last executing test programs: 8m35.920002758s ago: executing program 4 (id=783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x1, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setns(0xc9, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r4, r5, 0x0, 0xff) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000000)="3f000000010000", 0x7) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) close(0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'bond_slave_1\x00', @broadcast}) 8m34.69232473s ago: executing program 4 (id=787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f00000004c0)=0x517, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r5, 0xffffffffffffffff, 0xee01) write$uinput_user_dev(r5, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000019180)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000019140)={&(0x7f000001ba00)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x20044050}, 0x800) socket(0x400000000010, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 8m33.451475211s ago: executing program 4 (id=790): syz_open_dev$hidraw(&(0x7f00000000c0), 0x785, 0x20000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000480), 0x6, 0x280000) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x4000031, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000000400)=@file={0x1, './bus\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000c80)=@v1={0x0, @aes128, 0x10, @desc2}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x7ff, 0x12) 8m29.179612582s ago: executing program 4 (id=795): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d1", 0x87}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4", 0x57}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f40", 0x1c}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8m22.996169532s ago: executing program 4 (id=805): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040000000200000100000007000000000000000001000085000000000200000084b8371367abdf0d006f00"], 0x0, 0x40, 0x0, 0xa}, 0x28) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000068f000/0x1000)=nil, 0x1000}, 0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x3, 0x6, @remote}, 0x14) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) write(r5, &(0x7f0000000000)="010000000000000020", 0x9) 8m22.27947444s ago: executing program 4 (id=806): setns(0xc9, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) close(0xffffffffffffffff) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="23000000010006", 0x7) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8m6.76850762s ago: executing program 32 (id=806): setns(0xc9, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) close(0xffffffffffffffff) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="23000000010006", 0x7) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 17.594982455s ago: executing program 0 (id=1694): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0xa402, 0x0) openat(r0, 0x0, 0x42, 0xdf) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) listen(r3, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c9", @ANYBLOB=' '], 0x16) 17.440863039s ago: executing program 5 (id=1696): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) 15.322221424s ago: executing program 5 (id=1699): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d1", 0x87}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4", 0x57}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xe98}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14.969343343s ago: executing program 3 (id=1700): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000000)="550449f9307d0c705f3b8ea2607849", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r0 = socket(0x2b, 0x1, 0xa0c7) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, 0x0, 0x1) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 14.875799225s ago: executing program 5 (id=1701): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x10002) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r6, &(0x7f0000000740)={0x18, 0x0, {0x0, @remote, 'gre0\x00'}}, 0x1e) sendto$inet6(0xffffffffffffffff, &(0x7f0000003b00), 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r7, 0x1, 0x31, 0x0, 0x0) stat(&(0x7f00000001c0)='./file1\x00', 0x0) write$P9_RSTATu(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x242) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 11.95664375s ago: executing program 3 (id=1703): syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x1, 0x100) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) 11.331970837s ago: executing program 2 (id=1704): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) 11.21235023s ago: executing program 5 (id=1705): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x2, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x40, 0x0, 0xa}, 0x28) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5d090936f70e0dd038e7ff7fc6e5539b324c078b089b3934076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b35310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.698765409s ago: executing program 5 (id=1707): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f00000004c0)=0x517, 0x4) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) write$uinput_user_dev(r4, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket(0x400000000010, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 9.64308041s ago: executing program 3 (id=1708): syz_read_part_table(0x5bd, &(0x7f0000000b80)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000050000000000000000000000000000000000000000000000000000000000000008000000ffffffff1100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x138) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c43, 0x50) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000403e13150840000102030109021f00010109100409040000010103000b090505"], 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x2, 0x4, 0x83, 0x5, 0x1, 0x4, 0xb7, 0x4, 0x2, 0x8, 0x4, 0xf1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000400)={r3}, &(0x7f0000000480)=0x8) ptrace(0x10, r1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) bind$tipc(r4, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) 9.487377255s ago: executing program 2 (id=1709): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d1", 0x87}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202", 0x42}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f40", 0x1c}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.400675297s ago: executing program 1 (id=1710): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f00000004c0)=0x517, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r4, 0xffffffffffffffff, 0xee01) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000019180)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000019140)={&(0x7f000001ba00)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x20044050}, 0x800) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket(0x400000000010, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 8.318367005s ago: executing program 1 (id=1711): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d1", 0x87}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4", 0x57}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf15}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.983891093s ago: executing program 0 (id=1712): mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 7.983618943s ago: executing program 2 (id=1713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mkdir(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$vbi(0x0, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x9, "a6b73d0c4e4bcb7cffa51a00d8046d6fa4d71a9a9a5b2f4d45d026abfe6c72c4", "850bdb54a923bd8777061febd8ab77ea", {"ae40248fd73e6116d10e7d48d84d58e1", "bf006a15f77655df3542f5fe2b0dbfd5"}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1a00c87, &(0x7f0000000700), 0x0, 0x5e8, &(0x7f0000000100)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x603}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 7.3202412s ago: executing program 0 (id=1714): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0xfff8, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @loopback, {[@noop, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0xf, [{@local, 0x7}, {@local, 0x4}, {@rand_addr=0x64010101, 0x9}]}, @cipso={0x86, 0xf, 0x3, [{0x6, 0x2}, {0x2, 0x7, "f413567c09"}]}]}}}}}}}, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, 0x0, &(0x7f0000004880)=@udp=r2}, 0x20) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r2, &(0x7f0000000580)=""/26, 0x1a, 0x40010003, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r4, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") 5.00474408s ago: executing program 1 (id=1715): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x10002) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r6, &(0x7f0000000740)={0x18, 0x0, {0x0, @remote, 'gre0\x00'}}, 0x1e) sendto$inet6(0xffffffffffffffff, &(0x7f0000003b00), 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r7, 0x1, 0x31, 0x0, 0x0) stat(&(0x7f00000001c0)='./file1\x00', 0x0) write$P9_RSTATu(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x242) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 4.986063771s ago: executing program 2 (id=1716): setns(0xc9, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) close(0xffffffffffffffff) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="23000000010006", 0x7) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x24000000) 4.695439208s ago: executing program 0 (id=1717): add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0x5, 0x0, 0x1, "bf231e4b"}}) 4.669003999s ago: executing program 3 (id=1718): syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x1, 0x100) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) 2.370268248s ago: executing program 1 (id=1719): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x2, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x40, 0x0, 0xa}, 0x28) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20042000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d61"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a000000050001000700ff01000000000000ac75d749b3a47836a7edce6f7a3f6ed82c38a14736ab557b6011da34bffab0482edfd435fa0f3d02a2e10627e2df4c6aec11dab62c274723d0ad4d48177461beda2cb0ef77257a9512fbb3e8e020"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 2.237248021s ago: executing program 0 (id=1720): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd28, 0x35dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}}, 0x1c}, 0x1, 0x0, 0x0, 0x140000d0}, 0x20048810) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000600)={0x6, 0x0, [{0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x2, 0xfffffffe, 0x7, 0x8, 0x3, 0x110, 0x3}, {0x80000008, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x1}, {0x1, 0x67b7, 0x6, 0x800062d9, 0x9, 0x3, 0x7f}, {0xc0000000, 0x0, 0x4, 0x6b0, 