+0x123/0x790
[  816.317779][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  816.317816][T12392] RIP: 0033:0x7fc18419e0d9
[  816.317844][T12392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  816.317881][T12392] RSP: 002b:00007fc1850e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  816.317915][T12392] RAX: ffffffffffffffda RBX: 00007fc184425fa0 RCX: 00007fc18419e0d9
[  816.317940][T12392] RDX: 0000000000000041 RSI: 0000000000040280 RDI: 00002000000003c0
[  816.317964][T12392] RBP: 00007fc184235024 R08: 0000000000000000 R09: 0000000000000000
[  816.317987][T12392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  816.318009][T12392] R13: 00007fc184426038 R14: 00007fc184425fa0 R15: 00007ffd3236de18
[  816.318046][T12392]  </TASK>
[  816.318059][T12392] 
[  816.819875][T12392] Allocated by task 12345:
[  816.824375][T12392]  kasan_save_stack+0x30/0x50
[  816.829070][T12392]  kasan_save_track+0x14/0x30
[  816.833763][T12392]  __kasan_kmalloc+0xaa/0xb0
[  816.838370][T12392]  __kmalloc_node_track_caller_noprof+0x333/0x830
[  816.844805][T12392]  kstrndup+0x64/0x120
[  816.848875][T12392]  f_midi2_opts_str_store.constprop.0+0xbf/0x240
[  816.855350][T12392]  configfs_write_iter+0x302/0x4e0
[  816.860595][T12392]  vfs_write+0x6af/0x1050
[  816.864931][T12392]  ksys_write+0x12a/0x250
[  816.869270][T12392]  do_syscall_64+0x123/0x790
[  816.873878][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  816.879893][T12392] 
[  816.882212][T12392] Freed by task 12396:
[  816.886277][T12392]  kasan_save_stack+0x30/0x50
[  816.890972][T12392]  kasan_save_track+0x14/0x30
[  816.895662][T12392]  kasan_save_free_info+0x3b/0x70
[  816.900717][T12392]  __kasan_slab_free+0x5f/0x80
[  816.905668][T12392]  kfree+0x22b/0x6c0
[  816.909586][T12392]  f_midi2_opts_str_store.constprop.0+0xf0/0x240
[  816.915939][T12392]  configfs_write_iter+0x302/0x4e0
[  816.921084][T12392]  vfs_write+0x6af/0x1050
[  816.925539][T12392]  ksys_write+0x12a/0x250
[  816.929875][T12392]  do_syscall_64+0x123/0x790
[  816.934563][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  816.940475][T12392] 
[  816.942794][T12392] The buggy address belongs to the object at ffff88807d448800
[  816.942794][T12392]  which belongs to the cache kmalloc-32 of size 32
[  816.956683][T12392] The buggy address is located 3 bytes inside of
[  816.956683][T12392]  freed 32-byte region [ffff88807d448800, ffff88807d448820)
[  816.970525][T12392] 
[  816.972860][T12392] The buggy address belongs to the physical page:
[  816.979287][T12392] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d448740 pfn:0x7d448
[  816.989378][T12392] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[  816.997460][T12392] page_type: f5(slab)
[  817.001489][T12392] raw: 00fff00000000200 ffff88801c028780 ffffea0000cb0f10 ffffea0000a42e90
[  817.010098][T12392] raw: ffff88807d448740 0000000800400026 00000000f5000000 0000000000000000
[  817.018688][T12392] page dumped because: kasan: bad access detected
[  817.025099][T12392] page_owner tracks the page as allocated
[  817.030809][T12392] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5402, tgid 5402 (dhcpcd-run-hook), ts 64655838135
[  817.048910][T12392]  post_alloc_hook+0xfd/0x120
[  817.053625][T12392]  get_page_from_freelist+0x110d/0x35b0
[  817.059207][T12392]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  817.065312][T12392]  new_slab+0xa5/0x640
[  817.069442][T12392]  refill_objects+0xe3/0x410
[  817.074058][T12392]  __pcs_replace_empty_main+0x372/0x680
[  817.079632][T12392]  __kmalloc_cache_noprof+0x47b/0x6b0
[  817.085033][T12392]  kmem_cache_free+0x40f/0x6b0
[  817.089837][T12392]  tear_down_vmas+0x2a5/0x610
[  817.094526][T12392]  exit_mmap+0x469/0xa00
[  817.098850][T12392]  __mmput+0x12a/0x410
[  817.102946][T12392]  mmput+0x67/0x80
[  817.106719][T12392]  do_exit+0x8b1/0x2ae0
[  817.110880][T12392]  do_group_exit+0xd5/0x2a0
[  817.115389][T12392]  __x64_sys_exit_group+0x3e/0x50
[  817.120423][T12392]  x64_sys_call+0x1567/0x1570
[  817.125215][T12392] page last free pid 5402 tgid 5402 ts 64654489274 stack trace:
[  817.132843][T12392]  __free_frozen_pages+0x79f/0x10f0
[  817.138102][T12392]  tlb_finish_mmu+0x27d/0x810
[  817.142984][T12392]  exit_mmap+0x454/0xa00
[  817.147875][T12392]  __mmput+0x12a/0x410
[  817.151994][T12392]  mmput+0x67/0x80
[  817.156089][T12392]  do_exit+0x8b1/0x2ae0
[  817.160253][T12392]  do_group_exit+0xd5/0x2a0
[  817.164767][T12392]  __x64_sys_exit_group+0x3e/0x50
[  817.169836][T12392]  x64_sys_call+0x1567/0x1570
[  817.174547][T12392]  do_syscall_64+0x123/0x790
[  817.179267][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.185172][T12392] 
[  817.187494][T12392] Memory state around the buggy address:
[  817.193124][T12392]  ffff88807d448700: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  817.201187][T12392]  ffff88807d448780: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc
[  817.209253][T12392] >ffff88807d448800: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  817.217316][T12392]                    ^
