last executing test programs: 8m22.165237294s ago: executing program 1 (id=2): r0 = socket(0xa, 0x5, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c) listen(r0, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x48d5}, 0x8050) 8m21.724334733s ago: executing program 0 (id=6): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRESOCT=r1, @ANYBLOB="260000000200000000000000", @ANYRES32, @ANYBLOB], 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0xfffc}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) r11 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) unshare(0x20040400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x799, 0x1, 0x0, 0x4, 0x0, 0x5}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x20003}, &(0x7f0000000140), 0x0) keyctl$KEYCTL_MOVE(0x1e, r10, 0xffffffffffffffff, r11, 0x0) r12 = dup(r9) syz_ublk_setup_queues(r12, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x251, 0x0, r4}, &(0x7f0000000dc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x88, 0x2000, 0x10001004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x145, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90c, 0x4000, 0x1, 0x401f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r12}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x0, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) listen(0xffffffffffffffff, 0xfffffdfc) 8m21.682207514s ago: executing program 1 (id=7): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5531, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r0, 0x2, 0x3f015764000, 0x5) 8m20.310280985s ago: executing program 0 (id=8): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006001700800a00"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 8m19.220019729s ago: executing program 0 (id=9): syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 8m18.027478846s ago: executing program 0 (id=11): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x1, 0xa, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r2, 0x0, 0x0, 0x100000) r3 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x5, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4c43, 0x1ff) epoll_create1(0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000000)={0x1, 0x2}, 0x2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r7) socket(0xa, 0x3, 0x3a) 8m17.535181307s ago: executing program 1 (id=13): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSEhL2/9J78L5v7/f1ff/e/993fbN+17Wv2WvuZ61n3bPmmue+n+ua57ueo+q1qF+7GRGJPwT+/CVFCBEjhBgmhLhOCBEIISrFV4q/fLyAgpQ/9iTs3+vh9KvdAbuaeP55G88/b+P55208/7yN55+38fzzNp5/3sbzZywv2z6n2PW88u7i9//zMn79/18kt/zkrzaWv7HXfyOF55+38fzzNp5/3sbzz9t4/nkbz/9/v1r/yTGef97G82csL9sOWoj/Ae9D87o662r//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxvO+Su0EOKv+6vdF2OMMcYYY4wxxv59fP6r3QFjjDHGGGOMMcb+3wMhhRJaBCKfyC9iRAERK64RceJaUVBcJyLiehEvbhCFxI2isCgiiopiIkEUFyWEESisIBGKkqKUiIqbRGlxs0gUZURZUU44UV4kiVtEBXGrqChuE5XE7aKyuENUEVVFNVFd3ClqiLtETVFL1BZ3izqirqgn6ot7RANxr2go7hONxP2isXhANBEPiqbiIdFMPCyai0dEC/GoaCkeE61Ea9FGtBXt/q/yXxJ9xcuin+gvUsQAMVC8IgaJwWKIGCqGiVfFcPGaGCFeF6lipBgl3hCjxZtijHhLjBXjxHjxtpggJopJYrKYIqaKNPGOmCbeFdPFe2KGmClmidkiXcwRc8X7Yp6YLxaID8RC8aFYJBaLJWKpyBAfiUyxTGSJj8Vy8YnIFivESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBefih1ip9gldos9Yq/YJz4T+8Xn4oD4QuSIL/+b+Wf/Kb8XCBAgQYIGDfkgH8RADMRCLMRBHBSEghCBCMRDPBSCQlAYCkNRKAoJkAAloAQgIBAQlISSEIUolIbSkAiJUBbKggMHSZAEFeBWqAgVoRJUgspQGapAVagK1aE61IAaUBNqQm2oDXWgDtSDenAP3AP3QkNoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraAVtIE20A7aQXtoDx2gA3SCTtAZOkMX6ALJkAxdoSt0g27QHbpDD+gBPaEn9ILe0BtegpfgZXgZ+kMdOQAGwkAYBINgCAyFofAqDIfX4DV4HVJhJIyCN+ANeBPGwBkYC+NgPIyHGnIiTILJQHIqpEEaTINpMB2mwwyYCTNhNqTDHJgLc2EezIf58AEshA/hQ1gMi2EpZEAGZMIyyIIsWA5nIRtWwEpYBathDayGdbAe1sFG2AQbYQtsgW2wDT6FT2En7ITdsBv2wl74DD6Dz+FzSIUcyIGDcBAOwSE4DIchF3LhCByBo3AUjsExOA7H4QSchFNwEk7DaTgDZ+EcnIPzcB4uwAsJ3zTfW2ZDqpCXaallPplPxsgYGStjZZyMkwVlQRmRERkv42UhWUgWloVlUVlUJsgEWUKWkChRkgxlSVlSRmVUlpalZaJMlGVlWemkk0kySVaQFWRFWVFWkrfLyvIOWUVWlR1ddVld1pCdXE1ZS9aWtWUdWVfWk/VlfdlANpANZUPZSDaSjWVj2UQ+KJvKATAEHpaXJ9NCjoSWchS0kq1lG9lWvgmPy/ZyDHSQHWUn+aQcB2Ohi2zvkuUzsqucBN3kc3IyPC97yKnQU74oe8neso98SfaVHVw/2V/OgAFyoJwNg+RgOUQOlfOgrrw8sXrydZkqR8pR8g25FN6UY+RbcqwcJ8fLt+UEOVFOkpPlFDlVpsl35DT5rpwu35Mz5Ew5S86W6XKOnCvfl/PkfLlAfiAXyg/lIrlYLpFLZYb8SGbKZTJLfiyXy09ktlwhV8pVcrVcI9fKdXK93CA3yk1ys9wit8ptcrv8VO6QO+UuuVvukXvlPvmZ3C8/lwfkFzJHfikPyj/JQ/IreVh+LXPlN/KI/FYeld/JY/J7eVz+IE/Ik/KU/FGelj/JM/KsPCd/luflL/KCvCgvSS+FAiWVUloFKp/Kr2JUARWrrlFx6lpVUF2nIup6Fa9uUIXUjaqwKqKKqmIqQRVXJZRRqKwiFaqSqpSKqptUaXWzSlRlVFlVTjlVXiWpW1QFdauqqG5TldTtqrK6Q1VRVVU1VV3dqWqou1RNVUvVVnerOqquqqfqq3tUA3WvaqjuU43U/aqxekA1UQ+qpuoh1Uw9rJqrR1QL9ahqqR5TrVRr1Ua1Ve3U46q9ekJ1UB1VJ/Wk6qyeUl3U0ypZPaO6qmdVN/Wc6q6eVz3UC6qnelH1Ur1VH3VRXVJe9VP9VYoaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypVjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WU9RUlabeUdPUu2q6ek/NUDPVLDVbpas5ashfKi34L+S/+y/yR/z67NvUdvWp2qF2ql1qt9qj9qp9ap/ar/arA+qAylE56qA6qA6pQ+qwOqxyVa46oo6oo+qoOqaOqePquDqhTqqf1Y/qtPpJnVFn1Vn1szqvzqsLf/kZCA1aaqW1DnQ+nV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf84fzf66+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+RQ/Sg/UQPVQP06/q4Xq4HqFH6FSdqkfpUXq0Hq3H6DF6rB6rx+vxeoKeoCfpSXqKnqLTdJqepqfp6Xq6nqFn6Fl6lk7X6Xqunqvn6Xl6gV6gF+qFepFepJfoJTpDZ+hMnamzdJZerpfrbL1Cr9Cr9Cq9Rq/R6/Q6vUFv0Jv0Jr1Fb9HZervernfoHXqX3qX36D16n96n9+v9+oA+oHN0jj6oD+pD+pA+rA/rXJ2rj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6kr50+bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwY1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHgpqB0cHOQGJQJygblAheUD5KCW4IKwa1BxeC2oFJwe1A5uCOoUkAE1YLqwZ1BjeCuoGZQK6gd3B3UCeoG9YL6wT1Bg+DeoGFwX9AouD9oHDwQNAkeDJoGDwXNgoeD5sEjQYvg0aBl8FjQKmgdtAnaBu3+uX5Q9Q/U9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL/88o4aNebDfBiDMRiLsRiHcVgQC2IEIxiP8VgIC2FhLIxFsSgmYAKWwBJ4GSFhSSyJUYxiaSyNiZiIZbEsOnSYhElYAStgRayIlbASVsbKWAWrYDWshnfinXgX3oW1sBbejXdjXayL9bE+NsAG2BAbYiNshI2xMTbBJtgUm2IzbIbNsTm2wBbYEltiK2yFbbANtsN22B7bYwfsgJ2wE3bGztgFu2AyJmNX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/shymYggNxIA7CQTgEh+AwHIbDcTiOwBGYiqk4CkfhaByNY3AMjsVxOB7fxgk4ESfhZJyCUzEN03AaTsPpOB1n4AychbMwHdNxLs7FeTgPF+ACXIgLcREuwiW4BDMwAzMxE7MwC5fjcszGbFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsAczMGDeBAP4SE8jIcxF3PxCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsPz+AtewIt4CT3GWCli7TU2zl5rC9rrbIwtYP8+LmqL2QRb3Jawxha2Rf4hRmttoi1jy9py1tnyNsne8pu4iq1qq9nq9k5bw95la/4mbmDvtQ3tfbaRvd/Wt/f8Q9zYPmCb2EdtU/uYbWZb2+a2rW1hH7Ut7WO2lW1t29i2trN9ynaxT9tk+4ztap/9TZxpl9n1doPdaDfZ/fZze87+bI/a7+x5+4vtZ/vbYfZVO9y+ZkfY122qHfmbeLx9206wE+0kO9lOsVN/E8+ys226nWPn2vftPDv/N3GG/cgutFl2kV1sl9ilv8aXe8qyH9vl9hObbVfYlXaVXW3X2LV23d96XWW32K12m91nP7M77E67y+62e+zeX+PL53HAfmFz7Jf2iP3WHrJf2cP2mM213/waXz6/Y/Z7e9z+YE/Yk/aU/dGetj/ZM/bsr+d/+dx/tBftJeutICBJijQFlI/yUwwVoFi6huLoWipI11GErqd4uoEK0Y1UmIpQUSpGCVScSpAhJEtEIZWkUhSlm6g03UyJVIbKUjlyVJ6S6BaqQLdSRbqNKtHtVJnuoCpUlapRdbqTatBdVJNqUW26m+pQXapH9ekeakD3UkO6jxrR/dSYHqAm9CA1pYeoGT1MzekRakGPUkt6jFpRa2pDbakdPU7t6QnqQB2pEz1Jnekp6kJPUzI9Q13pWepGz1F3ep560AvUk16kXtSb+tBL1Jdepn7Un1JoAA2kV2gQDaYhNJSG0as0nF6jEfQ6pdJIGkVv0Gh6k8bQWzSWxtF4epsm0ESaRJNpCk2lNHqHptG7NJ3eoxk0k2bRbEqnOTSX3qd5NJ8W0Ae0kD6kRbSYltBSyqCPKJOWURZ9TMvpE8qmFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbadPaQftpF20m/bQXtpHn9F++pwO0BeUQ1/SQfoTHaKv6DB9Tbn0DR2hb+kofUfH6Hs6Tj/QCTpJp+hHOk0/0Rk6S+foZzpPv9AFukiXyJMIIZShCnUYhPnC/GFMWCCMDa8J48Jrw4LhdWEkvD6MD28IC4U3hoXDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCkuHN4eJYZmwbFgudGH5MCm8JawQ3hpWDG8LK4W3h5XDO8IqYdXw0furh3eGNcK7wpphrbB2eHdYJ6wb1gvrh/eEDcJ7w4bhfWGj8P6wYvhA2CR8MGwaPhQ2Cx8Om4ePhC3CR8OW4WNhq7B12CZsG7YLHw/bh0+EHcKOYafwybBz+FTYJXw6TA6fCbuGz/7u8ZRwQDgwfCV8JfT+PrUkujSaEf0omhldFs2KfhxdHv0kmh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFumtcnLvWFXTXuYi73sW7G1whd6Mr7Iq4oq6YS3DFXQlnHDrryIWupCvlou4mV9rd7BJdGVfWlXPOlXdJrq1r59q59u4J18F1dJ3ck+5J95R7yj3tnnbPuK7uWdfNPee6u+ddD/eCe8G96Hq53q6Pe8n1dS+7fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3tct037oj71h1137lj7nt33P3gTriT7pT70Z12P7kz7qw75352590v7oK76C4579Ii70SmRd6NTI+8F5kRmRmZFZkdSY/MicyNvB+ZF5kfWRD5ILIw8mFkUWRxZElkaSQj8lEkM7IskhX5OLI88kkkO7IisjKyKrI6sibiffEdoS/pS/mov8mX9jf7RF/Gl/XlvPPlfZK/xVfwt/qK/jZfyd/uK/s7fBVf1Vfzj/lWvrVv49v6dv5x394/4Tv4jr6Tf9J39k/5Lv5pn+yf8V39s76bf85398/7Hv4F39O/6Hv53r6Pf8n39S/7fr6/T/ED/ED/ih/kB/shfqgf5l/1w/1rfoR/3af6kX6Uf8OP9m/6Mf4tP9aP8+P9236Cn+gn+cl+ip/q0/w7fpp/10/37/kZfqaf5Wf7dD/Hz/Xv+3l+vl/gP/AL/Yd+kV/sl/ilPsN/5DP9Mp/lP/bL/Sc+26/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/6nf4nX6X3+33+L1+n//M7/ef+wP+C5/jv/QH/Z/8If+VP+y/9rn+G3/Ef+uP+u/8Mf+9P+5/8Cf8SX/K/+hP+5/8GX/Wn/M/+/P+F3/BX/SX+H/WGGOMMcb+S9TvHB/wL74n/7IuGyiEuHZnsdx/rrm58J/3g2VC54gQ4pn+PR/+66pTJyUl5S+PzVYiKLVYCBG5kp9PXIlXiE7iKZEsOooK/7K/wbL3efqd+tHbhYj9W+dCxIi/xn9f/9b/oP7jT47PrByei/9P6i8WIrHUlZwC4kp8pX7F/6B+kfa/03+Br9KE6PB3OXHiSnylfpJ4Qjwrkv/hkYwxxhhjjDHG2J8NltW6/9798+X78wR9JSe/uBL/3v05Y4wxxhhjjDHGrr7ne/d5+vHk5I7decMb3vDmb5ur/ZeJMcYYY4wx9u925aL/anfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXf8/Pk7sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//JhA6YA==") syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbcf, &(0x7f0000000c00)="$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") r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001340)=""/182) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@nouid32}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000000d00)="$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") ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x1, 0x246, 0x7, 0x5, 0xfffffffffffffff8, 0x1, 0x9, 0xf6b}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xa, 0x48b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000c80)='.\x00', &(0x7f0000000cc0), 0x800000, &(0x7f0000000a40)={[], [{@obj_user={'obj_user', 0x3d, '&(]+'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x63, 0x64, 0x61, 0x64, 0x33, 0x30, 0x37], 0x2d, [0x62, 0x38, 0x62, 0x64], 0x2d, [0x38, 0x61, 0x37, 0x31], 0x2d, [0x34, 0x66, 0x62, 0x2be6bc446b3b1975], 0x2d, [0x37, 0x39, 0x66, 0x64, 0xa, 0x32, 0x33, 0x37]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xfa\x0f\x8at\xb0@'}}]}) mknod$loop(0x0, 0x2000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @remote, @multicast, @local}}}}, 0x0) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c1}, 0x0) sendfile(r4, r4, 0x0, 0x7a680000) 8m15.591950681s ago: executing program 1 (id=15): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) pivot_root(0x0, &(0x7f0000000180)='./file0\x00') faccessat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x112, 0x2200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f00000004c0)={0x0, 0x3, 0xfffffffb, 0x800, 0x4, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000640)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2) 8m13.660692614s ago: executing program 1 (id=16): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket(0xa, 0x2, 0xe40) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x400d, 0x100300) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000007c0)={0x0, &(0x7f0000000700), 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5}) r6 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r6, 0xc0184d16, 0x0) move_mount(r5, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 8m13.511715877s ago: executing program 0 (id=18): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x8, 0x9, 0x0, 0x80000002, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x2c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x4, @mcast1, 0x75}, @in={0x2, 0x4e22, @local}]}, &(0x7f0000000280)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000003c0)={r7, 0x4, 0x30}, 0xc) write$binfmt_script(r5, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 8m8.283796154s ago: executing program 0 (id=24): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$peekuser(0x3, 0x0, 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x10, 0x40000) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x2, 0x1fe, 0x15}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x3a, 0x5d, 0x40, 0x5f9, 0xffff, 0x619f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xbd, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x7f, 0xc7, 0x0, 0xff, 0x2, 0xc1, 0x6}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$netlink(0x10, 0x3, 0x0) 7m58.341737257s ago: executing program 32 (id=16): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket(0xa, 0x2, 0xe40) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x400d, 0x100300) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000007c0)={0x0, &(0x7f0000000700), 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5}) r6 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r6, 0xc0184d16, 0x0) move_mount(r5, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 7m52.618354215s ago: executing program 33 (id=24): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$peekuser(0x3, 0x0, 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x10, 0x40000) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x2, 0x1fe, 0x15}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x3a, 0x5d, 0x40, 0x5f9, 0xffff, 0x619f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xbd, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x7f, 0xc7, 0x0, 0xff, 0x2, 0xc1, 0x6}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$netlink(0x10, 0x3, 0x0) 3m4.898104291s ago: executing program 5 (id=703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000001c0)='!,\x00\xe5\x9b\xb41\x89\x1a\xd1;m\x83+\xbd\xe1\xdb5f\x14\x8a\xe8\xf7\x8fe\xf0\xea\x15\x1am\xe8=\x99I\xe1\xb6^\xf40\x99\xae\xa2&\xf7\xcc\fJ|aW\xab\xd6\xbcD[\xb5\x97\x14\x11\xac\x83\xce\xaf4g\x14\x9b\xb4%Zn\xe7\x8e[\xf8\xefQ=\xb6\xff\xd3\xeaX\x01\n\xaf\x9b\xc7=\x83\x88\xae\xcb-\xac\xbc\x12\xe7i\xdd\xddy[\xa2\x00\x16\xca\xcfca\xd7A\xfdL\xf1I\xb5\xab\xf7c\xb5\xb8\b\xe6m\n\x85\x00L') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f00000000c0)='-.\x00') setrlimit(0x0, &(0x7f0000000280)={0x2, 0xa}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x34, 0x1, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10001}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x34}}, 0x8000) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0) close(r3) 3m3.400657755s ago: executing program 5 (id=706): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0) writev(r1, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000300)=0x0) sendmsg$AUDIT_SET(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x3e9, 0x800, 0x70bd2a, 0x25dfdbfe, {0x10, 0x0, 0x0, r4, 0x6, 0x713ab0c6, 0x1, 0xfff, 0x0, 0x5, 0xf}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4884}, 0x11) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 3m2.986021525s ago: executing program 5 (id=710): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x0, 0x0, 0x400002, {0x0, 0xff}, 0xe}) 3m0.991043309s ago: executing program 5 (id=712): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff038}, {0x6}]}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) write(r5, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x10, 0x3f5, 0x4, 0x0, 0x25dfdbfc}, 0x26}, 0x1, 0x0, 0x0, 0x22000000}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x2c}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r8, 0x0, 0x0, 0x4008084, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000002340)={0x2, 0x5}, 0x4) sendto$inet(r8, 0x0, 0x0, 0x4004084, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m58.702780621s ago: executing program 5 (id=715): syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 2m57.723105262s ago: executing program 5 (id=716): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 2m42.503560813s ago: executing program 34 (id=716): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 15.432008593s ago: executing program 4 (id=1125): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='esdfs\x00', 0x300a4a2, 0x0) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006949818548ec12692ec66a5563984646c46d7979aac5e0b116b80e10d87c7f0c664222bbe5510b09e9baf67dd9678d6c46375877f721b78ef425b54e8dfc0872716195072cd0039e65655e3a68536bf0cc48d4f0be5b5616eabacf38d46267568bc4d2191e9157ed4c799c057549d6d00fc18e0c781f61242e2f0530195f7370abd06e1c2075067d2f6e1c9d8e2c2123a910aeafc0818d8b28cb6bfd48632ebfd6fc5126b2e50bf5d9ef1e4a3514e48bfd71118e84ec443be2f4f62e7027"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) sendto$packet(r5, &(0x7f0000000180)="02030e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0x18, 0x1d75ace51f32de09, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 12.45386805s ago: executing program 3 (id=1134): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2", 0x19}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r1, 0x8}, {r2, 0x21da}], 0x2, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000c0a010100000000000000000a000006140000001100010000000500000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x118, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x30}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc2}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ce}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x249}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xafe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x837}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4001"], 