last executing test programs: 2m23.912611131s ago: executing program 3 (id=878): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 2m19.129410579s ago: executing program 3 (id=893): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x6}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f00090401000001022000090401010101"], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x9, 0x7fff7ffc}]}) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) write(r3, &(0x7f0000000300)='A', 0x1) accept(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m16.357192607s ago: executing program 3 (id=902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) mkdir(&(0x7f0000000240)='./file0\x00', 0x97) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8041) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) socket$nl_xfrm(0x10, 0x3, 0x6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 2m14.616660708s ago: executing program 3 (id=906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f00000002c0), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1, r3}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073257a3100000000ac000000030a01030000000000000000010000001400048008000240000000fffbffff40000000050900030073797a30000000000900010073797a860000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0"], 0x92fc}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1200, 0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffc, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00') r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000180)="3300000008000102030405060101", 0xe) 2m11.342368506s ago: executing program 3 (id=911): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000440)="02000000010000") pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 2m10.899240703s ago: executing program 3 (id=912): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000008c0)={@loopback, 0x200000, 0x0, 0xff, 0x1, 0x7}, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1m54.472403083s ago: executing program 32 (id=912): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000008c0)={@loopback, 0x200000, 0x0, 0xff, 0x1, 0x7}, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1m0.580972313s ago: executing program 4 (id=1135): setns(0xc9, 0x0) socket(0x2a, 0x2, 0x9) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000e8fffffff52affff000000000000"], 0x98) 59.406258861s ago: executing program 4 (id=1137): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) read$alg(0xffffffffffffffff, &(0x7f0000000300)=""/74, 0x4a) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r0, &(0x7f0000000000)=""/106, 0x6a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f0000000080)='\a\x00\tg', 0x4}, {0x0}], 0x2) syslog(0x3, 0x0, 0x0) 57.205633443s ago: executing program 4 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x3, 0x8014) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write$tun(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xb8c) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffffd, 0xf, 0xf, 0x8, 0x80, 0x10004, 0x3, 0x8, 0x3, 0x1, 0x5, 0x0, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x107, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x28, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x1000, 0x17, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x2000000, 0x5, 0x0, 0x4, 0x0, 0x1008008, 0x400, 0x80, 0x0, 0x7, 0x6, 0x6, 0x80000000, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xc, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0xffffffff, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x0, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10400, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x9, 0x4, 0x9, 0x7, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x82, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x3, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x20061c, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x9, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x2008, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x2, 0xa, 0x0, 0x1, 0x1c, 0x7, 0xa, 0x3, 0x5, 0x4, 0x3c484551], [0x6, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x2, 0x2, 0xfefffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0x3, 0x200, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 53.039164736s ago: executing program 4 (id=1171): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) futex(0x0, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[], [{@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\'-'}}, {@uid_gt}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x39, 0x30, 0x36, 0x69, 0x36, 0x30], 0x2d, [0x65, 0x56, 0x38, 0x32], 0x2d, [0x37, 0x39, 0x66, 0x31], 0x2d, [0x30, 0x39, 0x31, 0x36], 0x2d, [0x62, 0x35, 0x63, 0x62, 0x31, 0x62, 0x36, 0x38]}}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 51.800571567s ago: executing program 4 (id=1179): sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x28a38a59, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 49.87061164s ago: executing program 4 (id=1187): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) futex(0x0, 0x7, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x431, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4f, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b80)=@newtfilter={0x478, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0xe}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffff482, 0x9, 0x0, 0x6, 0x3, 0x2, 0x0, 0x3d, 0x80, 0x28, 0x1005, 0x4, 0x4, 0x0, 0x5, 0x6, 0xe, 0x10, 0x8000, 0x8a3c, 0x7, 0x5f, 0xfffffffb, 0x80000000, 0xc, 0x6, 0x6, 0x0, 0x8, 0x4567f271, 0x6, 0x5, 0xd509, 0x6, 0x1000, 0x762b00, 0x6b54e9f7, 0xc1d, 0x6ca, 0xa, 0xf5f8, 0x48f, 0x8000, 0xefbb, 0x10000, 0x1, 0x3ff, 0xc650, 0xd7, 0xfb80, 0x0, 0x1000, 0x10, 0x2cfd, 0x3, 0xa, 0x6, 0x9, 0x74c, 0xffffffff, 0x9, 0x8, 0x9, 0x3, 0x5, 0x7, 0x3, 0x0, 0x8, 0x10000, 0x7b, 0x2a, 0x8000, 0x8, 0x8, 0x1000, 0x5, 0x6, 0x3, 0xb, 0xfffffffa, 0x0, 0x2, 0x8, 0x10, 0x5, 0x7ff, 0x8, 0x86, 0x44, 0x5, 0x3, 0x6, 0x739, 0x7ff, 0xcc3c, 0x0, 0xf68f, 0x7, 0x5, 0x3, 0xfffffffa, 0xc82, 0xac, 0x5, 0xd6, 0x1, 0x8, 0x882, 0x6, 0x80000000, 0x3df, 0x9, 0x3, 0x9, 0x7, 0x9, 0x7, 0x7, 0x7, 0x49, 0x80000001, 0x9, 0x8, 0x10000, 0x7, 0x0, 0x0, 0xda53000, 0xfffffffc, 0xfffff800, 0x80, 0x0, 0x3, 0x9, 0xb, 0x0, 0x0, 0x2, 0xf, 0x5, 0x1013dd8d, 0xa80e, 0x365, 0x1, 0x4, 0x3, 0x3, 0x10000, 0x8, 0xf9d, 0x400, 0x80000001, 0x10, 0x3, 0x7fffffff, 0x7, 0x7, 0x349f, 0xe7, 0xc, 0x8, 0x81, 0x1, 0x9, 0xb, 0x7, 0x1, 0x7fff, 0x7, 0x1, 0x0, 0x1, 0x0, 0x3, 0x7, 0x6, 0x10000, 0x5, 0x3, 0x3ff, 0x2288, 0x6c, 0x101, 0x3, 0x85, 0x6, 0x1, 0x4, 0xc8, 0xff, 0x5, 0x15, 0x6, 0x5, 0x5, 0xe3f, 0x1000, 0x3, 0x3, 0x4, 0x10001, 0xab, 0x0, 0x7, 0x5, 0x1, 0xffff, 0xfffffffe, 0x10001, 0xe68, 0x2, 0x4f, 0x9, 0xe, 0x40, 0x80, 0x10000, 0xb, 0x8000, 0x7, 0x1ff, 0x800, 0x74ad, 0x7, 0x6, 0xe2e, 0x8, 0x101, 0x5, 0x8, 0x10, 0x7f, 0x7, 0x3, 0x5, 0x3, 0x8, 0x401, 0x1, 0x81, 0x0, 0xfff, 0x4, 0x5, 0x0, 0xf01, 0x7, 0x2, 0x3afa, 0x8dfb, 0xb, 0x4, 0x8, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0xa04, 0x4, 0x2, {0xb, 0x0, 0x9, 0x6, 0x2, 0x3}, {0x2, 0x0, 0x1, 0x6, 0x3, 0x7}, 0x8, 0x1, 0x4}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500), 0x4) write(r0, &(0x7f0000000100)="060000000300010000", 0x9) 49.661388546s ago: executing program 33 (id=1187): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) futex(0x0, 0x7, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x431, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4f, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b80)=@newtfilter={0x478, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0xe}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffff482, 0x9, 0x0, 0x6, 0x3, 0x2, 0x0, 0x3d, 0x80, 0x28, 0x1005, 0x4, 0x4, 0x0, 0x5, 0x6, 0xe, 0x10, 0x8000, 0x8a3c, 0x7, 0x5f, 0xfffffffb, 0x80000000, 0xc, 0x6, 0x6, 0x0, 0x8, 0x4567f271, 0x6, 0x5, 0xd509, 0x6, 0x1000, 0x762b00, 0x6b54e9f7, 0xc1d, 0x6ca, 0xa, 0xf5f8, 0x48f, 0x8000, 0xefbb, 0x10000, 0x1, 0x3ff, 0xc650, 0xd7, 0xfb80, 0x0, 0x1000, 0x10, 0x2cfd, 0x3, 0xa, 0x6, 0x9, 0x74c, 0xffffffff, 0x9, 0x8, 0x9, 0x3, 0x5, 0x7, 0x3, 0x0, 0x8, 0x10000, 0x7b, 0x2a, 0x8000, 0x8, 0x8, 0x1000, 0x5, 0x6, 0x3, 0xb, 0xfffffffa, 0x0, 0x2, 0x8, 0x10, 0x5, 0x7ff, 0x8, 0x86, 0x44, 0x5, 0x3, 0x6, 0x739, 0x7ff, 0xcc3c, 0x0, 0xf68f, 0x7, 0x5, 0x3, 0xfffffffa, 0xc82, 0xac, 0x5, 0xd6, 0x1, 0x8, 0x882, 0x6, 0x80000000, 0x3df, 0x9, 0x3, 0x9, 0x7, 0x9, 0x7, 0x7, 0x7, 0x49, 0x80000001, 0x9, 0x8, 0x10000, 0x7, 0x0, 0x0, 0xda53000, 0xfffffffc, 0xfffff800, 0x80, 0x0, 0x3, 0x9, 0xb, 0x0, 0x0, 0x2, 0xf, 0x5, 0x1013dd8d, 0xa80e, 0x365, 0x1, 0x4, 0x3, 0x3, 0x10000, 0x8, 0xf9d, 0x400, 0x80000001, 0x10, 0x3, 0x7fffffff, 0x7, 0x7, 0x349f, 0xe7, 0xc, 0x8, 0x81, 0x1, 0x9, 0xb, 0x7, 0x1, 0x7fff, 0x7, 0x1, 0x0, 0x1, 0x0, 0x3, 0x7, 0x6, 0x10000, 0x5, 0x3, 0x3ff, 0x2288, 0x6c, 0x101, 0x3, 0x85, 0x6, 0x1, 0x4, 0xc8, 0xff, 0x5, 0x15, 0x6, 0x5, 0x5, 0xe3f, 0x1000, 0x3, 0x3, 0x4, 0x10001, 0xab, 0x0, 0x7, 0x5, 0x1, 0xffff, 0xfffffffe, 0x10001, 0xe68, 0x2, 0x4f, 0x9, 0xe, 0x40, 0x80, 0x10000, 0xb, 0x8000, 0x7, 0x1ff, 0x800, 0x74ad, 0x7, 0x6, 0xe2e, 0x8, 0x101, 0x5, 0x8, 0x10, 0x7f, 0x7, 0x3, 0x5, 0x3, 0x8, 0x401, 0x1, 0x81, 0x0, 0xfff, 0x4, 0x5, 0x0, 0xf01, 0x7, 0x2, 0x3afa, 0x8dfb, 0xb, 0x4, 0x8, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0xa04, 0x4, 0x2, {0xb, 0x0, 0x9, 0x6, 0x2, 0x3}, {0x2, 0x0, 0x1, 0x6, 0x3, 0x7}, 0x8, 0x1, 0x4}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500), 0x4) write(r0, &(0x7f0000000100)="060000000300010000", 0x9) 37.896197825s ago: executing program 5 (id=1233): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 36.835647197s ago: executing program 5 (id=1236): socket(0x10, 0x803, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040), 0x0) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 35.82001667s ago: executing program 5 (id=1241): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_usb_disconnect(0xffffffffffffffff) futex(0x0, 0x7, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x431, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4f, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b80)=@newtfilter={0x478, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0xe}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffff482, 0x9, 0x0, 0x6, 0x3, 0x2, 0x0, 0x3d, 0x80, 0x28, 0x1005, 0x4, 0x4, 0x0, 0x5, 0x6, 0xe, 0x10, 0x8000, 0x8a3c, 0x7, 0x5f, 0xfffffffb, 0x80000000, 0xc, 0x6, 0x6, 0x0, 0x8, 0x4567f271, 0x6, 0x5, 0xd509, 0x6, 0x1000, 0x762b00, 0x6b54e9f7, 0xc1d, 0x6ca, 0xa, 0xf5f8, 0x48f, 0x8000, 0xefbb, 0x10000, 0x1, 0x3ff, 0xc650, 0xd7, 0xfb80, 0x0, 0x1000, 0x10, 0x2cfd, 0x3, 0xa, 0x6, 0x9, 0x74c, 0xffffffff, 0x9, 0x8, 0x9, 0x3, 0x5, 0x7, 0x3, 0x0, 0x8, 0x10000, 0x7b, 0x2a, 0x8000, 0x8, 0x8, 0x1000, 0x5, 0x6, 0x3, 0xb, 0xfffffffa, 0x0, 0x2, 0x8, 0x10, 0x5, 0x7ff, 0x8, 0x86, 0x44, 0x5, 0x3, 0x6, 0x739, 0x7ff, 0xcc3c, 0x0, 0xf68f, 0x7, 0x5, 0x3, 0xfffffffa, 0xc82, 0xac, 0x5, 0xd6, 0x1, 0x8, 0x882, 0x6, 0x80000000, 0x3df, 0x9, 0x3, 0x9, 0x7, 0x9, 0x7, 0x7, 0x7, 0x49, 0x80000001, 0x9, 0x8, 0x10000, 0x7, 0x0, 0x0, 0xda53000, 0xfffffffc, 0xfffff800, 0x80, 0x0, 0x3, 0x9, 0xb, 0x0, 0x0, 0x2, 0xf, 0x5, 0x1013dd8d, 0xa80e, 0x365, 0x1, 0x4, 0x3, 0x3, 0x10000, 0x8, 0xf9d, 0x400, 0x80000001, 0x10, 0x3, 0x7fffffff, 0x7, 0x7, 0x349f, 0xe7, 0xc, 0x8, 0x81, 0x1, 0x9, 0xb, 0x7, 0x1, 0x7fff, 0x7, 0x1, 0x0, 0x1, 0x0, 0x3, 0x7, 0x6, 0x10000, 0x5, 0x3, 0x3ff, 0x2288, 0x6c, 0x101, 0x3, 0x85, 0x6, 0x1, 0x4, 0xc8, 0xff, 0x5, 0x15, 0x6, 0x5, 0x5, 0xe3f, 0x1000, 0x3, 0x3, 0x4, 0x10001, 0xab, 0x0, 0x7, 0x5, 0x1, 0xffff, 0xfffffffe, 0x10001, 0xe68, 0x2, 0x4f, 0x9, 0xe, 0x40, 0x80, 0x10000, 0xb, 0x8000, 0x7, 0x1ff, 0x800, 0x74ad, 0x7, 0x6, 0xe2e, 0x8, 0x101, 0x5, 0x8, 0x10, 0x7f, 0x7, 0x3, 0x5, 0x3, 0x8, 0x401, 0x1, 0x81, 0x0, 0xfff, 0x4, 0x5, 0x0, 0xf01, 0x7, 0x2, 0x3afa, 0x8dfb, 0xb, 0x4, 0x8, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0xa04, 0x4, 0x2, {0xb, 0x0, 0x9, 0x6, 0x2, 0x3}, {0x2, 0x0, 0x1, 0x6, 0x3, 0x7}, 0x8, 0x1, 0x4}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500), 0x4) write(r0, &(0x7f0000000100)="060000000300010000", 0x9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000140)={0x6, 'veth0_virt_wifi\x00', {0x4f8}, 0xe54}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xff7f, 0x4, 0x3ff, 0x7, 0x9}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6, 0x3}, 0x8) 35.654338026s ago: executing program 6 (id=1189): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) futex(0x0, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[], [{@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\'-'}}, {@uid_gt}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x39, 0x30, 0x36, 0x69, 0x36, 0x30], 0x2d, [0x65, 0x56, 0x38, 0x32], 0x2d, [0x37, 0x39, 0x66, 0x31], 0x2d, [0x30, 0x39, 0x31, 0x36], 0x2d, [0x62, 0x35, 0x63, 0x62, 0x31, 0x62, 0x36, 0x38]}}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 35.110253305s ago: executing program 6 (id=1244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {0x0, 0xfff1}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x75df, 0xffffffffffffffff, 0x55ef, 0x5}, 0x19}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, 0x0}, 0x8000) 34.811416971s ago: executing program 5 (id=1246): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 33.922903905s ago: executing program 5 (id=1252): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) sendmsg$nl_route(r0, 0x0, 0xc080) 32.602729685s ago: executing program 6 (id=1255): socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x4) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 31.642326365s ago: executing program 34 (id=1255): socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x4) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 31.202627022s ago: executing program 5 (id=1261): r0 = openat$random(0xffffffffffffff9c, 0x0, 0x2c2840, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0xa, 0x0) chown(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[], 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 30.959807195s ago: executing program 35 (id=1261): r0 = openat$random(0xffffffffffffff9c, 0x0, 0x2c2840, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0xa, 0x0) chown(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[], 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 14.378443958s ago: executing program 2 (id=1317): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a0000000004000002000000020000000000000001000000000000000000000000000000000000000000000000000000020100000000") ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c8"], 0x15) ioctl(r1, 0x40140921, &(0x7f0000000440)="02000000010000") pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 14.276726471s ago: executing program 8 (id=1262): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 13.636305941s ago: executing program 2 (id=1320): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) dup(r0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) 13.562282927s ago: executing program 8 (id=1321): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) dup(r0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002600)={0x0, 0x0, "8ef11670764929adde2ed4400fae9b48c777917822452397cd2e7848dc668a9d7f65a91b486f24ad094d1d9edaa5951d606630ade5810f11b5a1477a26d3459dee8b16c0b607c4d0b2d91caaffeb5983a0d6676b3e5c35b030f33d168ca0b0edff7b667195ac0a0dc4fecd727508d8ab7bd32bfa6694118900b509fb858e1d876e27ca4f76e7292d32824c82763c77f55e56a4f4b3b6cc538195c2b6ab4e71627e373e4cf093047022cd92d6db17a7a21d7ed71d147292dd7f0f44b743857d0bbfc2a1639bd84363a6a05f710c2fb5a85e87e6fd52bc585a322fd8b111e306fcc07f4917d60dc8eba82d8d83b3cfbccd4adae4bd2be2e1d74d27a4930d9ed556", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001600)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}], 0xb, "97451a24bdc556"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x4c80, &(0x7f0000000600)={r9, r8, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) r10 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r10) sendmmsg$inet6(r1, &(0x7f0000000040), 0x0, 0x4048011) 13.516678267s ago: executing program 1 (id=1322): syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000009c0)={0x20, 0xf, 0x2, "abf8"}, 0x0, 0x0, 0x0, 0x0}) 12.747671646s ago: executing program 2 (id=1329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x24}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, 0x0, 0x0) 12.230264279s ago: executing program 2 (id=1331): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendfile(r3, r3, 0x0, 0xe3aa6ea) 12.229834069s ago: executing program 8 (id=1332): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_setup(0x3, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) 12.071635564s ago: executing program 36 (id=1332): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_setup(0x3, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) 11.649065836s ago: executing program 2 (id=1336): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c0501000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 11.537847311s ago: executing program 1 (id=1338): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080) 11.322751448s ago: executing program 2 (id=1340): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r2, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x4014}}, 0x40) 11.153684085s ago: executing program 37 (id=1340): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r2, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x4014}}, 0x40) 11.049464958s ago: executing program 7 (id=1342): setns(0xc9, 0x0) socket(0x2a, 0x2, 0x9) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896) 10.002815528s ago: executing program 1 (id=1344): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 10.002437728s ago: executing program 7 (id=1345): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000001000)="fc4e2ba9", 0x4, 0x1000) pwrite64(r0, &(0x7f0000001004)="01", 0x1, 0x1004) pwrite64(r0, &(0x7f0000001008)="01", 0x1, 0x1008) pwrite64(r0, &(0x7f000000100c)='\b', 0x1, 0x1060) pwrite64(r0, &(0x7f0000001028)="284f2ba9", 0x4, 0x10d8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1.2', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='1:0', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='writem', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000c00)='readonly', 0x8) 9.921249435s ago: executing program 1 (id=1346): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendfile(r3, r3, 0x0, 0xe3aa6ea) 9.813586299s ago: executing program 7 (id=1348): syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000009c0)={0x20, 0xf, 0x2, "abf8"}, 0x0, 0x0, 0x0, 0x0}) 9.354249959s ago: executing program 1 (id=1349): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c0501000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 9.050628506s ago: executing program 1 (id=1350): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='.