[  817.221411][T12392]  ffff88807d448880: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  817.229492][T12392]  ffff88807d448900: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  817.237557][T12392] ==================================================================
[  817.255000][ T5784] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  817.278637][T12392] ==================================================================
[  817.286766][T12392] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0
[  817.293741][T12392] Read of size 1 at addr ffff88807d448804 by task syz.4.1613/12392
[  817.301655][T12392] 
[  817.304038][T12392] CPU: 1 UID: 0 PID: 12392 Comm: syz.4.1613 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[  817.304101][T12392] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  817.304118][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  817.304143][T12392] Call Trace:
[  817.304157][T12392]  <TASK>
[  817.304171][T12392]  dump_stack_lvl+0x100/0x190
[  817.304226][T12392]  print_report+0x13d/0x4b0
[  817.304287][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.304337][T12392]  ? __virt_addr_valid+0x239/0x430
[  817.304396][T12392]  ? string+0x471/0x4d0
[  817.304433][T12392]  kasan_report+0xdf/0x1c0
[  817.304487][T12392]  ? string+0x471/0x4d0
[  817.304529][T12392]  string+0x471/0x4d0
[  817.304568][T12392]  ? __pfx_string+0x10/0x10
[  817.304606][T12392]  ? preempt_schedule_thunk+0x16/0x40
[  817.304653][T12392]  vsnprintf+0x422/0x1300
[  817.304702][T12392]  ? __pfx_vsnprintf+0x10/0x10
[  817.304753][T12392]  scnprintf+0xdb/0x150
[  817.304796][T12392]  ? __pfx_scnprintf+0x10/0x10
[  817.304843][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.304892][T12392]  ? down_read+0x13b/0x4c0
[  817.304944][T12392]  ? __pfx_down_read+0x10/0x10
[  817.305005][T12392]  ? __pfx_f_midi2_opts_iface_name_show+0x10/0x10
[  817.305056][T12392]  f_midi2_opts_iface_name_show+0x6e/0xa0
[  817.305105][T12392]  configfs_read_iter+0x426/0x6f0
[  817.305168][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.305221][T12392]  __kernel_read+0x397/0xad0
[  817.305260][T12392]  ? __pfx___kernel_read+0x10/0x10
[  817.305316][T12392]  integrity_kernel_read+0x7e/0xb0
[  817.305377][T12392]  ? __pfx_integrity_kernel_read+0x10/0x10
[  817.305446][T12392]  ? ima_calc_file_hash_tfm+0x236/0x350
[  817.305499][T12392]  ima_calc_file_hash_tfm+0x25e/0x350
[  817.305549][T12392]  ? __pfx_ima_calc_file_hash_tfm+0x10/0x10
[  817.305599][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.305674][T12392]  ? trace_sched_exit_tp+0xc0/0x160
[  817.305716][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.305764][T12392]  ? ima_alloc_tfm+0x21a/0x2e0
[  817.305812][T12392]  ima_calc_file_hash+0x1e3/0x380
[  817.305858][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.305908][T12392]  ima_collect_measurement+0x94f/0xb30
[  817.305964][T12392]  ? __pfx_ima_collect_measurement+0x10/0x10
[  817.306036][T12392]  ? process_measurement+0x5ab/0x2350
[  817.306081][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.306130][T12392]  ? is_bad_inode+0xd/0x40
[  817.306173][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.306239][T12392]  ? xattr_resolve_name+0x27d/0x3f0
[  817.306292][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.306341][T12392]  ? vfs_getxattr_alloc+0xec/0x350
[  817.306399][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.306447][T12392]  ? ima_get_hash_algo+0x241/0x400
[  817.306487][T12392]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  817.306527][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.306582][T12392]  ? process_measurement+0xdfe/0x2350
[  817.306625][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.306674][T12392]  process_measurement+0xdfe/0x2350
[  817.306725][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.306774][T12392]  ? lockdep_hardirqs_on+0x7d/0x110
[  817.306821][T12392]  ? __pfx_process_measurement+0x10/0x10
[  817.306864][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.306950][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.307006][T12392]  ? __configfs_open_file+0x6ca/0x9c0
[  817.307067][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.307121][T12392]  ima_file_check+0xcc/0x120
[  817.307166][T12392]  ? __pfx_ima_file_check+0x10/0x10
[  817.307216][T12392]  security_file_post_open+0xc4/0x210
[  817.307266][T12392]  path_openat+0x5cd/0x2440
[  817.307318][T12392]  ? __pfx_path_openat+0x10/0x10
[  817.307373][T12392]  do_file_open+0x20e/0x430
[  817.307424][T12392]  ? __pfx_do_file_open+0x10/0x10
[  817.307473][T12392]  ? __pfx___schedule+0x10/0x10
[  817.307529][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.307578][T12392]  ? alloc_fd+0x471/0x7a0
[  817.307630][T12392]  ? do_getname+0x191/0x390
[  817.307691][T12392]  do_sys_openat2+0x10f/0x1e0
[  817.307746][T12392]  ? __pfx_do_sys_openat2+0x10/0x10
[  817.307810][T12392]  __x64_sys_open+0xfe/0x1d0
[  817.307864][T12392]  ? __pfx___x64_sys_open+0x10/0x10
[  817.307921][T12392]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  817.307994][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  817.308044][T12392]  do_syscall_64+0x123/0x790