0x14) 12.115731647s ago: executing program 4 (id=1135): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x1708}], 0x1, 0x0, 0x0, 0x0) read$dsp(r1, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) 10.100970241s ago: executing program 2 (id=1138): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x18000, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f62617272696572ac73657373697e6e3d307830720212e8303030a20395ae3039018b2c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c736d61636b66737472616e736d7574653dc52e29402b2c6f626a5f747970653d6e74667333002c736d61636b66737472616e736d7574653d76666174002c6f626a5f757365723d402c7065726d69745f646972656374696f2c00"], 0x1, 0x5e4, &(0x7f0000000480)="$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") mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 9.863738206s ago: executing program 3 (id=1139): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00'}, 0x18) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r1, 0x8}, {r2, 0x21da}], 0x2, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000c0a010100000000000000000a000006140000001100010000000500000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000f40)=ANY=[], 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf2502000000080001", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 9.508568934s ago: executing program 4 (id=1141): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000300)=0x0) sendmsg$AUDIT_SET(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x3e9, 0x800, 0x70bd2a, 0x25dfdbfe, {0x10, 0x0, 0x0, r4, 0x6, 0x713ab0c6, 0x1, 0xfff, 0x0, 0x5, 0xf}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4884}, 0x11) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 8.593857054s ago: executing program 2 (id=1142): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="010000000b0e0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000002"], 0x80}}, 0x11) 8.523100305s ago: executing program 6 (id=1143): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='esdfs\x00', 0x300a4a2, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006949818548ec12692ec66a5563984646c46d7979aac5e0b116b80e10d87c7f0c664222bbe5510b09e9baf67dd9678d6c46375877f721b78ef425b54e8dfc0872716195072cd0039e65655e3a68536bf0cc48d4f0be5b5616eabacf38d46267568bc4d2191e9157ed4c799c057549d6d00fc18e0c781f61242e2f0530195f7370abd06e1c2075067d2f6e1c9d8e2c2123a910aeafc0818d8b28cb6bfd48632ebfd6fc5126b2e50bf5d9ef1e4a3514e48bfd71118e84ec443be2f4f62e7027"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) sendto$packet(r5, &(0x7f0000000180)="02030e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0x18, 0x1d75ace51f32de09, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 8.33269301s ago: executing program 3 (id=1144): syz_emit_ethernet(0xe5, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0xd4382, 0x0) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) socket(0x15, 0x3, 0xc1) socket(0x18, 0x5, 0x1000000) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xaaa5, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(0xffffffffffffffff, 0x4) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000) 8.192514863s ago: executing program 4 (id=1145): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x7}, 0x10) write(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x7fe, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@remote, {0x0, 0xd, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x202}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = syz_pidfd_open(r6, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0xff01) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x13, &(0x7f0000001100)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdb37}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) sendmsg$inet6(r11, 0x0, 0x890) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in=@empty, 0x1, 0x714, 0x4e22, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x0) 8.016924326s ago: executing program 2 (id=1146): r0 = inotify_init() r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "540500", 0x0, 0x2c, 0x0, @local, @local}}}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x36b}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 7.121971246s ago: executing program 3 (id=1147): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') readlinkat(r5, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240)=""/65, 0x41) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close_range(r1, r2, 0x0) 7.043930567s ago: executing program 6 (id=1148): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) epoll_create1(0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x200080c5) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000010c0)={0x14, 0x12, 0x1, 0x200, 0x0, "", [@nested={0x4, 0x35}]}, 0x14}], 0x1}, 0x4000800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) eventfd2(0x0, 0x0) 4.600538491s ago: executing program 2 (id=1149): syz_emit_ethernet(0xe5, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0xd4382, 0x0) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) socket(0x15, 0x3, 0xc1) socket(0x18, 0x5, 0x1000000) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xaaa5, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r5, 0x4) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000) 4.078773162s ago: executing program 6 (id=1150): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x18000, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f62617272696572ac73657373697e6e3d307830720212e8303030a20395ae3039018b2c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c736d61636b66737472616e736d7574653dc52e29402b2c6f626a5f747970653d6e74667333002c736d61636b66737472616e736d7574653d76666174002c6f626a5f757365723d402c7065726d69745f646972656374696f2c00"], 0x1, 0x5e4, &(0x7f0000000480)="$eJzs3cFrG9kZAPBvRrZsueDV7jrZbVpYs4WybNjEkkPaQqFuCcWHEAK95GpqJTaRnWArxcmhuCV/SHpwTzn0UgKlhxxy7iH/gKHHQqFH04vLjEay4iiOldiW0vx+5Gne6L355psvM49IDjiAj9birRjfjiQWL17fyvZ3d+abuzvza51+RDoREWn+J8ay7j8jSo8jZqPd4vsRkRThkjed51n96YWXN7a+ae+lRcvnl4467ni2ixYLRZILJxjvxXvHS7pXmAW91gk+Cvbf7j+nePrSKcZmAMkb/i6qEVMRMRkR2TrQuXHTs83u5I3MAwgAAACn6JO92IutmB52HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAhKX7/f1K0tNOfjaTz+//LxXtR9D9oz4edAAAAAAAAAAD0NT7Q7K/2Yi+2Yrqzv5/kP/P/Ot+ZyV+/Fw9iMxqxEZdiK5aiFa3YiFpEVHsClbeWWq2N2jGOrPc9sv4+1wwAAAAAAAAAH5FK33f/GIsHP/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBRkESU2pu8zXT61UjHImIyIsrZvO2Iv1eHnewJeD7sBAAAAOAMfLIXe7EV0539/ST/zH8+zT73T8aDWI9WrEYrmtGI5fy7gPY3AOnuznxzd2d+LWuvx/3lvwdKI48Y7e8e+p95Lp9xrnvEYvw6fhMXYzZuxkasxu9iKVrRiNm4lveWIolq8e1FtZNn/3wXXtm7+bZcv8wzqcTtWM1zuxS/jXvRjOVI82vI5xx9xj9k1Ul+UThmjZaLbRKR/KC4srNW7vtuNa/IeLcic0Xts2p8enQlBrxPDp+pFmk3p5lTqPlUsc1qPjmkmvd3uBL1nrvvfE8Vsoxfez6/a/31q5Xm+t2V25sXR+eS3tHhSsz3VOKLo++J/7NKlItqtFfRwVbLr/Njp2M1bsS9WI5G/CSuRj1v8/m2t67njvGspYM9az/6puh8FpFU2tsRkdX105669q501Xys952DKn128ivS2IWiU4pIxro5jYLDlaj1VOLzoyvxp/3sdbO5fndjZen+Mc/342Kbrc0TI7U2l4u7dyzfe/XuyMY+7ztWy8dmumPpa2PnumNve1Kz2ef7RqrnY1/0HWsf92XPWL9/5QAw8qa+nSpX/lX5R+VJ5XFlpXJ98lcTP534YTnGX4z9rfSX9M/pz5Nv40n8/uDzPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8O42Hz66u9RsNjZ0dHR0up1hr0ychcuttfuXNx8++m51belO405j/cpcvXb1Su1nVy7fXm025tqvw86S03Lw0A87EwAAAAAAAAAAAAZxFv+ddNjXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIdj8VaMb0cStblLc9n+7s58M2ud/sHMNCLGsu1/I0qPI2aj3aLaEy5503me1Z9eeHmj0hMr7cwvHXXc8WwXLRaKJBdOMN6LPvHKA4VLuleYBb3WCQ7D9r8AAAD//9mSG9Q=") mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.22063893s ago: executing program 2 (id=1151): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b00000002"], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="77000005040000880000000000000000000000c52aacf61fa920580400ac7bc989ce571bff7c53b3cc6a5ac38db0101d28ae9b382bee493be2385aac9de475aa3df4451dddf2a7874c3f103472d0ee7e33bec8dd7bbee9dcc6951bebf767c70e28c702d2e22ffc15f982eedbbbd4238d7e200225a61bff6eff5cccd804a2d368c18a74d486bf3f72058c9df55199e8e77218d6ff1beac6a70f95b4438aacf04522dd18a845c1d89494e800"/181]) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r4, &(0x7f0000000880)="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"}, 0x1c) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x6, 0x0}) 2.119434614s ago: executing program 6 (id=1152): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00'}, 0x18) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r1, 0x8}, {r2, 0x21da}], 0x2, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000c0a010100000000000000000a000006140000001100010000000500000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000f40)=ANY=[], 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 1.900391179s ago: executing program 2 (id=1153): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=rdma,port=0x00000000']) 1.818174371s ago: executing program 4 (id=1154): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="010000000b0e0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000002"], 0x80}}, 0x11) 1.740586142s ago: executing program 6 (id=1155): syz_emit_ethernet(0xe5, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0xd4382, 0x0) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) socket(0x15, 0x3, 0xc1) socket(0x18, 0x5, 0x1000000) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xaaa5, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(0xffffffffffffffff, 0x4) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000) 1.485368698s ago: executing program 3 (id=1156): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='esdfs\x00', 0x300a4a2, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006949818548ec12692ec66a5563984646c46d7979aac5e0b116b80e10d87c7f0c664222bbe5510b09e9baf67dd9678d6c46375877f721b78ef425b54e8dfc0872716195072cd0039e65655e3a68536bf0cc48d4f0be5b5616eabacf38d46267568bc4d2191e9157ed4c799c057549d6d00fc18e0c781f61242e2f0530195f7370abd06e1c2075067d2f6e1c9d8e2c2123a910aeafc0818d8b28cb6bfd48632ebfd6fc5126b2e50bf5d9ef1e4a3514e48bfd71118e84ec443be2f4f62e7027"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) sendto$packet(r5, &(0x7f0000000180)="02030e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0x18, 0x1d75ace51f32de09, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 455.35601ms ago: executing program 6 (id=1157): r0 = inotify_init() r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "540500", 0x0, 0x2c, 0x0, @local, @local}}}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x36b}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 152.764627ms ago: executing program 4 (id=1158): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) epoll_create1(0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x200080c5) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000010c0)={0x14, 0x12, 0x1, 0x200, 0x0, "", [@nested={0x4, 0x35}]}, 0x14}], 0x1}, 0x4000800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) eventfd2(0x0, 0x0) 0s ago: executing program 3 (id=1159): syz_emit_ethernet(0xe5, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0xd4382, 0x0) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) socket(0x15, 0x3, 0xc1) socket(0x18, 0x5, 0x1000000) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xaaa5, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r4, 0x4) sendmmsg$inet6(r3, 0x0, 0x0, 0x4000) kernel console output (not intermixed with test programs): 8/0x80 [ 273.873515][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 273.878100][ T5785] ret_from_fork_asm+0x11/0x20 [ 273.882871][ T5785] [ 273.887985][ T5785] kobject: kobject_add_internal failed for hci4:32 with -EEXIST, don't try to register things with the same name in the same directory. [ 273.901988][ T5785] Bluetooth: hci4: failed to register connection device [ 274.030487][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 274.498330][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 274.531228][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 274.579627][ T9] usb 4-1: can't read configurations, error -71 [ 274.580767][ T7872] binder: 7871:7872 ioctl c0306201 0 returned -14 [ 275.289489][ T5837] Process accounting resumed [ 275.804256][ T7885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.379'. [ 275.966383][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 276.081309][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:32' [ 276.091245][ T5785] CPU: 1 PID: 5785 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 276.098816][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 276.108896][ T5785] Workqueue: hci3 hci_rx_work [ 276.113619][ T5785] Call Trace: [ 276.116924][ T5785] [ 276.119879][ T5785] dump_stack_lvl+0x18c/0x250 [ 276.124604][ T5785] ? show_regs_print_info+0x20/0x20 [ 276.130117][ T5785] ? load_image+0x420/0x420 [ 276.134659][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 276.139782][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 276.144841][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 276.149542][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 276.154762][ T5785] kobject_add_internal+0x617/0xc90 [ 276.160065][ T5785] kobject_add+0x164/0x240 [ 276.164493][ T5785] ? kobject_init+0x1d0/0x1d0 [ 276.169182][ T5785] ? get_device_parent+0x366/0x390 [ 276.174317][ T5785] device_add+0x3fa/0xc40 [ 276.178692][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 276.183660][ T5785] le_conn_complete_evt+0xe9f/0x1480 [ 276.188968][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 276.195393][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 276.201035][ T5785] ? mutex_unlock+0x10/0x10 [ 276.205629][ T5785] ? skb_pull_data+0xf0/0x1f0 [ 276.210326][ T5785] hci_le_conn_complete_evt+0x187/0x440 [ 276.215904][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 276.221982][ T5785] hci_event_packet+0x7b4/0x1280 [ 276.226933][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 276.231966][ T5785] ? lock_chain_count+0x20/0x20 [ 276.236821][ T5785] ? bis_list+0x290/0x290 [ 276.241156][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 276.246363][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 276.251591][ T5785] hci_rx_work+0x43a/0xd60 [ 276.256028][ T5785] ? process_scheduled_works+0x975/0x1600 [ 276.261940][ T5785] process_scheduled_works+0xa60/0x1600 [ 276.267603][ T5785] ? worker_attach_to_pool+0x370/0x370 [ 276.273182][ T5785] ? assign_work+0x3cc/0x5d0 [ 276.277877][ T5785] worker_thread+0xa5e/0xfe0 [ 276.282703][ T5785] kthread+0x2fa/0x390 [ 276.286901][ T5785] ? pr_cont_work+0x550/0x550 [ 276.291599][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 276.296193][ T5785] ret_from_fork+0x48/0x80 [ 276.300636][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 276.305243][ T5785] ret_from_fork_asm+0x11/0x20 [ 276.310027][ T5785] [ 276.313698][ T5785] kobject: kobject_add_internal failed for hci3:32 with -EEXIST, don't try to register things with the same name in the same directory. [ 276.327838][ T5785] Bluetooth: hci3: failed to register connection device [ 276.521499][ T7904] trusted_key: encrypted_key: insufficient parameters specified [ 276.557999][ T7904] trusted_key: encrypted_key: insufficient parameters specified [ 276.589968][ T7907] UBIFS error (pid: 7907): cannot open "./file0", error -22 [ 276.728809][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 276.731140][ T5785] Bluetooth: hci1: Invalid handle: 0x20c9 > 0x0eff [ 276.832482][ T7914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.385'. [ 277.140306][ T5837] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 277.338368][ T5837] usb 4-1: unable to get BOS descriptor or descriptor too short [ 277.373393][ T5837] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 277.401724][ T5837] usb 4-1: can't read configurations, error -71 [ 278.410467][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 278.541955][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'. [ 279.392580][ T7950] trusted_key: encrypted_key: insufficient parameters specified [ 279.540802][ T7950] trusted_key: encrypted_key: insufficient parameters specified [ 279.714263][ T5785] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 280.402195][ T7954] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 280.421883][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 280.440481][ T7969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.399'. [ 280.750949][ T7976] loop4: detected capacity change from 0 to 256 [ 280.758307][ T7976] exfat: Deprecated parameter 'utf8' [ 280.764359][ T7976] exfat: Deprecated parameter 'utf8' [ 280.770550][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 280.916668][ T7976] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 281.088970][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 281.098462][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 281.127610][ T9] usb 3-1: can't read configurations, error -71 [ 281.422469][ T7982] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 281.542280][ T7982] befs: (loop5): No write support. Marking filesystem read-only [ 281.578776][ T7982] syz.5.403: attempt to access beyond end of device [ 281.578776][ T7982] loop5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 281.594904][ T7982] befs: (loop5): unable to read superblock [ 281.726053][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'. [ 282.565692][ T8003] program syz.3.