0x823, 0xa5, 0x8000}, {0x40000001, 0x1, 0x4, 0xc, 0xff, 0x9, 0x7}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.221006172s ago: executing program 2 (id=1721): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f00000004c0)=0x517, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r4, 0xffffffffffffffff, 0xee01) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000019180)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000019140)={&(0x7f000001ba00)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x20044050}, 0x800) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket(0x400000000010, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 2.139427014s ago: executing program 3 (id=1722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x4040000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000005e80)=ANY=[@ANYBLOB="020d0000100000002f3144e90000000003000600eb1f00000200403fe0000001000000f5000000000800120002000100000000000000000030006c100201009f6eae02000000adb20200000000152c000000ffffffff00010a0014bb7acde1b8e96408d700000000030005000020000002"], 0x80}}, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f00000000c0), 0x2c8, 0x0) 1.710693895s ago: executing program 5 (id=1723): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1ff, 0x6, 0xe9, 0x8, 0x402, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(0x0, 0x18900, 0x2) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000600)=""/189, 0xbd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x181080, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x187) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 975.405254ms ago: executing program 1 (id=1724): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040000000200000100000007000000000000000001000085000000000200000084b8371367abdf0d006f00"], 0x0, 0x40, 0x0, 0xa}, 0x28) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000068f000/0x1000)=nil, 0x1000}, 0x3}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) 957.082995ms ago: executing program 2 (id=1725): semget$private(0x0, 0x1, 0x2a) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'sit0\x00'}]}]}]}], {0x14, 0x10}}, 0xc4}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0xc0800) read$FUSE(r4, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000080)) 951.636795ms ago: executing program 3 (id=1726): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1ff, 0x6, 0xe9, 0x8, 0x402, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(0x0, 0x18900, 0x2) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000600)=""/189, 0xbd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x181080, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x187) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 325.174261ms ago: executing program 0 (id=1727): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() mmap$usbmon(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, 0xffffffffffffffff, 0x3) r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@report={0xb0, 0x29, 0x1, 0x70bd2c, 0x25dfdbfe, {0x50801310198f26cd, {@in=@remote, @in=@multicast1, 0x7ff, 0x6, 0x4e20, 0x0, 0x0, 0xb0, 0x20, 0x8}}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e22, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(r1, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=1728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x841) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000003c0)={0x0, 0x6, 0x3004}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a80)={'syz1\x00', {}, 0x2000, [0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000040)={{}, {0x20, 0xfc}, 0x0, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f00000001c0)=ANY=[]) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) write$char_usb(r4, 0x0, 0xfffffe71) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0015"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@empty, @in6=@local, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x80, 0xa0}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x101, 0x0, 0x0, 0x1, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74ae}, 0x0, 0xffffffff}}, 0xf8}, 0x1, 0x0, 0x0, 0x4c844}, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000040)={{0x0, @name="64f03a5523147ffd794d01d2b9766e11c3ba0b7f7e471b6fdf26c9c27a1c6206"}, 0x8, 0x401, 0x200}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r9, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ice loop1): using crc32c (crc32c-intel) checksum algorithm [ 717.579956][T10292] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 717.589612][T10292] BTRFS info (device loop1): use zstd compression, level 3 [ 717.598110][T10292] BTRFS info (device loop1): force clearing of disk cache [ 717.605566][T10292] BTRFS info (device loop1): enabling disk space caching [ 717.613072][T10292] BTRFS info (device loop1): disk space caching is enabled [ 717.620362][T10292] BTRFS info (device loop1): has skinny extents [ 717.691170][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 717.735279][T10285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 718.186142][T10292] BTRFS info (device loop1): enabling ssd optimizations [ 718.202590][T10292] BTRFS info (device loop1): clearing free space tree [ 718.210067][T10292] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 718.219955][T10292] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 719.142386][T10328] process 'syz.0.1068' launched './file2' with NULL argv: empty string added [ 719.608632][T10343] overlayfs: overlapping lowerdir path [ 719.651488][T10343] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 720.740664][T10350] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 721.918560][T10359] usb usb8: usbfs: process 10359 (syz.1.1073) did not claim interface 0 before use [ 722.957510][T10368] overlayfs: overlapping lowerdir path [ 723.009692][T10369] overlayfs: conflicting lowerdir path [ 723.774110][T10371] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 726.166564][T10389] loop0: detected capacity change from 0 to 32768 [ 726.354026][T10393] loop3: detected capacity change from 0 to 8 [ 726.502738][T10389] XFS (loop0): Mounting V5 Filesystem [ 726.921057][T10389] XFS (loop0): Ending clean mount [ 726.934982][T10389] XFS (loop0): Quotacheck needed: Please wait. [ 727.272970][T10389] XFS (loop0): Quotacheck: Done. [ 727.782551][ T26] audit: type=1800 audit(1787980648.942:133): pid=10406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1083" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 728.180923][ T4193] XFS (loop0): Unmounting Filesystem [ 728.586375][T10418] overlayfs: overlapping lowerdir path [ 728.620590][T10418] overlayfs: conflicting lowerdir path [ 730.642863][T10433] loop2: detected capacity change from 0 to 32768 [ 730.919272][T10432] loop3: detected capacity change from 0 to 32768 [ 730.996086][T10433] XFS (loop2): Mounting V5 Filesystem [ 731.257565][T10432] XFS (loop3): Mounting V5 Filesystem [ 731.512439][T10432] XFS (loop3): Ending clean mount [ 731.520741][T10432] XFS (loop3): Quotacheck needed: Please wait. [ 731.612856][T10433] XFS (loop2): Ending clean mount [ 731.630719][T10433] XFS (loop2): Quotacheck needed: Please wait. [ 731.735725][T10432] XFS (loop3): Quotacheck: Done. [ 731.894400][T10458] loop1: detected capacity change from 0 to 32768 [ 731.956283][T10433] XFS (loop2): Quotacheck: Done. [ 732.060979][ T26] audit: type=1800 audit(1787980653.172:134): pid=10432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1091" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 732.365167][T10465] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 732.386926][ T4195] XFS (loop3): Unmounting Filesystem [ 732.470139][T10458] XFS (loop1): Mounting V5 Filesystem [ 732.693062][ T26] audit: type=1800 audit(1787980653.522:135): pid=10465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1092" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 732.874605][ T4187] XFS (loop2): Unmounting Filesystem [ 733.160012][T10458] XFS (loop1): Ending clean mount [ 733.167909][T10458] XFS (loop1): Quotacheck needed: Please wait. [ 733.221950][T10458] XFS (loop1): Quotacheck: Done. [ 733.611688][T10475] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 733.622017][ T26] audit: type=1800 audit(1787980654.762:136): pid=10475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1096" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 734.080598][ T4185] XFS (loop1): Unmounting Filesystem [ 734.552625][T10492] overlayfs: overlapping lowerdir path [ 734.562260][T10492] overlayfs: conflicting lowerdir path [ 734.905841][T10493] usb usb8: usbfs: process 10493 (syz.2.1098) did not claim interface 0 before use [ 736.475496][T10511] loop1: detected capacity change from 0 to 8 [ 738.116268][T10521] loop3: detected capacity change from 0 to 131072 [ 738.189662][T10521] F2FS-fs (loop3): invalid crc value [ 739.304192][T10521] F2FS-fs (loop3): Found nat_bits in checkpoint [ 739.343969][T10521] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 739.363696][T10521] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 739.752457][T10534] loop2: detected capacity change from 0 to 32768 [ 739.966973][T10545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1112'. [ 740.211743][T10534] XFS (loop2): Mounting V5 Filesystem [ 740.920293][T10534] XFS (loop2): Ending clean mount [ 740.930764][T10534] XFS (loop2): Quotacheck needed: Please wait. [ 741.049755][T10534] XFS (loop2): Quotacheck: Done. [ 741.518885][ T26] audit: type=1800 audit(1787980662.582:137): pid=10557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1110" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 741.878361][ T4187] XFS (loop2): Unmounting Filesystem [ 741.916386][T10564] overlayfs: overlapping lowerdir path [ 741.979600][T10566] overlayfs: conflicting lowerdir path [ 742.286364][T10568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1114'. [ 742.302830][T10568] loop1: detected capacity change from 0 to 512 [ 742.362442][T10568] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 742.506626][T10568] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.1114: bad orphan inode 131083 [ 742.520466][T10568] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 742.986203][T10572] loop3: detected capacity change from 0 to 32768 [ 743.099563][T10572] XFS (loop3): Mounting V5 Filesystem [ 743.212024][T10572] XFS (loop3): Ending clean mount [ 743.220914][T10572] XFS (loop3): Quotacheck needed: Please wait. [ 743.337908][T10572] XFS (loop3): Quotacheck: Done. [ 743.726716][T10584] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 743.802452][ T26] audit: type=1800 audit(1787980664.882:138): pid=10584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1116" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 744.255972][ T4195] XFS (loop3): Unmounting Filesystem [ 744.305301][T10587] loop5: detected capacity change from 0 to 32768 [ 744.678223][T10587] XFS (loop5): Mounting V5 