\x00', 0x0, 0x4010}, 0xfffffe98) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f00000005c0)="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", 0x9da) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0xa, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffda9}}, 0x20) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000000)={0x80000, 0x1}) ioctl$int_in(r1, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000008c0)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r4}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 8.773198637s ago: executing program 38 (id=1350): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='.\x00', 0x0, 0x4010}, 0xfffffe98) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f00000005c0)="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", 0x9da) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0xa, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffda9}}, 0x20) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000000)={0x80000, 0x1}) ioctl$int_in(r1, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000008c0)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r4}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7.942741429s ago: executing program 7 (id=1353): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) futex(0x0, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[], [{@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\'-'}}, {@uid_gt}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x39, 0x30, 0x36, 0x69, 0x36, 0x30], 0x2d, [0x65, 0x56, 0x38, 0x32], 0x2d, [0x37, 0x39, 0x66, 0x31], 0x2d, [0x30, 0x39, 0x31, 0x36], 0x2d, [0x62, 0x35, 0x63, 0x62, 0x31, 0x62, 0x36, 0x38]}}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) 7.286581043s ago: executing program 7 (id=1354): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 6.959724074s ago: executing program 7 (id=1357): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendfile(r3, r3, 0x0, 0xe3aa6ea) 6.743369122s ago: executing program 39 (id=1357): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendfile(r3, r3, 0x0, 0xe3aa6ea) 3.528817126s ago: executing program 9 (id=1366): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x810) 2.244687978s ago: executing program 0 (id=1368): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x24040051}, 0x4c840) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}], 0x3, 0x12002, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x44060) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.244399118s ago: executing program 9 (id=1369): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000001000)="fc4e2ba9", 0x4, 0x1000) pwrite64(r0, &(0x7f0000001004)="01", 0x1, 0x1004) pwrite64(r0, &(0x7f0000001008)="01", 0x1, 0x1008) pwrite64(r0, &(0x7f000000100c)='\b', 0x1, 0x1060) pwrite64(r0, &(0x7f0000001010)="10", 0x1, 0x1080) pwrite64(r0, &(0x7f0000001020)='\b', 0x1, 0x1090) pwrite64(r0, &(0x7f0000001028)="284f2ba9", 0x4, 0x10d8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='md0', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='1:0', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r3, &(0x7f0000000c00)='read', 0x4) 2.090741011s ago: executing program 9 (id=1370): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000001000)="fc4e2ba9", 0x4, 0x1000) pwrite64(r0, &(0x7f0000001004)="01", 0x1, 0x1004) pwrite64(r0, &(0x7f0000001008)="01", 0x1, 0x1008) pwrite64(r0, &(0x7f000000100c)='\b', 0x1, 0x1060) pwrite64(r0, &(0x7f0000001028)="284f2ba9", 0x4, 0x10d8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1.2', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='1:0', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='writemost', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000c00)='readonly', 0x8) 1.923248858s ago: executing program 9 (id=1371): sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x28a38a59, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000), 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 1.794838936s ago: executing program 0 (id=1372): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:test\n', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5\n', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='2\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='65536\n', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/layout\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-ram0/size\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='1024\n', 0x5) write(0xffffffffffffffff, &(0x7f00000006c0)='4096\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram0/ppl_size\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r7, &(0x7f00000007c0)='0\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-ram1/size\x00', 0x1, 0x0) 1.753206436s ago: executing program 9 (id=1373): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040051}, 0x4c840) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}], 0x3, 0x12002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x44060) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.660971085s ago: executing program 0 (id=1374): syz_open_dev$usbfs(0x0, 0x7b, 0x400000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x2}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000000c0)}, {&(0x7f0000000380)="62603751255053ac7e81e3ae273473cc2db9f9ea5035d129608cb6ad759683a3762350bf61835a5f3c49ac0d9961aac0395398f644d8dda76415ad8c3d5eae90b8c1dc2d19ca81b1383d9a0dc840df7f96c2cc486ff6d78475f0bb4166e5f6468f03811d8bdffb470d2bb7f373f771c1398111041d8957590f36940ad63a710f9b6ced4c4a2c4b2f341b541ab9c8fb2f2504725e5d97afceca243bc0b4da1422abc9685bff324561", 0xa8}, {0x0}, {&(0x7f0000000600)="bb9c190d9b943636182de1cddaed8230cdad014491e59c9a3e0bd96ef1c142cb54a0b9a3349ea892f160d7920800a06f51de8007857aeabba60c86047b0ca8c0e74134fa32702b3c12e6fdc347d34e36a025732f4e0db92b4e65b7abbf683dfb281b718a4772cb0ef40b28e890d7763b513f551585033613d45efea8723a98e272994b1bec3c158b4506f04856dd9d6881d742eb1833bf94f13e5b48c8293a4a66fab4d319360164896ccc628dfe7698ab7fb38228a2648de1624bb4f17fc44bd95c63f839fbae6b351fcb4e79a01825b9489b722085a6781f1156", 0xdb}, {&(0x7f0000000700)="38e06615d1064f0bdd99567dd66df8b2a4187fbb592be4390c9a3c497e10a6c3418db11e6ddaa902d139f231e4153063d10f3bf7e5c61b34f6e0f651817ac31fc65fd831c3aed1ce444a2bf7cdb59c0a8cc37d8ddd53b1fddf", 0x59}, {&(0x7f0000000800)="9d9cbeabe91b514335eff6cafbe9519573eb16dcf01690189b65cf924f78005c769cf23cad9e8e0f041802982288475918d6d84f26adf2a39854e4f7f27aaa2209eabf74ae18dd0d9a287d916b83ca7b5d97f363c9ea6bcc", 0x58}, {&(0x7f0000000880)="06c9393e16e2c53bbc1547cb0fbc57655fc0619e5a0961ddc99bc5c3ef2bd96dfb4c294495ae9700b55818c35c76fe3a19a1c6a61156d6e3a7402002088023dc7fcbdf1942fc49952a5491f5ededd6bf87", 0x51}], 0x7, 0x0, 0x0, 0x810}, 0x4040010) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x8000}) r5 = socket(0x400000000010, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'pimreg0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) gettid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r6, 0x2, &(0x7f0000000080)=0x6f5) 748.528866ms ago: executing program 0 (id=1375): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r1, 0x40140921, &(0x7f0000000420)="010000000100000001") ioctl(r1, 0x400c0930, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c8"], 0x15) ioctl(r1, 0x40140921, &(0x7f0000000440)="02000000010000") pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 516.534066ms ago: executing program 9 (id=1376): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x810) 101.003858ms ago: executing program 0 (id=1377): socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='raid5', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='2', 0x1) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='1:0', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r4, &(0x7f0000000a40)='active', 0x6) 0s ago: executing program 0 (id=1378): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:test\n', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5\n', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='2\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='65536\n', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/layout\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-ram0/size\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='1024\n', 0x5) write(0xffffffffffffffff, &(0x7f00000006c0)='4096\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram0/ppl_size\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r7, &(0x7f00000007c0)='0\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-ram1/size\x00', 0x1, 0x0) kernel console output (not intermixed with test programs): 0000000 [ 292.044197][ T7241] R13: 00007f3c99aa0038 R14: 00007f3c99a9ffa0 R15: 00007ffea74d4718 [ 292.052171][ T7241] [ 292.187007][ T13] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 292.216660][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.232855][ T13] usb 5-1: USB disconnect, device number 12 [ 295.221165][ T13] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 295.435955][ T7276] md: could not open device unknown-block(1,0). [ 295.509163][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 295.654248][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.673866][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 295.688133][ T13] usb 5-1: config 1 has no interface number 0 [ 295.699627][ T7281] md: could not open device unknown-block(1,0). [ 295.706020][ T13] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.750470][ T7283] loop2: detected capacity change from 0 to 512 [ 295.771950][ T7283] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 295.789138][ T7283] System zones: 1-12 [ 295.794625][ T7283] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.869: missing EA_INODE flag [ 295.807065][ T7283] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.869: error while reading EA inode 12 err=-117 [ 295.825291][ T7283] EXT4-fs (loop2): 1 orphan inode deleted [ 295.831662][ T7283] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 295.849108][ T4260] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 295.924266][ T13] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 295.939493][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.958631][ T7289] md: could not open device unknown-block(1,0). [ 295.972484][ T13] usb 5-1: Product: syz [ 295.981119][ T13] usb 5-1: Manufacturer: syz [ 296.000116][ T13] usb 5-1: SerialNumber: syz [ 296.449122][ T4260] usb 1-1: Using ep0 maxpacket: 8 [ 296.842344][ T4260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.861247][ T4260] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 296.878023][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.727134][ T13] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 297.961322][ T4260] usb 1-1: config 0 descriptor?? [ 298.247872][ T4260] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 298.700608][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.703704][ T4260] usb 1-1: USB disconnect, device number 10 [ 298.717581][ T13] usb 5-1: USB disconnect, device number 13 [ 298.731058][ T7306] loop4: detected capacity change from 0 to 1024 [ 298.972720][ T7306] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 298.982884][ T7306] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 298.993562][ T7313] loop1: detected capacity change from 0 to 512 [ 299.247014][ T7306] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 299.271556][ T7313] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e019, mo2=0002] [ 299.324553][ T7306] System zones: 0-1, 3-36 [ 299.373697][ T7313] System zones: 1-12 [ 299.516353][ T7306] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 299.551386][ T7313] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.879: missing EA_INODE flag [ 299.614557][ T7313] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.879: error while reading EA inode 12 err=-117 [ 299.661840][ T7313] EXT4-fs (loop1): 1 orphan inode deleted [ 299.667580][ T7313] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,nombcache,usrjquota=,nogrpid,,errors=continue. Quota mode: writeback. [ 299.710427][ T25] audit: type=1800 audit(1790451123.755:1717): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.877" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 300.731194][ T4311] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 301.131294][ T4311] usb 3-1: Using ep0 maxpacket: 8 [ 301.279160][ T4311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.298405][ T4311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.343491][ T4311] usb 3-1: config 1 has no interface number 0 [ 301.364573][ T4311] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.579958][ T4311] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 301.601948][ T4311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.624951][ T4311] usb 3-1: Product: syz [ 301.639867][ T4311] usb 3-1: Manufacturer: syz [ 301.654139][ T4311] usb 3-1: SerialNumber: syz [ 302.513900][ T7354] md: could not open device unknown-block(1,0). [ 302.676549][ T4311] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 302.700378][ T4311] usb 3-1: USB disconnect, device number 13 [ 302.909235][ T4260] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 303.179630][ T4260] usb 2-1: Using ep0 maxpacket: 8 [ 303.299849][ T4260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 303.385975][ T4260] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 303.431751][ T4260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.466983][ T4260] usb 2-1: config 0 descriptor?? [ 303.558517][ T7376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.631883][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.648527][ T7378] loop2: detected capacity change from 0 to 512 [ 303.697706][ T7378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 303.709304][ T7378] System zones: 1-12 [ 303.728041][ T7378] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.896: missing EA_INODE flag [ 303.740225][ T4260] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 303.751232][ T7378] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.896: error while reading EA inode 12 err=-117 [ 303.769201][ T4290] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 303.779982][ T7378] EXT4-fs (loop2): 1 orphan inode deleted [ 303.785893][ T7378] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 304.201249][ T4290] usb 4-1: Using ep0 maxpacket: 8 [ 304.739252][ T4290] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.769829][ T4290] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.816432][ T4290] usb 4-1: config 1 has no interface number 0 [ 304.865606][ T4290] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.418474][ T4311] usb 2-1: USB disconnect, device number 11 [ 305.529350][ T4290] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 305.556465][ T4290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.574812][ T4290] usb 4-1: Product: syz [ 305.595097][ T4290] usb 4-1: Manufacturer: syz [ 305.599932][ T4290] usb 4-1: SerialNumber: syz [ 305.779189][ T4260] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 305.887078][ T7400] FAULT_INJECTION: forcing a failure. [ 305.887078][ T7400] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 305.900529][ T7400] CPU: 0 PID: 7400 Comm: syz.4.900 Not tainted syzkaller #0 [ 305.907816][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.917869][ T7400] Call Trace: [ 305.921142][ T7400] [ 305.924067][ T7400] dump_stack_lvl+0x188/0x250 [ 305.928749][ T7400] ? show_regs_print_info+0x20/0x20 [ 305.933949][ T7400] ? load_image+0x410/0x410 [ 305.938459][ T7400] should_fail+0x383/0x4b0 [ 305.942877][ T7400] prepare_alloc_pages+0x1e3/0x5b0 [ 305.947992][ T7400] __alloc_pages+0x11b/0x480 [ 305.952580][ T7400] ? zone_statistics+0x170/0x170 [ 305.957517][ T7400] ? rcu_lock_acquire+0x30/0x30 [ 305.962366][ T7400] ? alloc_pages+0x452/0x560 [ 305.966962][ T7400] __get_free_pages+0x8/0x30 [ 305.971551][ T7400] __tlb_remove_page_size+0x1f2/0x3f0 [ 305.976926][ T7400] unmap_page_range+0xfcf/0x2410 [ 305.981893][ T7400] unmap_vmas+0x131/0x250 [ 305.986221][ T7400] ? unmap_page_range+0x2410/0x2410 [ 305.991417][ T7400] ? __mutex_lock_common+0x435/0x2400 [ 305.996788][ T7400] ? exit_mm_release+0x16/0x30 [ 306.001563][ T7400] exit_mmap+0x3b9/0x640 [ 306.005804][ T7400] ? vm_brk+0x20/0x20 [ 306.009800][ T7400] ? uprobe_clear_state+0x2f6/0x460 [ 306.015002][ T7400] __mmput+0x115/0x390 [ 306.019074][ T7400] exit_mm+0x632/0x7b0 [ 306.023136][ T7400] ? perf_pmu_migrate_context+0xb70/0xb70 [ 306.028858][ T7400] ? do_exit+0x2110/0x2110 [ 306.033280][ T7400] ? __ia32_sys_timer_delete+0x40/0x40 [ 306.038736][ T7400] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 306.044201][ T7400] ? tty_audit_exit+0x149/0x1f0 [ 306.049056][ T7400] do_exit+0x5b8/0x2110 [ 306.053221][ T7400] ? put_task_struct+0x80/0x80 [ 306.057988][ T7400] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 306.063977][ T7400] ? _raw_spin_lock_irq+0xb7/0xf0 [ 306.069004][ T7400] do_group_exit+0x12c/0x2f0 [ 306.073595][ T7400] ? lockdep_hardirqs_on+0x94/0x140 [ 306.078793][ T7400] get_signal+0x7eb/0x12e0 [ 306.083226][ T7400] arch_do_signal_or_restart+0xe6/0x12a0 [ 306.088876][ T7400] ? futex_exit_release+0x1c0/0x1c0 [ 306.094076][ T7400] ? get_sigframe_size+0x10/0x10 [ 306.099019][ T7400] ? __context_tracking_exit+0x4c/0x80 [ 306.104488][ T7400] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 306.110474][ T7400] ? exit_to_user_mode_loop+0x3b/0x130 [ 306.115933][ T7400] exit_to_user_mode_loop+0x9e/0x130 [ 306.121220][ T7400] exit_to_user_mode_prepare+0xee/0x180 [ 306.126773][ T7400] syscall_exit_to_user_mode+0x16/0x40 [ 306.132232][ T7400] do_syscall_64+0x58/0xa0 [ 306.136659][ T7400] ? clear_bhb_loop+0x30/0x80 [ 306.141333][ T7400] ? clear_bhb_loop+0x30/0x80 [ 306.146010][ T7400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 306.151905][ T7400] RIP: 0033:0x7fea6dbc5159 [ 306.156319][ T7400] Code: Unable to access opcode bytes at RIP 0x7fea6dbc512f. [ 306.163676][ T7400] RSP: 002b:00007fea6be1d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 306.163871][ T4260] usb 3-1: Using ep0 maxpacket: 8 [ 306.172084][ T7400] RAX: fffffffffffffe00 RBX: 00007fea6de4cfa8 RCX: 00007fea6dbc5159 [ 306.172113][ T7400] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fea6de4cfa8 [ 306.172125][ T7400] RBP: 00007fea6de4cfa0 R08: 0000000000000000 R09: 0000000000000000 [ 306.172136][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.172146][ T7400] R13: 00007fea6de4d038 R14: 00007ffdc86b8420 R15: 00007ffdc86b8508 [ 306.172169][ T7400] [ 306.283296][ T4290] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 307.589225][ T4260] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.600932][ T4290] usb 4-1: USB disconnect, device number 15 [ 307.607303][ T4260] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.642479][ T7414] loop1: detected capacity change from 0 to 512 [ 307.751480][ T7414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 307.771368][ T7414] System zones: 1-12 [ 307.787158][ T4260] usb 3-1: config 1 has no interface number 0 [ 307.794840][ T7414] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.904: missing EA_INODE flag [ 307.809068][ T4260] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.821216][ T7414] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.904: error while reading EA inode 12 err=-117 [ 307.834818][ T7414] EXT4-fs (loop1): 1 orphan inode deleted [ 307.849292][ T7414] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 308.125395][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.709564][ T4260] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 310.722860][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.165041][ T4260] usb 3-1: Product: syz [ 311.199092][ T4260] usb 3-1: Manufacturer: syz [ 311.309312][ T4260] usb 3-1: can't set config #1, error -71 [ 311.367227][ T4260] usb 3-1: USB disconnect, device number 14 [ 311.984341][ T4290] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 312.319217][ T4290] usb 2-1: Using ep0 maxpacket: 8 [ 312.459413][ T4290] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.506535][ T4290] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.544505][ T4290] usb 2-1: config 1 has no interface number 0 [ 312.564409][ T4290] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.769396][ T4290] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 312.782820][ T4290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.791706][ T4290] usb 2-1: Product: syz [ 312.796188][ T4290] usb 2-1: Manufacturer: syz [ 312.802705][ T4290] usb 2-1: SerialNumber: syz [ 312.821057][ T7456] loop2: detected capacity change from 0 to 512 [ 312.948906][ T7456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e019, mo2=0002] [ 313.089798][ T7456] System zones: 1-12 [ 313.130320][ T7456] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.916: missing EA_INODE flag [ 313.291391][ T7456] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.916: error while reading EA inode 12 err=-117 [ 313.463950][ T7456] EXT4-fs (loop2): 1 orphan inode deleted [ 313.512116][ T7456] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,nombcache,usrjquota=,nogrpid,,errors=continue. Quota mode: writeback. [ 313.789161][ T7464] device syzkaller0 entered promiscuous mode [ 314.524345][ T4290] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 314.533900][ T4290] usb 2-1: USB disconnect, device number 12 [ 314.680655][ T146] Bluetooth: Frame is too long (len 16, expected len 4) [ 314.718623][ T7475] md: could not open device unknown-block(1,0). [ 314.761001][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.699969][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.706291][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.965237][ T7492] loop2: detected capacity change from 0 to 512 [ 318.043083][ T7492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e019, mo2=0002] [ 318.051178][ T7492] System zones: 1-12 [ 318.120087][ T7492] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.925: missing EA_INODE flag [ 318.139774][ T7492] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.925: error while reading EA inode 12 err=-117 [ 318.209963][ T7492] EXT4-fs (loop2): 1 orphan inode deleted [ 318.215683][ T7492] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,nombcache,usrjquota=,nogrpid,,errors=continue. Quota mode: writeback. [ 319.864717][ T7518] device syzkaller0 entered promiscuous mode [ 319.994485][ T7520] md: could not open device unknown-block(1,0). [ 320.099978][ T4290] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 320.579765][ T4290] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 320.646083][ T4290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.823136][ T4290] usb 3-1: config 0 descriptor?? [ 320.883992][ T7534] loop4: detected capacity change from 0 to 512 [ 320.965295][ T7534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 321.001052][ T7534] System zones: 1-12 [ 321.034073][ T7534] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.938: missing EA_INODE flag [ 321.073445][ T7534] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.938: error while reading EA inode 12 err=-117 [ 321.107297][ T7534] EXT4-fs (loop4): 1 orphan inode deleted [ 321.124603][ T7534] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 323.311042][ T4290] usb 3-1: USB disconnect, device number 15 [ 323.417718][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'. [ 323.508567][ T7555] device veth3 entered promiscuous mode [ 323.663536][ T7566] device syzkaller0 entered promiscuous mode [ 323.950373][ T7573] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 324.028195][ T7573] netlink: 'syz.1.949': attribute type 1 has an invalid length. [ 324.212318][ T7573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.266973][ T7579] device bond1 entered promiscuous mode [ 324.327074][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'. [ 325.034432][ T7591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.944289][ T7615] loop2: detected capacity change from 0 to 128 [ 330.111203][ T7617] overlayfs: missing 'workdir' [ 331.093849][ T7618] FAULT_INJECTION: forcing a failure. [ 331.093849][ T7618] name failslab, interval 1, probability 0, space 0, times 0 [ 332.064085][ T7618] CPU: 0 PID: 7618 Comm: syz.4.964 Not tainted syzkaller #0 [ 332.071411][ T7618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.081469][ T7618] Call Trace: [ 332.084746][ T7618] [ 332.087674][ T7618] dump_stack_lvl+0x188/0x250 [ 332.092354][ T7618] ? show_regs_print_info+0x20/0x20 [ 332.097552][ T7618] ? load_image+0x410/0x410 [ 332.102060][ T7618] ? __lock_acquire+0x7b50/0x7b50 [ 332.107096][ T7618] ? ktime_get_coarse_real_ts64+0x106/0x120 [ 332.109320][ T4232] Bluetooth: hci5: command 0x0409 tx timeout [ 332.112994][ T7618] should_fail+0x383/0x4b0 [ 332.123369][ T7618] should_failslab+0x5/0x20 [ 332.127875][ T7618] slab_pre_alloc_hook+0x51/0xc0 [ 332.132818][ T7618] __kmalloc+0x6b/0x340 [ 332.136973][ T7618] ? iter_file_splice_write+0x1a0/0xcf0 [ 332.142525][ T7618] iter_file_splice_write+0x1a0/0xcf0 [ 332.147893][ T7618] ? shmem_file_read_iter+0x7d6/0xa80 [ 332.153275][ T7618] ? splice_from_pipe+0x180/0x180 [ 332.158290][ T7618] ? generic_file_splice_read+0x463/0x5f0 [ 332.164005][ T7618] ? splice_shrink_spd+0xc0/0xc0 [ 332.168947][ T7618] ? splice_from_pipe+0x180/0x180 [ 332.173968][ T7618] direct_splice_actor+0xe1/0x130 [ 332.178999][ T7618] splice_direct_to_actor+0x4e8/0xc00 [ 332.184372][ T7618] ? direct_file_splice_eof+0xa0/0xa0 [ 332.189746][ T7618] ? pipe_to_sendpage+0x320/0x320 [ 332.194766][ T7618] ? common_file_perm+0x171/0x1c0 [ 332.199784][ T7618] ? fsnotify_perm+0x5d/0x560 [ 332.204453][ T7618] ? security_file_permission+0x75/0xa0 [ 332.210001][ T7618] do_splice_direct+0x1d4/0x2f0 [ 332.214853][ T7618] ? splice_direct_to_actor+0xc00/0xc00 [ 332.220395][ T7618] ? rcu_read_lock_any_held+0xb0/0x130 [ 332.225862][ T7618] ? do_splice_direct+0x2f0/0x2f0 [ 332.230890][ T7618] ? common_file_perm+0x171/0x1c0 [ 332.235927][ T7618] do_sendfile+0x524/0xe30 [ 332.240358][ T7618] ? do_pwritev+0x3a0/0x3a0 [ 332.244870][ T7618] ? __might_fault+0xb3/0x110 [ 332.249556][ T7618] ? _copy_from_user+0x111/0x170 [ 332.254499][ T7618] __se_sys_sendfile64+0xdc/0x1a0 [ 332.259527][ T7618] ? lock_chain_count+0x20/0x20 [ 332.264391][ T7618] ? __x64_sys_sendfile64+0xa0/0xa0 [ 332.269604][ T7618] ? lockdep_hardirqs_on+0x94/0x140 [ 332.274806][ T7618] do_syscall_64+0x4c/0xa0 [ 332.279201][ T7618] ? clear_bhb_loop+0x30/0x80 [ 332.283858][ T7618] ? clear_bhb_loop+0x30/0x80 [ 332.288518][ T7618] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 332.294391][ T7618] RIP: 0033:0x7fea6dbc5159 [ 332.298787][ T7618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.318365][ T7618] RSP: 002b:00007fea6bdfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 332.326758][ T7618] RAX: ffffffffffffffda RBX: 00007fea6de4d090 RCX: 00007fea6dbc5159 [ 332.334716][ T7618] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 332.342678][ T7618] RBP: 00007fea6dc5c06b R08: 0000000000000000 R09: 0000000000000000 [ 332.350638][ T7618] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000000 [ 332.358585][ T7618] R13: 00007fea6de4d128 R14: 00007fea6de4d090 R15: 00007ffdc86b8508 [ 332.366542][ T7618] [ 335.077613][ T4260] Bluetooth: hci5: command 0x041b tx timeout [ 336.128447][ T7612] chnl_net:caif_netlink_parms(): no params data found [ 337.169284][ T4260] Bluetooth: hci5: command 0x040f tx timeout [ 337.284296][ T7612] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.291535][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.299853][ T7612] device bridge_slave_0 entered promiscuous mode [ 337.307926][ T7612] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.315301][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.323527][ T7612] device bridge_slave_1 entered promiscuous mode [ 337.977779][ T7612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.998545][ T7612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.109215][ T4186] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 338.146738][ T7612] team0: Port device team_slave_0 added [ 338.164682][ T7612] team0: Port device team_slave_1 added [ 338.217030][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.265802][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.369107][ T4186] usb 3-1: Using ep0 maxpacket: 8 [ 338.371725][ T7612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.403921][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.429047][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.485084][ T7612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.499353][ T4186] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.536251][ T4186] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.569055][ T4186] usb 3-1: config 1 has no interface number 0 [ 338.575151][ T4186] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.604187][ T7612] device hsr_slave_0 entered promiscuous mode [ 338.633275][ T7675] md: could not open device unknown-block(1,0). [ 338.641441][ T7612] device hsr_slave_1 entered promiscuous mode [ 338.681935][ T7612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.701956][ T7612] Cannot create hsr debugfs directory [ 338.814565][ T4186] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 338.834023][ T4186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.868491][ T4186] usb 3-1: Product: syz [ 338.886628][ T4186] usb 3-1: Manufacturer: syz [ 338.909713][ T4186] usb 3-1: SerialNumber: syz [ 339.144909][ T7612] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 339.181623][ T7612] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 339.203240][ T7612] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 339.235977][ T7612] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 339.347733][ T4845] device hsr_slave_0 left promiscuous mode [ 339.349361][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 339.369291][ T7696] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 339.378289][ T4845] device hsr_slave_1 left promiscuous mode [ 341.013651][ T4186] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 341.070245][ T4186] usb 3-1: USB disconnect, device number 16 [ 341.152865][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.298999][ T7719] loop4: detected capacity change from 0 to 512 [ 341.480025][ T7719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 341.542556][ T4845] bond0 (unregistering): Released all slaves [ 341.615581][ T7719] System zones: 1-12 [ 341.762994][ T7719] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.982: missing EA_INODE flag [ 341.813082][ T7719] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.982: error while reading EA inode 12 err=-117 [ 341.964379][ T7719] EXT4-fs (loop4): 1 orphan inode deleted [ 342.042499][ T7719] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 343.196121][ T7737] loop2: detected capacity change from 0 to 512 [ 343.219680][ T7612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.309099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.316961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.385727][ T7612] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.402989][ T7737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e019, mo2=0002] [ 343.443369][ T7737] System zones: 1-12 [ 343.474557][ T7737] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.985: missing EA_INODE flag [ 343.487367][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.507128][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.529116][ T4290] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 343.565330][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.572437][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.595644][ T7737] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.985: error while reading EA inode 12 err=-117 [ 343.655315][ T7737] EXT4-fs (loop2): 1 orphan inode deleted [ 343.686022][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.699268][ T7737] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,nombcache,usrjquota=,nogrpid,,errors=continue. Quota mode: writeback. [ 343.730177][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.770249][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.777311][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.010789][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 344.032073][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.040533][ T4290] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.051456][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.063593][ T4290] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 344.084470][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.095822][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.104572][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.108971][ T4290] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.137693][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.158165][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.214626][ T7612] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.246648][ T7612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.287405][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.309413][ T4290] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 344.310383][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.334832][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.342610][ T4290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 344.366971][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.367342][ T4290] usb 2-1: Product: syz [ 344.389210][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.412707][ T4290] usb 2-1: Manufacturer: syz [ 344.663306][ T7739] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 344.825665][ T4290] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 345.085662][ T4290] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 347.314394][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.322572][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.335848][ T7612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.406509][ T4290] usb 2-1: USB disconnect, device number 13 [ 347.666316][ T4290] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 347.895620][ T4290] garmin_gps 2-1:1.0: device disconnected [ 348.213395][ T7800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.249364][ T7788] sctp: failed to load transform for md5: -2 [ 349.375205][ T4228] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 349.774170][ T2297] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 349.834481][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.843245][ T4228] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.859714][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.878111][ T4228] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 349.918252][ T7612] device veth0_vlan entered promiscuous mode [ 349.943453][ T4228] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.974367][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.989707][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 350.013795][ T7612] device veth1_vlan entered promiscuous mode [ 350.031542][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 350.049876][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 350.078351][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 350.140071][ T4228] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 350.164939][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 350.179051][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 350.209435][ T2297] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.229708][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 350.247962][ T4228] usb 5-1: Product: syz [ 350.252360][ T2297] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 350.279075][ T4228] usb 5-1: Manufacturer: syz [ 350.284050][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 350.303606][ T2297] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.336320][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 350.366373][ T7612] device veth0_macvtap entered promiscuous mode [ 350.373211][ T7802] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 350.400313][ T4228] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 350.415191][ T7612] device veth1_macvtap entered promiscuous mode [ 350.430797][ T4228] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 350.522598][ T7612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.560726][ T2297] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 350.579415][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 350.587567][ T2297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 350.602252][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 350.657137][ T2297] usb 3-1: Product: syz [ 350.662108][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 350.698850][ T2297] usb 3-1: Manufacturer: syz [ 350.715531][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.739652][ T13] usb 5-1: USB disconnect, device number 14 [ 350.749762][ T7822] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 350.767208][ T13] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 350.785291][ T7612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.794284][ T2297] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 350.832080][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 350.857955][ T2297] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB1 [ 350.878172][ T13] garmin_gps 5-1:1.0: device disconnected [ 350.891588][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.979726][ T7612] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.055917][ T7612] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.101317][ T7612] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.380498][ T7612] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.500354][ T2297] usb 3-1: USB disconnect, device number 17 [ 351.530194][ T2297] garmin_gps ttyUSB1: Garmin GPS usb/tty converter now disconnected from ttyUSB1 [ 351.542618][ T2297] garmin_gps 3-1:1.0: device disconnected [ 351.676760][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.696432][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'. [ 351.700541][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.726414][ T7862] device veth3 entered