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.578847][ T8003] (null): rxe_set_mtu: Set mtu to 1024 [ 282.585562][ T8003] rdma_rxe: rxe_newlink: failed to add bond0 [ 283.327537][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 283.357617][ T8014] netlink: 20 bytes leftover after parsing attributes in process `syz.4.413'. [ 283.372469][ T8015] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 283.886875][ T5816] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 285.455724][ T5816] usb 5-1: unable to get BOS descriptor or descriptor too short [ 285.484905][ T5816] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 285.517259][ T5816] usb 5-1: can't read configurations, error -71 [ 285.610417][ T5785] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 287.719671][ T5086] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 290.830340][ T8052] netlink: 'syz.5.423': attribute type 4 has an invalid length. [ 290.863829][ T8052] netlink: 'syz.5.423': attribute type 4 has an invalid length. [ 291.162033][ T788] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 291.239752][ T8057] binder: 8054:8057 ioctl c0306201 0 returned -14 [ 291.559794][ T788] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 291.612585][ T788] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 291.724315][ T788] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 291.864844][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.876765][ T8053] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 291.923171][ T788] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 292.149295][ T788] usb 4-1: USB disconnect, device number 9 [ 292.319933][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:32' [ 292.329920][ T5785] CPU: 1 PID: 5785 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 292.337513][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 292.347602][ T5785] Workqueue: hci4 hci_rx_work [ 292.352326][ T5785] Call Trace: [ 292.355629][ T5785] [ 292.358582][ T5785] dump_stack_lvl+0x18c/0x250 [ 292.363293][ T5785] ? show_regs_print_info+0x20/0x20 [ 292.368529][ T5785] ? load_image+0x420/0x420 [ 292.373088][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 292.378239][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 292.383300][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 292.388025][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 292.393303][ T5785] kobject_add_internal+0x617/0xc90 [ 292.393336][ T5785] kobject_add+0x164/0x240 [ 292.393359][ T5785] ? kobject_init+0x1d0/0x1d0 [ 292.393382][ T5785] ? get_device_parent+0x366/0x390 [ 292.393403][ T5785] device_add+0x3fa/0xc40 [ 292.393422][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 292.393443][ T5785] le_conn_complete_evt+0xe9f/0x1480 [ 292.393467][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 292.393486][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 292.393506][ T5785] ? mutex_unlock+0x10/0x10 [ 292.393522][ T5785] ? skb_pull_data+0xf0/0x1f0 [ 292.393541][ T5785] hci_le_conn_complete_evt+0x187/0x440 [ 292.393569][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 292.393588][ T5785] hci_event_packet+0x7b4/0x1280 [ 292.393608][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 292.393627][ T5785] ? lock_chain_count+0x20/0x20 [ 292.393646][ T5785] ? bis_list+0x290/0x290 [ 292.393666][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 292.393687][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 292.393706][ T5785] hci_rx_work+0x43a/0xd60 [ 292.393735][ T5785] ? process_scheduled_works+0x975/0x1600 [ 292.393757][ T5785] process_scheduled_works+0xa60/0x1600 [ 292.393796][ T5785] ? worker_attach_to_pool+0x370/0x370 [ 292.393820][ T5785] ? assign_work+0x3cc/0x5d0 [ 292.393842][ T5785] worker_thread+0xa5e/0xfe0 [ 292.393880][ T5785] kthread+0x2fa/0x390 [ 292.393894][ T5785] ? pr_cont_work+0x550/0x550 [ 292.393912][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 292.393927][ T5785] ret_from_fork+0x48/0x80 [ 292.393945][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 292.393960][ T5785] ret_from_fork_asm+0x11/0x20 [ 292.393991][ T5785] [ 292.400336][ T5785] kobject: kobject_add_internal failed for hci4:32 with -EEXIST, don't try to register things with the same name in the same directory. [ 292.400379][ T5785] Bluetooth: hci4: failed to register connection device [ 292.420681][ T28] audit: type=1326 audit(1783726617.762:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 292.420783][ T28] audit: type=1326 audit(1783726617.772:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 292.421155][ T28] audit: type=1326 audit(1783726617.772:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 292.421442][ T28] audit: type=1326 audit(1783726617.772:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 292.424301][ T28] audit: type=1326 audit(1783726617.772:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 292.424810][ T28] audit: type=1326 audit(1783726617.772:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 292.425164][ T28] audit: type=1326 audit(1783726617.772:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 292.425404][ T28] audit: type=1326 audit(1783726617.772:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 292.425994][ T28] audit: type=1326 audit(1783726617.772:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 292.426306][ T28] audit: type=1326 audit(1783726617.772:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.3.424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 293.402478][ T8068] tty tty1: ldisc open failed (-12), clearing slot 0 [ 293.824262][ T8090] binder: 8084:8090 ioctl c0306201 0 returned -14 [ 294.445585][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 294.890426][ T6082] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 295.126176][ T6082] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 295.160810][ T6082] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 295.180588][ T6082] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 295.220973][ T6082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.308248][ T8101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 295.343755][ T6082] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 295.608043][ T6082] usb 4-1: USB disconnect, device number 10 [ 299.486091][ T8138] binder: 8135:8138 ioctl c0306201 0 returned -14 [ 300.830329][ T6082] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 301.077098][ T6082] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 301.098235][ T6082] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 301.151502][ T6082] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.190305][ T6082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.242914][ T8148] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 301.276578][ T6082] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 301.733685][ T6082] usb 3-1: USB disconnect, device number 9 [ 302.226131][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 302.226173][ T28] audit: type=1326 audit(1783726627.572:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.2.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 302.398120][ T28] audit: type=1326 audit(1783726627.622:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.2.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 302.422491][ T28] audit: type=1326 audit(1783726627.622:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.2.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 302.490266][ T28] audit: type=1326 audit(1783726627.642:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.2.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 302.562473][ T28] audit: type=1326 audit(1783726627.642:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.2.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 302.605023][ T28] audit: type=1326 audit(1783726627.652:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.2.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 302.634737][ T28] audit: type=1326 audit(1783726627.672:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.2.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 302.664833][ T28] audit: type=1326 audit(1783726627.692:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.2.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 302.696211][ T28] audit: type=1326 audit(1783726627.712:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.2.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 302.829732][ T28] audit: type=1326 audit(1783726627.722:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.2.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 305.296737][ T9] Process accounting resumed [ 306.905304][ T8176] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.978289][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 307.162253][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 307.174729][ T9] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 307.202481][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.220543][ T9] usb 4-1: Product: syz [ 307.229908][ T9] usb 4-1: Manufacturer: syz [ 307.243722][ T9] usb 4-1: SerialNumber: syz [ 307.265078][ T9] usb 4-1: config 0 descriptor?? [ 307.686651][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 307.705990][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 307.716537][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 307.724690][ T9] usb 4-1: media controller created [ 307.751934][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.328767][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 308.341677][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 308.357461][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 308.568072][ T9] usb 4-1: USB disconnect, device number 11 [ 308.647003][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 311.050935][ T6082] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 311.272650][ T6082] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.284354][ T6082] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 311.295072][ T6082] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.304618][ T6082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.317188][ T8250] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 311.344414][ T6082] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 311.549376][ T6082] usb 3-1: USB disconnect, device number 10 [ 311.757740][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 311.757756][ T28] audit: type=1326 audit(1783726637.102:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 311.788220][ T28] audit: type=1326 audit(1783726637.102:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 311.812376][ T28] audit: type=1326 audit(1783726637.102:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 311.837984][ T28] audit: type=1326 audit(1783726637.102:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 311.862378][ T28] audit: type=1326 audit(1783726637.102:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 311.886537][ T28] audit: type=1326 audit(1783726637.102:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 311.912582][ T28] audit: type=1326 audit(1783726637.102:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 311.939217][ T28] audit: type=1326 audit(1783726637.112:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 311.965697][ T28] audit: type=1326 audit(1783726637.112:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 312.001782][ T28] audit: type=1326 audit(1783726637.112:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 312.090747][ T8262] program syz.4.483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.104287][ T8262] (null): rxe_set_mtu: Set mtu to 1024 [ 312.111216][ T8262] rdma_rxe: rxe_newlink: failed to add bond0 [ 313.267621][ T8271] loop4: detected capacity change from 0 to 256 [ 313.282138][ T8271] exfat: Deprecated parameter 'utf8' [ 313.287592][ T8271] exfat: Deprecated parameter 'utf8' [ 313.349027][ T8240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.657836][ T8271] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 314.688556][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 314.701511][ T8288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.708785][ T8288] infiniband syz1: set active [ 315.645864][ T6082] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 315.842220][ T6082] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 315.864939][ T6082] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 315.880308][ T6082] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 315.889489][ T6082] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.909785][ T8287] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 315.948404][ T6082] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 316.301524][ T6082] usb 6-1: USB disconnect, device number 7 [ 317.405499][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.412144][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.810529][ T6082] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 318.822316][ T6082] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 318.859373][ T6082] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.872075][ T6082] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 318.882503][ T6082] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.899107][ T6082] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 318.909757][ T6082] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 318.932373][ T6082] usb 4-1: Product: syz [ 318.941676][ T6082] usb 4-1: Manufacturer: syz [ 318.976456][ T6082] cdc_wdm 4-1:1.0: skipping garbage [ 318.996829][ T6082] cdc_wdm 4-1:1.0: skipping garbage [ 319.024666][ T6082] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 319.044350][ T6082] cdc_wdm 4-1:1.0: Unknown control protocol [ 319.187477][ T6082] usb 4-1: USB disconnect, device number 12 [ 319.402607][ T8302] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.760337][ T6082] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 320.995258][ T6082] usb 4-1: device not accepting address 13, error -71 [ 325.806891][ T8371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 327.884184][ T8430] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 328.930078][ T8444] syzkaller0: entered promiscuous mode [ 328.965942][ T8444] syzkaller0: entered allmulticast mode [ 337.515357][ T8499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.501969][ T5837] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 341.026161][ T5837] usb 3-1: Using ep0 maxpacket: 16 [ 341.481482][ T5837] usb 3-1: device descriptor read/all, error -71 [ 341.709189][ T8547] comedi comedi3: dt2815: I/O port conflict (0x7,2) [ 342.894847][ T8554] 9pnet_virtio: no channels available for device syz [ 343.280335][ T5847] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 344.872953][ T5847] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 344.898278][ T5847] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 344.925029][ T5847] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 344.966538][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.012097][ T8556] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 345.026554][ T5847] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 345.297919][ T6082] usb 4-1: USB disconnect, device number 15 [ 345.555466][ T8569] syz1: rxe_newlink: already configured on bond0 [ 346.325260][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 346.325277][ T28] audit: type=1326 audit(1783726671.672:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.3.558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 346.379025][ T28] audit: type=1326 audit(1783726671.672:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.3.558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 346.411318][ T28] audit: type=1326 audit(1783726671.672:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.3.558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 346.521537][ T28] audit: type=1326 audit(1783726671.672:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.3.558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 346.583769][ T28] audit: type=1326 audit(1783726671.672:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.3.558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 346.609929][ T28] audit: type=1326 audit(1783726671.682:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.3.558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 346.634910][ T28] audit: type=1326 audit(1783726671.682:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.3.558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 346.659890][ T28] audit: type=1326 audit(1783726671.682:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.3.558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 346.686052][ T28] audit: type=1326 audit(1783726671.682:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.3.558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 346.711520][ T28] audit: type=1326 audit(1783726671.682:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.3.558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 348.418807][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 