Filesystem [ 744.696024][T10598] usb usb8: usbfs: process 10598 (syz.2.1115) did not claim interface 0 before use [ 745.260794][T10587] XFS (loop5): Ending clean mount [ 745.268399][T10587] XFS (loop5): Quotacheck needed: Please wait. [ 745.423140][T10587] XFS (loop5): Quotacheck: Done. [ 746.246932][ T26] audit: type=1800 audit(1787980666.982:139): pid=10610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1118" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=0 [ 746.465870][ T8874] XFS (loop5): Unmounting Filesystem [ 746.789925][T10616] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 747.173927][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.180906][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.900253][T10618] loop2: detected capacity change from 0 to 32768 [ 748.248460][T10629] loop1: detected capacity change from 0 to 1024 [ 748.265878][T10629] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 748.277448][T10629] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 748.297901][T10629] JBD2: no valid journal superblock found [ 748.303801][T10629] EXT4-fs (loop1): error loading journal [ 748.470270][T10618] XFS (loop2): Mounting V5 Filesystem [ 749.353984][T10618] XFS (loop2): Ending clean mount [ 749.364829][T10618] XFS (loop2): Quotacheck needed: Please wait. [ 750.719685][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 750.781311][T10629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 751.033001][T10618] XFS (loop2): Quotacheck: Done. [ 751.089766][ T4187] XFS (loop2): Unmounting Filesystem [ 751.242873][T10645] overlayfs: overlapping lowerdir path [ 753.079632][T10660] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 754.105093][T10660] device bond2 entered promiscuous mode [ 754.111844][T10660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 755.074903][T10684] loop5: detected capacity change from 0 to 1024 [ 755.142590][T10684] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 755.153763][T10684] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 755.175778][T10684] JBD2: no valid journal superblock found [ 755.181864][T10684] EXT4-fs (loop5): error loading journal [ 755.477994][T10684] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 755.944994][T10684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 755.963190][T10685] loop1: detected capacity change from 0 to 1024 [ 756.040933][T10685] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 756.052123][T10685] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 756.072561][T10685] JBD2: no valid journal superblock found [ 756.078444][T10685] EXT4-fs (loop1): error loading journal [ 757.541978][T10685] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 757.928171][T10685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 758.962429][T10706] overlayfs: overlapping lowerdir path [ 759.023018][T10711] overlayfs: conflicting lowerdir path [ 759.864715][T10726] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 760.877178][T10725] netlink: 'syz.3.1145': attribute type 1 has an invalid length. [ 760.956874][T10725] device bond1 entered promiscuous mode [ 760.964389][T10725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 761.680553][T10732] loop1: detected capacity change from 0 to 1024 [ 761.743684][T10732] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 761.754798][T10732] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 761.787022][T10732] JBD2: no valid journal superblock found [ 761.793017][T10732] EXT4-fs (loop1): error loading journal [ 763.036439][T10734] loop2: detected capacity change from 0 to 32768 [ 763.395094][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 763.577645][T10743] loop1: detected capacity change from 0 to 32768 [ 763.629797][T10734] XFS (loop2): Mounting V5 Filesystem [ 763.701246][T10743] XFS (loop1): Mounting V5 Filesystem [ 764.293470][T10734] XFS (loop2): Ending clean mount [ 764.297590][T10743] XFS (loop1): Ending clean mount [ 764.307124][T10734] XFS (loop2): Quotacheck needed: Please wait. [ 764.314185][T10743] XFS (loop1): Quotacheck needed: Please wait. [ 764.456087][T10734] XFS (loop2): Quotacheck: Done. [ 764.496480][T10743] XFS (loop1): Quotacheck: Done. [ 764.692792][T10770] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 765.174352][T10768] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 765.193355][ T26] audit: type=1800 audit(1787980686.352:140): pid=10768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1147" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 765.241917][T10769] overlayfs: missing 'lowerdir' [ 765.468610][ T26] audit: type=1800 audit(1787980686.372:141): pid=10769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1150" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 765.572766][ T4187] XFS (loop2): Unmounting Filesystem [ 765.638214][ T4185] XFS (loop1): Unmounting Filesystem [ 766.869408][T10781] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 768.580169][T10788] loop5: detected capacity change from 0 to 32768 [ 768.820888][T10800] usb usb8: usbfs: process 10800 (syz.2.1155) did not claim interface 0 before use [ 769.290217][T10788] XFS (loop5): Mounting V5 Filesystem [ 769.604888][T10788] XFS (loop5): Ending clean mount [ 769.614028][T10788] XFS (loop5): Quotacheck needed: Please wait. [ 769.866788][T10809] loop2: detected capacity change from 0 to 32768 [ 769.922940][T10788] XFS (loop5): Quotacheck: Done. [ 770.095722][T10810] netlink: 'syz.3.1161': attribute type 1 has an invalid length. [ 770.418360][T10817] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 770.427486][ T26] audit: type=1800 audit(1787980691.582:142): pid=10817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1159" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=0 [ 770.605632][T10809] XFS (loop2): Mounting V5 Filesystem [ 770.899770][T10809] XFS (loop2): Ending clean mount [ 770.907248][T10809] XFS (loop2): Quotacheck needed: Please wait. [ 770.920860][T10810] device bond2 entered promiscuous mode [ 770.941417][ T8874] XFS (loop5): Unmounting Filesystem [ 770.970762][T10809] XFS (loop2): Quotacheck: Done. [ 771.149775][T10810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 771.302360][T10828] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 771.312732][ T26] audit: type=1800 audit(1787980692.462:143): pid=10828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1162" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 771.690907][ T4187] XFS (loop2): Unmounting Filesystem [ 772.446619][T10834] loop3: detected capacity change from 0 to 32768 [ 772.903159][T10834] XFS (loop3): Mounting V5 Filesystem [ 773.094288][T10849] device-mapper: ioctl: Invalid target message parameters. [ 773.150088][T10852] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: | [ 773.165349][T10834] XFS (loop3): Ending clean mount [ 773.174657][T10834] XFS (loop3): Quotacheck needed: Please wait. [ 773.255057][T10834] XFS (loop3): Quotacheck: Done. [ 774.588199][ T4195] XFS (loop3): Unmounting Filesystem [ 775.052592][T10867] usb usb8: usbfs: process 10867 (syz.0.1172) did not claim interface 0 before use [ 776.128386][T10873] loop1: detected capacity change from 0 to 32768 [ 776.143301][T10875] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 776.241266][T10873] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1175 (10873) [ 777.120781][T10876] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 777.855735][T10881] loop0: detected capacity change from 0 to 32768 [ 778.093758][T10878] loop5: detected capacity change from 0 to 131072 [ 778.141659][T10882] loop2: detected capacity change from 0 to 32768 [ 778.152906][T10873] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 778.161855][T10873] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 778.171710][T10873] BTRFS info (device loop1): use zstd compression, level 3 [ 778.178996][T10873] BTRFS info (device loop1): force clearing of disk cache [ 778.186157][T10873] BTRFS info (device loop1): enabling disk space caching [ 778.195060][T10873] BTRFS info (device loop1): disk space caching is enabled [ 778.202785][T10873] BTRFS info (device loop1): has skinny extents [ 778.210675][T10878] F2FS-fs (loop5): invalid crc value [ 778.290928][T10878] F2FS-fs (loop5): Found nat_bits in checkpoint [ 778.332808][T10878] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 778.348669][T10878] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 778.362403][T10881] XFS (loop0): Mounting V5 Filesystem [ 778.420885][T10882] XFS (loop2): Mounting V5 Filesystem [ 778.471143][T10881] XFS (loop0): Ending clean mount [ 778.804467][T10921] autofs4:pid:10921:autofs_fill_super: called with bogus options [ 780.011872][T10882] XFS (loop2): Ending clean mount [ 780.024707][T10882] XFS (loop2): Quotacheck needed: Please wait. [ 780.138676][ T6156] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 780.315591][T10873] BTRFS error (device loop1): open_ctree failed: -12 [ 780.496253][T10882] XFS (loop2): Quotacheck: Done. [ 780.519093][ T6156] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 780.562202][ T6156] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 780.664534][ T4193] XFS (loop0): Unmounting Filesystem [ 780.947405][ T6156] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 781.077026][T10934] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 781.118781][ T26] audit: type=1800 audit(1787980702.232:144): pid=10934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1176" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 781.300272][ T4379] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by udevd (4379) [ 781.434968][ T6156] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 781.596530][ T4187] XFS (loop2): Unmounting Filesystem [ 781.658727][ T6156] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 781.667882][ T6156] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 781.719362][ T6156] usb 4-1: Product: syz [ 781.839184][ T6156] usb 4-1: can't set config #1, error -71 [ 781.871503][ T6156] usb 4-1: USB disconnect, device number 4 [ 782.404343][T10941] loop3: detected capacity change from 0 to 32768 [ 782.616514][T10941] XFS (loop3): Mounting V5 Filesystem [ 782.899493][T10953] usb usb8: usbfs: process 10953 (syz.1.1184) did not claim interface 0 before use [ 782.924265][T10941] XFS (loop3): Ending clean mount [ 782.938071][T10941] XFS (loop3): Quotacheck needed: Please wait. [ 783.050341][T10941] XFS (loop3): Quotacheck: Done. [ 783.737088][T10960] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 784.237175][ T26] audit: type=1800 audit(1787980704.682:145): pid=10960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1183" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 784.572945][ T4195] XFS (loop3): Unmounting Filesystem [ 785.240877][T10974] overlayfs: overlapping lowerdir path [ 785.972846][T10979] loop5: detected capacity change from 0 to 32768 [ 786.210613][T10981] loop0: detected capacity change from 0 to 32768 [ 786.306425][T10979] XFS (loop5): Mounting V5 Filesystem [ 786.482392][T10983] loop1: detected capacity change from 0 to 32768 [ 786.663806][T10981] XFS (loop0): Mounting V5 Filesystem [ 786.670743][T10983] XFS (loop1): Mounting V5 Filesystem [ 786.711254][T10979] XFS (loop5): Ending clean mount [ 786.975889][T10983] XFS (loop1): Ending clean mount [ 786.987973][T10983] XFS (loop1): Quotacheck needed: Please wait. [ 787.290194][T10981] XFS (loop0): Ending clean mount [ 787.300233][T10981] XFS (loop0): Quotacheck needed: Please wait. [ 787.402596][T10983] XFS (loop1): Quotacheck: Done. [ 787.920782][T11017] autofs4:pid:11017:autofs_fill_super: called with bogus options [ 789.327844][T11027] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 789.677364][T10981] XFS (loop0): Quotacheck: Done. [ 789.752104][ T4185] XFS (loop1): Unmounting Filesystem [ 789.755577][ T4193] XFS (loop0): Unmounting Filesystem [ 789.763457][ T8874] XFS (loop5): Unmounting Filesystem [ 790.152858][T11032] usb usb8: usbfs: process 11032 (syz.2.1196) did not claim interface 0 before use [ 792.451540][T11048] device-mapper: ioctl: Invalid target message parameters. [ 792.519190][T11050] usb usb8: usbfs: process 11050 (syz.0.1195) did not claim interface 0 before use [ 792.533716][T11048] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: | [ 792.622660][T11045] loop1: detected capacity change from 0 to 1024 [ 792.712076][T11045] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 792.723537][T11045] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 792.762062][T11045] JBD2: no valid journal superblock found [ 792.768794][T11045] EXT4-fs (loop1): error loading journal [ 793.799625][T11055] overlayfs: missing 'lowerdir' [ 793.873957][T11045] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 794.215240][T11057] loop3: detected capacity change from 0 to 32768 [ 794.425423][T11057] XFS (loop3): Mounting V5 Filesystem [ 794.490331][T11045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 794.808732][T11057] XFS (loop3): Ending clean mount [ 794.834446][T11071] tipc: Trying to set illegal importance in message [ 795.300591][T11077] autofs4:pid:11077:autofs_fill_super: called with bogus options [ 797.062301][ T4195] XFS (loop3): Unmounting Filesystem [ 798.176596][T11087] overlayfs: overlapping lowerdir path [ 798.213317][T11085] overlayfs: conflicting lowerdir path [ 798.699837][T11095] device-mapper: ioctl: Invalid target message parameters. [ 798.757152][T11095] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: | [ 798.902338][T11094] loop3: detected capacity change from 0 to 32768 [ 799.701692][T11094] XFS (loop3): Mounting V5 Filesystem [ 799.987295][T11094] XFS (loop3): Ending clean mount [ 800.089710][T11106] loop1: detected capacity change from 0 to 32768 [ 800.529616][T11117] autofs4:pid:11117:autofs_fill_super: called with bogus options [ 801.011383][T11118] usb usb8: usbfs: process 11118 (syz.5.1210) did not claim interface 0 before use [ 801.518402][T11106] XFS (loop1): Mounting V5 Filesystem [ 801.570786][ T4195] XFS (loop3): Unmounting Filesystem [ 801.591392][T11128] device syzkaller0 entered promiscuous mode [ 801.656255][T11106] XFS (loop1): Ending clean mount [ 801.664234][T11106] XFS (loop1): Quotacheck needed: Please wait. [ 801.812186][T11106] XFS (loop1): Quotacheck: Done. [ 802.196774][T11133] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 802.207206][ T26] audit: type=1800 audit(1787980723.352:146): pid=11133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1209" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 802.587716][ T4185] XFS (loop1): Unmounting Filesystem [ 802.708902][T11138] loop0: detected capacity change from 0 to 1024 [ 802.783992][T11138] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 802.795055][T11138] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 802.820170][T11138] JBD2: no valid journal superblock found [ 802.826571][T11138] EXT4-fs (loop0): error loading journal [ 803.786081][T11138] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 803.979454][T11138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 805.796395][ T7341] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:8393' [ 805.806721][ T7341] CPU: 0 PID: 7341 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 805.814310][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 805.824394][ T7341] Workqueue: hci2 hci_rx_work [ 805.829114][ T7341] Call Trace: [ 805.832416][ T7341] [ 805.835370][ T7341] dump_stack_lvl+0x188/0x250 [ 805.840093][ T7341] ? show_regs_print_info+0x20/0x20 [ 805.845325][ T7341] ? load_image+0x410/0x410 [ 805.849869][ T7341] sysfs_create_dir_ns+0x26a/0x290 [ 805.855025][ T7341] ? sysfs_warn_dup+0xa0/0xa0 [ 805.859724][ T7341] ? lockdep_hardirqs_on+0x94/0x140 [ 805.864959][ T7341] ? do_raw_spin_unlock+0x11d/0x230 [ 805.870191][ T7341] kobject_add_internal+0x5ba/0xcd0 [ 805.875465][ T7341] kobject_add+0x160/0x230 [ 805.879924][ T7341] ? kobject_init+0x1c0/0x1c0 [ 805.884639][ T7341] ? __raw_spin_lock_init+0x41/0x100 [ 805.889951][ T7341] ? klist_children_get+0x50/0x50 [ 805.895195][ T7341] ? get_device_parent+0x121/0x3e0 [ 805.900342][ T7341] device_add+0x470/0x1050 [ 805.904799][ T7341] ? device_initialize+0x2a5/0x4d0 [ 805.909954][ T7341] hci_conn_add_sysfs+0xd1/0x1e0 [ 805.914942][ T7341] le_conn_complete_evt+0xc2e/0x14d0 [ 805.920282][ T7341] ? cs_le_create_conn+0x5e0/0x5e0 [ 805.925447][ T7341] ? __mutex_trylock_common+0x15c/0x260 [ 805.931062][ T7341] hci_le_meta_evt+0x285/0x3ca0 [ 805.935953][ T7341] ? hci_event_packet+0x363/0x1310 [ 805.941320][ T7341] ? __lock_acquire+0x7b50/0x7b50 [ 805.946391][ T7341] ? release_firmware_map_entry+0x190/0x190 [ 805.952335][ T7341] ? hci_remote_host_features_evt+0x240/0x240 [ 805.958446][ T7341] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 805.964133][ T7341] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 805.970169][ T7341] ? mutex_unlock+0x10/0x10 [ 805.974718][ T7341] ? lock_chain_count+0x20/0x20 [ 805.979625][ T7341] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 805.985316][ T7341] hci_event_packet+0xe0b/0x1310 [ 805.990307][ T7341] ? __hci_send_to_channel+0x1f1/0x280 [ 805.996197][ T7341] ? hci_send_to_monitor+0x27/0x4a0 [ 806.001445][ T7341] ? rcu_lock_release+0x20/0x20 [ 806.006351][ T7341] ? kasan_check_range+0x84/0x290 [ 806.011545][ T7341] ? hci_send_to_monitor+0x9c/0x4a0 [ 806.016827][ T7341] hci_rx_work+0x255/0xa10 [ 806.021300][ T7341] process_one_work+0x867/0xff0 [ 806.026238][ T7341] ? worker_detach_from_pool+0x240/0x240 [ 806.031907][ T7341] ? lockdep_hardirqs_off+0x70/0x100 [ 806.037248][ T7341] ? _raw_spin_lock_irq+0xb7/0xf0 [ 806.042318][ T7341] ? _raw_spin_lock_irqsave+0x100/0x100 [ 806.047915][ T7341] ? wq_worker_running+0x97/0x170 [ 806.052991][ T7341] worker_thread+0xad7/0x12a0 [ 806.057726][ T7341] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 806.063684][ T7341] kthread+0x42e/0x520 [ 806.067794][ T7341] ? rcu_lock_release+0x20/0x20 [ 806.072695][ T7341] ? kthread_blkcg+0xd0/0xd0 [ 806.077324][ T7341] ret_from_fork+0x1f/0x30 [ 806.081795][ T7341] [ 806.106485][ T7341] kobject_add_internal failed for hci2:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 806.120152][ T7341] Bluetooth: hci2: failed to register connection device [ 806.505257][T11163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.596005][T11175] usb usb8: usbfs: process 11175 (syz.2.1224) did not claim interface 0 before use [ 808.217992][T10338] Bluetooth: hci2: command 0x2016 tx timeout [ 808.739366][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.745873][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.845506][T11199] loop1: detected capacity change from 0 to 32768 [ 809.083168][T11202] loop5: detected capacity change from 0 to 32768 [ 809.117515][T11204] overlayfs: unrecognized mount option "/" or missing value [ 809.515286][T11202] XFS (loop5): Mounting V5 Filesystem [ 809.717164][T11199] XFS (loop1): Mounting V5 Filesystem [ 810.267436][T11199] XFS (loop1): Ending clean mount [ 810.293778][T11199] XFS (loop1): Quotacheck needed: Please wait. [ 810.864715][T11202] XFS (loop5): Ending clean mount [ 810.872893][T11202] XFS (loop5): Quotacheck needed: Please wait. [ 810.927257][T11199] XFS (loop1): Quotacheck: Done. [ 811.014347][T11202] XFS (loop5): Quotacheck: Done. [ 811.635164][T11229] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 811.718303][ T26] audit: type=1800 audit(1787980732.812:147): pid=11229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1232" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 811.937012][ T8874] XFS (loop5): Unmounting Filesystem [ 812.187525][ T4185] XFS (loop1): Unmounting Filesystem [ 812.476909][T11241] usb usb8: usbfs: process 11241 (syz.0.1239) did not claim interface 0 before use [ 814.001361][T11260] overlayfs: overlapping lowerdir path [ 814.050129][T11262] overlayfs: missing 'lowerdir' [ 814.816222][T11279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1245'. [ 814.860986][T11279] loop1: detected capacity change from 0 to 512 [ 817.065833][T11279] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 817.150012][T11279] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.1245: bad orphan inode 131083 [ 817.163752][T11279] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 818.132613][T11293] loop0: detected capacity change from 0 to 131072 [ 818.214620][T11293] F2FS-fs (loop0): invalid crc value [ 818.440962][T11293] F2FS-fs (loop0): Found nat_bits in checkpoint [ 818.487529][T11293] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 819.185490][T11293] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 819.224674][T11288] loop5: detected capacity change from 0 to 1024 [ 819.308861][T11288] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 819.320476][T11288] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 819.337704][T11288] JBD2: no valid journal superblock found [ 819.344209][T11288] EXT4-fs (loop5): error loading journal [ 820.937974][T11318] overlayfs: overlapping lowerdir path [ 820.995046][T11318] overlayfs: missing 'lowerdir' [ 821.824713][T11326] usb usb8: usbfs: process 11326 (syz.2.1251) did not claim interface 0 before use [ 822.230804][T11333] usb usb8: usbfs: process 11333 (syz.5.1260) did not claim interface 0 before use [ 822.478995][T11335] loop0: detected capacity change from 0 to 32768 [ 822.596971][T11335] XFS (loop0): Mounting V5 Filesystem [ 822.671238][T11349] device-mapper: ioctl: Invalid target message parameters. [ 822.696579][ T4264] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 822.825411][T11341] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: | [ 823.130608][T11335] XFS (loop0): Ending clean mount [ 823.138912][T11335] XFS (loop0): Quotacheck needed: Please wait. [ 823.398778][ T4264] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 823.432902][ T4264] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 823.718702][ T4264] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 825.226281][T11367] overlayfs: conflicting lowerdir path [ 825.240636][T11363] overlayfs: overlapping lowerdir path [ 825.271451][ T4264] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 825.287788][T11368] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 825.329179][T11335] XFS (loop0): Quotacheck: Done. [ 825.429427][ T4264] usb 4-1: string descriptor 0 read error: -71 [ 825.436041][ T4264] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 825.857855][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 825.871861][ T4193] XFS (loop0): Unmounting Filesystem [ 825.908706][ T4264] usb 4-1: can't set config #1, error -71 [ 825.922419][ T4264] usb 4-1: USB disconnect, device number 5 [ 826.303627][T11382] loop2: detected capacity change from 0 to 32768 [ 826.350835][T11387] usb usb8: usbfs: process 11387 (syz.3.1272) did not claim interface 0 before use [ 828.892378][T11382] XFS (loop2): Mounting V5 Filesystem [ 829.388745][T11415] overlayfs: conflicting lowerdir path [ 829.504916][T11382] XFS (loop2): Ending clean mount [ 829.831106][T11382] XFS (loop2): Quotacheck needed: Please wait. [ 830.304840][T11382] XFS (loop2): Quotacheck: Done. [ 830.349579][ T4187] XFS (loop2): Unmounting Filesystem [ 830.421138][T11428] overlayfs: overlapping lowerdir path [ 832.295322][T11446] usb usb8: usbfs: process 11446 (syz.1.1285) did not claim interface 0 before use [ 832.709696][T11444] loop3: detected capacity change from 0 to 1024 [ 833.142929][T11448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.265546][T11444] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 834.278682][T11444] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 834.354201][T11444] JBD2: no valid journal superblock found [ 834.360201][T11444] EXT4-fs (loop3): error loading journal [ 837.269955][T11485] loop0: detected capacity change from 0 to 32768 [ 837.440762][T11485] XFS (loop0): Mounting V5 Filesystem [ 837.935145][ T8556] Bluetooth: hci1: Frame reassembly failed (-84) [ 838.233118][T11501] usb usb8: usbfs: process 11501 (syz.1.1288) did not claim interface 0 before use [ 838.900568][T11485] XFS (loop0): Ending clean mount [ 839.217745][T11485] autofs4:pid:11485:autofs_fill_super: called with bogus options [ 839.544844][ T4193] XFS (loop0): Unmounting Filesystem [ 839.993621][ T6156] Bluetooth: hci1: command 0x1003 tx timeout [ 840.008761][ T7341] Bluetooth: hci1: sending frame failed (-49) [ 840.651385][T11510] loop3: detected capacity change from 0 to 1024 [ 840.709003][T11510] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 840.720606][T11510] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 840.740206][T11510] JBD2: no valid journal superblock found [ 840.746043][T11510] EXT4-fs (loop3): error loading journal [ 841.032309][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 841.617452][T11513] loop2: detected capacity change from 0 to 1024 [ 841.661498][T11513] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 841.672510][T11513] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 841.691415][T11513] JBD2: no valid journal superblock found [ 841.697249][T11513] EXT4-fs (loop2): error loading journal [ 842.048570][ T23] Bluetooth: hci1: command 0x1001 tx timeout [ 842.056273][ T7341] Bluetooth: hci1: sending frame failed (-49) [ 843.807286][T11510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 843.865466][T11512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.119939][ T4230] Bluetooth: hci1: command 0x1009 tx timeout [ 845.009118][T11518] loop3: detected capacity change from 0 to 131072 [ 845.253552][T11518] F2FS-fs (loop3): invalid crc value [ 845.469757][T11518] F2FS-fs (loop3): Found nat_bits in checkpoint [ 845.516294][T11518] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 845.548183][T11518] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 847.107723][T11540] loop1: detected capacity change from 0 to 131072 [ 847.968610][T11540] F2FS-fs (loop1): invalid crc value [ 847.990497][T11540] F2FS-fs (loop1): Found nat_bits in checkpoint [ 848.022113][T11540] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 848.070346][T11540] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 849.089228][T11551] loop2: detected capacity change from 0 to 1024 [ 850.230187][T11551] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 850.241850][T11551] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 850.278223][T11551] JBD2: no valid journal superblock found [ 850.284196][T11551] EXT4-fs (loop2): error loading journal [ 852.173522][T11569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.387731][T11602] overlayfs: unrecognized mount option "/" or missing value [ 854.738130][T11604] loop3: detected capacity change from 0 to 32768 [ 854.885361][T11604] XFS (loop3): Mounting V5 Filesystem [ 854.952668][T11604] XFS (loop3): Ending clean mount [ 854.961008][T11604] XFS (loop3): Quotacheck needed: Please wait. [ 855.098159][T11616] device-mapper: ioctl: Invalid target message parameters. [ 855.119866][T11616] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: | [ 855.372130][T11614] loop2: detected capacity change from 0 to 32768 [ 855.383490][T11604] XFS (loop3): Quotacheck: Done. [ 855.776161][T11627] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 855.828885][ T26] audit: type=1800 audit(1787980776.932:148): pid=11627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1310" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 856.011585][T11614] XFS (loop2): Mounting V5 Filesystem [ 856.130028][T11614] XFS (loop2): Ending clean mount [ 856.137971][T11614] XFS (loop2): Quotacheck needed: Please wait. [ 856.276334][T11614] XFS (loop2): Quotacheck: Done. [ 856.289857][ T4195] XFS (loop3): Unmounting Filesystem [ 856.652794][T11635] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 856.661751][ T26] audit: type=1800 audit(1787980777.812:149): pid=11635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1324" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 858.293886][ T4187] XFS (loop2): Unmounting Filesystem [ 858.536299][T11657] loop5: detected capacity change from 0 to 32768 [ 858.737304][T11657] XFS (loop5): Mounting V5 Filesystem [ 859.014303][T11657] XFS (loop5): Ending clean mount [ 859.027309][T11657] XFS (loop5): Quotacheck needed: Please wait. [ 859.108948][T11657] XFS (loop5): Quotacheck: Done. [ 859.486157][T11671] overlayfs: missing 'lowerdir' [ 859.491634][ T26] audit: type=1800 audit(1787980780.652:150): pid=11671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1332" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=0 [ 860.367077][ T8874] XFS (loop5): Unmounting Filesystem [ 860.739368][T11680] loop2: detected capacity change from 0 to 32768 [ 861.070495][T11685] loop3: detected capacity change from 0 to 32768 [ 861.920261][T11680] XFS (loop2): Mounting V5 Filesystem [ 861.941711][T11685] XFS (loop3): Mounting V5 Filesystem [ 862.147287][T11680] XFS (loop2): Ending clean mount [ 862.155152][T11680] XFS (loop2): Quotacheck needed: Please wait. [ 862.205287][T11685] XFS (loop3): Ending clean mount [ 862.243100][T11685] XFS (loop3): Quotacheck needed: Please wait. [ 862.487672][T11707] loop1: detected capacity change from 0 to 32768 [ 862.502652][T11680] XFS (loop2): Quotacheck: Done. [ 862.770591][T11685] XFS (loop3): Quotacheck: Done. [ 863.252235][T11708] loop5: detected capacity change from 0 to 131072 [ 863.292154][ T26] audit: type=1800 audit(1787980784.452:151): pid=11710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1336" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 863.424899][T11708] F2FS-fs (loop5): invalid crc value [ 863.578561][T11714] overlayfs: missing 'lowerdir' [ 863.696823][ T26] audit: type=1800 audit(1787980784.732:152): pid=11714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1338" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 864.033260][ T4187] XFS (loop2): Unmounting Filesystem [ 864.082293][ T4195] XFS (loop3): Unmounting Filesystem [ 864.164464][T11708] F2FS-fs (loop5): Found nat_bits in checkpoint [ 864.164618][T11707] XFS (loop1): Mounting V5 Filesystem [ 864.206884][T11708] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 864.227064][T11708] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 864.413457][T11707] XFS (loop1): Ending clean mount [ 864.787625][T11731] autofs4:pid:11731:autofs_fill_super: called with bogus options [ 865.771269][ T4185] XFS (loop1): Unmounting Filesystem [ 866.357791][T11741] usb usb8: usbfs: process 11741 (syz.2.1340) did not claim interface 0 before use [ 867.858406][T11750] loop1: detected capacity change from 0 to 32768 [ 868.144145][T11758] loop0: detected capacity change from 0 to 32768 [ 868.214681][T11759] loop2: detected capacity change from 0 to 1024 [ 868.397016][T11750] XFS (loop1): Mounting V5 Filesystem [ 868.406409][T11759] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 868.417481][T11759] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 868.430897][T11759] JBD2: no valid journal superblock found [ 869.362132][T11759] EXT4-fs (loop2): error loading journal [ 869.424586][T11750] XFS (loop1): Ending clean mount [ 869.433752][T11750] XFS (loop1): Quotacheck needed: Please wait. [ 869.570411][T11759] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 869.610372][T11758] XFS (loop0): Mounting V5 Filesystem [ 869.629744][T11759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 869.733617][T11750] XFS (loop1): Quotacheck: Done. [ 870.039873][T11785] overlayfs: missing 'lowerdir' [ 870.141135][T11758] XFS (loop0): Ending clean mount [ 870.149787][T11758] XFS (loop0): Quotacheck needed: Please wait. [ 870.208910][ T26] audit: type=1800 audit(1787980791.202:153): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1343" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 870.366438][T11758] XFS (loop0): Quotacheck: Done. [ 870.473018][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.479427][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.603668][ T4185] XFS (loop1): Unmounting Filesystem [ 870.745387][T11793] overlayfs: missing 'lowerdir' [ 870.751005][ T26] audit: type=1800 audit(1787980791.902:154): pid=11793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1349" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 871.272681][ T4193] XFS (loop0): Unmounting Filesystem [ 871.810172][T11799] usb usb8: usbfs: process 11799 (syz.3.1356) did not claim interface 0 before use [ 871.976138][T11801] loop5: detected capacity change from 0 to 512 [ 873.194918][T11801] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 873.361328][T11810] usb usb8: usbfs: process 11810 (syz.1.1354) did not claim interface 0 before use [ 873.551962][T11801] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.1345: bad orphan inode 131083 [ 873.566886][T11801] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 