[  817.308089][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.308129][T12392] RIP: 0033:0x7fc18419e0d9
[  817.308160][T12392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  817.308201][T12392] RSP: 002b:00007fc1850e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  817.308241][T12392] RAX: ffffffffffffffda RBX: 00007fc184425fa0 RCX: 00007fc18419e0d9
[  817.308268][T12392] RDX: 0000000000000041 RSI: 0000000000040280 RDI: 00002000000003c0
[  817.308295][T12392] RBP: 00007fc184235024 R08: 0000000000000000 R09: 0000000000000000
[  817.308321][T12392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  817.308346][T12392] R13: 00007fc184426038 R14: 00007fc184425fa0 R15: 00007ffd3236de18
[  817.308387][T12392]  </TASK>
[  817.308401][T12392] 
[  817.810365][T12392] Allocated by task 12345:
[  817.814775][T12392]  kasan_save_stack+0x30/0x50
[  817.819472][T12392]  kasan_save_track+0x14/0x30
[  817.824206][T12392]  __kasan_kmalloc+0xaa/0xb0
[  817.828830][T12392]  __kmalloc_node_track_caller_noprof+0x333/0x830
[  817.835441][T12392]  kstrndup+0x64/0x120
[  817.839528][T12392]  f_midi2_opts_str_store.constprop.0+0xbf/0x240
[  817.845901][T12392]  configfs_write_iter+0x302/0x4e0
[  817.851039][T12392]  vfs_write+0x6af/0x1050
[  817.855378][T12392]  ksys_write+0x12a/0x250
[  817.859714][T12392]  do_syscall_64+0x123/0x790
[  817.864331][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.870236][T12392] 
[  817.872554][T12392] Freed by task 12396:
[  817.876613][T12392]  kasan_save_stack+0x30/0x50
[  817.881327][T12392]  kasan_save_track+0x14/0x30
[  817.886020][T12392]  kasan_save_free_info+0x3b/0x70
[  817.891099][T12392]  __kasan_slab_free+0x5f/0x80
[  817.895882][T12392]  kfree+0x22b/0x6c0
[  817.899800][T12392]  f_midi2_opts_str_store.constprop.0+0xf0/0x240
[  817.906141][T12392]  configfs_write_iter+0x302/0x4e0
[  817.911384][T12392]  vfs_write+0x6af/0x1050
[  817.915732][T12392]  ksys_write+0x12a/0x250
[  817.920089][T12392]  do_syscall_64+0x123/0x790
[  817.924709][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.930625][T12392] 
[  817.932951][T12392] The buggy address belongs to the object at ffff88807d448800
[  817.932951][T12392]  which belongs to the cache kmalloc-32 of size 32
[  817.946848][T12392] The buggy address is located 4 bytes inside of
[  817.946848][T12392]  freed 32-byte region [ffff88807d448800, ffff88807d448820)
[  817.960615][T12392] 
[  817.962937][T12392] The buggy address belongs to the physical page:
[  817.969427][T12392] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d448740 pfn:0x7d448
[  817.979502][T12392] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[  817.987582][T12392] page_type: f5(slab)
[  817.991573][T12392] raw: 00fff00000000200 ffff88801c028780 ffffea0000cb0f10 ffffea0000a42e90
[  818.000175][T12392] raw: ffff88807d448740 0000000800400026 00000000f5000000 0000000000000000
[  818.008763][T12392] page dumped because: kasan: bad access detected
[  818.015177][T12392] page_owner tracks the page as allocated
[  818.020893][T12392] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5402, tgid 5402 (dhcpcd-run-hook), ts 64655838135
[  818.039074][T12392]  post_alloc_hook+0xfd/0x120
[  818.043797][T12392]  get_page_from_freelist+0x110d/0x35b0
[  818.049377][T12392]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  818.055310][T12392]  new_slab+0xa5/0x640
[  818.059410][T12392]  refill_objects+0xe3/0x410
[  818.064029][T12392]  __pcs_replace_empty_main+0x372/0x680
[  818.069639][T12392]  __kmalloc_cache_noprof+0x47b/0x6b0
[  818.075044][T12392]  kmem_cache_free+0x40f/0x6b0
[  818.079960][T12392]  tear_down_vmas+0x2a5/0x610
[  818.084657][T12392]  exit_mmap+0x469/0xa00
[  818.088918][T12392]  __mmput+0x12a/0x410
[  818.093012][T12392]  mmput+0x67/0x80
[  818.096784][T12392]  do_exit+0x8b1/0x2ae0
[  818.100951][T12392]  do_group_exit+0xd5/0x2a0
[  818.105475][T12392]  __x64_sys_exit_group+0x3e/0x50
[  818.110515][T12392]  x64_sys_call+0x1567/0x1570
[  818.115241][T12392] page last free pid 5402 tgid 5402 ts 64654489274 stack trace:
[  818.122882][T12392]  __free_frozen_pages+0x79f/0x10f0
[  818.128154][T12392]  tlb_finish_mmu+0x27d/0x810
[  818.132863][T12392]  exit_mmap+0x454/0xa00
[  818.137132][T12392]  __mmput+0x12a/0x410
[  818.141234][T12392]  mmput+0x67/0x80
[  818.144973][T12392]  do_exit+0x8b1/0x2ae0
[  818.149152][T12392]  do_group_exit+0xd5/0x2a0
[  818.153672][T12392]  __x64_sys_exit_group+0x3e/0x50
[  818.158719][T12392]  x64_sys_call+0x1567/0x1570
[  818.163435][T12392]  do_syscall_64+0x123/0x790
[  818.168048][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.173981][T12392] 
[  818.176295][T12392] Memory state around the buggy address:
[  818.181924][T12392]  ffff88807d448700: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  818.189995][T12392]  ffff88807d448780: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc
[  818.198088][T12392] >ffff88807d448800: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  818.206157][T12392]                    ^