promiscuous mode [ 351.739243][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 351.787962][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.810777][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.829579][ T4290] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 351.841183][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 351.988191][ T7874] device syzkaller0 entered promiscuous mode [ 352.089131][ T4290] usb 5-1: Using ep0 maxpacket: 8 [ 352.212791][ T146] Bluetooth: Frame is too long (len 16, expected len 4) [ 352.220577][ T4290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.246843][ T4290] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 352.259138][ T4290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.280700][ T4290] usb 5-1: config 0 descriptor?? [ 352.369134][ T4306] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 352.551676][ T4290] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 352.965049][ T4293] usb 5-1: USB disconnect, device number 15 [ 353.251973][ T7902] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 353.258835][ T7896] md: could not open device unknown-block(1,0). [ 353.265857][ T7902] netlink: 'syz.5.1012': attribute type 1 has an invalid length. [ 353.319458][ T146] Bluetooth: Frame is too long (len 16, expected len 4) [ 353.371439][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1013'. [ 353.437491][ T7904] device veth3 entered promiscuous mode [ 353.559275][ T4306] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.579850][ T4306] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 353.595234][ T4306] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.647753][ T7924] device syzkaller0 entered promiscuous mode [ 353.754291][ T4306] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 353.763747][ T4186] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 353.784769][ T4306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 353.796129][ T4306] usb 2-1: Product: syz [ 353.802069][ T4306] usb 2-1: Manufacturer: syz [ 353.839491][ T7880] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 353.860371][ T4306] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 353.886094][ T4306] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 354.169290][ T4186] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.275386][ T7954] loop4: detected capacity change from 0 to 128 [ 356.112622][ T4186] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 357.506522][ T4186] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.769161][ T2297] usb 2-1: USB disconnect, device number 14 [ 357.863802][ T2297] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 357.873546][ T4186] usb 3-1: string descriptor 0 read error: -71 [ 357.881450][ T4186] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 357.936992][ T2297] garmin_gps 2-1:1.0: device disconnected [ 357.943152][ T4186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 357.959688][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1029'. [ 358.083050][ T7961] device veth3 entered promiscuous mode [ 358.089458][ T4186] usb 3-1: can't set config #1, error -71 [ 358.105465][ T4186] usb 3-1: USB disconnect, device number 18 [ 358.501297][ T7980] device syzkaller0 entered promiscuous mode [ 360.398493][ T8020] md: could not open device unknown-block(1,0). [ 360.599118][ T4293] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 360.629373][ T4232] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 360.688378][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 360.769416][ T4290] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 360.839242][ T4293] usb 5-1: Using ep0 maxpacket: 8 [ 360.960507][ T4293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.033478][ T4293] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 361.049654][ T4232] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.120165][ T4232] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 361.149487][ T4290] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.196211][ T4293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.235359][ T8025] device veth5 entered promiscuous mode [ 361.249896][ T4290] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 361.259982][ T4232] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.273590][ T4290] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.293525][ T4293] usb 5-1: config 0 descriptor?? [ 361.419992][ T4290] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 361.429603][ T4290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 361.437825][ T4290] usb 2-1: Product: syz [ 361.442847][ T4232] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 361.468156][ T4290] usb 2-1: Manufacturer: syz [ 361.476595][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 361.516428][ T8031] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 361.640909][ T4290] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 361.648293][ T4232] usb 6-1: Product: syz [ 361.653921][ T4293] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 361.664288][ T4232] usb 6-1: Manufacturer: syz [ 361.673384][ T4290] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 363.079799][ T8016] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 363.102889][ T4232] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 364.077172][ T4186] usb 2-1: USB disconnect, device number 15 [ 364.514595][ T8066] device syzkaller0 entered promiscuous mode [ 364.533629][ T4186] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 364.533644][ T4232] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB1 [ 364.557930][ T4186] garmin_gps 2-1:1.0: device disconnected [ 364.566009][ T8065] syzkaller0: mtu less than device minimum [ 364.590751][ T4232] usb 6-1: USB disconnect, device number 2 [ 364.608750][ T13] usb 5-1: USB disconnect, device number 16 [ 364.618982][ T4232] garmin_gps ttyUSB1: Garmin GPS usb/tty converter now disconnected from ttyUSB1 [ 364.721448][ T4232] garmin_gps 6-1:1.0: device disconnected [ 366.214214][ T8110] device syzkaller0 entered promiscuous mode [ 366.302864][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1061'. [ 366.729120][ T4232] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 366.778514][ T8117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.149690][ T4232] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 367.205095][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.243479][ T8120] netlink: 'syz.2.1067': attribute type 1 has an invalid length. [ 367.423202][ T4232] usb 1-1: config 0 descriptor?? [ 367.514002][ T8120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.560965][ T8120] device bond1 entered promiscuous mode [ 369.517719][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1070'. [ 369.622443][ T4260] usb 1-1: USB disconnect, device number 11 [ 369.652374][ T8161] syzkaller0: mtu less than device minimum [ 370.969120][ T4260] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 371.783401][ T8194] netlink: 'syz.1.1083': attribute type 1 has an invalid length. [ 372.089589][ T4260] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.166189][ T4260] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 372.326587][ T4260] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.423900][ T8211] md: could not open device unknown-block(1,0). [ 372.438080][ T8194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.475400][ T8206] device bond2 entered promiscuous mode [ 372.514657][ T8213] syzkaller0: mtu less than device minimum [ 372.599496][ T4260] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 372.608543][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 372.635641][ T4260] usb 1-1: Product: syz [ 372.641830][ T4260] usb 1-1: Manufacturer: syz [ 372.659369][ T8169] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 372.680298][ T4260] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 372.712449][ T4260] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 372.789159][ T2297] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 372.795870][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1089'. [ 372.828210][ T4260] usb 1-1: USB disconnect, device number 12 [ 373.034469][ T4260] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 373.151588][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1091'. [ 373.180959][ T4260] garmin_gps 1-1:1.0: device disconnected [ 373.610264][ T8223] device veth5 entered promiscuous mode [ 374.019172][ T2297] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 374.028238][ T2297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.562046][ T2297] usb 5-1: config 0 descriptor?? [ 374.630645][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 374.655422][ T8254] tipc: Started in network mode [ 374.661037][ T8254] tipc: Node identity 5aaefb8e41b8, cluster identity 4711 [ 375.198461][ T8254] tipc: Enabled bearer , priority 0 [ 375.346774][ T8254] syzkaller0: mtu less than device minimum [ 375.358720][ T8260] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 375.394288][ T8260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.460594][ T8273] device syzkaller0 entered promiscuous mode [ 375.572003][ T8278] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 375.738042][ T8292] overlayfs: missing 'lowerdir' [ 376.009203][ T4293] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 376.303106][ T4260] tipc: Node number set to 454491022 [ 376.372984][ T4260] usb 5-1: USB disconnect, device number 17 [ 376.387559][ T8294] device veth3 left promiscuous mode [ 376.400242][ T4293] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.417573][ T4293] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 376.452510][ T8294] tipc: Resetting bearer [ 376.458248][ T4293] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.491594][ T8294] device syzkaller0 left promiscuous mode [ 376.523516][ T8294] device veth5 left promiscuous mode [ 376.547828][ T8294] device bond1 left promiscuous mode [ 376.589253][ T4293] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 376.598296][ T4293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 376.613343][ T8304] tipc: Started in network mode [ 376.618225][ T8304] tipc: Node identity 96fd3e727cda, cluster identity 4711 [ 376.644122][ T4293] usb 1-1: Product: syz [ 376.648319][ T4293] usb 1-1: Manufacturer: syz [ 376.676916][ T8304] tipc: Enabled bearer , priority 0 [ 378.647875][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.656076][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.077209][ T4186] tipc: Node number set to 3928440434 [ 379.098552][ T8317] tipc: Resetting bearer [ 379.408695][ T8301] tipc: Disabling bearer [ 379.419890][ T4293] usb 1-1: can't set config #1, error -71 [ 379.430012][ T4293] usb 1-1: USB disconnect, device number 13 [ 379.557879][ T8326] netlink: 'syz.1.1115': attribute type 1 has an invalid length. [ 379.835080][ T8326] 8021q: adding VLAN 0 to HW filter on device bond3 [ 380.074806][ T8340] device bond3 entered promiscuous mode [ 380.407900][ T8353] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 380.457969][ T8353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.710651][ T8353] device bond1 entered promiscuous mode [ 381.897736][ T8381] tipc: Enabled bearer , priority 0 [ 381.965027][ T25] audit: type=1326 audit(1790451206.005:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.2.1133" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa122a9159 code=0x0 [ 382.025842][ T8381] tipc: Resetting bearer [ 382.086946][ T8375] tipc: Disabling bearer [ 383.317701][ T8424] loop2: detected capacity change from 0 to 512 [ 383.648556][ T8424] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 384.048706][ T8424] System zones: 1-12 [ 384.090921][ T8424] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1138: missing EA_INODE flag [ 384.110921][ T8424] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1138: error while reading EA inode 12 err=-117 [ 384.131412][ T8424] EXT4-fs (loop2): 1 orphan inode deleted [ 384.172701][ T8424] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 384.340603][ T8439] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 384.349857][ T8442] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 384.395330][ T8442] netlink: 'syz.0.1144': attribute type 1 has an invalid length. [ 385.176724][ T8442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 385.230892][ T8439] netlink: 'syz.5.1143': attribute type 1 has an invalid length. [ 385.292528][ T8439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.301729][ T8444] device bond1 entered promiscuous mode [ 385.312937][ T8442] device bond2 entered promiscuous mode [ 385.527676][ T8467] tipc: Started in network mode [ 385.539450][ T8467] tipc: Node identity b6a515fafd76, cluster identity 4711 [ 385.565388][ T8467] tipc: Enabled bearer , priority 0 [ 385.577923][ T8467] syzkaller0: mtu less than device minimum [ 385.768667][ T2297] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 385.937039][ T8491] loop1: detected capacity change from 0 to 512 [ 386.412954][ T8491] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 386.425277][ T8491] System zones: 1-12 [ 386.443324][ T8491] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1156: missing EA_INODE flag [ 386.465656][ T8491] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1156: error while reading EA inode 12 err=-117 [ 386.525464][ T8491] EXT4-fs (loop1): 1 orphan inode deleted [ 386.531339][ T8491] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 386.606262][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1155'. [ 386.725136][ T8485] device veth7 entered promiscuous mode [ 386.735307][ T4232] tipc: Node number set to 1272124922 [ 387.499193][ T2297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.563448][ T2297] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 387.583374][ T2297] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.695397][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'. [ 387.711891][ T25] audit: type=1326 audit(1790451211.755:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.0.1162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3372d38159 code=0x0 [ 387.764271][ T2297] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 387.787821][ T2297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 387.797128][ T8514] device veth7 entered promiscuous mode [ 387.807912][ T2297] usb 5-1: Product: syz [ 387.817674][ T2297] usb 5-1: Manufacturer: syz [ 387.856463][ T8464] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 388.611404][ T2297] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 388.622387][ T2297] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 388.632785][ T2297] usb 5-1: USB disconnect, device number 18 [ 388.641052][ T8534] tipc: Enabling of bearer rejected, already enabled [ 388.659530][ T2297] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 388.671460][ T2297] garmin_gps 5-1:1.0: device disconnected [ 388.740060][ T8534] syzkaller0: mtu less than device minimum [ 389.584536][ T8557] loop4: detected capacity change from 0 to 512 [ 389.651902][ T8558] md: could not open device unknown-block(1,0). [ 389.711387][ T8557] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 389.905601][ T8557] System zones: 1-12 [ 390.190806][ T8557] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.1171: missing EA_INODE flag [ 390.423955][ T8557] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1171: error while reading EA inode 12 err=-117 [ 390.480154][ T8557] EXT4-fs (loop4): 1 orphan inode deleted [ 390.485917][ T8557] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 391.623884][ T8588] tipc: Enabling of bearer rejected, already enabled [ 391.759395][ T8597] device syzkaller0 entered promiscuous mode [ 391.771050][ T8588] syzkaller0: mtu less than device minimum [ 392.820863][ T25] audit: type=1326 audit(1790451216.865:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.5.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f76089159 code=0x0 [ 392.995019][ T8629] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 395.018593][ T8656] loop5: detected capacity change from 0 to 128 [ 396.939266][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 397.490010][ T8648] chnl_net:caif_netlink_parms(): no params data found [ 398.516798][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.524632][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.554561][ T8648] device bridge_slave_0 entered promiscuous mode [ 398.574917][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.604987][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.621454][ T8648] device bridge_slave_1 entered promiscuous mode [ 398.636765][ T8684] netlink: 'syz.2.1201': attribute type 1 has an invalid length. [ 398.668067][ T8684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 398.701110][ T8648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.713546][ T8648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.723772][ T8684] device bond2 entered promiscuous mode [ 398.763412][ T8648] team0: Port device team_slave_0 added [ 398.774689][ T8648] team0: Port device team_slave_1 added [ 398.857112][ T8705] FAULT_INJECTION: forcing a failure. [ 398.857112][ T8705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.862948][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.877386][ T8705] CPU: 0 PID: 8705 Comm: syz.2.1206 Not tainted syzkaller #0 [ 398.884335][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.884758][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.917525][ T8648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.920631][ T8705] Call Trace: [ 398.920640][ T8705] [ 398.920647][ T8705] dump_stack_lvl+0x188/0x250 [ 398.920672][ T8705] ? show_regs_print_info+0x20/0x20 [ 398.920690][ T8705] ? load_image+0x410/0x410 [ 398.920711][ T8705] ? __lock_acquire+0x7b50/0x7b50 [ 398.939170][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.942013][ T8705] should_fail+0x383/0x4b0 [ 398.942043][ T8705] strncpy_from_user+0x32/0x350 [ 398.947277][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.951692][ T8705] getname_flags+0xf2/0x4f0 [ 398.951717][ T8705] do_sys_openat2+0xdd/0x500 [ 398.951735][ T8705] ? do_sys_open+0xe0/0xe0 [ 398.951749][ T8705] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 398.951773][ T8705] ? lock_chain_count+0x20/0x20 [ 398.951798][ T8705] __x64_sys_creat+0x8c/0xb0 [ 398.951819][ T8705] do_syscall_64+0x4c/0xa0 [ 398.951836][ T8705] ? clear_bhb_loop+0x30/0x80 [ 398.951853][ T8705] ? clear_bhb_loop+0x30/0x80 [ 398.951872][ T8705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 398.964483][ T8648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.968183][ T8705] RIP: 0033:0x7faa122a9159 [ 398.968203][ T8705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.081687][ T8705] RSP: 002b:00007faa10501028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 399.090104][ T8705] RAX: ffffffffffffffda RBX: 00007faa12530fa0 RCX: 00007faa122a9159 [ 399.098079][ T8705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000003c0 [ 399.106053][ T8705] RBP: 