874.338864][ T4264] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 874.698702][ T4264] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 874.728853][ T4264] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 874.773903][ T4264] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 874.829420][ T4264] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 875.089448][ T4264] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 875.111158][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 875.200131][ T4264] usb 4-1: Product: syz [ 875.241872][ T4264] usb 4-1: Manufacturer: syz [ 875.351900][T11812] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 875.391538][ T4264] cdc_wdm 4-1:1.0: skipping garbage [ 875.408133][ T4264] cdc_wdm 4-1:1.0: skipping garbage [ 875.418271][ T4264] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 875.649707][T11835] loop1: detected capacity change from 0 to 32768 [ 875.978196][T11839] loop2: detected capacity change from 0 to 32768 [ 876.404394][T11835] XFS (loop1): Mounting V5 Filesystem [ 876.625643][T11839] XFS (loop2): Mounting V5 Filesystem [ 876.636978][T11836] loop0: detected capacity change from 0 to 131072 [ 876.655582][ T7] usb 4-1: USB disconnect, device number 6 [ 876.675860][T11836] F2FS-fs (loop0): invalid crc value [ 876.680381][T11835] XFS (loop1): Ending clean mount [ 876.682987][T11835] XFS (loop1): Quotacheck needed: Please wait. [ 876.831697][T11839] XFS (loop2): Ending clean mount [ 876.834146][T11839] XFS (loop2): Quotacheck needed: Please wait. [ 876.872683][T11836] F2FS-fs (loop0): Found nat_bits in checkpoint [ 876.920242][T11836] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 876.924356][T11835] XFS (loop1): Quotacheck: Done. [ 876.956574][T11836] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 877.169550][T11839] XFS (loop2): Quotacheck: Done. [ 877.807788][T11870] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 877.896589][ T26] audit: type=1800 audit(1787980798.962:155): pid=11870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1365" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 878.443832][ T4187] XFS (loop2): Unmounting Filesystem [ 878.505883][ T4185] XFS (loop1): Unmounting Filesystem [ 879.244737][T11877] loop5: detected capacity change from 0 to 32768 [ 879.254314][T11879] usb usb8: usbfs: process 11879 (syz.3.1370) did not claim interface 0 before use [ 879.605664][T11877] XFS (loop5): Mounting V5 Filesystem [ 879.946730][T11893] usb usb8: usbfs: process 11893 (syz.1.1367) did not claim interface 0 before use [ 880.001554][T11877] XFS (loop5): Ending clean mount [ 880.324169][T11896] autofs4:pid:11896:autofs_fill_super: called with bogus options [ 880.859297][T11901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1373'. [ 881.078844][T11902] loop1: detected capacity change from 0 to 1024 [ 881.707890][T11904] loop2: detected capacity change from 0 to 32768 [ 882.402494][T11902] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 882.413571][T11902] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 882.430771][ T8874] XFS (loop5): Unmounting Filesystem [ 882.437891][T11902] JBD2: no valid journal superblock found [ 882.443734][T11902] EXT4-fs (loop1): error loading journal [ 882.554233][T11904] XFS (loop2): Mounting V5 Filesystem [ 882.623613][T11902] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 882.810182][T11902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 882.916522][T11904] XFS (loop2): Ending clean mount [ 882.926623][T11904] XFS (loop2): Quotacheck needed: Please wait. [ 882.986075][T11904] XFS (loop2): Quotacheck: Done. [ 883.297703][T11919] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 883.307905][ T26] audit: type=1800 audit(1787980804.452:156): pid=11919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1368" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 883.751106][ T4187] XFS (loop2): Unmounting Filesystem [ 884.515843][T11934] loop0: detected capacity change from 0 to 512 [ 884.578624][T11934] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 884.868826][T11934] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.1369: bad orphan inode 131083 [ 884.881138][T11934] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 885.696137][T11943] loop2: detected capacity change from 0 to 32768 [ 885.915253][T11947] usb usb8: usbfs: process 11947 (syz.1.1382) did not claim interface 0 before use [ 886.222735][T11946] loop0: detected capacity change from 0 to 32768 [ 886.295189][T11938] loop5: detected capacity change from 0 to 1024 [ 886.336843][T11943] XFS (loop2): Mounting V5 Filesystem [ 886.433824][T11938] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 886.542520][T11938] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 886.560597][T11946] XFS (loop0): Mounting V5 Filesystem [ 886.599897][T11943] XFS (loop2): Ending clean mount [ 886.847881][T11943] autofs4:pid:11943:autofs_fill_super: called with bogus options [ 886.927062][T11938] JBD2: no valid journal superblock found [ 886.957933][T11938] EXT4-fs (loop5): error loading journal [ 887.044169][ T4187] XFS (loop2): Unmounting Filesystem [ 887.060005][T11969] usb usb8: usbfs: process 11969 (syz.1.1383) did not claim interface 0 before use [ 887.156329][T11938] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 887.180268][T11946] XFS (loop0): Ending clean mount [ 887.188847][T11946] XFS (loop0): Quotacheck needed: Please wait. [ 887.316373][T11938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 887.351587][T11946] XFS (loop0): Quotacheck: Done. [ 887.625301][T11946] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 887.793847][ T26] audit: type=1800 audit(1787980808.802:157): pid=11946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1381" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 888.032041][ T4193] XFS (loop0): Unmounting Filesystem [ 888.392117][T11973] loop5: detected capacity change from 0 to 32768 [ 888.606542][T11973] XFS (loop5): Mounting V5 Filesystem [ 888.824606][T11973] XFS (loop5): Ending clean mount [ 888.837619][T11973] XFS (loop5): Quotacheck needed: Please wait. [ 889.075889][T11973] XFS (loop5): Quotacheck: Done. [ 889.723324][T11992] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 889.908746][T11994] loop2: detected capacity change from 0 to 512 [ 889.917056][ T26] audit: type=1800 audit(1787980810.882:158): pid=11992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1386" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=0 [ 890.615007][T11994] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 890.633193][ T8874] XFS (loop5): Unmounting Filesystem [ 890.701547][T11994] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.1388: bad orphan inode 131083 [ 890.712514][T11994] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 894.149251][T12015] usb usb8: usbfs: process 12015 (syz.2.1393) did not claim interface 0 before use [ 894.859418][T12022] loop0: detected capacity change from 0 to 32768 [ 895.184927][T12022] XFS (loop0): Mounting V5 Filesystem [ 895.192357][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:8393' [ 895.203895][ T4196] CPU: 0 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 895.211493][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 895.221593][ T4196] Workqueue: hci3 hci_rx_work [ 895.226351][ T4196] Call Trace: [ 895.229672][ T4196] [ 895.232639][ T4196] dump_stack_lvl+0x188/0x250 [ 895.237366][ T4196] ? show_regs_print_info+0x20/0x20 [ 895.242607][ T4196] ? load_image+0x410/0x410 [ 895.247166][ T4196] sysfs_create_dir_ns+0x26a/0x290 [ 895.252321][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 895.257037][ T4196] ? kthread+0x42e/0x520 [ 895.261316][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 895.266542][ T4196] kobject_add_internal+0x5ba/0xcd0 [ 895.271772][ T4196] kobject_add+0x160/0x230 [ 895.276304][ T4196] ? kobject_init+0x1c0/0x1c0 [ 895.281004][ T4196] ? __raw_spin_lock_init+0x41/0x100 [ 895.286319][ T4196] ? klist_children_get+0x50/0x50 [ 895.291365][ T4196] ? get_device_parent+0x121/0x3e0 [ 895.296743][ T4196] device_add+0x470/0x1050 [ 895.301179][ T4196] ? device_initialize+0x2a5/0x4d0 [ 895.306315][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 895.311279][ T4196] le_conn_complete_evt+0xc2e/0x14d0 [ 895.316595][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 895.321731][ T4196] ? __mutex_trylock_common+0x15c/0x260 [ 895.327302][ T4196] hci_le_meta_evt+0x285/0x3ca0 [ 895.332177][ T4196] ? hci_event_packet+0x363/0x1310 [ 895.337312][ T4196] ? __lock_acquire+0x7b50/0x7b50 [ 895.342362][ T4196] ? release_firmware_map_entry+0x190/0x190 [ 895.348284][ T4196] ? hci_remote_host_features_evt+0x240/0x240 [ 895.354369][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 895.360030][ T4196] ? mark_lock+0x94/0x320 [ 895.364465][ T4196] ? mutex_unlock+0x10/0x10 [ 895.368996][ T4196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 895.375003][ T4196] ? lock_chain_count+0x20/0x20 [ 895.379882][ T4196] ? __rwlock_init+0x140/0x140 [ 895.384665][ T4196] hci_event_packet+0xe0b/0x1310 [ 895.389654][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 895.394545][ T4196] ? rcu_lock_release+0x20/0x20 [ 895.399642][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 895.404861][ T4196] hci_rx_work+0x255/0xa10 [ 895.409308][ T4196] process_one_work+0x867/0xff0 [ 895.414191][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 895.420015][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 895.425445][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 895.430489][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 895.436055][ T4196] ? wq_worker_running+0x97/0x170 [ 895.441103][ T4196] worker_thread+0xad7/0x12a0 [ 895.445959][ T4196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 895.451925][ T4196] kthread+0x42e/0x520 [ 895.456032][ T4196] ? rcu_lock_release+0x20/0x20 [ 895.460925][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 895.465615][ T4196] ret_from_fork+0x1f/0x30 [ 895.470083][ T4196] [ 895.480237][ T4196] kobject_add_internal failed for hci3:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 895.493767][ T4196] Bluetooth: hci3: failed to register connection device [ 895.555237][T12022] XFS (loop0): Ending clean mount [ 895.572964][T12022] XFS (loop0): Quotacheck needed: Please wait. [ 895.684462][T12022] XFS (loop0): Quotacheck: Done. [ 896.049674][T12050] overlayfs: missing 'lowerdir' [ 896.128985][ T26] audit: type=1800 audit(1787980817.212:159): pid=12050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1394" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 896.344512][T12053] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 896.577369][ T4193] XFS (loop0): Unmounting Filesystem [ 896.876692][T12061] loop2: detected capacity change from 0 to 1024 [ 896.913172][T12061] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 896.924146][T12061] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 