[  818.210229][T12392]  ffff88807d448880: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  818.218384][T12392]  ffff88807d448900: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  818.226539][T12392] ==================================================================
[  818.268748][ T5784] usb 6-1: USB disconnect, device number 20
[  818.302956][T12392] ==================================================================
[  818.311061][T12392] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0
[  818.318047][T12392] Read of size 1 at addr ffff88807d448805 by task syz.4.1613/12392
[  818.325968][T12392] 
[  818.328299][T12392] CPU: 1 UID: 0 PID: 12392 Comm: syz.4.1613 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[  818.328354][T12392] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  818.328369][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  818.328392][T12392] Call Trace:
[  818.328406][T12392]  <TASK>
[  818.328420][T12392]  dump_stack_lvl+0x100/0x190
[  818.328470][T12392]  print_report+0x13d/0x4b0
[  818.328526][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.328569][T12392]  ? __virt_addr_valid+0x239/0x430
[  818.328625][T12392]  ? string+0x471/0x4d0
[  818.328662][T12392]  kasan_report+0xdf/0x1c0
[  818.328710][T12392]  ? string+0x471/0x4d0
[  818.328747][T12392]  string+0x471/0x4d0
[  818.328781][T12392]  ? __pfx_string+0x10/0x10
[  818.328815][T12392]  ? preempt_schedule_thunk+0x16/0x40
[  818.328856][T12392]  vsnprintf+0x422/0x1300
[  818.328900][T12392]  ? __pfx_vsnprintf+0x10/0x10
[  818.328944][T12392]  scnprintf+0xdb/0x150
[  818.328981][T12392]  ? __pfx_scnprintf+0x10/0x10
[  818.329023][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.329067][T12392]  ? down_read+0x13b/0x4c0
[  818.329113][T12392]  ? __pfx_down_read+0x10/0x10
[  818.329163][T12392]  ? __pfx_f_midi2_opts_iface_name_show+0x10/0x10
[  818.329209][T12392]  f_midi2_opts_iface_name_show+0x6e/0xa0
[  818.329253][T12392]  configfs_read_iter+0x426/0x6f0
[  818.329308][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.329355][T12392]  __kernel_read+0x397/0xad0
[  818.329390][T12392]  ? __pfx___kernel_read+0x10/0x10
[  818.329440][T12392]  integrity_kernel_read+0x7e/0xb0
[  818.329494][T12392]  ? __pfx_integrity_kernel_read+0x10/0x10
[  818.329548][T12392]  ? ima_calc_file_hash_tfm+0x236/0x350
[  818.329595][T12392]  ima_calc_file_hash_tfm+0x25e/0x350
[  818.329640][T12392]  ? __pfx_ima_calc_file_hash_tfm+0x10/0x10
[  818.329687][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.329755][T12392]  ? trace_sched_exit_tp+0xc0/0x160
[  818.329793][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.329837][T12392]  ? ima_alloc_tfm+0x21a/0x2e0
[  818.329880][T12392]  ima_calc_file_hash+0x1e3/0x380
[  818.329922][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.329968][T12392]  ima_collect_measurement+0x94f/0xb30
[  818.330019][T12392]  ? __pfx_ima_collect_measurement+0x10/0x10
[  818.330078][T12392]  ? process_measurement+0x5ab/0x2350
[  818.330117][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.330161][T12392]  ? is_bad_inode+0xd/0x40
[  818.330197][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.330241][T12392]  ? xattr_resolve_name+0x27d/0x3f0
[  818.330287][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.330330][T12392]  ? vfs_getxattr_alloc+0xec/0x350
[  818.330381][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.330424][T12392]  ? ima_get_hash_algo+0x241/0x400
[  818.330459][T12392]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  818.330493][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.330542][T12392]  ? process_measurement+0xdfe/0x2350
[  818.330580][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.330623][T12392]  process_measurement+0xdfe/0x2350
[  818.330724][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.330768][T12392]  ? lockdep_hardirqs_on+0x7d/0x110
[  818.330809][T12392]  ? __pfx_process_measurement+0x10/0x10
[  818.330847][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.330923][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.330967][T12392]  ? __configfs_open_file+0x6ca/0x9c0
[  818.331021][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.331068][T12392]  ima_file_check+0xcc/0x120
[  818.331108][T12392]  ? __pfx_ima_file_check+0x10/0x10
[  818.331153][T12392]  security_file_post_open+0xc4/0x210
[  818.331198][T12392]  path_openat+0x5cd/0x2440
[  818.331246][T12392]  ? __pfx_path_openat+0x10/0x10
[  818.331296][T12392]  do_file_open+0x20e/0x430
[  818.331341][T12392]  ? __pfx_do_file_open+0x10/0x10
[  818.331385][T12392]  ? __pfx___schedule+0x10/0x10
[  818.331435][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.331478][T12392]  ? alloc_fd+0x471/0x7a0
[  818.331523][T12392]  ? do_getname+0x191/0x390
[  818.331578][T12392]  do_sys_openat2+0x10f/0x1e0
[  818.331627][T12392]  ? __pfx_do_sys_openat2+0x10/0x10
[  818.331689][T12392]  __x64_sys_open+0xfe/0x1d0
[  818.331737][T12392]  ? __pfx___x64_sys_open+0x10/0x10
[  818.331787][T12392]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  818.331849][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  818.331897][T12392]  do_syscall_64+0x123/0x790