00007faa1234006b R08: 0000000000000000 R09: 0000000000000000 [ 399.114026][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.121998][ T8705] R13: 00007faa12531038 R14: 00007faa12530fa0 R15: 00007fffd54b8e88 [ 399.129983][ T8705] [ 399.134186][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 399.137329][ T8648] device hsr_slave_0 entered promiscuous mode [ 399.155059][ T8648] device hsr_slave_1 entered promiscuous mode [ 399.187603][ T8648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.225900][ T8648] Cannot create hsr debugfs directory [ 399.662851][ T8729] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 399.732784][ T8729] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 399.763117][ T4687] device hsr_slave_0 left promiscuous mode [ 399.799110][ T4687] device hsr_slave_1 left promiscuous mode [ 399.995371][ T4186] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 400.155413][ T4687] bond0 (unregistering): Released all slaves [ 400.220811][ T8740] device syzkaller0 entered promiscuous mode [ 400.234128][ T8648] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 400.247137][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'. [ 400.278155][ T8648] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 400.300510][ T8648] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 400.323788][ T8648] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 400.415820][ T4186] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.440980][ T4186] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.458425][ T4186] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 400.486337][ T8648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.523274][ T8648] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.580455][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 400.588151][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 400.640609][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 400.660407][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 400.668854][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.675950][ T4270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.697064][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 400.707092][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 400.759950][ T4186] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 400.880879][ T4186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 400.901284][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.908370][ T4270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.063310][ T4186] usb 6-1: Product: syz [ 401.178302][ T4186] usb 6-1: Manufacturer: syz [ 401.258914][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 401.641956][ T2297] Bluetooth: hci0: command 0x040f tx timeout [ 401.730353][ T4186] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 401.755463][ T4186] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 401.773540][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 401.843259][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 401.870793][ T4186] garmin_gps: probe of ttyUSB0 failed with error -8 [ 402.913676][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 402.932660][ T8648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.965694][ T4260] usb 6-1: USB disconnect, device number 3 [ 402.972362][ T4260] garmin_gps 6-1:1.0: device disconnected [ 403.003462][ T8648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.016559][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 403.027983][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 403.036225][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 403.049743][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 403.061379][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 403.086759][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 403.100778][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 403.127681][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 403.146436][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 403.393708][ T8785] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 403.416645][ T8785] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 403.477175][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.504863][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.541753][ T8648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.669218][ T4186] Bluetooth: hci0: command 0x0419 tx timeout [ 404.524554][ T8816] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 404.568049][ T8818] md: could not open device unknown-block(1,0). [ 404.625655][ T8816] netlink: 'syz.0.1230': attribute type 1 has an invalid length. [ 404.671871][ T8816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 404.785723][ T8816] device bond3 entered promiscuous mode [ 405.258421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 405.331215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 405.726486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 405.748969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 405.811602][ T8648] device veth0_vlan entered promiscuous mode [ 405.849706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 405.877618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 405.931433][ T8648] device veth1_vlan entered promiscuous mode [ 406.039672][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 406.065641][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 406.086861][ T8648] device veth0_macvtap entered promiscuous mode [ 406.117967][ T8648] device veth1_macvtap entered promiscuous mode [ 406.181850][ T8849] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 406.193684][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.209231][ T4186] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 406.215503][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.229175][ T8849] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 406.250827][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.283875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 406.313329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 406.345625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 406.395607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 406.434467][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.452865][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.479217][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.495974][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 406.508971][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 406.525569][ T8648] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.544334][ T8648] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.554893][ T8648] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.567270][ T8648] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.579602][ T4186] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 406.598101][ T4186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.644917][ T4186] usb 2-1: config 0 descriptor?? [ 406.705492][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.728778][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.741707][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 406.809951][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.825904][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.847264][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 406.977154][ T8876] loop6: detected capacity change from 0 to 512 [ 407.009934][ T4186] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 407.025893][ T4186] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 407.034376][ T8876] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 407.049437][ T8876] System zones: 1-12 [ 407.065257][ T8876] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.1189: missing EA_INODE flag [ 407.089296][ T4186] [drm:udl_init] *ERROR* Selecting channel failed [ 407.092504][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1241'. [ 407.132233][ T8876] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1189: error while reading EA inode 12 err=-117 [ 407.157387][ T4186] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 407.166337][ T4186] [drm] Initialized udl on minor 2 [ 407.176373][ T8876] EXT4-fs (loop6): 1 orphan inode deleted [ 407.191807][ T8876] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 407.206937][ T4186] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 407.254709][ T4186] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 407.326525][ T4186] usb 2-1: USB disconnect, device number 16 [ 407.377032][ T4311] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 407.505524][ T4311] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 407.515952][ T4311] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 407.786070][ T8895] loop5: detected capacity change from 0 to 512 [ 407.965793][ T8895] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 407.983341][ T8895] System zones: 1-12 [ 408.082802][ T8895] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1246: missing EA_INODE flag [ 408.192648][ T8895] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1246: error while reading EA inode 12 err=-117 [ 408.309523][ T8895] EXT4-fs (loop5): 1 orphan inode deleted [ 408.315279][ T8895] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 411.012249][ T4687] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.064379][ T8928] device bond1 left promiscuous mode [ 411.074037][ T8928] tipc: Resetting bearer [ 411.081175][ T8928] device syzkaller0 left promiscuous mode [ 411.094243][ T8928] device veth3 left promiscuous mode [ 411.100921][ T8928] device bond2 left promiscuous mode [ 411.106828][ T8928] device bond3 left promiscuous mode [ 411.123695][ T4687] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.189907][ T8938] netlink: 'syz.2.1259': attribute type 1 has an invalid length. [ 411.229268][ T4305] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 411.232166][ T8938] 8021q: adding VLAN 0 to HW filter on device bond3 [ 411.274716][ T8939] device bond3 entered promiscuous mode [ 411.293200][ T4687] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.366404][ T4687] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.589230][ T4305] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 411.598297][ T4305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.626737][ T8944] chnl_net:caif_netlink_parms(): no params data found [ 411.688448][ T4305] usb 1-1: config 0 descriptor?? [ 411.872902][ T8944] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.880647][ T25] audit: type=1326 audit(1790451235.925:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.2.1264" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa122a9159 code=0x0 [ 411.925020][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.051453][ T8944] device bridge_slave_0 entered promiscuous mode [ 412.269284][ T4305] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 412.305318][ T4305] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 412.409630][ T4305] [drm:udl_init] *ERROR* Selecting channel failed [ 412.629215][ T4305] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 412.736466][ T4305] [drm] Initialized udl on minor 2 [ 412.868680][ T4305] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 412.993857][ T4305] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 413.158395][ T4305] usb 1-1: USB disconnect, device number 14 [ 413.263715][ T4290] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 413.273491][ T8944] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.309937][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.378920][ T4290] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 413.466145][ T8944] device bridge_slave_1 entered promiscuous mode [ 413.498992][ T4290] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 413.560765][ T4306] Bluetooth: hci0: command 0x0409 tx timeout [ 413.618698][ T8979] md: could not open device unknown-block(1,0). [ 414.809640][ T8944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.859344][ T4232] Bluetooth: hci4: command 0x0409 tx timeout [ 414.908335][ T8944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.092630][ T8944] team0: Port device team_slave_0 added [ 415.166473][ T8975] chnl_net:caif_netlink_parms(): no params data found [ 415.186572][ T8944] team0: Port device team_slave_1 added [ 415.272382][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.289634][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.320773][ T8944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.343881][ T146] Bluetooth: Frame is too long (len 16, expected len 4) [ 415.361484][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.377111][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.407418][ T8944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.503513][ T8944] device hsr_slave_0 entered promiscuous mode [ 415.525992][ T8944] device hsr_slave_1 entered promiscuous mode [ 415.596068][ T4186] Bluetooth: hci0: command 0x041b tx timeout [ 415.618736][ T8975] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.627966][ T8975] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.645359][ T8975] device bridge_slave_0 entered promiscuous mode [ 415.748881][ T8975] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.764498][ T8975] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.777247][ T8975] device bridge_slave_1 entered promiscuous mode [ 416.244711][ T8975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.302669][ T8975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.394794][ T25] audit: type=1326 audit(1790451240.435:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.1274" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa122a9159 code=0x0 [ 416.475722][ T8975] team0: Port device team_slave_0 added [ 416.491995][ T4687] device hsr_slave_0 left promiscuous mode [ 416.498974][ T4687] device hsr_slave_1 left promiscuous mode [ 416.509419][ T25] audit: type=1326 audit(1790451240.555:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.0.1275" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3372d38159 code=0x0 [ 416.553200][ T4687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.568203][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.587111][ T4687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.599177][ T4260] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 416.939824][ T4186] Bluetooth: hci4: command 0x041b tx timeout [ 417.533091][ T4260] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 418.147215][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.159199][ T4260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.181262][ T4687] device bridge_slave_1 left promiscuous mode [ 418.184226][ T4260] usb 2-1: config 0 descriptor?? [ 418.198089][ T4687] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.208842][ T4687] device bridge_slave_0 left promiscuous mode [ 418.216651][ T4687] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.229406][ T4687] device veth1_macvtap left promiscuous mode [ 418.235793][ T4687] device veth0_macvtap left promiscuous mode [ 418.242128][ T4687] device veth1_vlan left promiscuous mode [ 418.248062][ T4687] device veth0_vlan left promiscuous mode [ 418.299136][ T4306] Bluetooth: hci0: command 0x040f tx timeout [ 418.393385][ T4687] team0 (unregistering): Port device team_slave_1 removed [ 418.410227][ T4687] team0 (unregistering): Port device team_slave_0 removed [ 418.423678][ T4687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.436724][ T4687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.493138][ T4687] bond0 (unregistering): Released all slaves [ 418.564647][ T8975] team0: Port device team_slave_1 added [ 418.625214][ T8975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.634477][ T8975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.661037][ T8975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.676382][ T8944] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 418.716297][ T4260] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 418.725824][ T8975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.743512][ T4260] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 418.751459][ T8975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.804511][ T8975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.815294][ T4260] [drm:udl_init] *ERROR* Selecting channel failed [ 418.829588][ T4260] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 418.839377][ T8944] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 418.852480][ T4260] [drm] Initialized udl on minor 2 [ 418.864430][ T8944] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 418.879435][ T4260] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 418.901179][ T4260] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 418.914414][ T4260] usb 2-1: USB disconnect, device number 17 [ 418.923419][ T4293] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 418.946235][ T8944] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 418.952321][ T4293] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 418.974197][ T4293] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 419.032839][ T9053] tipc: Resetting bearer [ 419.052893][ T9053] device syzkaller0 left promiscuous mode [ 419.067511][ T9053] device veth7 left promiscuous mode [ 419.073963][ T9053] device bond2 left promiscuous mode [ 419.081409][ T9053] device bond3 left promiscuous mode [ 419.092270][ T8975] device hsr_slave_0 entered promiscuous mode [ 419.105238][ T8975] device hsr_slave_1 entered promiscuous mode [ 419.125573][ T8975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.167249][ T8975] Cannot create hsr debugfs directory [ 420.139377][ T4186] Bluetooth: hci4: command 0x040f tx timeout [ 420.208500][ T8944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.255174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 420.285811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 420.381469][ T8944] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.389254][ T4186] Bluetooth: hci0: command 0x0419 tx timeout [ 420.430535][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 420.450294][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 420.502173][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.509272][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.647004][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 420.666644][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 420.704475][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 420.751218][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.758303][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.831025][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 420.865236][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 420.922538][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 420.986200][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 421.017953][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 421.038998][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 