349.826705][ T5785] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 350.225902][ T8608] syz1: rxe_newlink: already configured on bond0 [ 351.298078][ T5785] Bluetooth: hci5: link tx timeout [ 351.306958][ T5785] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 351.317459][ T5785] Bluetooth: hci5: link tx timeout [ 351.322732][ T5785] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 352.434626][ T8621] fuse: Unknown parameter 'group_i00000000000000000000' [ 352.511003][ T8623] netlink: 60 bytes leftover after parsing attributes in process `syz.2.576'. [ 353.532829][ T5785] Bluetooth: hci5: command 0x0406 tx timeout [ 353.708352][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'. [ 355.561334][ T5086] Bluetooth: hci5: command 0x0406 tx timeout [ 356.874677][ T8660] netlink: 24 bytes leftover after parsing attributes in process `syz.5.586'. [ 357.277475][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.587'. [ 358.210792][ T5816] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 358.456149][ T5816] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 358.468944][ T5816] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 358.479444][ T5816] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 358.508438][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.583424][ T8669] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 358.607214][ T5816] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 358.844218][ T5816] usb 6-1: USB disconnect, device number 8 [ 359.175892][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 359.175933][ T28] audit: type=1326 audit(1783726684.402:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.5.589" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105279de59 code=0x7ffc0000 [ 359.290463][ T28] audit: type=1326 audit(1783726684.402:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.5.589" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f105279de59 code=0x7ffc0000 [ 359.370358][ T28] audit: type=1326 audit(1783726684.402:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.5.589" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105279de59 code=0x7ffc0000 [ 359.394301][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.475677][ T28] audit: type=1326 audit(1783726684.402:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.5.589" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105279de59 code=0x7ffc0000 [ 359.622010][ T28] audit: type=1326 audit(1783726684.402:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.5.589" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f105279de59 code=0x7ffc0000 [ 359.645928][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.660311][ T28] audit: type=1326 audit(1783726684.402:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.5.589" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105279de59 code=0x7ffc0000 [ 360.470292][ T28] audit: type=1326 audit(1783726684.402:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.5.589" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f105279de59 code=0x7ffc0000 [ 360.534719][ T28] audit: type=1326 audit(1783726684.412:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.5.589" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105279de59 code=0x7ffc0000 [ 360.599974][ T28] audit: type=1326 audit(1783726684.412:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.5.589" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f105279de59 code=0x7ffc0000 [ 360.665789][ T28] audit: type=1326 audit(1783726684.412:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.5.589" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105279de59 code=0x7ffc0000 [ 366.126865][ T5785] Bluetooth: hci0: command 0x1003 tx timeout [ 366.134568][ T5086] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 370.023086][ T5837] Process accounting resumed [ 371.949743][ T8762] lo speed is unknown, defaulting to 1000 [ 371.955861][ T8762] lo speed is unknown, defaulting to 1000 [ 371.968764][ T8762] lo speed is unknown, defaulting to 1000 [ 371.991124][ T8762] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 372.029296][ T8762] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 372.894236][ T8762] lo speed is unknown, defaulting to 1000 [ 372.925442][ T8762] lo speed is unknown, defaulting to 1000 [ 372.976775][ T8762] lo speed is unknown, defaulting to 1000 [ 372.997988][ T8762] lo speed is unknown, defaulting to 1000 [ 373.038396][ T8762] lo speed is unknown, defaulting to 1000 [ 373.173185][ T8769] netlink: 'syz.4.617': attribute type 1 has an invalid length. [ 373.286801][ T8769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.370833][ T8770] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.389701][ T8770] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.423094][ T8770] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.449135][ T8770] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.502176][ T8770] bond1: (slave geneve2): making interface the new active one [ 373.538214][ T8770] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 373.888955][ T8778] sctp: [Deprecated]: syz.4.619 (pid 8778) Use of int in max_burst socket option. [ 373.888955][ T8778] Use struct sctp_assoc_value instead [ 374.033760][ T5847] kernel read not supported for file /adsp1 (pid: 5847 comm: kworker/1:7) [ 374.035999][ T8719] warn_alloc: 1 callbacks suppressed [ 374.036014][ T8719] syz.5.606: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 374.083293][ T8719] CPU: 0 PID: 8719 Comm: syz.5.606 Not tainted syzkaller #0 [ 374.090639][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 374.100740][ T8719] Call Trace: [ 374.104017][ T8719] [ 374.106936][ T8719] dump_stack_lvl+0x18c/0x250 [ 374.111747][ T8719] ? show_regs_print_info+0x20/0x20 [ 374.116940][ T8719] ? load_image+0x420/0x420 [ 374.121485][ T8719] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 374.127972][ T8719] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 374.134493][ T8719] warn_alloc+0x246/0x340 [ 374.138865][ T8719] ? zone_watermark_ok_safe+0x230/0x230 [ 374.144626][ T8719] ? _raw_spin_unlock+0x28/0x40 [ 374.149599][ T8719] ? netlink_rcv_skb+0x235/0x4c0 [ 374.154642][ T8719] __vmalloc_node_range+0x661/0x1320 [ 374.159939][ T8719] ? __asan_memset+0x22/0x40 [ 374.164581][ T8719] ? free_vm_area+0x50/0x50 [ 374.169358][ T8719] ? rcu_is_watching+0x15/0xb0 [ 374.174147][ T8719] ? kvmalloc_node+0x70/0x180 [ 374.178830][ T8719] ? trace_kmalloc+0x1f/0xa0 [ 374.183459][ T8719] kvmalloc_node+0x13f/0x180 [ 374.188078][ T8719] ? hash_netport4_resize+0x24e/0x1a10 [ 374.193855][ T8719] hash_netport4_resize+0x24e/0x1a10 [ 374.199240][ T8719] ? hash_netport4_uadt+0xce0/0xf70 [ 374.204447][ T8719] ? hash_netport4_uadt+0xf70/0xf70 [ 374.209655][ T8719] ? lockdep_hardirqs_on+0x98/0x150 [ 374.214895][ T8719] ? _local_bh_enable+0xa0/0xa0 [ 374.219902][ T8719] call_ad+0x42a/0xb30 [ 374.224009][ T8719] ? ip_set_ad+0x9c0/0x9c0 [ 374.228454][ T8719] ? __nla_parse+0x40/0x50 [ 374.232942][ T8719] ip_set_ad+0x81a/0x9c0 [ 374.237257][ T8719] ? ip_set_dump_done+0x1e0/0x1e0 [ 374.242306][ T8719] ? rcu_is_watching+0x15/0xb0 [ 374.247219][ T8719] nfnetlink_rcv_msg+0xcaf/0x1290 [ 374.252364][ T8719] ? nfnetlink_rcv_msg+0x228/0x1290 [ 374.257594][ T8719] ? nfnetlink_unbind+0x160/0x160 [ 374.262703][ T8719] netlink_rcv_skb+0x235/0x4c0 [ 374.267533][ T8719] ? nfnetlink_unbind+0x160/0x160 [ 374.272655][ T8719] ? netlink_ack+0x1160/0x1160 [ 374.277435][ T8719] ? apparmor_capable+0x137/0x1a0 [ 374.282512][ T8719] ? bpf_lsm_capable+0x9/0x10 [ 374.287207][ T8719] ? security_capable+0x89/0xb0 [ 374.292168][ T8719] nfnetlink_rcv+0x2c9/0x2490 [ 374.296860][ T8719] ? mark_lock+0x94/0x320 [ 374.301200][ T8719] ? mark_lock+0x94/0x320 [ 374.305543][ T8719] ? __lock_acquire+0x1262/0x7d80 [ 374.310586][ T8719] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 374.316142][ T8719] ? kmalloc_reserve+0x95/0x240 [ 374.321107][ T8719] ? verify_lock_unused+0x140/0x140 [ 374.326312][ T8719] ? verify_lock_unused+0x140/0x140 [ 374.331546][ T8719] ? __netlink_lookup+0xc7/0x820 [ 374.336552][ T8719] ? netlink_deliver_tap+0x2e/0x1b0 [ 374.341774][ T8719] ? __lock_acquire+0x7d80/0x7d80 [ 374.346899][ T8719] ? net_generic+0x1e/0x240 [ 374.351411][ T8719] ? netlink_deliver_tap+0x2e/0x1b0 [ 374.356621][ T8719] netlink_unicast+0x7b1/0x930 [ 374.361404][ T8719] netlink_sendmsg+0x8d0/0xbf0 [ 374.366458][ T8719] ? netlink_getsockopt+0x590/0x590 [ 374.371663][ T8719] ? apparmor_socket_sendmsg+0x8e/0x330 [ 374.377220][ T8719] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 374.382519][ T8719] ? security_socket_sendmsg+0x80/0xa0 [ 374.387992][ T8719] ? netlink_getsockopt+0x590/0x590 [ 374.393204][ T8719] ____sys_sendmsg+0x61b/0x980 [ 374.398166][ T8719] ? __asan_memset+0x22/0x40 [ 374.402770][ T8719] ? __sys_sendmsg_sock+0x30/0x30 [ 374.407806][ T8719] ? __import_iovec+0x5f2/0x850 [ 374.412671][ T8719] ? import_iovec+0x73/0xa0 [ 374.417184][ T8719] ___sys_sendmsg+0x2a6/0x360 [ 374.421883][ T8719] ? __sys_sendmsg+0x2b0/0x2b0 [ 374.426697][ T8719] __se_sys_sendmsg+0x1d0/0x2c0 [ 374.431585][ T8719] ? __x64_sys_sendmsg+0x80/0x80 [ 374.436546][ T8719] ? lockdep_hardirqs_on+0x98/0x150 [ 374.441762][ T8719] do_syscall_64+0x55/0xb0 [ 374.446189][ T8719] ? clear_bhb_loop+0x40/0x90 [ 374.450961][ T8719] ? clear_bhb_loop+0x40/0x90 [ 374.455643][ T8719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.461627][ T8719] RIP: 0033:0x7f105279de59 [ 374.466047][ T8719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.485838][ T8719] RSP: 002b:00007f105367f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.494261][ T8719] RAX: ffffffffffffffda RBX: 00007f1052a25fa0 RCX: 00007f105279de59 [ 374.502237][ T8719] RDX: 0000000004008010 RSI: 00002000000001c0 RDI: 000000000000000d [ 374.510211][ T8719] RBP: 00007f1052833e6f R08: 0000000000000000 R09: 0000000000000000 [ 374.518187][ T8719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.526250][ T8719] R13: 00007f1052a26038 R14: 00007f1052a25fa0 R15: 00007ffd795d1158 [ 374.534239][ T8719] [ 374.563786][ T8719] Mem-Info: [ 374.590114][ T8719] active_anon:11816 inactive_anon:0 isolated_anon:0 [ 374.590114][ T8719] active_file:15650 inactive_file:40065 isolated_file:0 [ 374.590114][ T8719] unevictable:0 dirty:98 writeback:0 [ 374.590114][ T8719] slab_reclaimable:10896 slab_unreclaimable:112219 [ 374.590114][ T8719] mapped:27669 shmem:4771 pagetables:844 [ 374.590114][ T8719] sec_pagetables:0 bounce:0 [ 374.590114][ T8719] kernel_misc_reclaimable:0 [ 374.590114][ T8719] free:1320941 free_pcp:11918 free_cma:0 [ 374.662690][ T8719] Node 0 active_anon:45728kB inactive_anon:0kB active_file:62600kB inactive_file:160052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110676kB dirty:392kB writeback:0kB shmem:17548kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11796kB pagetables:3376kB sec_pagetables:0kB all_unreclaimable? no [ 374.696279][ T8719] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 374.726937][ T8719] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 374.801202][ T8719] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 374.807236][ T8719] Node 0 DMA32 free:1358896kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:53288kB inactive_anon:0kB active_file:62600kB inactive_file:159220kB unevictable:0kB writepending:392kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:27796kB local_pcp:20700kB free_cma:0kB [ 374.889794][ T8719] lowmem_reserve[]: 0 0 0 0 0 [ 374.912510][ T8719] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 374.946026][ T8719] lowmem_reserve[]: 0 0 0 0 0 [ 374.958498][ T8719] Node 1 Normal free:3903964kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17472kB local_pcp:8576kB free_cma:0kB [ 374.998279][ T8719] lowmem_reserve[]: 0 0 0 0 0 [ 375.003464][ T8719] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 375.021048][ T8719] Node 0 DMA32: 2*4kB (UM) 587*8kB (UM) 791*16kB (UME) 155*32kB (UM) 257*64kB (UME) 200*128kB (UM) 33*256kB (UME) 8*512kB (UME) 14*1024kB (UME) 5*2048kB (UME) 306*4096kB (M) = 1354864kB [ 375.045338][ T8719] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 375.068248][ T8719] Node 1 Normal: 233*4kB (UME) 57*8kB (UME) 37*16kB (UME) 101*32kB (UME) 30*64kB (UME) 14*128kB (UME) 3*256kB (UME) 0*512kB 1*1024kB (E) 1*2048kB (E) 950*4096kB (UM) = 3903964kB [ 375.090491][ T8719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.100612][ T8719] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 375.109941][ T8719] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.120130][ T8719] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 375.129620][ T8719] 62846 total pagecache pages [ 375.134532][ T8719] 0 pages in swap cache [ 375.138713][ T8719] Free swap = 124420kB [ 375.142932][ T8719] Total swap = 124996kB [ 375.147733][ T8719] 2097051 pages RAM [ 375.157819][ T8719] 0 pages HighMem/MovableOnly [ 375.162702][ T8719] 416953 pages reserved [ 375.166927][ T8719] 0 pages cma reserved [ 375.431259][ T8796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.624'. [ 376.038772][ T8806] warning: `syz.5.625' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 378.840413][ T5086] Bluetooth: hci5: command 0x0406 tx timeout [ 378.847433][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.853874][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.505691][ T8833] binder: 8829:8833 ioctl c0306201 0 returned -14 [ 379.520319][ T8830] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.529377][ T8830] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.538734][ T8830] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.547713][ T8830] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.667896][ T8836] overlayfs: failed to resolve './file0/file2': -2 [ 379.735896][ T8836] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 379.744320][ T8836] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 379.754133][ T8836] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 379.762154][ T8836] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 381.730013][ T8867] binder: 8859:8867 ioctl c0306201 0 returned -14 [ 385.563558][ T8902] binder: 8899:8902 ioctl c0306201 0 returned -14 [ 388.204777][ T8929] binder: 8924:8929 ioctl c0306201 0 returned -14 [ 389.831425][ T8971] binder: 8966:8971 ioctl c0306201 0 returned -14 [ 390.380469][ T8984] netlink: 24 bytes leftover after parsing attributes in process `syz.5.677'. [ 392.920412][ T5086] Bluetooth: hci5: command 0x0406 tx timeout [ 393.195357][ T9010] netlink: 40 bytes leftover after parsing attributes in process `syz.4.682'. [ 393.369301][ T9019] binder: 9016:9019 ioctl c0306201 0 returned -14 [ 394.040353][ T8994] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 394.499704][ T9031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'. [ 395.069236][ T9023] lo speed is unknown, defaulting to 1000 [ 397.400221][ T5086] Bluetooth: hci5: command 0x0406 tx timeout [ 397.466754][ T9069] binder: 9063:9069 ioctl c0306201 0 returned -14 [ 397.774917][ T9076] netlink: 24 bytes leftover after parsing attributes in process `syz.5.701'. [ 399.765218][ T9053] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.564695][ T8994] Bluetooth: hci5: command 0x0406 tx timeout [ 404.570783][ T9128] infiniband syz1: set down [ 405.775555][ T9128] binder: 9121:9128 ioctl c0306201 0 returned -14 [ 407.137275][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 407.983801][ T9133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.384728][ T9109] lo speed is unknown, defaulting to 1000 [ 410.253352][ T9161] loop2: detected capacity change from 0 to 128 [ 410.343899][ T9161] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 410.547506][ T5773] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 410.797976][ T9171] binder: 9166:9171 ioctl c0306201 0 returned -14 [ 413.221004][ T9180] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 413.374442][ T9189] loop3: detected capacity change from 0 to 2048 [ 413.455461][ T9189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.496520][ T9189] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #12: block 2: comm syz.3.726: lblock 0 mapped to illegal pblock 2 (length 1) [ 413.570554][ T9199] loop4: detected capacity change from 0 to 2048 [ 413.643755][ T9200] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 413.678808][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.416879][ T9217] binder: 9209:9217 ioctl c0306201 0 returned -14 [ 415.232096][ T9224] loop3: detected capacity change from 0 to 64 [ 415.268430][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 415.268445][ T28] audit: type=1326 audit(1783726740.612:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.4.735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20acf9de59 code=0x7ffc0000 [ 415.351323][ T28] audit: type=1326 audit(1783726740.612:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.4.735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20acf9de59 code=0x7ffc0000 [ 415.447009][ T28] audit: type=1326 audit(1783726740.612:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.4.735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f20acf9de59 code=0x7ffc0000 [ 415.560308][ T28] audit: type=1326 