[  818.331941][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.331979][T12392] RIP: 0033:0x7fc18419e0d9
[  818.332007][T12392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  818.332045][T12392] RSP: 002b:00007fc1850e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  818.332079][T12392] RAX: ffffffffffffffda RBX: 00007fc184425fa0 RCX: 00007fc18419e0d9
[  818.332104][T12392] RDX: 0000000000000041 RSI: 0000000000040280 RDI: 00002000000003c0
[  818.332135][T12392] RBP: 00007fc184235024 R08: 0000000000000000 R09: 0000000000000000
[  818.332159][T12392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  818.332182][T12392] R13: 00007fc184426038 R14: 00007fc184425fa0 R15: 00007ffd3236de18
[  818.332219][T12392]  </TASK>
[  818.332232][T12392] 
[  818.833793][T12392] Allocated by task 12345:
[  818.838210][T12392]  kasan_save_stack+0x30/0x50
[  818.842950][T12392]  kasan_save_track+0x14/0x30
[  818.847639][T12392]  __kasan_kmalloc+0xaa/0xb0
[  818.852251][T12392]  __kmalloc_node_track_caller_noprof+0x333/0x830
[  818.858683][T12392]  kstrndup+0x64/0x120
[  818.862758][T12392]  f_midi2_opts_str_store.constprop.0+0xbf/0x240
[  818.869105][T12392]  configfs_write_iter+0x302/0x4e0
[  818.874245][T12392]  vfs_write+0x6af/0x1050
[  818.878583][T12392]  ksys_write+0x12a/0x250
[  818.882921][T12392]  do_syscall_64+0x123/0x790
[  818.887559][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.893464][T12392] 
[  818.895779][T12392] Freed by task 12396:
[  818.899835][T12392]  kasan_save_stack+0x30/0x50
[  818.904546][T12392]  kasan_save_track+0x14/0x30
[  818.909237][T12392]  kasan_save_free_info+0x3b/0x70
[  818.914287][T12392]  __kasan_slab_free+0x5f/0x80
[  818.919061][T12392]  kfree+0x22b/0x6c0
[  818.923064][T12392]  f_midi2_opts_str_store.constprop.0+0xf0/0x240
[  818.929404][T12392]  configfs_write_iter+0x302/0x4e0
[  818.934548][T12392]  vfs_write+0x6af/0x1050
[  818.938891][T12392]  ksys_write+0x12a/0x250
[  818.943227][T12392]  do_syscall_64+0x123/0x790
[  818.947828][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.953731][T12392] 
[  818.956046][T12392] The buggy address belongs to the object at ffff88807d448800
[  818.956046][T12392]  which belongs to the cache kmalloc-32 of size 32
[  818.969958][T12392] The buggy address is located 5 bytes inside of
[  818.969958][T12392]  freed 32-byte region [ffff88807d448800, ffff88807d448820)
[  818.983589][T12392] 
[  818.985917][T12392] The buggy address belongs to the physical page:
[  818.992318][T12392] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d448740 pfn:0x7d448
[  819.002482][T12392] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[  819.010558][T12392] page_type: f5(slab)
[  819.014633][T12392] raw: 00fff00000000200 ffff88801c028780 ffffea0000cb0f10 ffffea0000a42e90
[  819.023229][T12392] raw: ffff88807d448740 0000000800400026 00000000f5000000 0000000000000000
[  819.031841][T12392] page dumped because: kasan: bad access detected
[  819.038267][T12392] page_owner tracks the page as allocated
[  819.043985][T12392] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5402, tgid 5402 (dhcpcd-run-hook), ts 64655838135
[  819.062079][T12392]  post_alloc_hook+0xfd/0x120
[  819.066802][T12392]  get_page_from_freelist+0x110d/0x35b0
[  819.072467][T12392]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  819.078396][T12392]  new_slab+0xa5/0x640
[  819.082497][T12392]  refill_objects+0xe3/0x410
[  819.087119][T12392]  __pcs_replace_empty_main+0x372/0x680
[  819.092787][T12392]  __kmalloc_cache_noprof+0x47b/0x6b0
[  819.098187][T12392]  kmem_cache_free+0x40f/0x6b0
[  819.102977][T12392]  tear_down_vmas+0x2a5/0x610
[  819.107668][T12392]  exit_mmap+0x469/0xa00
[  819.111931][T12392]  __mmput+0x12a/0x410
[  819.116024][T12392]  mmput+0x67/0x80
[  819.119764][T12392]  do_exit+0x8b1/0x2ae0
[  819.123923][T12392]  do_group_exit+0xd5/0x2a0
[  819.128518][T12392]  __x64_sys_exit_group+0x3e/0x50
[  819.133645][T12392]  x64_sys_call+0x1567/0x1570
[  819.138378][T12392] page last free pid 5402 tgid 5402 ts 64654489274 stack trace:
[  819.146011][T12392]  __free_frozen_pages+0x79f/0x10f0
[  819.151237][T12392]  tlb_finish_mmu+0x27d/0x810
[  819.155942][T12392]  exit_mmap+0x454/0xa00
[  819.160415][T12392]  __mmput+0x12a/0x410
[  819.164508][T12392]  mmput+0x67/0x80
[  819.168251][T12392]  do_exit+0x8b1/0x2ae0
[  819.172423][T12392]  do_group_exit+0xd5/0x2a0
[  819.176997][T12392]  __x64_sys_exit_group+0x3e/0x50
[  819.182121][T12392]  x64_sys_call+0x1567/0x1570
[  819.186833][T12392]  do_syscall_64+0x123/0x790
[  819.191435][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.197338][T12392] 
[  819.199651][T12392] Memory state around the buggy address:
[  819.205325][T12392]  ffff88807d448700: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  819.213483][T12392]  ffff88807d448780: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc
[  819.221552][T12392] >ffff88807d448800: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  819.229645][T12392]                    ^