421.058107][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 421.066597][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.084439][ T8975] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 421.200993][ T8944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.237750][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 421.260444][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 421.281459][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 421.311137][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.320272][ T8975] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 421.359634][ T8975] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 421.393977][ T8975] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 421.516183][ T9107] FAULT_INJECTION: forcing a failure. [ 421.516183][ T9107] name failslab, interval 1, probability 0, space 0, times 0 [ 421.583220][ T9107] CPU: 0 PID: 9107 Comm: syz.0.1290 Not tainted syzkaller #0 [ 421.590616][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 421.600669][ T9107] Call Trace: [ 421.603948][ T9107] [ 421.606880][ T9107] dump_stack_lvl+0x188/0x250 [ 421.611568][ T9107] ? show_regs_print_info+0x20/0x20 [ 421.616765][ T9107] ? load_image+0x410/0x410 [ 421.621263][ T9107] ? __lock_acquire+0x7b50/0x7b50 [ 421.626279][ T9107] ? do_futex+0xdc2/0x12b0 [ 421.630687][ T9107] should_fail+0x383/0x4b0 [ 421.635097][ T9107] should_failslab+0x5/0x20 [ 421.639585][ T9107] slab_pre_alloc_hook+0x51/0xc0 [ 421.644509][ T9107] ? getname_flags+0xb7/0x4f0 [ 421.649170][ T9107] kmem_cache_alloc+0x3d/0x280 [ 421.653920][ T9107] getname_flags+0xb7/0x4f0 [ 421.658408][ T9107] do_sys_openat2+0xdd/0x500 [ 421.662979][ T9107] ? do_sys_open+0xe0/0xe0 [ 421.667374][ T9107] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 421.673341][ T9107] ? lock_chain_count+0x20/0x20 [ 421.678186][ T9107] __x64_sys_creat+0x8c/0xb0 [ 421.682757][ T9107] do_syscall_64+0x4c/0xa0 [ 421.687155][ T9107] ? clear_bhb_loop+0x30/0x80 [ 421.691817][ T9107] ? clear_bhb_loop+0x30/0x80 [ 421.696477][ T9107] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 421.702354][ T9107] RIP: 0033:0x7f3372d38159 [ 421.706755][ T9107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.726348][ T9107] RSP: 002b:00007f3370f90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 421.734744][ T9107] RAX: ffffffffffffffda RBX: 00007f3372fbffa0 RCX: 00007f3372d38159 [ 421.742700][ T9107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000003c0 [ 421.750657][ T9107] RBP: 00007f3372dcf06b R08: 0000000000000000 R09: 0000000000000000 [ 421.758610][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.766560][ T9107] R13: 00007f3372fc0038 R14: 00007f3372fbffa0 R15: 00007fff96ad5c78 [ 421.774523][ T9107] [ 421.847007][ T8975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.893651][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 421.911702][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 421.926021][ T8975] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.972850][ T8944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.994175][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 422.023503][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 422.063820][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.070919][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.099116][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.106576][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.129264][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 422.185145][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 422.219372][ T4306] Bluetooth: hci4: command 0x0419 tx timeout [ 422.230678][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 422.254840][ T4845] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.261961][ T4845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.293905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 422.338104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 422.367315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 422.396315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 422.440868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 422.477234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 422.515453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 422.527372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 422.567072][ T8975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.598702][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 422.623218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 422.636104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 422.703223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 422.815303][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 422.868557][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 422.912553][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 423.054701][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.085400][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 423.258534][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.275334][ T8944] device veth0_vlan entered promiscuous mode [ 423.357106][ T8944] device veth1_vlan entered promiscuous mode [ 423.475350][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 423.519869][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 423.549749][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 423.578762][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 423.613537][ T8944] device veth0_macvtap entered promiscuous mode [ 423.642111][ T8944] device veth1_macvtap entered promiscuous mode [ 423.711404][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 423.749912][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 423.778335][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 423.819349][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 423.840610][ T9179] FAULT_INJECTION: forcing a failure. [ 423.840610][ T9179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.863272][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.894237][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.919729][ T9179] CPU: 1 PID: 9179 Comm: syz.1.1301 Not tainted syzkaller #0 [ 423.927120][ T9179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.937188][ T9179] Call Trace: [ 423.940470][ T9179] [ 423.943406][ T9179] dump_stack_lvl+0x188/0x250 [ 423.948096][ T9179] ? show_regs_print_info+0x20/0x20 [ 423.953304][ T9179] ? load_image+0x410/0x410 [ 423.957822][ T9179] ? __lock_acquire+0x7b50/0x7b50 [ 423.962864][ T9179] should_fail+0x383/0x4b0 [ 423.967293][ T9179] strncpy_from_user+0x32/0x350 [ 423.972159][ T9179] getname_flags+0xf2/0x4f0 [ 423.976681][ T9179] do_sys_openat2+0xdd/0x500 [ 423.981280][ T9179] ? do_sys_open+0xe0/0xe0 [ 423.985698][ T9179] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 423.991688][ T9179] ? lock_chain_count+0x20/0x20 [ 423.996554][ T9179] __x64_sys_creat+0x8c/0xb0 [ 424.001051][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.001150][ T9179] do_syscall_64+0x4c/0xa0 [ 424.012721][ T9179] ? clear_bhb_loop+0x30/0x80 [ 424.017407][ T9179] ? clear_bhb_loop+0x30/0x80 [ 424.022093][ T9179] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 424.022616][ T8975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.027994][ T9179] RIP: 0033:0x7f3c99818159 [ 424.039136][ T9179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.058740][ T9179] RSP: 002b:00007f3c97a70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 424.067252][ T9179] RAX: ffffffffffffffda RBX: 00007f3c99a9ffa0 RCX: 00007f3c99818159 [ 424.075208][ T9179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000003c0 [ 424.083188][ T9179] RBP: 00007f3c998af06b R08: 0000000000000000 R09: 0000000000000000 [ 424.091315][ T9179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.099267][ T9179] R13: 00007f3c99aa0038 R14: 00007f3c99a9ffa0 R15: 00007ffea74d4718 [ 424.107229][ T9179] [ 424.133117][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 424.152839][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 424.192119][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.213187][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.279194][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.292090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 424.329899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 424.373673][ T8944] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.409143][ T8944] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.417852][ T8944] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.457696][ T8944] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.506585][ T4687] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.615784][ T4687] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.690664][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 424.711267][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 424.771737][ T4687] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.793435][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 424.805479][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 424.818603][ T8975] device veth0_vlan entered promiscuous mode [ 424.838717][ T4226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.854309][ T4687] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.879394][ T4226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.889887][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 424.916628][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 424.930737][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 424.971732][ T8975] device veth1_vlan entered promiscuous mode [ 425.035119][ T4845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.039160][ T2297] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 425.048580][ T4845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.082857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 425.118460][ T8975] device veth0_macvtap entered promiscuous mode [ 425.156016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 425.172819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 425.198299][ T8975] device veth1_macvtap entered promiscuous mode [ 425.218123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 425.249851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 425.277772][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.308912][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.343750][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.359150][ T2297] usb 2-1: Using ep0 maxpacket: 8 [ 425.383285][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.404197][ T8975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.435223][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.467584][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.494537][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.515670][ T2297] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.526737][ T2297] usb 2-1: config 0 has no interfaces? [ 425.527541][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.535095][ T2297] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 425.557430][ T8975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.572770][ T4687] tipc: Left network mode [ 425.578206][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 425.589998][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 425.595911][ T2297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.626783][ T2297] usb 2-1: config 0 descriptor?? [ 425.629621][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 425.658277][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 425.688378][ T8975] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.704364][ T8975] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.724414][ T8975] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.748446][ T8975] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.200530][ T9249] FAULT_INJECTION: forcing a failure. [ 426.200530][ T9249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.235369][ T9249] CPU: 0 PID: 9249 Comm: syz.2.1310 Not tainted syzkaller #0 [ 426.242762][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 426.252817][ T9249] Call Trace: [ 426.256098][ T9249] [ 426.259028][ T9249] dump_stack_lvl+0x188/0x250 [ 426.263714][ T9249] ? show_regs_print_info+0x20/0x20 [ 426.268918][ T9249] ? load_image+0x410/0x410 [ 426.273427][ T9249] ? __lock_acquire+0x7b50/0x7b50 [ 426.278461][ T9249] should_fail+0x383/0x4b0 [ 426.282884][ T9249] strncpy_from_user+0x32/0x350 [ 426.287732][ T9249] getname_flags+0xf2/0x4f0 [ 426.292241][ T9249] do_sys_openat2+0xdd/0x500 [ 426.296837][ T9249] ? do_sys_open+0xe0/0xe0 [ 426.301260][ T9249] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 426.307255][ T9249] ? lock_chain_count+0x20/0x20 [ 426.312120][ T9249] __x64_sys_creat+0x8c/0xb0 [ 426.316716][ T9249] do_syscall_64+0x4c/0xa0 [ 426.321185][ T9249] ? clear_bhb_loop+0x30/0x80 [ 426.325872][ T9249] ? clear_bhb_loop+0x30/0x80 [ 426.330562][ T9249] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 426.336459][ T9249] RIP: 0033:0x7faa122a9159 [ 426.340875][ T9249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.360470][ T9249] RSP: 002b:00007faa10501028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 426.368870][ T9249] RAX: ffffffffffffffda RBX: 00007faa12530fa0 RCX: 00007faa122a9159 [ 426.376825][ T9249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000003c0 [ 426.384810][ T9249] RBP: 00007faa1234006b R08: 0000000000000000 R09: 0000000000000000 [ 426.392765][ T9249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.400716][ T9249] R13: 00007faa12531038 R14: 00007faa12530fa0 R15: 00007fffd54b8e88 [ 426.408684][ T9249] [ 426.523902][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.531135][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.828827][ T9234] device bridge_slave_0 left promiscuous mode [ 426.836461][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.913807][ T9234] device bridge_slave_1 left promiscuous mode [ 426.928829][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.016203][ T9234] bond0: (slave bond_slave_0): Releasing backup interface [ 427.093914][ T9234] bond0: (slave bond_slave_1): Releasing backup interface [ 427.196881][ T9234] team0: Port device team_slave_0 removed [ 427.307904][ T9234] team0: Port device team_slave_1 removed [ 427.337735][ T9234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.394443][ T9234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.446888][ T9234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.464437][ T9234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.545871][ T4306] usb 2-1: USB disconnect, device number 18 [ 427.806311][ T9234] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.815379][ T9234] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.830523][ T9234] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.843524][ T9234] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.070287][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.078399][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.162650][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.178599][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.186808][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 428.210046][ T9277] loop1: detected capacity change from 0 to 512 [ 428.224906][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 428.281893][ T9277] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 428.319845][ T146] Bluetooth: Frame is too long (len 16, expected len 4) [ 428.335098][ T9277] System zones: 1-12 [ 428.357542][ T9286] loop8: detected capacity change from 0 to 512 [ 428.371642][ T9277] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1315: missing EA_INODE flag [ 428.375079][ T9284] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 428.423283][ T9277] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1315: error while reading EA inode 12 err=-117 [ 428.445938][ T9277] EXT4-fs (loop1): 1 orphan inode deleted [ 428.463289][ T9277] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 428.654328][ T9286] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 428.671180][ T9286] System zones: 1-12 [ 428.687253][ T9286] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.1262: missing EA_INODE flag [ 428.746835][ T9286] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1262: error while reading EA inode 12 err=-117 [ 428.761563][ T9286] EXT4-fs (loop8): 1 orphan inode deleted [ 428.772836][ T9286] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 429.314338][ T4687] device hsr_slave_0 left promiscuous mode [ 429.328114][ T4687] device hsr_slave_1 left promiscuous mode [ 429.359637][ T4687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.367493][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.385591][ T4687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.407284][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.426964][ T4687] device bridge_slave_1 left promiscuous mode [ 429.439407][ T4687] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.448405][ T4687] device bridge_slave_0 left promiscuous mode [ 429.459492][ T4687] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.474926][ T4687] device veth1_macvtap left promiscuous mode [ 429.486130][ T4687] device veth0_macvtap left promiscuous mode [ 429.494185][ T4310] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 429.511238][ T4687] device veth1_vlan left promiscuous mode [ 429.517315][ T4687] device veth0_vlan left promiscuous mode [ 429.696389][ T4687] bond1 (unregistering): Released all slaves [ 429.915306][ T4687] team0 (unregistering): Port device team_slave_1 removed [ 429.933937][ T4687] team0 (unregistering): Port device team_slave_0 removed [ 429.941963][ T4310] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 429.954510][ T4310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.968430][ T4310] usb 2-1: config 0 descriptor?? [ 429.976153][ T4687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.994686][ T4687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.143263][ T4687] bond0 (unregistering): Released all slaves [ 430.407159][ T9345] loop2: detected capacity change from 0 to 512 [ 430.509380][ T4310] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 430.517917][ T4310] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 430.544718][ T9345] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 430.576323][ T9345] System zones: 1-12 [ 430.603843][ T9345] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1331: missing EA_INODE flag [ 430.616115][ T4310] [drm:udl_init] *ERROR* Selecting channel failed [ 430.675748][ T4310] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 430.705671][ T9345] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1331: error while reading EA inode 12 err=-117 [ 430.737125][ T4310] [drm] Initialized udl on minor 2 [ 430.739482][ T9345] EXT4-fs (loop2): 1 orphan inode deleted [ 430.752607][ T9345] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 430.774206][ T4310] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 430.789391][ T4310] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 430.821293][ T4310] usb 2-1: USB disconnect, device number 19 [ 430.828127][ T4186] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 430.837067][ T4186] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 430.869995][ T4186] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 431.245441][ T9355] chnl_net:caif_netlink_parms(): no params data found [ 431.353464][ T9355] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.368624][ T9355] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.398006][ T9355] device bridge_slave_0 entered promiscuous mode [ 431.449851][ T9355] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.474501][ T9355] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.495194][ T9355] device bridge_slave_1 entered promiscuous mode [ 431.620904][ T9355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.643646][ T9355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.671332][ T9355] team0: Port device team_slave_0 added [ 431.692523][ T9355] team0: Port device team_slave_1 added [ 431.738983][ T9355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.778196][ T9355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.804457][ T9355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.854406][ T9355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.037304][ T9355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.487478][ T9355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.688415][ T9398] md: could not open device unknown-block(1,0). [ 432.717098][ T9355] device hsr_slave_0 entered promiscuous mode [ 432.734936][ T9355] device hsr_slave_1 entered promiscuous mode [ 432.755058][ T9403] loop1: detected capacity change from 0 to 512 [ 432.771100][ T9355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.780490][ T4186] Bluetooth: hci4: command 0x0409 tx timeout [ 432.787023][ T9355] Cannot create hsr debugfs directory [ 432.850629][ T9403] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 432.881589][ T9403] System zones: 1-12 [ 432.920802][ T9403] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1346: missing EA_INODE flag [ 432.988317][ T9403] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1346: error while reading EA inode 12 err=-117 [ 433.006544][ T9403] EXT4-fs (loop1): 1 orphan inode deleted [ 433.019316][ T9403] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 433.068659][ T9355] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 433.087313][ T9355] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 433.143882][ T9387] chnl_net:caif_netlink_parms(): no params data found [ 433.169272][ T21] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 433.172749][ T9355] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 433.308285][ T9355] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 433.454790][ T9387] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.529601][ T9387] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.535715][ T21] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 433.559103][ T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.581031][ T9387] device bridge_slave_0 entered promiscuous mode [ 433.599395][ T21] usb 8-1: config 0 descriptor?? [ 433.631574][ T9387] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.658960][ T9387] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.690060][ T9387] device bridge_slave_1 entered promiscuous mode [ 433.771434][ T9355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.781054][ T9387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.820910][ T9387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.830015][ T4311] Bluetooth: hci2: command 0x0409 tx timeout [ 433.853888][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 433.882718][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 433.929370][ T9355] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.967798][ T9387] team0: Port device team_slave_0 added [ 433.998536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 434.030295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 434.059231][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.066319][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.119245][ T21] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 434.127764][ T21] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 434.140444][ T9387] team0: Port device team_slave_1 added [ 434.189160][ T21] [drm:udl_init] *ERROR* Selecting channel failed [ 434.199134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 434.210224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 434.240902][ T21] [drm] Initialized udl 0.0.1 20120220 for 8-1:0.0 on minor 2 [ 434.248381][ T21] [drm] Initialized udl on minor 2 [ 434.279459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 434.307345][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.314460][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.333772][ T21] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 434.364172][ T21] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 434.369238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 434.387355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 434.394510][ T21] usb 8-1: USB disconnect, device number 2 [ 434.418458][ T4293] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 434.418536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 434.438631][ T4293] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 434.446999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 434.489608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 434.500236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 434.516222][ T4293] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 434.519375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 434.578977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 434.590956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 434.601629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 434.636900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 434.662562][ T9387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.669655][ T9387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.704878][ T9449] loop7: detected capacity change from 0 to 512 [ 434.711727][ T9387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.749331][ T9387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.767512][ T9387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.824500][ T9387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.859437][ T4310] Bluetooth: hci4: command 0x041b tx timeout [ 434.899875][ T9449] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 434.908117][ T9449] System zones: 1-12 [ 435.020118][ T9449] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.1353: missing EA_INODE flag [ 435.035306][ T9387] device hsr_slave_0 entered promiscuous mode [ 435.064536][ T9387] device hsr_slave_1 entered promiscuous mode [ 435.085267][ T9449] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1353: error while reading EA inode 12 err=-117 [ 435.109197][ T9387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.132689][ T9387] Cannot create hsr debugfs directory [ 435.139493][ T9449] EXT4-fs (loop7): 1 orphan inode deleted [ 435.145231][ T9449] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 435.336989][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 435.355936][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 435.384244][ T9355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.847240][ T9435] chnl_net:caif_netlink_parms(): no params data found [ 435.919298][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 436.124297][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 436.138930][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.220416][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.227520][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.234937][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 436.242307][ T9435] device bridge_slave_0 entered promiscuous mode [ 436.265722][ T9435] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.274572][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.283456][ T9435] device bridge_slave_1 entered promiscuous mode [ 436.292937][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 436.301935][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 436.312392][ T9355] device veth0_vlan entered promiscuous mode [ 436.319539][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 436.327575][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 436.371351][ T9435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.384590][ T9435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.407349][ T9435] team0: Port device team_slave_0 added [ 436.438049][ T9435] team0: Port device team_slave_1 added [ 436.448041][ T9355] device veth1_vlan entered promiscuous mode [ 436.561628][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.595240][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.649143][ T9435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.678146][ T9355] device veth0_macvtap entered promiscuous mode [ 436.703100][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.736633][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.819066][ T9435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.838237][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 436.854336][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 436.868545][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 436.882765][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 436.898443][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 436.923981][ T9355] device veth1_macvtap entered promiscuous mode [ 436.939745][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 437.023689][ T9435] device hsr_slave_0 entered promiscuous mode [ 437.031502][ T9435] device hsr_slave_1 entered promiscuous mode [ 437.038100][ T9435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.048980][ T9435] Cannot create hsr debugfs directory [ 437.061711][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.072817][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.088186][ T9355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.128073][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.138895][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.150143][ T9355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.168175][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 437.190366][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 437.199431][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 437.208037][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 437.256508][ T9355] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.297226][ T9355] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.306015][ T9355] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.323309][ T9355] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.399433][ T9500] chnl_net:caif_netlink_parms(): no params data found [ 437.556135][ T4845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.576602][ T4845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.615708][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 437.623155][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.633329][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.648814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 437.679887][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.686989][ T9500] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.695813][ T9500] device bridge_slave_0 entered promiscuous mode [ 437.716418][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.724365][ T9500] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.732658][ T9500] device bridge_slave_1 entered promiscuous mode [ 437.766787][ T9500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.799714][ T9500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.853563][ T9500] team0: Port device team_slave_0 added [ 437.883664][ T9500] team0: Port device team_slave_1 added [ 437.979491][ T4311] Bluetooth: hci2: command 0x040f tx timeout [ 438.002614][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.017451][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.052275][ T9500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.139340][ T2297] Bluetooth: hci0: command 0x0409 tx timeout [ 438.165060][ T4687] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.188183][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.200048][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.236670][ T9500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.292196][ T9500] device hsr_slave_0 entered promiscuous mode [ 438.300598][ T2297] Bluetooth: hci1: command 0x041b tx timeout [ 438.313188][ T9500] device hsr_slave_1 entered promiscuous mode [ 438.326310][ T9500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.336473][ T9500] Cannot create hsr debugfs directory [ 438.353933][ T4687] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.427450][ T4687] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.536454][ T4687] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.914020][ T4687] tipc: Disabling bearer [ 438.922581][ T4687] tipc: Left network mode [ 438.952822][ T9532] device veth5 entered promiscuous mode [ 438.962613][ T4687] tipc: Disabling bearer [ 438.976084][ T4687] tipc: Left network mode [ 439.029403][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 439.742211][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.748797][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.781471][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'. [ 440.079040][ T4310] Bluetooth: hci2: command 0x0419 tx timeout [ 440.229267][ T4310] Bluetooth: hci0: command 0x041b tx timeout [ 440.379435][ T4310] Bluetooth: hci1: command 0x040f tx timeout [ 440.420923][ T9590] md: could not open device unknown-block(1,0). [ 440.570547][ T9596] md: could not open device unknown-block(1,0). [ 440.812132][ T9387] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 440.942185][ T9387] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 441.188426][ T9387] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 441.352338][ T9387] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 441.935016][ T146] Bluetooth: Frame is too long (len 16, expected len 4) [ 441.950009][ T4687] device hsr_slave_0 left promiscuous mode [ 441.969584][ T4687] device hsr_slave_1 left promiscuous mode [ 441.988782][ T4687] device hsr_slave_0 left promiscuous mode [ 441.997188][ T4687] device hsr_slave_1 left promiscuous mode [ 442.009447][ T4687] device hsr_slave_0 left promiscuous mode [ 442.024580][ T4687] device hsr_slave_1 left promiscuous mode [ 442.045855][ T4687] device hsr_slave_0 left promiscuous mode [ 442.052631][ T4687] device hsr_slave_1 left promiscuous mode [ 442.058985][ T4687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.066470][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.075135][ T4687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.082768][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.103506][ T4687] device bridge_slave_1 left promiscuous mode [ 442.126912][ T4687] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.146598][ T4687] device bridge_slave_0 left promiscuous mode [ 442.154423][ T4687] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.168757][ T4687] device veth1_macvtap left promiscuous mode [ 442.174986][ T4687] device veth0_macvtap left promiscuous mode [ 442.181352][ T4687] device veth1_vlan left promiscuous mode [ 442.187251][ T4687] device veth0_vlan left promiscuous mode [ 442.299811][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 442.459261][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 442.527080][ T9645] md: could not open device unknown-block(1,0). [ 442.803961][ T9651] md/raid:md0: device ram0 operational as raid disk 0 [ 442.874224][ T4687] bond0 (unregistering): Released all slaves [ 442.879287][ T9651] md/raid:md0: couldn't allocate thread. [ 442.928499][ T9651] ============================================================================= [ 442.928881][ T9651] [ 442.928885][ T9651] ====================================================== [ 442.928891][ T9651] WARNING: possible circular locking dependency detected [ 442.928903][ T9651] syzkaller #0 Not tainted [ 442.928911][ T9651] ------------------------------------------------------ [ 442.928915][ T9651] syz.0.1378/9651 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 442.928924][ T9651] ffffffff8c3139c0 (console_owner){....}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 442.928966][ T9651] [ 442.928966][ T9651] but task is already holding lock: [ 442.928970][ T9651] ffff88802a636d98 (&n->list_lock){..-.}-{2:2}, at: __kmem_cache_shutdown+0x8c/0x240 [ 442.929008][ T9651] [ 442.929008][ T9651] which lock already depends on the new lock. [ 442.929008][ T9651] [ 442.929012][ T9651] [ 442.929012][ T9651] the existing dependency chain (in reverse order) is: [ 442.929016][ T9651] [ 442.929016][ T9651] -> #3 (&n->list_lock){..-.}-{2:2}: [ 442.929033][ T9651] _raw_spin_lock_irqsave+0xb0/0x100 [ 442.929050][ T9651] get_partial_node+0x36/0x250 [ 442.929064][ T9651] ___slab_alloc+0x5b7/0xdd0 [ 442.929077][ T9651] __kmalloc+0x11d/0x340 [ 442.929090][ T9651] __tty_buffer_request_room+0x1db/0x500 [ 442.929106][ T9651] tty_insert_flip_string_and_push_buffer+0x7e/0x380 [ 442.929122][ T9651] n_tty_write+0x5dc/0x1220 [ 442.929139][ T9651] file_tty_write+0x50c/0x8a0 [ 442.929153][ T9651] vfs_write+0x748/0xd70 [ 442.929167][ T9651] ksys_write+0x153/0x260 [ 442.929180][ T9651] do_syscall_64+0x4c/0xa0 [ 442.929195][ T9651] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.929211][ T9651] [ 442.929211][ T9651] -> #2 (&port->lock){-.-.}-{2:2}: [ 442.929231][ T9651] _raw_spin_lock_irqsave+0xb0/0x100 [ 442.929246][ T9651] tty_port_default_wakeup+0x1f/0xf0 [ 442.929260][ T9651] serial8250_tx_chars+0x615/0x800 [ 442.929284][ T9651] serial8250_handle_irq+0x4f5/0x5f0 [ 442.929299][ T9651] serial8250_default_handle_irq+0xb4/0x1a0 [ 442.929316][ T9651] serial8250_interrupt+0x9b/0x1c0 [ 442.929330][ T9651] __handle_irq_event_percpu+0x299/0x9d0 [ 442.929347][ T9651] handle_irq_event+0xa5/0x220 [ 442.929362][ T9651] handle_edge_irq+0x242/0xb20 [ 442.929378][ T9651] __common_interrupt+0xd7/0x1e0 [ 442.929394][ T9651] common_interrupt+0xb0/0xd0 [ 442.929408][ T9651] asm_common_interrupt+0x22/0x40 [ 442.929424][ T9651] _raw_spin_unlock_irqrestore+0xbc/0x120 [ 442.929439][ T9651] uart_write+0x62f/0x880 [ 442.929453][ T9651] n_tty_write+0xd19/0x1220 [ 442.929468][ T9651] file_tty_write+0x50c/0x8a0 [ 442.929483][ T9651] vfs_write+0x748/0xd70 [ 442.929496][ T9651] ksys_write+0x153/0x260 [ 442.929510][ T9651] do_syscall_64+0x4c/0xa0 [ 442.929524][ T9651] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.929540][ T9651] [ 442.929540][ T9651] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 442.929561][ T9651] _raw_spin_lock_irqsave+0xb0/0x100 [ 442.929575][ T9651] serial8250_console_write+0x16c/0xf50 [ 442.929591][ T9651] console_unlock+0xb47/0x10f0 [ 442.929605][ T9651] vprintk_emit+0xc0/0x150 [ 442.929617][ T9651] _printk+0xda/0x130 [ 442.929630][ T9651] register_console+0x693/0x970 [ 442.929644][ T9651] univ8250_console_init+0x41/0x50 [ 442.929661][ T9651] console_init+0x177/0x5d0 [ 442.929674][ T9651] start_kernel+0x2fc/0x540 [ 442.929688][ T9651] secondary_startup_64_no_verify+0xb1/0xbb [ 442.929706][ T9651] [ 442.929706][ T9651] -> #0 (console_owner){....