audit(1783726740.612:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.4.735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20acf9de59 code=0x7ffc0000 [ 416.310338][ T28] audit: type=1326 audit(1783726740.612:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.4.735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20acf9de59 code=0x7ffc0000 [ 416.515315][ T28] audit: type=1326 audit(1783726740.652:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.4.735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f20acf9de59 code=0x7ffc0000 [ 416.580449][ T28] audit: type=1326 audit(1783726740.652:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.4.735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20acf9de59 code=0x7ffc0000 [ 416.628373][ T8994] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 416.639682][ T8994] CPU: 1 PID: 8994 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 416.647278][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 416.657371][ T8994] Workqueue: hci4 hci_rx_work [ 416.662337][ T8994] Call Trace: [ 416.665734][ T8994] [ 416.668683][ T8994] dump_stack_lvl+0x18c/0x250 [ 416.673405][ T8994] ? show_regs_print_info+0x20/0x20 [ 416.678731][ T8994] ? load_image+0x420/0x420 [ 416.683293][ T8994] sysfs_create_dir_ns+0x26e/0x2a0 [ 416.688569][ T8994] ? __lock_acquire+0x7d80/0x7d80 [ 416.693623][ T8994] ? sysfs_warn_dup+0xa0/0xa0 [ 416.698326][ T8994] ? do_raw_spin_unlock+0x121/0x230 [ 416.703547][ T8994] kobject_add_internal+0x617/0xc90 [ 416.708769][ T8994] kobject_add+0x164/0x240 [ 416.713200][ T8994] ? kobject_init+0x1d0/0x1d0 [ 416.717895][ T8994] ? get_device_parent+0x366/0x390 [ 416.723044][ T8994] device_add+0x3fa/0xc40 [ 416.727378][ T8994] hci_conn_add_sysfs+0xd5/0x1e0 [ 416.732396][ T8994] le_conn_complete_evt+0xe9f/0x1480 [ 416.737746][ T8994] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 416.744013][ T8994] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 416.749640][ T8994] ? mutex_unlock+0x10/0x10 [ 416.754141][ T8994] ? skb_pull_data+0xf0/0x1f0 [ 416.758943][ T8994] hci_le_conn_complete_evt+0x187/0x440 [ 416.764502][ T8994] ? hci_remote_host_features_evt+0x150/0x150 [ 416.770569][ T8994] hci_event_packet+0x7b4/0x1280 [ 416.775532][ T8994] ? __lock_acquire+0x7d80/0x7d80 [ 416.780572][ T8994] ? lock_chain_count+0x20/0x20 [ 416.785525][ T8994] ? bis_list+0x290/0x290 [ 416.789869][ T8994] ? lockdep_hardirqs_on+0x98/0x150 [ 416.795073][ T8994] ? hci_send_to_monitor+0xd7/0x4f0 [ 416.800274][ T8994] hci_rx_work+0x43a/0xd60 [ 416.804710][ T8994] ? process_scheduled_works+0x975/0x1600 [ 416.810443][ T8994] process_scheduled_works+0xa60/0x1600 [ 416.816002][ T8994] ? worker_attach_to_pool+0x370/0x370 [ 416.821467][ T8994] ? assign_work+0x3cc/0x5d0 [ 416.826059][ T8994] worker_thread+0xa5e/0xfe0 [ 416.830661][ T8994] ? _raw_spin_unlock+0x40/0x40 [ 416.835510][ T8994] ? __kthread_parkme+0x71/0x1c0 [ 416.840459][ T8994] kthread+0x2fa/0x390 [ 416.844535][ T8994] ? pr_cont_work+0x550/0x550 [ 416.849290][ T8994] ? kthread_blkcg+0xd0/0xd0 [ 416.853875][ T8994] ret_from_fork+0x48/0x80 [ 416.858327][ T8994] ? kthread_blkcg+0xd0/0xd0 [ 416.862994][ T8994] ret_from_fork_asm+0x11/0x20 [ 416.867914][ T8994] [ 416.878001][ T8994] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 416.892361][ T8994] Bluetooth: hci4: failed to register connection device [ 416.922400][ T28] audit: type=1326 audit(1783726740.662:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.4.735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f20acf9de59 code=0x7ffc0000 [ 417.044913][ T28] audit: type=1326 audit(1783726740.882:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.4.735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20acf9de59 code=0x7ffc0000 [ 417.152509][ T28] audit: type=1326 audit(1783726740.882:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.4.735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20acf9de59 code=0x7ffc0000 [ 417.878643][ T9249] loop4: detected capacity change from 0 to 64 [ 418.357594][ T9259] binder: 9253:9259 ioctl c0306201 0 returned -14 [ 418.804828][ T9263] loop4: detected capacity change from 0 to 512 [ 418.818776][ T9263] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 418.838369][ T9263] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 418.902067][ T9263] EXT4-fs (loop4): 1 truncate cleaned up [ 418.973947][ T9263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.079635][ T9263] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 419.106901][ T9263] EXT4-fs (loop4): Remounting filesystem read-only [ 419.166918][ T5995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.176908][ T9232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.890704][ T9284] loop2: detected capacity change from 0 to 1024 [ 422.531307][ T9294] loop3: detected capacity change from 0 to 64 [ 422.627445][ T9279] loop4: detected capacity change from 0 to 32768 [ 422.956228][ T9279] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 422.981853][ T9302] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 422.993748][ T9302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 423.003296][ T9302] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 423.018987][ T9302] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 423.031580][ T9302] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 423.039349][ T9302] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 423.080263][ T9302] Bluetooth: hci4: command 0x0406 tx timeout [ 423.499117][ T9279] XFS (loop4): Ending clean mount [ 423.637456][ T5995] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 423.664699][ T9301] lo speed is unknown, defaulting to 1000 [ 423.671636][ T9318] binder: 9311:9318 ioctl c0306201 0 returned -14 [ 424.284496][ T9301] chnl_net:caif_netlink_parms(): no params data found [ 424.422174][ T9301] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.429452][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.437920][ T9301] bridge_slave_0: entered allmulticast mode [ 424.445090][ T9301] bridge_slave_0: entered promiscuous mode [ 424.489046][ T9301] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.917173][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.928106][ T9301] bridge_slave_1: entered allmulticast mode [ 424.944539][ T9301] bridge_slave_1: entered promiscuous mode [ 425.125589][ T9301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.141013][ T9301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.160519][ T5086] Bluetooth: hci0: command tx timeout [ 425.179581][ T9301] team0: Port device team_slave_0 added [ 425.214305][ T9301] team0: Port device team_slave_1 added [ 425.268052][ T9301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.275962][ T9301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.302425][ T9301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.318799][ T9301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.326424][ T9301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.357625][ T9301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.453558][ T9301] hsr_slave_0: entered promiscuous mode [ 425.460101][ T9301] hsr_slave_1: entered promiscuous mode [ 426.205728][ T12] hsr_slave_0: left promiscuous mode [ 426.216969][ T12] hsr_slave_1: left promiscuous mode [ 426.227025][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.235971][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.244246][ T12] bridge_slave_1: left allmulticast mode [ 426.249927][ T12] bridge_slave_1: left promiscuous mode [ 426.255916][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.265449][ T12] bridge_slave_0: left allmulticast mode [ 426.271218][ T12] bridge_slave_0: left promiscuous mode [ 426.277005][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.405914][ T9310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 426.938190][ T9338] loop2: detected capacity change from 0 to 256 [ 427.302882][ T5086] Bluetooth: hci0: command tx timeout [ 428.968214][ T9346] loop2: detected capacity change from 0 to 256 [ 428.975805][ T9346] exfat: Deprecated parameter 'utf8' [ 428.981325][ T9346] exfat: Deprecated parameter 'utf8' [ 429.320249][ T5086] Bluetooth: hci0: command tx timeout [ 429.419852][ T9346] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 429.479820][ T9349] program syz.3.762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.494293][ T9349] (null): rxe_set_mtu: Set mtu to 1024 [ 429.501467][ T9349] rdma_rxe: rxe_newlink: failed to add bond0 [ 429.819096][ T9352] trusted_key: encrypted_key: insufficient parameters specified [ 429.875847][ T9352] trusted_key: encrypted_key: insufficient parameters specified [ 429.886130][ T5086] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 429.896503][ T5086] CPU: 1 PID: 5086 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 429.904188][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 429.914280][ T5086] Workqueue: hci1 hci_rx_work [ 429.919010][ T5086] Call Trace: [ 429.922405][ T5086] [ 429.925379][ T5086] dump_stack_lvl+0x18c/0x250 [ 429.930190][ T5086] ? show_regs_print_info+0x20/0x20 [ 429.935435][ T5086] ? load_image+0x420/0x420 [ 429.939992][ T5086] sysfs_create_dir_ns+0x26e/0x2a0 [ 429.945144][ T5086] ? __lock_acquire+0x7d80/0x7d80 [ 429.950212][ T5086] ? sysfs_warn_dup+0xa0/0xa0 [ 429.954925][ T5086] ? do_raw_spin_unlock+0x121/0x230 [ 429.960163][ T5086] kobject_add_internal+0x617/0xc90 [ 429.965405][ T5086] kobject_add+0x164/0x240 [ 429.969862][ T5086] ? kobject_init+0x1d0/0x1d0 [ 429.974568][ T5086] ? get_device_parent+0x366/0x390 [ 429.979722][ T5086] device_add+0x3fa/0xc40 [ 429.984087][ T5086] hci_conn_add_sysfs+0xd5/0x1e0 [ 429.989045][ T5086] le_conn_complete_evt+0xe9f/0x1480 [ 429.994347][ T5086] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 430.000602][ T5086] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 430.006243][ T5086] ? mutex_unlock+0x10/0x10 [ 430.010754][ T5086] ? skb_pull_data+0xf0/0x1f0 [ 430.015468][ T5086] hci_le_conn_complete_evt+0x187/0x440 [ 430.021037][ T5086] ? hci_remote_host_features_evt+0x150/0x150 [ 430.027112][ T5086] hci_event_packet+0x7b4/0x1280 [ 430.032061][ T5086] ? __lock_acquire+0x7d80/0x7d80 [ 430.037094][ T5086] ? lock_chain_count+0x20/0x20 [ 430.041959][ T5086] ? bis_list+0x290/0x290 [ 430.046299][ T5086] ? lockdep_hardirqs_on+0x98/0x150 [ 430.051502][ T5086] ? hci_send_to_monitor+0xd7/0x4f0 [ 430.056795][ T5086] hci_rx_work+0x43a/0xd60 [ 430.061232][ T5086] ? process_scheduled_works+0x975/0x1600 [ 430.066964][ T5086] process_scheduled_works+0xa60/0x1600 [ 430.072546][ T5086] ? worker_attach_to_pool+0x370/0x370 [ 430.078025][ T5086] ? assign_work+0x3cc/0x5d0 [ 430.082639][ T5086] worker_thread+0xa5e/0xfe0 [ 430.087260][ T5086] ? _raw_spin_unlock+0x40/0x40 [ 430.092115][ T5086] ? __kthread_parkme+0x71/0x1c0 [ 430.097067][ T5086] kthread+0x2fa/0x390 [ 430.101138][ T5086] ? pr_cont_work+0x550/0x550 [ 430.105819][ T5086] ? kthread_blkcg+0xd0/0xd0 [ 430.110410][ T5086] ret_from_fork+0x48/0x80 [ 430.114835][ T5086] ? kthread_blkcg+0xd0/0xd0 [ 430.119431][ T5086] ret_from_fork_asm+0x11/0x20 [ 430.124228][ T5086] [ 430.135437][ T5086] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 430.149674][ T5086] Bluetooth: hci1: failed to register connection device [ 431.408305][ T5086] Bluetooth: hci0: command tx timeout [ 432.210360][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 432.761659][ T9369] loop4: detected capacity change from 0 to 40427 [ 432.839742][ T9369] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 432.873082][ T9369] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 432.947984][ T9369] F2FS-fs (loop4): invalid crc value [ 432.964356][ T9369] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 433.053980][ T9369] F2FS-fs (loop4): Found nat_bits in checkpoint [ 433.098595][ T12] team0 (unregistering): Port device team_slave_1 removed [ 433.246115][ T9369] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 433.270726][ T9369] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 433.287316][ T12] team0 (unregistering): Port device team_slave_0 removed [ 433.449598][ T9386] loop2: detected capacity change from 0 to 512 [ 433.457607][ T9386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 433.457631][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.490093][ T9386] EXT4-fs: Ignoring removed mblk_io_submit option [ 433.534802][ T9386] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 433.550920][ T9386] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 433.601418][ T9386] EXT4-fs (loop2): 1 truncate cleaned up [ 433.625524][ T9386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.642613][ T5995] syz-executor: attempt to access beyond end of device [ 433.642613][ T5995] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 433.674214][ T5995] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 433.684736][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.746217][ T5995] syz-executor: attempt to access beyond end of device [ 433.746217][ T5995] loop4: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 433.760517][ T9386] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #2: block 4: comm syz.2.770: lblock 0 mapped to illegal pblock 4 (length 1) [ 433.776328][ T9386] EXT4-fs (loop2): Remounting filesystem read-only [ 433.782680][ T5995] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 433.835393][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.396089][ T12] bond0 (unregistering): Released all slaves [ 434.647202][ T9396] loop4: detected capacity change from 0 to 256 [ 434.655827][ T9396] exfat: Deprecated parameter 'utf8' [ 434.661435][ T9396] exfat: Deprecated parameter 'utf8' [ 434.912450][ T9396] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 435.315160][ T9301] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 435.334129][ T9301] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 435.365642][ T9390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.772'. [ 435.491183][ T9301] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 435.569046][ T9301] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 435.737824][ T9403] trusted_key: encrypted_key: insufficient parameters specified [ 435.747114][ T9403] trusted_key: encrypted_key: insufficient parameters specified [ 436.153834][ T9301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.691824][ T9301] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.706285][ T12] IPVS: stop unused estimator thread 0... [ 436.923295][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.930517][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.031489][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.038697][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.187089][ T9423] loop2: detected capacity change from 0 to 4096 [ 437.214513][ T9301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.568626][ T9302] Bluetooth: hci3: command 0x0406 tx timeout [ 438.188353][ T9301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.331919][ T9449] binder: 9435:9449 ioctl c0306201 0 returned -14 [ 438.642938][ T9461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.782'. [ 438.652307][ T9404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.838621][ T9301] veth0_vlan: entered promiscuous mode [ 438.882126][ T9301] veth1_vlan: entered promiscuous mode [ 439.056642][ T9301] veth0_macvtap: entered promiscuous mode [ 439.075613][ T9474] trusted_key: encrypted_key: insufficient parameters specified [ 439.102324][ T9301] veth1_macvtap: entered promiscuous mode [ 439.120976][ T9471] trusted_key: encrypted_key: insufficient parameters specified [ 439.134306][ T9301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.171299][ T9301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.189558][ T9301] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.220345][ T9301] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.229106][ T9301] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.275401][ T9301] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.311251][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.317702][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.056702][ T3423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.121573][ T3423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.209252][ T9502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.789'. [ 441.348182][ T3423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.398373][ T3423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.201128][ T9533] binder: 9523:9533 ioctl c0306201 0 returned -14 [ 442.651802][ T9539] trusted_key: encrypted_key: insufficient parameters specified [ 442.684202][ T9539] trusted_key: encrypted_key: insufficient parameters specified [ 442.885446][ T9532] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.893173][ T9532] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.336201][ T9532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.384095][ T9532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.835492][ T9532] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.845392][ T9532] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.854373][ T9532] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.863468][ T9532] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.986322][ T9542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.795'. [ 444.396748][ T9549] loop3: detected capacity change from 0 to 256 [ 444.408832][ T9549] exfat: Deprecated parameter 'utf8' [ 444.432078][ T9549] exfat: Deprecated parameter 'utf8' [ 444.475520][ T9549] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 444.475712][ T9506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.884966][ T9555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.798'. [ 445.628656][ T9559] loop2: detected capacity change from 0 to 4096 [ 445.700488][ T9559] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 446.769201][ T9559] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 447.122325][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 447.122341][ T28] audit: type=1800 audit(1783726772.472:422): pid=9559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.799" name="file3" dev="loop2" ino=34 res=0 errno=0 [ 447.269971][ T9590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.804'. [ 447.740744][ T9599] trusted_key: encrypted_key: insufficient parameters specified [ 447.758814][ T9599] trusted_key: encrypted_key: insufficient parameters specified [ 448.058551][ T9610] netlink: 24 bytes leftover after parsing attributes in process `syz.6.808'. [ 450.580238][ T9596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.724650][ T9640] loop2: detected capacity change from 0 to 256 [ 451.285710][ T9650] loop6: detected capacity change from 0 to 256 [ 451.338630][ T9650] exfat: Deprecated parameter 'utf8' [ 451.440372][ T9650] exfat: Deprecated parameter 'utf8' [ 451.517996][ T9650] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 451.825302][ T9660] binder: 9655:9660 ioctl c0306201 0 returned -14 [ 452.842150][ T9670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.818'. [ 453.790883][ T9647] loop4: detected capacity change from 0 to 32768 [ 453.895499][ T9647] read_mapping_page failed! [ 453.903328][ T9647] jfs_mount: Failed to read AGGREGATE_I [ 453.909948][ T9647] Mount JFS Failure: -5 [ 453.916395][ T9647] jfs_mount failed w/return code = -5 [ 456.386091][ T9720] binder: 9713:9720 ioctl c0306201 0 returned -14 [ 457.080939][ T9710] loop2: detected capacity change from 0 to 4096 [ 457.157795][ T9710] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 457.569720][ T9710] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 458.466348][ T28] audit: type=1800 audit(1783726783.812:423): pid=9710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.824" name="file3" dev="loop2" ino=34 res=0 errno=0 [ 458.744113][ T9743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.831'. [ 459.486895][ T9756] loop2: detected capacity change from 0 to 256 [ 459.494343][ T9756] exfat: Deprecated parameter 'utf8' [ 459.499758][ T9756] exfat: Deprecated parameter 'utf8' [ 459.536623][ T9756] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 460.648812][ T9741] loop6: detected capacity change from 0 to 32768 [ 461.596176][ T9772] binder: 9766:9772 ioctl c0306201 0 returned -14 [ 463.961288][ T9794] loop6: detected capacity change from 0 to 256 [ 463.981681][ T9794] exfat: Deprecated parameter 'utf8' [ 463.987028][ T9794] exfat: Deprecated parameter 'utf8' [ 464.144143][ T9794] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 464.158383][ T9775] loop4: detected capacity change from 0 to 32768 [ 464.351574][ T9775] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.838 (9775) [ 465.660504][ T5816] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 465.881695][ T5816] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 465.934968][ T5816] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 465.998509][ T5816] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 466.063376][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.138651][ T9804] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 466.189324][ T5816] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 466.323855][ T9775] BTRFS error (device loop4): open_ctree failed: -4 [ 466.338026][ T9811] loop6: detected capacity change from 0 to 64 [ 466.410696][ T5816] usb 3-1: USB disconnect, device number 13 [ 466.453361][ T5790] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by udevd (5790) [ 466.611031][ T28] audit: type=1326 audit(1783726791.962:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 466.710372][ T28] audit: type=1326 audit(1783726791.992:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 466.790742][ T28] audit: type=1326 audit(1783726791.992:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 466.875771][ T28] audit: type=1326 audit(1783726791.992:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 466.983026][ T28] audit: type=1326 audit(1783726792.002:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 467.049541][ T28] audit: type=1326 audit(1783726792.002:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 467.158308][ T28] audit: type=1326 audit(1783726792.002:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 467.265782][ T28] audit: type=1326 audit(1783726792.002:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 467.426303][ T28] audit: type=1326 audit(1783726792.002:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 467.450678][ T28] audit: type=1326 audit(1783726792.002:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f319de59 code=0x7ffc0000 [ 467.482818][ T9825] loop6: detected capacity change from 0 to 256 [ 467.490220][ T9825] exfat: Deprecated parameter 'utf8' [ 467.495624][ T9825] exfat: Deprecated parameter 'utf8' [ 467.527188][ T9825] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 468.646634][ T9839] loop6: detected capacity change from 0 to 512 [ 468.731939][ T9839] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 468.819871][ T9839] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 468.895063][ T9839] System zones: 1-12 [ 468.925153][ T9839] EXT4-fs error (device loop6): ext4_orphan_get:1430: comm syz.6.847: bad orphan inode 16 [ 469.007898][ T9839] ext4_test_bit(bit=15, block=4) = 0 [ 469.023318][ T9839] EXT4-fs (loop6): 1 orphan inode deleted [ 469.055269][ T9839] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.322140][ T9301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.583754][ T9849] loop6: detected capacity change from 0 to 22 [ 469.823996][ T9849] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 470.435192][ T9849] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 470.943480][ T9864] loop3: detected capacity change from 0 to 512 [ 471.726450][ T9864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.739159][ T9864] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.173639][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.499870][ T9887] loop3: detected capacity change from 0 to 1024 [ 473.522998][ T9887] hfsplus: unable to parse mount options [ 473.632798][ T9888] loop4: detected capacity change from 0 to 4096 [ 473.690621][ T9888] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 474.415514][ T9888] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 474.797150][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 474.797164][ T28] audit: type=1800 audit(1783726800.142:452): pid=9888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.856" name="file3" dev="loop4" ino=31 res=0 errno=0 [ 475.626890][ T9910] loop3: detected capacity change from 0 to 128 [ 475.681017][ T9910] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 475.951193][ T9910] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 475.993696][ T9910] ext2 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.819218][ T9909] loop2: detected capacity change from 0 to 32768 [ 476.899326][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 478.766991][ T9945] loop3: detected capacity change from 0 to 2048 [ 478.887929][ T9948] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 478.973386][ T9945] NILFS (loop3): error -2 truncating bmap (ino=16) [ 479.076855][ T9948] NILFS (loop3): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 479.111523][ T9948] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16) [ 479.163890][ T9948] Remounting filesystem read-only [ 479.194356][ T42] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 479.220408][ T42] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 479.230175][ T42] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 479.238066][ T42] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 479.267989][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 479.290392][ T42] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 479.297398][ T42] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 479.299615][ T9937] loop4: detected capacity change from 0 to 40427 [ 479.373746][ T9937] F2FS-fs (loop4): heap/no_heap options were deprecated [ 479.375082][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 479.397361][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 479.409158][ T9937] F2FS-fs (loop4): build fault injection attr: rate: 19, type: 0x7ffff [ 479.410567][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 479.463356][ T42] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 479.486335][ T42] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 479.518891][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 479.534477][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 479.556080][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 479.597589][ T5778] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 479.620758][ T5778] NILFS (loop3): discard dirty page: offset=0, ino=16 [ 479.627638][ T5778] NILFS (loop3): discard dirty block: blocknr=23, size=1024 [ 479.680810][ T5778] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 479.689809][ T5778] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 479.734790][ T5778] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 480.159107][ T9947] loop2: detected capacity change from 0 to 40427 [ 480.207632][ T9947] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 480.246435][ T9947] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 480.351808][ T9968] loop3: detected capacity change from 0 to 4096 [ 480.383253][ T9947] F2FS-fs (loop2): invalid crc value [ 480.444111][ T9947] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 480.477755][ T9968] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 480.528968][ T9947] F2FS-fs (loop2): Found nat_bits in checkpoint [ 480.690329][ T9968] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 480.784222][ T9947] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 480.812840][ T9947] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 481.097663][ T5773] syz-executor: attempt to access beyond end of device [ 481.097663][ T5773] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 481.142209][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 482.877228][ T9982] loop6: detected capacity change from 0 to 32768 [ 483.006543][ T9982] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 483.248676][ T9982] XFS (loop6): Ending clean mount [ 483.523207][ T9301] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 483.758491][ T9991] loop4: detected capacity change from 0 to 256 [ 483.781264][ T9991] exfat: Deprecated parameter 'utf8' [ 483.786922][ T9991] exfat: Deprecated parameter 'utf8' [ 483.974573][ T9991] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 484.238894][ T9302] Bluetooth: hci0: link tx timeout [ 484.244726][ T9302] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 484.257247][ T5086] Bluetooth: hci0: link tx timeout [ 484.263137][ T5086] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 484.288468][ T5086] Bluetooth: hci0: link tx timeout [ 484.294217][ T5086] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 484.374957][ T5086] Bluetooth: hci0: link tx timeout [ 484.380338][ T5086] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 484.396417][ T5086] Bluetooth: hci0: link tx timeout [ 484.402752][ T5086] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 484.413732][ T5086] Bluetooth: hci0: link tx timeout [ 484.418884][ T5086] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 484.463052][ T5086] Bluetooth: hci0: link tx timeout [ 484.468217][ T5086] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 484.512743][ T5086] Bluetooth: hci0: link tx timeout [ 484.518174][ T5086] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 484.588891][ T5086] Bluetooth: hci0: link tx timeout [ 484.603260][ T5086] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 484.650395][ T5086] Bluetooth: hci0: link tx timeout [ 484.655602][ T5086] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 484.726303][T10038] loop6: detected capacity change from 0 to 1024 [ 484.757442][T10038] EXT4-fs: Ignoring removed bh option [ 484.821756][T10038] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 484.919001][T10038] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.961334][T10047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.880'. [ 485.026043][T10038] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2855: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 485.045881][T10038] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #12: block 7: comm syz.6.878: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 485.135199][ T9301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.655453][T10062] loop6: detected capacity change from 0 to 8192 [ 486.280402][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 486.521034][T10062] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 486.603667][T10062] FAT-fs (loop6): Filesystem has been set read-only [ 487.008415][T10070] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 487.127072][T10070] FAT-fs (loop6): Filesystem has been set read-only [ 487.665151][T10092] loop2: detected capacity change from 0 to 32768 [ 487.923865][T10100] loop3: detected capacity change from 0 to 256 [ 487.931846][T10100] exfat: Deprecated parameter 'utf8' [ 487.937290][T10100] exfat: Deprecated parameter 'utf8' [ 488.015116][ T28] audit: type=1800 audit(1783726813.342:453): pid=10092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.888" name="file1" dev="loop2" ino=65 res=0 errno=0 [ 488.047362][T10100] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 488.258216][T10106] netlink: 24 bytes leftover after parsing attributes in process `syz.6.891'. [ 488.769315][T10123] loop3: detected capacity change from 0 to 64 [ 489.172532][T10130] loop2: detected capacity change from 0 to 1024 [ 489.198951][T10130] hfsplus: unable to parse mount options [ 489.853076][T10146] loop3: detected capacity change from 0 to 4096 [ 489.890495][T10146] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 489.989360][T10146] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 490.096650][ T28] audit: type=1800 audit(1783726815.442:454): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.900" name="file3" dev="loop3" ino=33 res=0 errno=0 [ 490.901645][T10177] loop3: detected capacity change from 0 to 1024 [ 490.934114][T10177] hfsplus: unable to parse mount options [ 491.082290][T10180] loop2: detected capacity change from 0 to 128 [ 491.250906][T10180] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 491.368406][T10180] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 491.494855][T10180] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 491.674902][ T5773] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 491.906675][T10188] loop4: detected capacity change from 0 to 512 [ 491.931187][T10188] EXT4-fs: Ignoring removed nobh option [ 491.972038][T10188] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 492.031910][T10188] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 492.049310][T10188] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #13: comm syz.4.909: inode has both inline data and extents flags [ 492.247171][T10188] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.909: couldn't read orphan inode 13 (err -117) [ 492.493204][T10188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.303139][T10188] EXT4-fs (loop4): shut down requested (2) [ 493.425947][ T5995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.740864][T10204] loop6: detected capacity change from 0 to 4096 [ 493.782872][T10204] ntfs3: loop6: Different NTFS sector size (1024) and media sector size (512). [ 493.854335][T10204] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 493.895223][T10210] loop3: detected capacity change from 0 to 1024 [ 493.933067][ T28] audit: type=1800 audit(1783726819.272:455): pid=10204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.913" name="file3" dev="loop6" ino=33 res=0 errno=0 [ 493.964440][T10210] hfsplus: unable to parse mount options [ 494.043336][ T9816] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 495.327094][T10228] loop4: detected capacity change from 0 to 64 [ 496.307984][T10240] loop4: detected capacity change from 0 to 22 [ 496.317899][T10240] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 496.328013][T10240] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 496.446270][T10242] loop4: detected capacity change from 0 to 24 [ 