[  819.233800][T12392]  ffff88807d448880: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  819.241868][T12392]  ffff88807d448900: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  819.249930][T12392] ==================================================================
[  819.278042][ T5625] syz_tun (unregistering): left allmulticast mode
[  819.285623][T12392] ==================================================================
[  819.293978][T12392] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0
[  819.300950][T12392] Read of size 1 at addr ffff88807d448806 by task syz.4.1613/12392
[  819.309012][T12392] 
[  819.311333][T12392] CPU: 1 UID: 0 PID: 12392 Comm: syz.4.1613 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[  819.311381][T12392] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  819.311395][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  819.311415][T12392] Call Trace:
[  819.311427][T12392]  <TASK>
[  819.311440][T12392]  dump_stack_lvl+0x100/0x190
[  819.311482][T12392]  print_report+0x13d/0x4b0
[  819.311530][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.311568][T12392]  ? __virt_addr_valid+0x239/0x430
[  819.311614][T12392]  ? string+0x471/0x4d0
[  819.311640][T12392]  kasan_report+0xdf/0x1c0
[  819.311682][T12392]  ? string+0x471/0x4d0
[  819.311714][T12392]  string+0x471/0x4d0
[  819.311742][T12392]  ? __pfx_string+0x10/0x10
[  819.311771][T12392]  ? preempt_schedule_thunk+0x16/0x40
[  819.311808][T12392]  vsnprintf+0x422/0x1300
[  819.311846][T12392]  ? __pfx_vsnprintf+0x10/0x10
[  819.311884][T12392]  scnprintf+0xdb/0x150
[  819.311917][T12392]  ? __pfx_scnprintf+0x10/0x10
[  819.311953][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.311991][T12392]  ? down_read+0x13b/0x4c0
[  819.312032][T12392]  ? __pfx_down_read+0x10/0x10
[  819.312075][T12392]  ? __pfx_f_midi2_opts_iface_name_show+0x10/0x10
[  819.312115][T12392]  f_midi2_opts_iface_name_show+0x6e/0xa0
[  819.312154][T12392]  configfs_read_iter+0x426/0x6f0
[  819.312207][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.312248][T12392]  __kernel_read+0x397/0xad0
[  819.312278][T12392]  ? __pfx___kernel_read+0x10/0x10
[  819.312322][T12392]  integrity_kernel_read+0x7e/0xb0
[  819.312370][T12392]  ? __pfx_integrity_kernel_read+0x10/0x10
[  819.312417][T12392]  ? ima_calc_file_hash_tfm+0x236/0x350
[  819.312459][T12392]  ima_calc_file_hash_tfm+0x25e/0x350
[  819.312498][T12392]  ? __pfx_ima_calc_file_hash_tfm+0x10/0x10
[  819.312534][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.312589][T12392]  ? trace_sched_exit_tp+0xc0/0x160
[  819.312621][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.312657][T12392]  ? ima_alloc_tfm+0x21a/0x2e0
[  819.312692][T12392]  ima_calc_file_hash+0x1e3/0x380
[  819.312726][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.312764][T12392]  ima_collect_measurement+0x94f/0xb30
[  819.312806][T12392]  ? __pfx_ima_collect_measurement+0x10/0x10
[  819.312855][T12392]  ? process_measurement+0x5ab/0x2350
[  819.312887][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.312922][T12392]  ? is_bad_inode+0xd/0x40
[  819.312952][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.312988][T12392]  ? xattr_resolve_name+0x27d/0x3f0
[  819.313026][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.313062][T12392]  ? vfs_getxattr_alloc+0xec/0x350
[  819.313104][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.313139][T12392]  ? ima_get_hash_algo+0x241/0x400
[  819.313167][T12392]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  819.313200][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.313240][T12392]  ? process_measurement+0xdfe/0x2350
[  819.313271][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.313306][T12392]  process_measurement+0xdfe/0x2350
[  819.313343][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.313379][T12392]  ? lockdep_hardirqs_on+0x7d/0x110
[  819.313412][T12392]  ? __pfx_process_measurement+0x10/0x10
[  819.313444][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.313506][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.313542][T12392]  ? __configfs_open_file+0x6ca/0x9c0
[  819.313585][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.313624][T12392]  ima_file_check+0xcc/0x120
[  819.313656][T12392]  ? __pfx_ima_file_check+0x10/0x10
[  819.313693][T12392]  security_file_post_open+0xc4/0x210
[  819.313729][T12392]  path_openat+0x5cd/0x2440
[  819.313767][T12392]  ? __pfx_path_openat+0x10/0x10
[  819.313808][T12392]  do_file_open+0x20e/0x430
[  819.313845][T12392]  ? __pfx_do_file_open+0x10/0x10
[  819.313880][T12392]  ? __pfx___schedule+0x10/0x10
[  819.313921][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.313956][T12392]  ? alloc_fd+0x471/0x7a0
[  819.313993][T12392]  ? do_getname+0x191/0x390
[  819.314037][T12392]  do_sys_openat2+0x10f/0x1e0
[  819.314076][T12392]  ? __pfx_do_sys_openat2+0x10/0x10
[  819.314123][T12392]  __x64_sys_open+0xfe/0x1d0
[  819.314162][T12392]  ? __pfx___x64_sys_open+0x10/0x10
[  819.314206][T12392]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  819.314257][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.314296][T12392]  do_syscall_64+0x123/0x790