}-{0:0}: [ 442.929727][ T9651] __lock_acquire+0x2c66/0x7b50 [ 442.929745][ T9651] lock_acquire+0x19e/0x400 [ 442.929761][ T9651] console_lock_spinning_enable+0x51/0x60 [ 442.929775][ T9651] console_unlock+0x8b5/0x10f0 [ 442.929789][ T9651] vprintk_emit+0xc0/0x150 [ 442.929801][ T9651] _printk+0xda/0x130 [ 442.929814][ T9651] slab_bug+0x6d/0xc0 [ 442.929826][ T9651] slab_err+0x130/0x170 [ 442.929839][ T9651] list_slab_objects+0x32/0x310 [ 442.929854][ T9651] __kmem_cache_shutdown+0x120/0x240 [ 442.929868][ T9651] kmem_cache_destroy+0x3d/0x130 [ 442.929883][ T9651] free_conf+0x1e3/0x630 [ 442.929897][ T9651] setup_conf+0xde7/0x2b60 [ 442.929911][ T9651] raid5_takeover+0x5c5/0x850 [ 442.929925][ T9651] level_store+0x6ad/0x1a00 [ 442.929939][ T9651] md_attr_store+0xdd/0x130 [ 442.929952][ T9651] kernfs_fop_write_iter+0x3a8/0x500 [ 442.929970][ T9651] vfs_write+0x748/0xd70 [ 442.929983][ T9651] ksys_write+0x153/0x260 [ 442.929996][ T9651] do_syscall_64+0x4c/0xa0 [ 442.930010][ T9651] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.930027][ T9651] [ 442.930027][ T9651] other info that might help us debug this: [ 442.930027][ T9651] [ 442.930032][ T9651] Chain exists of: [ 442.930032][ T9651] console_owner --> &port->lock --> &n->list_lock [ 442.930032][ T9651] [ 442.930055][ T9651] Possible unsafe locking scenario: [ 442.930055][ T9651] [ 442.930060][ T9651] CPU0 CPU1 [ 442.930064][ T9651] ---- ---- [ 442.930068][ T9651] lock(&n->list_lock); [ 442.930077][ T9651] lock(&port->lock); [ 442.930087][ T9651] lock(&n->list_lock); [ 442.930098][ T9651] lock(console_owner); [ 442.930107][ T9651] [ 442.930107][ T9651] *** DEADLOCK *** [ 442.930107][ T9651] [ 442.930111][ T9651] 9 locks held by syz.0.1378/9651: [ 442.930120][ T9651] #0: ffff8880797fd4f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 442.930158][ T9651] #1: ffff88801f292460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x296/0xd70 [ 442.930196][ T9651] #2: ffff88802093c488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x500 [ 442.930234][ T9651] #3: ffff88806283b660 (kn->active#474){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500 [ 442.930281][ T9651] #4: ffff88807a6242c0 (&mddev->reconfig_mutex){+.+.}-{3:3}, at: level_store+0xcc/0x1a00 [ 442.930317][ T9651] #5: ffffffff8c1bd6f0 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x16/0x130 [ 442.930353][ T9651] #6: ffffffff8c3ce898 (slab_mutex){+.+.}-{3:3}, at: kmem_cache_destroy+0x24/0x130 [ 442.930390][ T9651] #7: ffff88802a636d98 (&n->list_lock){..-.}-{2:2}, at: __kmem_cache_shutdown+0x8c/0x240 [ 442.930426][ T9651] #8: ffffffff8c313aa0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 442.930462][ T9651] [ 442.930462][ T9651] stack backtrace: [ 442.930466][ T9651] CPU: 0 PID: 9651 Comm: syz.0.1378 Not tainted syzkaller #0 [ 442.930483][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.930492][ T9651] Call Trace: [ 442.930496][ T9651] [ 442.930502][ T9651] dump_stack_lvl+0x188/0x250 [ 442.930518][ T9651] ? load_image+0x410/0x410 [ 442.930533][ T9651] ? show_regs_print_info+0x20/0x20 [ 442.930552][ T9651] ? print_circular_bug+0x12b/0x1a0 [ 442.930569][ T9651] check_noncircular+0x296/0x330 [ 442.930587][ T9651] ? add_chain_block+0x9b0/0x9b0 [ 442.930601][ T9651] ? lockdep_lock+0xf1/0x1f0 [ 442.930619][ T9651] ? lockdep_unlock+0x143/0x2e0 [ 442.930638][ T9651] __lock_acquire+0x2c66/0x7b50 [ 442.930662][ T9651] ? format_decode+0x19b/0x1330 [ 442.930681][ T9651] ? verify_lock_unused+0x140/0x140 [ 442.930705][ T9651] ? sprintf+0xe4/0x140 [ 442.930723][ T9651] lock_acquire+0x19e/0x400 [ 442.930740][ T9651] ? console_lock_spinning_enable+0x2c/0x60 [ 442.930756][ T9651] ? prb_read_valid+0x60/0x60 [ 442.930773][ T9651] ? read_lock_is_recursive+0x10/0x10 [ 442.930791][ T9651] ? do_raw_spin_lock+0x128/0x2f0 [ 442.930808][ T9651] ? __rwlock_init+0x140/0x140 [ 442.930824][ T9651] ? do_raw_spin_unlock+0x11d/0x230 [ 442.930841][ T9651] console_lock_spinning_enable+0x51/0x60 [ 442.930856][ T9651] ? console_lock_spinning_enable+0x2c/0x60 [ 442.930872][ T9651] console_unlock+0x8b5/0x10f0 [ 442.930887][ T9651] ? read_lock_is_recursive+0x10/0x10 [ 442.930907][ T9651] ? console_trylock_spinning+0x370/0x370 [ 442.930924][ T9651] ? __down_trylock_console_sem+0x19f/0x1f0 [ 442.930940][ T9651] ? vprintk_emit+0xa7/0x150 [ 442.930954][ T9651] ? printk_parse_prefix+0x310/0x310 [ 442.930969][ T9651] ? vprintk_emit+0xa7/0x150 [ 442.930983][ T9651] ? console_trylock+0x70/0x70 [ 442.930998][ T9651] ? lockdep_unlock+0x143/0x2e0 [ 442.931020][ T9651] ? vprintk_emit+0x150/0x150 [ 442.931036][ T9651] ? alloc_object+0x640/0x640 [ 442.931054][ T9651] ? lock_chain_count+0x20/0x20 [ 442.931073][ T9651] vprintk_emit+0xc0/0x150 [ 442.931088][ T9651] _printk+0xda/0x130 [ 442.931104][ T9651] ? load_image+0x410/0x410 [ 442.931120][ T9651] ? format_decode+0x19b/0x1330 [ 442.931136][ T9651] ? vsnprintf+0x14e/0x1c20 [ 442.931151][ T9651] slab_bug+0x6d/0xc0 [ 442.931169][ T9651] slab_err+0x130/0x170 [ 442.931189][ T9651] ? _raw_spin_lock_irq+0xb7/0xf0 [ 442.931204][ T9651] ? _raw_spin_lock_irqsave+0x100/0x100 [ 442.931221][ T9651] list_slab_objects+0x32/0x310 [ 442.931239][ T9651] __kmem_cache_shutdown+0x120/0x240 [ 442.931257][ T9651] kmem_cache_destroy+0x3d/0x130 [ 442.931276][ T9651] free_conf+0x1e3/0x630 [ 442.931292][ T9651] setup_conf+0xde7/0x2b60 [ 442.931312][ T9651] ? raid5_unplug+0x4c0/0x4c0 [ 442.931329][ T9651] ? __rwlock_init+0x140/0x140 [ 442.931345][ T9651] raid5_takeover+0x5c5/0x850 [ 442.931361][ T9651] level_store+0x6ad/0x1a00 [ 442.931378][ T9651] ? level_show+0x170/0x170 [ 442.931392][ T9651] ? __rwlock_init+0x140/0x140 [ 442.931408][ T9651] ? do_raw_spin_unlock+0x11d/0x230 [ 442.931425][ T9651] md_attr_store+0xdd/0x130 [ 442.931440][ T9651] ? sysfs_kf_read+0x350/0x350 [ 442.931452][ T9651] kernfs_fop_write_iter+0x3a8/0x500 [ 442.931469][ T9651] vfs_write+0x748/0xd70 [ 442.931486][ T9651] ? file_end_write+0x250/0x250 [ 442.931506][ T9651] ? mutex_lock_nested+0x17/0x20 [ 442.931521][ T9651] ? __fdget_pos+0x2bf/0x370 [ 442.931533][ T9651] ? ksys_write+0x70/0x260 [ 442.931547][ T9651] ksys_write+0x153/0x260 [ 442.931562][ T9651] ? __ia32_sys_read+0x80/0x80 [ 442.931564][ T4687] bond3 (unregistering): Released all slaves [ 442.931577][ T9651] ? lockdep_hardirqs_on+0x94/0x140 [ 442.931592][ T9651] do_syscall_64+0x4c/0xa0 [ 442.931603][ T9651] ? clear_bhb_loop+0x30/0x80 [ 442.931614][ T9651] ? clear_bhb_loop+0x30/0x80 [ 442.931626][ T9651] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.931639][ T9651] RIP: 0033:0x7f3372d38159 [ 442.931650][ T9651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.931660][ T9651] RSP: 002b:00007f3370f90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 442.931673][ T9651] RAX: ffffffffffffffda RBX: 00007f3372fbffa0 RCX: 00007f3372d38159 [ 442.931681][ T9651] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 0000000000000006 [ 442.931689][ T9651] RBP: 00007f3372dcf06b R08: 0000000000000000 R09: 0000000000000000 [ 442.931697][ T9651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.931704][ T9651] R13: 00007f3372fc0038 R14: 00007f3372fbffa0 R15: 00007fff96ad5c78 [ 442.931717][ T9651] [ 442.940755][ T9651] BUG raid5-md0 (Not tainted): Objects remaining in raid5-md0 on __kmem_cache_shutdown() [ 442.940767][ T9651] ----------------------------------------------------------------------------- [ 442.940767][ T9651] [ 442.940774][ T9651] Slab 0xffffea0001783500 objects=13 used=9 fp=0xffff88805e0d6b98 flags=0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 442.940805][ T9651] CPU: 0 PID: 9651 Comm: syz.0.1378 Not tainted syzkaller #0 [ 442.940821][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.940828][ T9651] Call Trace: [ 442.940834][ T9651] [ 442.940839][ T9651] dump_stack_lvl+0x188/0x250 [ 442.940857][ T9651] ? show_regs_print_info+0x20/0x20 [ 442.964001][ T4687] bond2 (unregistering): Released all slaves [ 442.968556][ T9651] ? slab_bug+0x99/0xc0 [ 444.067677][ T9651] slab_err+0x13d/0x170 [ 444.071812][ T9651] ? _raw_spin_lock_irq+0xb7/0xf0 [ 444.076809][ T9651] ? _raw_spin_lock_irqsave+0x100/0x100 [ 444.082327][ T9651] list_slab_objects+0x32/0x310 [ 444.087154][ T9651] __kmem_cache_shutdown+0x120/0x240 [ 444.092412][ T9651] kmem_cache_destroy+0x3d/0x130 [ 444.097320][ T9651] free_conf+0x1e3/0x630 [ 444.101543][ T9651] setup_conf+0xde7/0x2b60 [ 444.105955][ T9651] ? raid5_unplug+0x4c0/0x4c0 [ 444.110605][ T9651] ? __rwlock_init+0x140/0x140 [ 444.115348][ T9651] raid5_takeover+0x5c5/0x850 [ 444.120000][ T9651] level_store+0x6ad/0x1a00 [ 444.124494][ T9651] ? level_show+0x170/0x170 [ 444.128969][ T9651] ? __rwlock_init+0x140/0x140 [ 444.133705][ T9651] ? do_raw_spin_unlock+0x11d/0x230 [ 444.138877][ T9651] md_attr_store+0xdd/0x130 [ 444.143353][ T9651] ? sysfs_kf_read+0x350/0x350 [ 444.148094][ T9651] kernfs_fop_write_iter+0x3a8/0x500 [ 444.153367][ T9651] vfs_write+0x748/0xd70 [ 444.157584][ T9651] ? file_end_write+0x250/0x250 [ 444.162410][ T9651] ? mutex_lock_nested+0x17/0x20 [ 444.167320][ T9651] ? __fdget_pos+0x2bf/0x370 [ 444.171881][ T9651] ? ksys_write+0x70/0x260 [ 444.176269][ T9651] ksys_write+0x153/0x260 [ 444.180577][ T9651] ? __ia32_sys_read+0x80/0x80 [ 444.185332][ T9651] ? lockdep_hardirqs_on+0x94/0x140 [ 444.190505][ T9651] do_syscall_64+0x4c/0xa0 [ 444.194893][ T9651] ? clear_bhb_loop+0x30/0x80 [ 444.199546][ T9651] ? clear_bhb_loop+0x30/0x80 [ 444.204213][ T9651] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 444.210081][ T9651] RIP: 0033:0x7f3372d38159 [ 444.214472][ T9651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.234048][ T9651] RSP: 002b:00007f3370f90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 444.242435][ T9651] RAX: ffffffffffffffda RBX: 00007f3372fbffa0 RCX: 00007f3372d38159 [ 444.250390][ T9651] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 0000000000000006 [ 444.258357][ T9651] RBP: 00007f3372dcf06b R08: 0000000000000000 R09: 0000000000000000 [ 444.266306][ T9651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.274250][ T9651] R13: 00007f3372fc0038 R14: 00007f3372fbffa0 R15: 00007fff96ad5c78 [ 444.282209][ T9651] [ 444.285217][ T9651] Object 0xffff88805e0d4000 @offset=0 [ 444.290553][ T9651] Object 0xffff88805e0d44d8 @offset=1240 [ 444.296151][ T9651] Object 0xffff88805e0d49b0 @offset=2480 [ 444.301748][ T9651] Object 0xffff88805e0d4e88 @offset=3720 [ 444.307347][ T9651] Object 0xffff88805e0d5360 @offset=4960 [ 444.312943][ T9651] Object 0xffff88805e0d5838 @offset=6200 [ 444.318541][ T9651] Object 0xffff88805e0d5d10 @offset=7440 [ 444.324138][ T9651] Object 0xffff88805e0d61e8 @offset=8680 [ 444.329738][ T9651] Object 0xffff88805e0d66c0 @offset=9920 [ 444.337029][ T9651] kmem_cache_destroy raid5-md0: Slab cache still has objects [ 444.348939][ T9651] CPU: 0 PID: 9651 Comm: syz.0.1378 Tainted: G B syzkaller #0 [ 444.357704][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 444.367754][ T9651] Call Trace: [ 444.371026][ T9651] [ 444.373950][ T9651] dump_stack_lvl+0x188/0x250 [ 444.378623][ T9651] ? show_regs_print_info+0x20/0x20 [ 444.383822][ T9651] ? load_image+0x410/0x410 [ 444.388317][ T9651] ? _raw_spin_unlock_irq+0x3c/0x40 [ 444.393509][ T9651] ? __kmem_cache_shutdown+0xa5/0x240 [ 444.398874][ T9651] kmem_cache_destroy+0x11f/0x130 [ 444.403897][ T9651] free_conf+0x1e3/0x630 [ 444.408142][ T9651] setup_conf+0xde7/0x2b60 [ 444.412544][ T9651] ? raid5_unplug+0x4c0/0x4c0 [ 444.417215][ T9651] ? __rwlock_init+0x140/0x140 [ 444.421951][ T9651] raid5_takeover+0x5c5/0x850 [ 444.426602][ T9651] level_store+0x6ad/0x1a00 [ 444.431079][ T9651] ? level_show+0x170/0x170 [ 444.435551][ T9651] ? __rwlock_init+0x140/0x140 [ 444.440284][ T9651] ? do_raw_spin_unlock+0x11d/0x230 [ 444.445453][ T9651] md_attr_store+0xdd/0x130 [ 444.449926][ T9651] ? sysfs_kf_read+0x350/0x350 [ 444.454676][ T9651] kernfs_fop_write_iter+0x3a8/0x500 [ 444.459935][ T9651] vfs_write+0x748/0xd70 [ 444.464153][ T9651] ? file_end_write+0x250/0x250 [ 444.468975][ T9651] ? mutex_lock_nested+0x17/0x20 [ 444.473881][ T9651] ? __fdget_pos+0x2bf/0x370 [ 444.478448][ T9651] ? ksys_write+0x70/0x260 [ 444.482835][ T9651] ksys_write+0x153/0x260 [ 444.487137][ T9651] ? __ia32_sys_read+0x80/0x80 [ 444.491873][ T9651] ? lockdep_hardirqs_on+0x94/0x140 [ 444.497045][ T9651] do_syscall_64+0x4c/0xa0 [ 444.501430][ T9651] ? clear_bhb_loop+0x30/0x80 [ 444.506080][ T9651] ? clear_bhb_loop+0x30/0x80 [ 444.510726][ T9651] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 444.516589][ T9651] RIP: 0033:0x7f3372d38159 [ 444.520980][ T9651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.540558][ T9651] RSP: 002b:00007f3370f90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 444.548941][ T9651] RAX: ffffffffffffffda RBX: 00007f3372fbffa0 RCX: 00007f3372d38159 [ 444.556884][ T9651] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 0000000000000006 [ 444.564831][ T9651] RBP: 00007f3372dcf06b R08: 0000000000000000 R09: 0000000000000000 [ 444.572776][ T9651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.580719][ T9651] R13: 00007f3372fc0038 R14: 00007f3372fbffa0 R15: 00007fff96ad5c78 [ 444.588667][ T9651] [ 444.592021][ T2297] Bluetooth: hci0: command 0x0419 tx timeout [ 444.596664][ T4687] bond1 (unregistering): Released all slaves [ 444.598538][ T9651] md: md0: raid5 would not accept array [ 444.736181][ T4687] bond0 (unregistering): Released all slaves [ 444.782030][ T4687] bond3 (unregistering): Released all slaves [ 444.791251][ T4687] bond2 (unregistering): Released all slaves [ 444.801227][ T4687] bond1 (unregistering): Released all slaves [ 444.878665][ T4687] bond0 (unregistering): Released all slaves [ 444.940747][ T4687] team0 (unregistering): Port device team_slave_1 removed [ 444.950846][ T4687] team0 (unregistering): Port device team_slave_0 removed [ 444.962707][ T4687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.974923][ T4687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.009519][ T4687] bond0 (unregistering): Released all slaves [ 447.074840][ T4687] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.113842][ T4687] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.156857][ T4687] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.212102][ T4687] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.342660][ T4687] device hsr_slave_0 left promiscuous mode [ 448.348901][ T4687] device hsr_slave_1 left promiscuous mode [ 448.355332][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.363052][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.371308][ T4687] device bridge_slave_1 left promiscuous mode [ 448.377412][ T4687] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.386109][ T4687] device bridge_slave_0 left promiscuous mode [ 448.392725][ T4687] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.402005][ T4687] device hsr_slave_0 left promiscuous mode [ 448.408061][ T4687] device hsr_slave_1 left promiscuous mode [ 448.414160][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.421622][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.428948][ T4687] device bridge_slave_1 left promiscuous mode [ 448.435140][ T4687] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.443030][ T4687] device bridge_slave_0 left promiscuous mode [ 448.449187][ T4687] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.458361][ T4687] device hsr_slave_0 left promiscuous mode [ 448.464796][ T4687] device hsr_slave_1 left promiscuous mode [ 448.471027][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.478328][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.485768][ T4687] device bridge_slave_1 left promiscuous mode [ 448.491918][ T4687] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.500514][ T4687] device bridge_slave_0 left promiscuous mode [ 448.506606][ T4687] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.515824][ T4687] device hsr_slave_0 left promiscuous mode [ 448.521908][ T4687] device hsr_slave_1 left promiscuous mode [ 448.527929][ T4687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.535320][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.542771][ T4687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.550184][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.557510][ T4687] device bridge_slave_1 left promiscuous mode [ 448.563709][ T4687] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.571600][ T4687] device bridge_slave_0 left promiscuous mode [ 448.577690][ T4687] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.587026][ T4687] device hsr_slave_0 left promiscuous mode [ 448.593116][ T4687] device hsr_slave_1 left promiscuous mode [ 448.601385][ T4687] device veth1_macvtap left promiscuous mode [ 448.607360][ T4687] device veth0_macvtap left promiscuous mode [ 448.613524][ T4687] device veth1_vlan left promiscuous mode [ 448.619303][ T4687] device veth0_vlan left promiscuous mode [ 448.690952][ T4687] team0 (unregistering): Port device team_slave_1 removed [ 448.702056][ T4687] team0 (unregistering): Port device team_slave_0 removed [ 448.711532][ T4687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.723229][ T4687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.756377][ T4687] bond0 (unregistering): Released all slaves [ 448.816621][ T4687] team0 (unregistering): Port device team_slave_1 removed [ 448.826575][ T4687] team0 (unregistering): Port device team_slave_0 removed [ 448.836346][ T4687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.848491][ T4687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.882482][ T4687] bond0 (unregistering): Released all slaves [ 448.977958][ T4687] team0 (unregistering): Port device team_slave_1 removed [ 448.987259][ T4687] team0 (unregistering): Port device team_slave_0 removed [ 448.999313][ T4687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.010081][ T4687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.041695][ T4687] bond0 (unregistering): Released all slaves [ 449.108972][ T4687] team0 (unregistering): Port device team_slave_1 removed [ 449.118860][ T4687] team0 (unregistering): Port device team_slave_0 removed [ 449.128821][ T4687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.140781][ T4687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.178302][ T4687] bond0 (unregistering): Released all slaves [ 449.224468][ T4687] bond3 (unregistering): Released all slaves [ 449.232704][ T4687] bond2 (unregistering): Released all slaves [ 449.241837][ T4687] bond1 (unregistering): Released all slaves [ 449.313541][ T4687] bond0 (unregistering): Released all slaves