496.468008][T10242] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 496.519239][T10242] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 496.704170][T10244] loop6: detected capacity change from 0 to 1024 [ 496.744872][T10244] hfsplus: unable to parse mount options [ 496.792869][T10246] loop4: detected capacity change from 0 to 256 [ 496.842618][ T28] audit: type=1800 audit(1783726822.172:456): pid=10246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.927" name="file1" dev="loop4" ino=1048622 res=0 errno=0 [ 497.282664][T10216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.288392][T10263] program syz.2.933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 498.302184][T10263] syz1: rxe_newlink: already configured on bond0 [ 499.321021][T10250] loop6: detected capacity change from 0 to 32768 [ 499.481527][ T28] audit: type=1800 audit(1783726824.822:457): pid=10250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.929" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 499.533070][T10250] jfs_strtoUCS: char2uni returned -22. [ 499.572678][T10250] charset = iso8859-3, char = 0xbe [ 499.899840][T10258] loop4: detected capacity change from 0 to 32768 [ 499.923775][T10265] loop3: detected capacity change from 0 to 32768 [ 499.948328][T10258] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.931 (10258) [ 500.023361][T10265] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 500.054112][T10258] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 500.074674][T10279] loop6: detected capacity change from 0 to 1024 [ 500.091195][T10258] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 500.126307][T10279] hfsplus: unable to parse mount options [ 500.137549][T10258] BTRFS info (device loop4): setting nodatacow, compression disabled [ 500.146623][T10258] BTRFS info (device loop4): turning on flush-on-commit [ 500.153890][T10258] BTRFS info (device loop4): trying to use backup root at mount time [ 500.162580][T10258] BTRFS info (device loop4): max_inline at 0 [ 500.168730][T10258] BTRFS info (device loop4): using free space tree [ 500.257066][T10289] loop2: detected capacity change from 0 to 1024 [ 500.260199][T10265] XFS (loop3): Ending clean mount [ 500.317423][ T4990] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 500.355810][T10258] BTRFS error (device loop4): failed to load root extent [ 500.406000][T10258] BTRFS warning (device loop4): try to load backup roots slot 1 [ 500.447546][ T3403] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 500.471070][T10258] BTRFS warning (device loop4): couldn't read tree root [ 500.478080][T10258] BTRFS warning (device loop4): try to load backup roots slot 2 [ 500.515457][ T3403] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 500.550258][T10258] BTRFS warning (device loop4): couldn't read tree root [ 500.557279][T10258] BTRFS warning (device loop4): try to load backup roots slot 3 [ 500.732470][T10258] BTRFS info (device loop4): enabling ssd optimizations [ 500.750684][ T5778] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 500.767434][T10258] BTRFS info (device loop4): auto enabling async discard [ 500.817082][T10258] BTRFS info (device loop4): rebuilding free space tree [ 501.300998][T10258] BTRFS info (device loop4): checking UUID tree [ 501.336333][T10258] BTRFS warning (device loop4): failed to start uuid_rescan task [ 501.350519][T10258] BTRFS warning (device loop4): failed to check the UUID tree: -4 [ 501.386675][T10311] loop2: detected capacity change from 0 to 512 [ 501.434410][T10311] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 501.523707][T10311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.541592][T10311] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.562540][T10311] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 501.573706][T10311] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 25 (only 1 groups) [ 501.582692][T10258] BTRFS error (device loop4): open_ctree failed: -4 [ 501.669032][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.727239][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.734738][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.891900][T10330] loop2: detected capacity change from 0 to 2048 [ 501.958723][T10330] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 502.290165][T10338] loop2: detected capacity change from 0 to 1024 [ 502.298626][T10338] hfsplus: unable to parse mount options [ 502.387898][T10340] loop2: detected capacity change from 0 to 1024 [ 502.397352][T10340] EXT4-fs: Ignoring removed oldalloc option [ 502.406054][T10340] EXT4-fs: Ignoring removed oldalloc option [ 502.420259][T10340] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 502.432087][T10340] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 502.458327][T10340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.538996][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.863320][T10357] loop2: detected capacity change from 0 to 32768 [ 503.945998][T10357] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 504.220887][T10362] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 504.304741][ T4990] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 504.319081][ T5995] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 504.328278][ T5995] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 504.339081][ T5995] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 504.361418][ T3403] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 504.378013][T10315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.583436][T10366] set_capacity_and_notify: 1 callbacks suppressed [ 504.583453][T10366] loop6: detected capacity change from 0 to 1024 [ 504.629721][T10366] hfsplus: unable to parse mount options [ 504.639901][T10368] cgroup: No subsys list or none specified [ 504.655985][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 505.386639][T10386] loop2: detected capacity change from 0 to 512 [ 505.448319][T10386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.544524][T10386] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.844258][T10392] loop4: detected capacity change from 0 to 4096 [ 505.858523][T10392] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 506.147995][T10392] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 506.286479][ T28] audit: type=1800 audit(1783726831.632:458): pid=10392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.963" name="file3" dev="loop4" ino=33 res=0 errno=0 [ 506.650049][T10399] loop4: detected capacity change from 0 to 512 [ 506.710797][T10399] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 506.786995][T10399] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.966: bad orphan inode 13 [ 506.806378][T10399] ext4_test_bit(bit=12, block=18) = 1 [ 506.841402][T10399] is_bad_inode(inode)=0 [ 506.845628][T10399] NEXT_ORPHAN(inode)=0 [ 506.849809][T10399] max_ino=32 [ 506.871701][T10399] i_nlink=1 [ 506.875841][T10399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 506.908325][T10399] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 506.944116][T10399] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.966: bg 0: block 248: padding at end of block bitmap is not set [ 507.009042][T10399] Quota error (device loop4): write_blk: dquota write failed [ 507.048035][T10399] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 507.073101][T10399] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.966: Failed to acquire dquot type 1 [ 507.105811][T10399] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 507.138437][T10399] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 507.160364][T10399] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.966: Failed to acquire dquot type 1 [ 507.235324][ T5995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 507.245849][ T3403] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 507.281210][ T3403] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 1 [ 507.699740][T10421] binder: 10414:10421 ioctl c0306201 0 returned -14 [ 509.449039][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.686259][T10402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.989362][T10436] loop6: detected capacity change from 0 to 2048 [ 510.094706][T10436] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 510.141843][T10438] loop3: detected capacity change from 0 to 256 [ 510.151442][T10438] exfat: Deprecated parameter 'utf8' [ 510.156842][T10438] exfat: Deprecated parameter 'namecase' [ 510.167596][T10438] exfat: Unknown parameter 'zero_size_dir' [ 510.227968][T10436] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 201 [ 510.813373][T10455] loop6: detected capacity change from 0 to 512 [ 510.823747][T10455] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 510.842567][T10455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.855473][T10455] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.876541][T10455] EXT4-fs warning (device loop6): verify_group_input:169: Last group not full [ 510.975118][T10438] loop3: detected capacity change from 0 to 32768 [ 510.994027][T10438] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.974 (10438) [ 511.033694][T10438] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 511.076518][T10438] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 511.098345][ T9301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.114119][T10438] BTRFS info (device loop3): turning on sync discard [ 511.165982][T10438] BTRFS info (device loop3): force zlib compression, level 3 [ 511.229862][T10438] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 511.301853][T10438] BTRFS info (device loop3): use lzo compression, level 0 [ 511.416555][T10438] BTRFS info (device loop3): turning on flush-on-commit [ 511.450269][T10438] BTRFS info (device loop3): enabling auto defrag [ 511.470728][T10438] BTRFS info (device loop3): max_inline at 4096 [ 511.477040][T10438] BTRFS info (device loop3): turning off discard [ 511.493998][T10438] BTRFS info (device loop3): using free space tree [ 511.562511][T10438] BTRFS info (device loop3): enabling ssd optimizations [ 511.650045][T10438] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 514.216736][T10491] binder: 10489:10491 ioctl c0306201 0 returned -14 [ 514.478258][T10460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.042947][T10509] loop6: detected capacity change from 0 to 512 [ 515.080125][T10509] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 515.188784][T10509] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.281449][T10509] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.799576][T10509] EXT4-fs warning (device loop6): verify_group_input:169: Last group not full [ 515.859748][ T9301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.421128][T10526] loop3: detected capacity change from 0 to 16 [ 516.490394][T10526] erofs: (device loop3): mounted with root inode @ nid 36. [ 516.957778][T10536] loop3: detected capacity change from 0 to 256 [ 516.965391][T10536] exfat: Deprecated parameter 'utf8' [ 516.970938][T10536] exfat: Deprecated parameter 'utf8' [ 518.143423][T10536] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 518.622816][T10529] loop2: detected capacity change from 0 to 32768 [ 518.831957][T10529] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 519.238075][T10529] (syz.2.995,10529,0):ocfs2_rename:1284 ERROR: status = -2 [ 519.255491][T10529] (syz.2.995,10529,0):ocfs2_rename:1690 ERROR: status = -2 [ 520.495099][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 520.591766][T10561] loop4: detected capacity change from 0 to 512 [ 520.639757][T10561] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 520.777065][T10561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.813339][T10561] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.881348][T10561] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 520.989586][T10565] loop2: detected capacity change from 0 to 512 [ 521.012626][ T5995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.029915][T10565] EXT4-fs: Ignoring removed nobh option [ 521.102657][T10565] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 521.126967][T10565] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 521.158299][T10565] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #13: comm syz.2.1001: inode has both inline data and extents flags [ 521.197422][T10565] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1001: couldn't read orphan inode 13 (err -117) [ 521.217382][T10565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.270328][T10541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.286436][T10565] EXT4-fs (loop2): shut down requested (2) [ 521.418156][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.709640][T10574] loop2: detected capacity change from 0 to 256 [ 521.779960][T10574] exfat: Deprecated parameter 'utf8' [ 521.833642][T10574] exfat: Deprecated parameter 'utf8' [ 521.926912][T10574] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 524.095917][T10593] loop4: detected capacity change from 0 to 512 [ 524.249044][T10593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.262232][T10593] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.475213][T10592] loop3: detected capacity change from 0 to 32768 [ 525.494704][ T5995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.761764][T10602] loop4: detected capacity change from 0 to 512 [ 525.792045][T10602] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 525.833902][T10602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.846788][T10602] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.886616][T10602] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 25 (only 1 groups) [ 526.016011][ T5995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.857188][T10611] loop3: detected capacity change from 0 to 32768 [ 526.886631][T10611] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 527.006910][T10611] XFS (loop3): Ending clean mount [ 527.278987][T10630] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 527.311163][T10630] XFS (loop3): Unmount and run xfs_repair [ 527.331401][T10630] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 527.349280][T10630] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 527.385252][T10630] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 527.405381][T10630] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 527.426266][T10630] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 527.457295][T10630] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 527.474618][T10630] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 527.495067][T10630] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 527.505202][T10630] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 527.520000][T10630] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x14 len 4 error 74 [ 527.536953][T10630] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x182e/0x1df0 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 527.558505][T10630] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 527.643879][ T5778] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 528.800588][T10603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 529.210475][T10640] loop6: detected capacity change from 0 to 256 [ 529.248478][T10640] exfat: Deprecated parameter 'utf8' [ 529.278868][T10640] exfat: Deprecated parameter 'utf8' [ 529.319709][T10640] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 530.136244][T10645] loop3: detected capacity change from 0 to 128 [ 530.266042][T10645] syz.3.1020: attempt to access beyond end of device [ 530.266042][T10645] loop3: rw=4096, sector=128, nr_sectors = 8 limit=128 [ 530.342274][T10645] gfs2: error 10 reading superblock [ 530.671687][T10651] loop2: detected capacity change from 0 to 512 [ 530.746471][T10650] loop3: detected capacity change from 0 to 4096 [ 530.812396][T10650] NILFS (loop3): invalid segment: Checksum error in segment payload [ 530.822881][T10651] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 530.882106][T10650] NILFS (loop3): trying rollback from an earlier position [ 530.928828][T10651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.990007][T10650] NILFS (loop3): recovery complete [ 531.022632][T10651] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.053478][T10655] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 531.129914][T10651] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 25 (only 1 groups) [ 531.330711][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.528722][T10658] loop6: detected capacity change from 0 to 64 [ 531.808139][T10664] loop3: detected capacity change from 0 to 64 [ 531.975675][ T28] audit: type=1800 audit(1783726857.322:459): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1025" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 534.687636][T10687] loop3: detected capacity change from 0 to 64 [ 534.989386][T10689] loop6: detected capacity change from 0 to 2048 [ 535.058652][T10689] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.236613][T10689] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 201 [ 535.324555][T10692] loop2: detected capacity change from 0 to 256 [ 535.344913][T10692] exfat: Deprecated parameter 'utf8' [ 