[  819.314332][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.314362][T12392] RIP: 0033:0x7fc18419e0d9
[  819.314387][T12392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  819.314416][T12392] RSP: 002b:00007fc1850e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  819.314443][T12392] RAX: ffffffffffffffda RBX: 00007fc184425fa0 RCX: 00007fc18419e0d9
[  819.314464][T12392] RDX: 0000000000000041 RSI: 0000000000040280 RDI: 00002000000003c0
[  819.314483][T12392] RBP: 00007fc184235024 R08: 0000000000000000 R09: 0000000000000000
[  819.314503][T12392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  819.314521][T12392] R13: 00007fc184426038 R14: 00007fc184425fa0 R15: 00007ffd3236de18
[  819.314551][T12392]  </TASK>
[  819.314562][T12392] 
[  819.817772][T12392] Allocated by task 12345:
[  819.822354][T12392]  kasan_save_stack+0x30/0x50
[  819.827044][T12392]  kasan_save_track+0x14/0x30
[  819.831758][T12392]  __kasan_kmalloc+0xaa/0xb0
[  819.836361][T12392]  __kmalloc_node_track_caller_noprof+0x333/0x830
[  819.842798][T12392]  kstrndup+0x64/0x120
[  819.846873][T12392]  f_midi2_opts_str_store.constprop.0+0xbf/0x240
[  819.853258][T12392]  configfs_write_iter+0x302/0x4e0
[  819.858404][T12392]  vfs_write+0x6af/0x1050
[  819.862741][T12392]  ksys_write+0x12a/0x250
[  819.867077][T12392]  do_syscall_64+0x123/0x790
[  819.871713][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.877706][T12392] 
[  819.880023][T12392] Freed by task 12396:
[  819.884077][T12392]  kasan_save_stack+0x30/0x50
[  819.888768][T12392]  kasan_save_track+0x14/0x30
[  819.893498][T12392]  kasan_save_free_info+0x3b/0x70
[  819.898729][T12392]  __kasan_slab_free+0x5f/0x80
[  819.903598][T12392]  kfree+0x22b/0x6c0
[  819.907552][T12392]  f_midi2_opts_str_store.constprop.0+0xf0/0x240
[  819.913898][T12392]  configfs_write_iter+0x302/0x4e0
[  819.919036][T12392]  vfs_write+0x6af/0x1050
[  819.923467][T12392]  ksys_write+0x12a/0x250
[  819.927889][T12392]  do_syscall_64+0x123/0x790
[  819.932510][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.938420][T12392] 
[  819.940823][T12392] The buggy address belongs to the object at ffff88807d448800
[  819.940823][T12392]  which belongs to the cache kmalloc-32 of size 32
[  819.954728][T12392] The buggy address is located 6 bytes inside of
[  819.954728][T12392]  freed 32-byte region [ffff88807d448800, ffff88807d448820)
[  819.968545][T12392] 
[  819.970871][T12392] The buggy address belongs to the physical page:
[  819.977305][T12392] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d448740 pfn:0x7d448
[  819.987382][T12392] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[  819.995460][T12392] page_type: f5(slab)
[  819.999462][T12392] raw: 00fff00000000200 ffff88801c028780 ffffea0000cb0f10 ffffea0000a42e90
[  820.008086][T12392] raw: ffff88807d448740 0000000800400026 00000000f5000000 0000000000000000
[  820.016709][T12392] page dumped because: kasan: bad access detected
[  820.023149][T12392] page_owner tracks the page as allocated
[  820.028962][T12392] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5402, tgid 5402 (dhcpcd-run-hook), ts 64655838135
[  820.047052][T12392]  post_alloc_hook+0xfd/0x120
[  820.051775][T12392]  get_page_from_freelist+0x110d/0x35b0
[  820.057364][T12392]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  820.063379][T12392]  new_slab+0xa5/0x640
[  820.067483][T12392]  refill_objects+0xe3/0x410
[  820.072107][T12392]  __pcs_replace_empty_main+0x372/0x680
[  820.077690][T12392]  __kmalloc_cache_noprof+0x47b/0x6b0
[  820.083100][T12392]  kmem_cache_free+0x40f/0x6b0
[  820.087984][T12392]  tear_down_vmas+0x2a5/0x610
[  820.092855][T12392]  exit_mmap+0x469/0xa00
[  820.097126][T12392]  __mmput+0x12a/0x410
[  820.101242][T12392]  mmput+0x67/0x80
[  820.104982][T12392]  do_exit+0x8b1/0x2ae0
[  820.109162][T12392]  do_group_exit+0xd5/0x2a0
[  820.113684][T12392]  __x64_sys_exit_group+0x3e/0x50
[  820.118803][T12392]  x64_sys_call+0x1567/0x1570
[  820.123512][T12392] page last free pid 5402 tgid 5402 ts 64654489274 stack trace:
[  820.131145][T12392]  __free_frozen_pages+0x79f/0x10f0
[  820.136380][T12392]  tlb_finish_mmu+0x27d/0x810
[  820.141084][T12392]  exit_mmap+0x454/0xa00
[  820.145346][T12392]  __mmput+0x12a/0x410
[  820.149551][T12392]  mmput+0x67/0x80
[  820.153303][T12392]  do_exit+0x8b1/0x2ae0
[  820.157468][T12392]  do_group_exit+0xd5/0x2a0
[  820.161994][T12392]  __x64_sys_exit_group+0x3e/0x50
[  820.167033][T12392]  x64_sys_call+0x1567/0x1570
[  820.171740][T12392]  do_syscall_64+0x123/0x790
[  820.176345][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.182338][T12392] 
[  820.184655][T12392] Memory state around the buggy address:
[  820.190289][T12392]  ffff88807d448700: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  820.198449][T12392]  ffff88807d448780: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc
[  820.206522][T12392] >ffff88807d448800: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  820.214582][T12392]                    ^