535.354229][T10692] exfat: Deprecated parameter 'utf8' [ 535.372427][T10693] loop3: detected capacity change from 0 to 512 [ 535.386844][T10693] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 535.415629][T10692] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 535.445857][T10693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.500764][T10693] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.545122][T10693] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 25 (only 1 groups) [ 535.673412][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.746576][T10696] loop4: detected capacity change from 0 to 4096 [ 535.796040][T10696] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 536.412982][T10696] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 537.517968][T10699] loop6: detected capacity change from 0 to 40427 [ 537.540169][T10699] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 537.560372][T10699] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 537.573186][T10699] F2FS-fs (loop6): Image doesn't support compression [ 537.600189][T10699] F2FS-fs (loop6): Image doesn't support compression [ 537.628321][T10702] loop3: detected capacity change from 0 to 32768 [ 537.643452][T10699] F2FS-fs (loop6): invalid crc value [ 537.689214][T10702] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 537.755797][T10707] trusted_key: encrypted_key: insufficient parameters specified [ 537.765263][T10699] F2FS-fs (loop6): Start checkpoint disabled! [ 537.794659][T10707] trusted_key: encrypted_key: insufficient parameters specified [ 537.830663][T10699] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 537.841689][T10699] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 537.886733][T10704] loop4: detected capacity change from 0 to 32768 [ 538.112957][T10702] XFS (loop3): Ending clean mount [ 538.309846][ T5778] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 538.425412][ T7889] kworker/u4:14: attempt to access beyond end of device [ 538.425412][ T7889] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 538.528660][T10727] program syz.4.1039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.543535][T10727] (null): rxe_set_mtu: Set mtu to 1024 [ 538.550611][T10727] rdma_rxe: rxe_newlink: failed to add bond0 [ 538.698998][ T7889] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 538.855026][ T7889] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 541.294543][T10748] loop4: detected capacity change from 0 to 256 [ 541.343432][T10748] exfat: Deprecated parameter 'utf8' [ 541.369026][T10750] loop6: detected capacity change from 0 to 128 [ 541.380543][T10748] exfat: Deprecated parameter 'utf8' [ 541.542695][T10750] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 541.599340][T10748] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 541.613485][T10750] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 541.845588][ T28] audit: type=1800 audit(1783726867.192:460): pid=10750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1041" name="file1" dev="loop6" ino=12 res=0 errno=0 [ 543.045810][ T9301] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 543.355922][T10763] trusted_key: encrypted_key: insufficient parameters specified [ 543.370043][T10767] loop3: detected capacity change from 0 to 512 [ 543.378257][T10763] trusted_key: encrypted_key: insufficient parameters specified [ 543.389316][T10767] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 543.449121][T10767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.477597][T10767] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.555572][T10767] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 25 (only 1 groups) [ 543.609605][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.698767][T10778] loop3: detected capacity change from 0 to 256 [ 546.039722][T10756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.181039][T10789] loop3: detected capacity change from 0 to 64 [ 546.287794][T10791] loop6: detected capacity change from 0 to 256 [ 546.329304][T10791] exfat: Deprecated parameter 'utf8' [ 546.348631][T10791] exfat: Deprecated parameter 'utf8' [ 546.409582][T10791] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 547.978838][T10805] loop3: detected capacity change from 0 to 512 [ 548.008161][T10805] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 548.049962][T10805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.067202][T10805] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.118974][T10805] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 25 (only 1 groups) [ 548.256819][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.520697][T10819] trusted_key: encrypted_key: insufficient parameters specified [ 548.596740][T10819] trusted_key: encrypted_key: insufficient parameters specified [ 549.751301][T10828] program syz.3.1064 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.763445][T10828] (null): rxe_set_mtu: Set mtu to 1024 [ 549.770002][T10828] rdma_rxe: rxe_newlink: failed to add bond0 [ 549.973808][T10812] loop2: detected capacity change from 0 to 32768 [ 550.140688][T10837] loop3: detected capacity change from 0 to 1024 [ 550.148558][T10837] hfsplus: unable to parse mount options [ 550.188703][T10837] autofs4:pid:10837:autofs_fill_super: called with bogus options [ 552.792418][T10829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.189284][T10878] loop6: detected capacity change from 0 to 1024 [ 553.199606][T10878] hfsplus: unable to parse mount options [ 553.240603][T10878] autofs4:pid:10878:autofs_fill_super: called with bogus options [ 553.379747][T10885] loop4: detected capacity change from 0 to 512 [ 553.391705][T10885] EXT4-fs: Ignoring removed nobh option [ 553.415951][T10885] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 553.428746][T10885] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 553.437730][T10885] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #13: comm syz.4.1079: inode has both inline data and extents flags [ 553.456214][T10885] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1079: couldn't read orphan inode 13 (err -117) [ 553.471554][T10885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.592520][ T5995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.078766][T10929] loop6: detected capacity change from 0 to 1024 [ 556.101889][T10929] hfsplus: unable to parse mount options [ 556.155304][T10929] autofs4:pid:10929:autofs_fill_super: called with bogus options [ 556.633172][T10944] binder: 10937:10944 ioctl c0306201 0 returned -14 [ 557.513995][T10950] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1093'. [ 557.872217][T10958] program syz.6.1095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 557.886532][T10958] (null): rxe_set_mtu: Set mtu to 1024 [ 557.893287][T10958] rdma_rxe: rxe_newlink: failed to add bond0 [ 559.130445][ T9302] Bluetooth: hci0: link tx timeout [ 559.135833][ T9302] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 559.147131][ T9302] Bluetooth: hci0: link tx timeout [ 559.153534][ T9302] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 559.163182][ T9302] Bluetooth: hci0: link tx timeout [ 559.168656][ T9302] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 559.183385][ T9302] Bluetooth: hci0: link tx timeout [ 559.192034][ T9302] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 559.637973][T10981] binder: 10975:10981 ioctl c0306201 0 returned -14 [ 560.306307][T10987] 9pnet_virtio: no channels available for device 127.0.0.1 [ 560.543828][T10990] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1103'. [ 561.240425][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 561.708183][T10960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 561.917038][T11002] loop6: detected capacity change from 0 to 64 [ 562.027382][T11007] program syz.2.1108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 562.041553][T11007] syz1: rxe_newlink: already configured on bond0 [ 563.178279][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.184731][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.596644][T11023] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1112'. [ 563.913091][T11028] binder: 11024:11028 ioctl c0306201 0 returned -14 [ 564.816269][T11034] 9pnet_virtio: no channels available for device 127.0.0.1 [ 565.660447][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 565.936433][T11056] program syz.4.1117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.951616][T11056] (null): rxe_set_mtu: Set mtu to 1024 [ 565.960822][T11056] rdma_rxe: rxe_newlink: failed to add bond0 [ 566.802885][T11061] loop3: detected capacity change from 0 to 64 [ 567.285996][T11071] loop4: detected capacity change from 0 to 1024 [ 567.302820][T11071] hfsplus: unable to parse mount options [ 567.335875][T11071] autofs4:pid:11071:autofs_fill_super: called with bogus options [ 568.981634][T11048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.069113][T11083] binder: 11073:11083 ioctl c0306201 0 returned -14 [ 570.691652][T11104] program syz.2.1129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 570.708982][T11104] syz1: rxe_newlink: already configured on bond0 [ 571.575163][T11112] 9pnet_virtio: no channels available for device 127.0.0.1 [ 572.252459][T11120] loop6: detected capacity change from 0 to 64 [ 575.226261][T11147] loop2: detected capacity change from 0 to 1024 [ 575.287986][T11147] hfsplus: unable to parse mount options [ 575.371424][T11154] program syz.6.1140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.385856][T11154] (null): rxe_set_mtu: Set mtu to 1024 [ 575.392725][T11154] rdma_rxe: rxe_newlink: failed to add bond0 [ 575.888054][T11147] autofs4:pid:11147:autofs_fill_super: called with bogus options [ 580.084967][T11190] binder: 11181:11190 ioctl c0306201 0 returned -14 [ 580.787719][ T788] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 581.038006][ T788] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 581.061285][ T788] usb 4-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 581.125082][ T788] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 581.238829][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.412063][ T788] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 581.424742][T11201] loop6: detected capacity change from 0 to 1024 [ 581.461498][T11201] hfsplus: unable to parse mount options [ 581.475681][ T788] usb 4-1: invalid MIDI out EP 0 [ 581.643317][ T5790] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 581.715109][T11206] program syz.2.1151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.728504][T11206] syz1: rxe_newlink: already configured on bond0 [ 581.780928][T11201] autofs4:pid:11201:autofs_fill_super: called with bogus options [ 581.825512][ T9816] udevd[9816]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.076745][ T28] audit: type=1326 audit(1783726907.342:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.3.1147" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 582.392093][ T788] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 582.550389][ T28] audit: type=1326 audit(1783726907.772:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.3.1147" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 582.580232][ T788] usb 4-1: USB disconnect, device number 16 [ 582.700152][ T28] audit: type=1326 audit(1783726907.802:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.3.1147" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 582.818223][ T28] audit: type=1326 audit(1783726907.802:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.3.1147" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 582.907123][ T28] audit: type=1326 audit(1783726907.822:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.3.1147" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7159de59 code=0x7ffc0000 [ 585.536661][T11247] binder: 11244:11247 ioctl c0306201 0 returned -14 [ 585.847826][ T3481] ------------[ cut here ]------------ [ 585.854037][ T3481] WARNING: CPU: 1 PID: 3481 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830 [ 585.863847][ T3481] Modules linked in: [ 585.867769][ T3481] CPU: 1 PID: 3481 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 585.875541][ T3481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 585.885702][ T3481] Workqueue: iou_exit io_ring_exit_work [ 585.891689][ T3481] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 585.897444][ T3481] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 ff 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 f1 a8 03 f7 e9 b1 fd ff ff e8 e7 a8 03 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 585.917514][ T3481] RSP: 0018:ffffc9000cb27a40 EFLAGS: 00010293 [ 585.924030][ T3481] RAX: ffffffff8a833c89 RBX: ffff88802be06000 RCX: ffff88802e8b0000 [ 585.932070][ T3481] RDX: 0000000000000000 RSI: ffffffffffffffe1 RDI: 0000000000000000 [ 585.940145][ T3481] RBP: ffffc9000cb27bb0 R08: ffffc9000cb279c7 R09: 1ffff92001964f38 [ 585.948155][ T3481] R10: dffffc0000000000 R11: fffff52001964f39 R12: dffffc0000000000 [ 585.956254][ T3481] R13: 0000000100006ebd R14: 0000000100006edc R15: ffff88802be06510 [ 585.964510][ T3481] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 585.973518][ T3481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.980176][ T3481] CR2: 00007fbc723baff8 CR3: 000000007a493000 CR4: 00000000003506e0 [ 585.988184][ T3481] Call Trace: [ 585.991558][ T3481] [ 585.994517][ T3481] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 586.000421][ T3481] ? preempt_schedule_thunk+0x1a/0x30 [ 586.005843][ T3481] ? process_scheduled_works+0x975/0x1600 [ 586.011690][ T3481] ? process_scheduled_works+0x975/0x1600 [ 586.017455][ T3481] process_scheduled_works+0xa60/0x1600 [ 586.023239][ T3481] ? worker_attach_to_pool+0x370/0x370 [ 586.028748][ T3481] ? assign_work+0x3cc/0x5d0 [ 586.033449][ T3481] worker_thread+0xa5e/0xfe0 [ 586.038088][ T3481] ? _raw_spin_unlock+0x40/0x40 [ 586.043062][ T3481] ? __kthread_parkme+0x71/0x1c0 [ 586.048050][ T3481] kthread+0x2fa/0x390 [ 586.052214][ T3481] ? pr_cont_work+0x550/0x550 [ 586.056927][ T3481] ? kthread_blkcg+0xd0/0xd0 [ 586.061585][ T3481] ret_from_fork+0x48/0x80 [ 586.066035][ T3481] ? kthread_blkcg+0xd0/0xd0 [ 586.070734][ T3481] ret_from_fork_asm+0x11/0x20 [ 586.075546][ T3481] [ 586.078596][ T3481] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 586.085888][ T3481] CPU: 1 PID: 3481 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 586.093543][ T3481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 586.103715][ T3481] Workqueue: iou_exit io_ring_exit_work [ 586.109303][ T3481] Call Trace: [ 586.112604][ T3481] [ 586.115545][ T3481] dump_stack_lvl+0x18c/0x250 [ 586.120261][ T3481] ? show_regs_print_info+0x20/0x20 [ 586.125493][ T3481] ? load_image+0x420/0x420 [ 586.130073][ T3481] panic+0x2ca/0x720 [ 586.133998][ T3481] ? bpf_jit_dump+0xd0/0xd0 [ 586.138541][ T3481] ? ret_from_fork_asm+0x11/0x20 [ 586.143519][ T3481] __warn+0x2e0/0x470 [ 586.147625][ T3481] ? io_ring_exit_work+0x3b9/0x830 [ 586.152778][ T3481] ? io_ring_exit_work+0x3b9/0x830 [ 586.157948][ T3481] report_bug+0x2be/0x4f0 [ 586.162304][ T3481] ? io_ring_exit_work+0x3b9/0x830 [ 586.167445][ T3481] ? io_ring_exit_work+0x3b9/0x830 [ 586.172613][ T3481] ? io_ring_exit_work+0x3bb/0x830 [ 586.177752][ T3481] handle_bug+0xcf/0x120 [ 586.182024][ T3481] exc_invalid_op+0x1a/0x50 [ 586.186542][ T3481] asm_exc_invalid_op+0x1a/0x20 [ 586.191401][ T3481] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 586.197140][ T3481] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 ff 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 f1 a8 03 f7 e9 b1 fd ff ff e8 e7 a8 03 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 586.216758][ T3481] RSP: 0018:ffffc9000cb27a40 EFLAGS: 00010293 [ 586.222823][ T3481] RAX: ffffffff8a833c89 RBX: ffff88802be06000 RCX: ffff88802e8b0000 [ 586.230791][ T3481] RDX: 0000000000000000 RSI: ffffffffffffffe1 RDI: 0000000000000000 [ 586.238754][ T3481] RBP: ffffc9000cb27bb0 R08: ffffc9000cb279c7 R09: 1ffff92001964f38 [ 586.246829][ T3481] R10: dffffc0000000000 R11: fffff52001964f39 R12: dffffc0000000000 [ 586.254802][ T3481] R13: 0000000100006ebd R14: 0000000100006edc R15: ffff88802be06510 [ 586.262773][ T3481] ? io_ring_exit_work+0x3b9/0x830 [ 586.267896][ T3481] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 586.273732][ T3481] ? preempt_schedule_thunk+0x1a/0x30 [ 586.279105][ T3481] ? process_scheduled_works+0x975/0x1600 [ 586.284819][ T3481] ? process_scheduled_works+0x975/0x1600 [ 586.290539][ T3481] process_scheduled_works+0xa60/0x1600 [ 586.296108][ T3481] ? worker_attach_to_pool+0x370/0x370 [ 586.301569][ T3481] ? assign_work+0x3cc/0x5d0 [ 586.306166][ T3481] worker_thread+0xa5e/0xfe0 [ 586.310760][ T3481] ? _raw_spin_unlock+0x40/0x40 [ 586.315922][ T3481] ? __kthread_parkme+0x71/0x1c0 [ 586.320890][ T3481] kthread+0x2fa/0x390 [ 586.324950][ T3481] ? pr_cont_work+0x550/0x550 [ 586.329640][ T3481] ? kthread_blkcg+0xd0/0xd0 [ 586.334239][ T3481] ret_from_fork+0x48/0x80 [ 586.338668][ T3481] ? kthread_blkcg+0xd0/0xd0 [ 586.343276][ T3481] ret_from_fork_asm+0x11/0x20 [ 586.348055][ T3481] [ 586.351309][ T3481] Kernel Offset: disabled [ 586.355716][ T3481] Rebooting in 86400 seconds..