[  820.218666][T12392]  ffff88807d448880: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  820.226823][T12392]  ffff88807d448900: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  820.234968][T12392] ==================================================================
[  820.272308][T12392] ==================================================================
[  820.280421][T12392] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0
[  820.287393][T12392] Read of size 1 at addr ffff88807d448807 by task syz.4.1613/12392
[  820.295315][T12392] 
[  820.297685][T12392] CPU: 1 UID: 0 PID: 12392 Comm: syz.4.1613 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[  820.297742][T12392] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  820.297758][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  820.297781][T12392] Call Trace:
[  820.297793][T12392]  <TASK>
[  820.297807][T12392]  dump_stack_lvl+0x100/0x190
[  820.297856][T12392]  print_report+0x13d/0x4b0
[  820.297912][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.297958][T12392]  ? __virt_addr_valid+0x239/0x430
[  820.298018][T12392]  ? string+0x471/0x4d0
[  820.298054][T12392]  kasan_report+0xdf/0x1c0
[  820.298107][T12392]  ? string+0x471/0x4d0
[  820.298182][T12392]  string+0x471/0x4d0
[  820.298220][T12392]  ? __pfx_string+0x10/0x10
[  820.298258][T12392]  ? preempt_schedule_thunk+0x16/0x40
[  820.298306][T12392]  vsnprintf+0x422/0x1300
[  820.298355][T12392]  ? __pfx_vsnprintf+0x10/0x10
[  820.298405][T12392]  scnprintf+0xdb/0x150
[  820.298447][T12392]  ? __pfx_scnprintf+0x10/0x10
[  820.298494][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.298543][T12392]  ? down_read+0x13b/0x4c0
[  820.298597][T12392]  ? __pfx_down_read+0x10/0x10
[  820.298652][T12392]  ? __pfx_f_midi2_opts_iface_name_show+0x10/0x10
[  820.298701][T12392]  f_midi2_opts_iface_name_show+0x6e/0xa0
[  820.298751][T12392]  configfs_read_iter+0x426/0x6f0
[  820.298813][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.298864][T12392]  __kernel_read+0x397/0xad0
[  820.298905][T12392]  ? __pfx___kernel_read+0x10/0x10
[  820.298961][T12392]  integrity_kernel_read+0x7e/0xb0
[  820.299022][T12392]  ? __pfx_integrity_kernel_read+0x10/0x10
[  820.299081][T12392]  ? ima_calc_file_hash_tfm+0x236/0x350
[  820.299135][T12392]  ima_calc_file_hash_tfm+0x25e/0x350
[  820.299192][T12392]  ? __pfx_ima_calc_file_hash_tfm+0x10/0x10
[  820.299240][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.299317][T12392]  ? trace_sched_exit_tp+0xc0/0x160
[  820.299362][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.299411][T12392]  ? ima_alloc_tfm+0x21a/0x2e0
[  820.299461][T12392]  ima_calc_file_hash+0x1e3/0x380
[  820.299509][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.299560][T12392]  ima_collect_measurement+0x94f/0xb30
[  820.299618][T12392]  ? __pfx_ima_collect_measurement+0x10/0x10
[  820.299684][T12392]  ? process_measurement+0x5ab/0x2350
[  820.299728][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.299776][T12392]  ? is_bad_inode+0xd/0x40
[  820.299817][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.299867][T12392]  ? xattr_resolve_name+0x27d/0x3f0
[  820.299919][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.299969][T12392]  ? vfs_getxattr_alloc+0xec/0x350
[  820.300027][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.300076][T12392]  ? ima_get_hash_algo+0x241/0x400
[  820.300116][T12392]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  820.300156][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.300218][T12392]  ? process_measurement+0xdfe/0x2350
[  820.300260][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.300308][T12392]  process_measurement+0xdfe/0x2350
[  820.300353][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.300397][T12392]  ? lockdep_hardirqs_on+0x7d/0x110
[  820.300438][T12392]  ? __pfx_process_measurement+0x10/0x10
[  820.300477][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.300553][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.300597][T12392]  ? __configfs_open_file+0x6ca/0x9c0
[  820.300652][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.300701][T12392]  ima_file_check+0xcc/0x120
[  820.300740][T12392]  ? __pfx_ima_file_check+0x10/0x10
[  820.300787][T12392]  security_file_post_open+0xc4/0x210
[  820.300832][T12392]  path_openat+0x5cd/0x2440
[  820.300882][T12392]  ? __pfx_path_openat+0x10/0x10
[  820.300933][T12392]  do_file_open+0x20e/0x430
[  820.300979][T12392]  ? __pfx_do_file_open+0x10/0x10
[  820.301022][T12392]  ? __pfx___schedule+0x10/0x10
[  820.301072][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.301117][T12392]  ? alloc_fd+0x471/0x7a0
[  820.301162][T12392]  ? do_getname+0x191/0x390
[  820.301222][T12392]  do_sys_openat2+0x10f/0x1e0
[  820.301271][T12392]  ? __pfx_do_sys_openat2+0x10/0x10
[  820.301329][T12392]  __x64_sys_open+0xfe/0x1d0
[  820.301377][T12392]  ? __pfx___x64_sys_open+0x10/0x10
[  820.301428][T12392]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  820.301510][T12392]  ? srso_alias_return_thunk+0x5/0xfbef5
[  820.301558][T12392]  do_syscall_64+0x123/0x790
[  820.301603][T12392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.301641][T12392] RIP: 0033:0x7fc18419e0d9