896.937911][T12061] JBD2: no valid journal superblock found [ 896.943857][T12061] EXT4-fs (loop2): error loading journal [ 896.972323][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 897.027453][T12061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 897.568564][T10337] Bluetooth: hci3: command 0x2016 tx timeout [ 897.633301][T12072] usb usb8: usbfs: process 12072 (syz.2.1406) did not claim interface 0 before use [ 897.672200][T12069] loop0: detected capacity change from 0 to 32768 [ 898.041136][T12069] XFS (loop0): Mounting V5 Filesystem [ 898.215845][T12069] XFS (loop0): Ending clean mount [ 898.223512][T12069] XFS (loop0): Quotacheck needed: Please wait. [ 898.332328][T12069] XFS (loop0): Quotacheck: Done. [ 898.524891][T12085] usb usb8: usbfs: process 12085 (syz.3.1408) did not claim interface 0 before use [ 898.718465][T12087] overlayfs: missing 'lowerdir' [ 898.724144][ T26] audit: type=1800 audit(1787980819.872:160): pid=12087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1402" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 899.154951][ T4193] XFS (loop0): Unmounting Filesystem [ 901.464776][T12107] loop5: detected capacity change from 0 to 32768 [ 901.592894][T12107] XFS (loop5): Mounting V5 Filesystem [ 901.731490][T12107] XFS (loop5): Ending clean mount [ 901.740367][T12107] XFS (loop5): Quotacheck needed: Please wait. [ 901.955867][T12107] XFS (loop5): Quotacheck: Done. [ 902.024510][T12038] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:8393' [ 902.034771][T12038] CPU: 1 PID: 12038 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 902.042619][T12038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 902.052797][T12038] Workqueue: hci4 hci_rx_work [ 902.057560][T12038] Call Trace: [ 902.060863][T12038] [ 902.063821][T12038] dump_stack_lvl+0x188/0x250 [ 902.068540][T12038] ? show_regs_print_info+0x20/0x20 [ 902.073774][T12038] ? load_image+0x410/0x410 [ 902.078380][T12038] sysfs_create_dir_ns+0x26a/0x290 [ 902.083533][T12038] ? sysfs_warn_dup+0xa0/0xa0 [ 902.088238][T12038] ? kthread+0x42e/0x520 [ 902.092516][T12038] ? do_raw_spin_unlock+0x11d/0x230 [ 902.097752][T12038] kobject_add_internal+0x5ba/0xcd0 [ 902.103125][T12038] kobject_add+0x160/0x230 [ 902.107581][T12038] ? kobject_init+0x1c0/0x1c0 [ 902.112322][T12038] ? __raw_spin_lock_init+0x41/0x100 [ 902.117649][T12038] ? klist_children_get+0x50/0x50 [ 902.122704][T12038] ? get_device_parent+0x121/0x3e0 [ 902.127852][T12038] device_add+0x470/0x1050 [ 902.132302][T12038] ? device_initialize+0x2a5/0x4d0 [ 902.137465][T12038] hci_conn_add_sysfs+0xd1/0x1e0 [ 902.142443][T12038] le_conn_complete_evt+0xc2e/0x14d0 [ 902.147774][T12038] ? cs_le_create_conn+0x5e0/0x5e0 [ 902.152931][T12038] ? __mutex_trylock_common+0x15c/0x260 [ 902.158534][T12038] hci_le_meta_evt+0x285/0x3ca0 [ 902.163422][T12038] ? hci_event_packet+0x363/0x1310 [ 902.168577][T12038] ? __lock_acquire+0x7b50/0x7b50 [ 902.173682][T12038] ? hci_remote_host_features_evt+0x240/0x240 [ 902.179781][T12038] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 902.185446][T12038] ? mark_lock+0x94/0x320 [ 902.189830][T12038] ? mutex_unlock+0x10/0x10 [ 902.194367][T12038] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 902.200384][T12038] ? lock_chain_count+0x20/0x20 [ 902.205266][T12038] ? __rwlock_init+0x140/0x140 [ 902.210067][T12038] hci_event_packet+0xe0b/0x1310 [ 902.215046][T12038] ? _raw_spin_unlock+0x40/0x40 [ 902.219936][T12038] ? rcu_lock_release+0x20/0x20 [ 902.224825][T12038] ? hci_send_to_monitor+0x9c/0x4a0 [ 902.230059][T12038] hci_rx_work+0x255/0xa10 [ 902.234533][T12038] process_one_work+0x867/0xff0 [ 902.239558][T12038] ? worker_detach_from_pool+0x240/0x240 [ 902.245230][T12038] ? lockdep_hardirqs_off+0x70/0x100 [ 902.250558][T12038] ? _raw_spin_lock_irq+0xb7/0xf0 [ 902.255647][T12038] ? _raw_spin_lock_irqsave+0x100/0x100 [ 902.261228][T12038] ? wq_worker_running+0x97/0x170 [ 902.266297][T12038] worker_thread+0xad7/0x12a0 [ 902.271120][T12038] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 902.277063][T12038] kthread+0x42e/0x520 [ 902.281168][T12038] ? rcu_lock_release+0x20/0x20 [ 902.286099][T12038] ? kthread_blkcg+0xd0/0xd0 [ 902.290754][T12038] ret_from_fork+0x1f/0x30 [ 902.295241][T12038] [ 902.356101][T12038] kobject_add_internal failed for hci4:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 902.370849][T12038] Bluetooth: hci4: failed to register connection device [ 902.502910][T12128] overlayfs: missing 'lowerdir' [ 902.510941][ T26] audit: type=1800 audit(1787980823.662:161): pid=12128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1415" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=0 [ 903.022130][ T8874] XFS (loop5): Unmounting Filesystem [ 903.634071][T12132] loop1: detected capacity change from 0 to 131072 [ 903.738356][T12132] F2FS-fs (loop1): invalid crc value [ 903.783908][T12132] F2FS-fs (loop1): Found nat_bits in checkpoint [ 903.825301][T12132] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 903.845746][T12132] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 904.438825][ T4230] Bluetooth: hci4: command 0x2016 tx timeout [ 905.939576][T12160] device-mapper: ioctl: Invalid target message parameters. [ 906.036872][T12157] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 909.391369][T12195] usb usb8: usbfs: process 12195 (syz.5.1432) did not claim interface 0 before use [ 909.559485][T12199] overlayfs: conflicting lowerdir path [ 911.458582][T12206] device dummy0 entered promiscuous mode [ 913.310150][T12225] loop1: detected capacity change from 0 to 32768 [ 913.341389][T12221] loop2: detected capacity change from 0 to 131072 [ 913.475474][T12221] F2FS-fs (loop2): invalid crc value [ 913.511750][T12221] F2FS-fs (loop2): Found nat_bits in checkpoint [ 913.566287][T12221] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 913.598605][T12221] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 913.610828][T12225] XFS (loop1): Mounting V5 Filesystem [ 913.784254][T12225] XFS (loop1): Ending clean mount [ 914.069011][T12225] XFS (loop1): Quotacheck needed: Please wait. [ 914.288798][T12225] XFS (loop1): Quotacheck: Done. [ 914.665230][T12242] overlayfs: missing 'lowerdir' [ 914.995615][ T26] audit: type=1800 audit(1787980835.822:162): pid=12242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1442" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 915.165487][ T4185] XFS (loop1): Unmounting Filesystem [ 916.225971][T12257] overlayfs: conflicting lowerdir path [ 918.536418][T12272] overlayfs: missing 'lowerdir' [ 919.655535][T12038] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:8393' [ 919.668576][T12038] CPU: 1 PID: 12038 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 919.676276][T12038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 919.686505][T12038] Workqueue: hci3 hci_rx_work [ 919.691228][T12038] Call Trace: [ 919.694533][T12038] [ 919.697493][T12038] dump_stack_lvl+0x188/0x250 [ 919.702203][T12038] ? show_regs_print_info+0x20/0x20 [ 919.707434][T12038] ? load_image+0x410/0x410 [ 919.711982][T12038] sysfs_create_dir_ns+0x26a/0x290 [ 919.717122][T12038] ? sysfs_warn_dup+0xa0/0xa0 [ 919.721831][T12038] kobject_add_internal+0x5ba/0xcd0 [ 919.727075][T12038] kobject_add+0x160/0x230 [ 919.731628][T12038] ? kobject_init+0x1c0/0x1c0 [ 919.736355][T12038] ? __raw_spin_lock_init+0x41/0x100 [ 919.741819][T12038] ? klist_children_get+0x50/0x50 [ 919.746884][T12038] ? get_device_parent+0x121/0x3e0 [ 919.752137][T12038] device_add+0x470/0x1050 [ 919.756596][T12038] hci_conn_add_sysfs+0xd1/0x1e0 [ 919.761575][T12038] le_conn_complete_evt+0xc2e/0x14d0 [ 919.766902][T12038] ? cs_le_create_conn+0x5e0/0x5e0 [ 919.772057][T12038] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 919.777733][T12038] hci_le_meta_evt+0x285/0x3ca0 [ 919.782614][T12038] ? mark_lock+0x94/0x320 [ 919.786992][T12038] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 919.792997][T12038] ? lock_chain_count+0x20/0x20 [ 919.797871][T12038] ? hci_remote_host_features_evt+0x240/0x240 [ 919.803993][T12038] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 919.809664][T12038] ? lockdep_hardirqs_on+0x94/0x140 [ 919.814894][T12038] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 919.820569][T12038] ? hci_event_packet+0x5b7/0x1310 [ 919.825703][T12038] hci_event_packet+0xe0b/0x1310 [ 919.830676][T12038] ? rcu_lock_release+0x20/0x20 [ 919.835550][T12038] ? hci_rx_work+0x248/0xa10 [ 919.840162][T12038] hci_rx_work+0x255/0xa10 [ 919.844614][T12038] process_one_work+0x867/0xff0 [ 919.849499][T12038] ? worker_detach_from_pool+0x240/0x240 [ 919.855146][T12038] ? lockdep_hardirqs_off+0x70/0x100 [ 919.860457][T12038] ? _raw_spin_lock_irq+0xb7/0xf0 [ 919.865494][T12038] ? _raw_spin_lock_irqsave+0x100/0x100 [ 919.871067][T12038] ? wq_worker_running+0x97/0x170 [ 919.876111][T12038] worker_thread+0xad7/0x12a0 [ 919.880815][T12038] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 919.886733][T12038] kthread+0x42e/0x520 [ 919.890817][T12038] ? rcu_lock_release+0x20/0x20 [ 919.895682][T12038] ? kthread_blkcg+0xd0/0xd0 [ 919.900324][T12038] ret_from_fork+0x1f/0x30 [ 919.904776][T12038] [ 919.936662][T12038] kobject_add_internal failed for hci3:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 919.951558][T12038] Bluetooth: hci3: failed to register connection device [ 920.738726][T12301] usb usb8: usbfs: process 12301 (syz.3.1455) did not claim interface 0 before use [ 922.038620][ T4231] Bluetooth: hci3: command 0x2016 tx timeout [ 922.202847][T12312] overlayfs: conflicting lowerdir path [ 923.932583][T12322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1461'. [ 924.717538][T12324] loop1: detected capacity change from 0 to 32768 [ 924.727034][T12325] overlayfs: unrecognized mount option "/" or missing value [ 924.748124][T12325] overlayfs: conflicting lowerdir path [ 924.954282][T12327] loop0: detected capacity change from 0 to 1024 [ 925.009187][T12327] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 925.020703][T12327] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 925.045867][T12327] JBD2: no valid journal superblock found [ 925.051901][T12327] EXT4-fs (loop0): error loading journal [ 926.556656][T12324] XFS (loop1): Mounting V5 Filesystem [ 926.644351][T12327] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 926.662413][T12327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 926.880376][T12324] XFS (loop1): Ending clean mount [ 927.387598][T12349] autofs4:pid:12349:autofs_fill_super: called with bogus options [ 927.489919][ T7341] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:8393' [ 927.500105][ T7341] CPU: 0 PID: 7341 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 927.507721][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 927.517811][ T7341] Workqueue: hci4 hci_rx_work [ 927.522528][ T7341] Call Trace: [ 927.525835][ T7341] [ 927.528795][ T7341] dump_stack_lvl+0x188/0x250 [ 927.533600][ T7341] ? show_regs_print_info+0x20/0x20 [ 927.538836][ T7341] ? load_image+0x410/0x410 [ 927.543389][ T7341] sysfs_create_dir_ns+0x26a/0x290 [ 927.548538][ T7341] ? sysfs_warn_dup+0xa0/0xa0 [ 927.553359][ T7341] kobject_add_internal+0x5ba/0xcd0 [ 927.558607][ T7341] kobject_add+0x160/0x230 [ 927.563061][ T7341] ? kobject_init+0x1c0/0x1c0 [ 927.567775][ T7341] ? __raw_spin_lock_init+0x41/0x100 [ 927.573086][ T7341] ? klist_children_get+0x50/0x50 [ 927.578141][ T7341] ? get_device_parent+0x121/0x3e0 [ 927.583287][ T7341] device_add+0x470/0x1050 [ 927.587766][ T7341] hci_conn_add_sysfs+0xd1/0x1e0 [ 927.592756][ T7341] le_conn_complete_evt+0xc2e/0x14d0 [ 927.598110][ T7341] ? cs_le_create_conn+0x5e0/0x5e0 [ 927.603391][ T7341] ? finish_lock_switch+0x12d/0x290 [ 927.608713][ T7341] ? __mutex_trylock_common+0x15c/0x260 [ 927.614340][ T7341] hci_le_meta_evt+0x285/0x3ca0 [ 927.619231][ T7341] ? hci_event_packet+0x363/0x1310 [ 927.624388][ T7341] ? __lock_acquire+0x7b50/0x7b50 [ 927.629462][ T7341] ? hci_remote_host_features_evt+0x240/0x240 [ 927.635559][ T7341] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 927.641232][ T7341] ? mark_lock+0x94/0x320 [ 927.645586][ T7341] ? mutex_unlock+0x10/0x10 [ 927.650123][ T7341] ? mark_lock+0x94/0x320 [ 927.654489][ T7341] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 927.660507][ T7341] ? __cond_resched+0xd0/0xd0 [ 927.665234][ T7341] hci_event_packet+0xe0b/0x1310 [ 927.670222][ T7341] ? rcu_lock_release+0x20/0x20 [ 927.675107][ T7341] ? hci_rx_work+0x248/0xa10 [ 927.679739][ T7341] hci_rx_work+0x255/0xa10 [ 927.684203][ T7341] process_one_work+0x867/0xff0 [ 927.689194][ T7341] ? worker_detach_from_pool+0x240/0x240 [ 927.694854][ T7341] ? lockdep_hardirqs_off+0x70/0x100 [ 927.700212][ T7341] ? _raw_spin_lock_irq+0xb7/0xf0 [ 927.705280][ T7341] ? _raw_spin_lock_irqsave+0x100/0x100 [ 927.710862][ T7341] ? wq_worker_running+0x97/0x170 [ 927.715924][ T7341] worker_thread+0xad7/0x12a0 [ 927.720661][ T7341] kthread+0x42e/0x520 [ 927.724761][ T7341] ? rcu_lock_release+0x20/0x20 [ 927.729641][ T7341] ? kthread_blkcg+0xd0/0xd0 [ 927.734263][ T7341] ret_from_fork+0x1f/0x30 [ 927.738729][ T7341] [ 928.218531][ T7341] kobject_add_internal failed for hci4:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 928.232058][ T7341] Bluetooth: hci4: failed to register connection device [ 928.335148][ T4185] XFS (loop1): Unmounting Filesystem [ 928.492367][T12359] loop0: detected capacity change from 0 to 1024 [ 930.278724][ T6674] Bluetooth: hci4: command 0x2016 tx timeout [ 930.698663][T12359] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 930.763630][T12359] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 930.832336][T12359] JBD2: no valid journal superblock found [ 930.884896][T12359] EXT4-fs (loop0): error loading journal [ 931.327933][T12373] overlayfs: conflicting lowerdir path [ 931.492459][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.500891][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.472598][T12381] overlayfs: conflicting lowerdir path [ 932.569749][T12382] loop0: detected capacity change from 0 to 512 [ 933.631665][T12382] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 933.669500][T12382] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.1476: bad orphan inode 131083 [ 933.692673][T12382] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 933.747845][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1477'. [ 934.187213][T12391] loop1: detected capacity change from 0 to 1024 [ 935.338247][T12391] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 935.585636][T12391] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 935.609377][T12391] JBD2: no valid journal superblock found [ 937.488722][T12401] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 937.831160][ T6674] Bluetooth: hci5: command 0x2016 tx timeout [ 937.859568][T12391] EXT4-fs (loop1): error loading journal [ 939.218281][T12415] overlayfs: conflicting lowerdir path [ 939.930506][T12423] overlayfs: conflicting lowerdir path [ 942.030523][ T6099] Bluetooth: hci1: Frame reassembly failed (-84) [ 942.310715][T12450] loop1: detected capacity change from 0 to 32768 [ 942.415355][T12450] XFS (loop1): Mounting V5 Filesystem [ 942.534003][T12450] XFS (loop1): Ending clean mount [ 943.503389][ T4185] XFS (loop1): Unmounting Filesystem [ 943.518187][T12470] usb usb8: usbfs: process 12470 (syz.5.1495) did not claim interface 0 before use [ 943.612337][T12038] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:8393' [ 943.622258][T12038] CPU: 0 PID: 12038 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 943.629930][T12038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 943.640050][T12038] Workqueue: hci4 hci_rx_work [ 943.644779][T12038] Call Trace: [ 943.648082][T12038] [ 943.651033][T12038] dump_stack_lvl+0x188/0x250 [ 943.655749][T12038] ? show_regs_print_info+0x20/0x20 [ 943.660989][T12038] ? load_image+0x410/0x410 [ 943.665543][T12038] sysfs_create_dir_ns+0x26a/0x290 [ 943.670688][T12038] ? sysfs_warn_dup+0xa0/0xa0 [ 943.675390][T12038] ? kthread+0x42e/0x520 [ 943.679672][T12038] ? do_raw_spin_unlock+0x11d/0x230 [ 943.684916][T12038] kobject_add_internal+0x5ba/0xcd0 [ 943.690161][T12038] kobject_add+0x160/0x230 [ 943.694618][T12038] ? kobject_init+0x1c0/0x1c0 [ 943.699326][T12038] ? __raw_spin_lock_init+0x41/0x100 [ 943.704648][T12038] ? klist_children_get+0x50/0x50 [ 943.709709][T12038] ? get_device_parent+0x121/0x3e0 [ 943.714855][T12038] device_add+0x470/0x1050 [ 943.719303][T12038] ? device_initialize+0x2a5/0x4d0 [ 943.724450][T12038] hci_conn_add_sysfs+0xd1/0x1e0 [ 943.729426][T12038] le_conn_complete_evt+0xc2e/0x14d0 [ 943.734758][T12038] ? cs_le_create_conn+0x5e0/0x5e0 [ 943.739908][T12038] ? __mutex_trylock_common+0x15c/0x260 [ 943.745490][T12038] hci_le_meta_evt+0x285/0x3ca0 [ 943.750372][T12038] ? hci_event_packet+0x363/0x1310 [ 943.755517][T12038] ? __lock_acquire+0x7b50/0x7b50 [ 943.760583][T12038] ? hci_remote_host_features_evt+0x240/0x240 [ 943.766681][T12038] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 943.772347][T12038] ? mark_lock+0x94/0x320 [ 943.776704][T12038] ? mutex_unlock+0x10/0x10 [ 943.781244][T12038] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 943.787317][T12038] ? lock_chain_count+0x20/0x20 [ 943.792202][T12038] ? __rwlock_init+0x140/0x140 [ 943.797021][T12038] hci_event_packet+0xe0b/0x1310 [ 943.801999][T12038] ? _raw_spin_unlock+0x40/0x40 [ 943.806888][T12038] ? rcu_lock_release+0x20/0x20 [ 943.811791][T12038] ? hci_send_to_monitor+0x9c/0x4a0 [ 943.817023][T12038] hci_rx_work+0x255/0xa10 [ 943.821483][T12038] process_one_work+0x867/0xff0 [ 943.826377][T12038] ? worker_detach_from_pool+0x240/0x240 [ 943.832037][T12038] ? lockdep_hardirqs_off+0x70/0x100 [ 943.837367][T12038] ? _raw_spin_lock_irq+0xb7/0xf0 [ 943.842430][T12038] ? _raw_spin_lock_irqsave+0x100/0x100 [ 943.848032][T12038] ? wq_worker_running+0x97/0x170 [ 943.853097][T12038] worker_thread+0xad7/0x12a0 [ 943.857824][T12038] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 943.863764][T12038] kthread+0x42e/0x520 [ 943.867869][T12038] ? rcu_lock_release+0x20/0x20 [ 943.872749][T12038] ? kthread_blkcg+0xd0/0xd0 [ 943.877379][T12038] ret_from_fork+0x1f/0x30 [ 943.881844][T12038] [ 943.900336][T12038] kobject_add_internal failed for hci4:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 943.914000][T12038] Bluetooth: hci4: failed to register connection device [ 944.228551][ T6156] Bluetooth: hci1: command 0x1003 tx timeout [ 944.234796][T12474] Bluetooth: hci1: sending frame failed (-49) [ 945.647081][T12485] overlayfs: conflicting lowerdir path [ 946.435924][T10339] Bluetooth: hci4: command 0x2016 tx timeout [ 946.442867][T10339] Bluetooth: hci1: command 0x1001 tx timeout [ 946.449043][T12474] Bluetooth: hci1: sending frame failed (-49) [ 946.567080][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1497'. [ 947.229211][T12499] loop1: detected capacity change from 0 to 1024 [ 948.188907][T12499] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 948.200395][T12499] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 948.228178][T12499] JBD2: no valid journal superblock found [ 948.234477][T12499] EXT4-fs (loop1): error loading journal [ 948.528972][ T6674] Bluetooth: hci1: command 0x1009 tx timeout [ 949.745742][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 950.013648][T12499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 950.387869][T12512] loop0: detected capacity change from 0 to 32768 [ 950.424846][T12474] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:8393' [ 950.436304][T12474] CPU: 0 PID: 12474 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 950.443990][T12474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 950.454086][T12474] Workqueue: hci5 hci_rx_work [ 950.458821][T12474] Call Trace: [ 950.462125][T12474] [ 950.465102][T12474] dump_stack_lvl+0x188/0x250 [ 950.469819][T12474] ? show_regs_print_info+0x20/0x20 [ 950.475049][T12474] ? load_image+0x410/0x410 [ 950.479616][T12474] sysfs_create_dir_ns+0x26a/0x290 [ 950.484768][T12474] ? sysfs_warn_dup+0xa0/0xa0 [ 950.489486][T12474] ? kthread+0x42e/0x520 [ 950.493786][T12474] ? do_raw_spin_unlock+0x11d/0x230 [ 950.499025][T12474] kobject_add_internal+0x5ba/0xcd0 [ 950.504295][T12474] kobject_add+0x160/0x230 [ 950.508776][T12474] ? kobject_init+0x1c0/0x1c0 [ 950.513490][T12474] ? __raw_spin_lock_init+0x41/0x100 [ 950.518831][T12474] ? klist_children_get+0x50/0x50 [ 950.523908][T12474] ? get_device_parent+0x121/0x3e0 [ 950.529052][T12474] device_add+0x470/0x1050 [ 950.533499][T12474] ? device_initialize+0x2a5/0x4d0 [ 950.538645][T12474] hci_conn_add_sysfs+0xd1/0x1e0 [ 950.543649][T12474] le_conn_complete_evt+0xc2e/0x14d0 [ 950.549000][T12474] ? cs_le_create_conn+0x5e0/0x5e0 [ 950.554156][T12474] ? __mutex_trylock_common+0x15c/0x260 [ 950.559744][T12474] hci_le_meta_evt+0x285/0x3ca0 [ 950.564631][T12474] ? hci_event_packet+0x363/0x1310 [ 950.569800][T12474] ? __lock_acquire+0x7b50/0x7b50 [ 950.574887][T12474] ? hci_remote_host_features_evt+0x240/0x240 [ 950.580988][T12474] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 950.586740][T12474] ? mark_lock+0x94/0x320 [ 950.591100][T12474] ? mutex_unlock+0x10/0x10 [ 950.595670][T12474] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 950.601688][T12474] ? lock_chain_count+0x20/0x20 [ 950.606591][T12474] ? __rwlock_init+0x140/0x140 [ 950.611389][T12474] hci_event_packet+0xe0b/0x1310 [ 950.616396][T12474] ? _raw_spin_unlock+0x40/0x40 [ 950.621282][T12474] ? rcu_lock_release+0x20/0x20 [ 950.626181][T12474] ? hci_send_to_monitor+0x9c/0x4a0 [ 950.631420][T12474] hci_rx_work+0x255/0xa10 [ 950.635887][T12474] process_one_work+0x867/0xff0 [ 950.640785][T12474] ? worker_detach_from_pool+0x240/0x240 [ 950.646475][T12474] ? lockdep_hardirqs_off+0x70/0x100 [ 950.651805][T12474] ? _raw_spin_lock_irq+0xb7/0xf0 [ 950.656854][T12474] ? _raw_spin_lock_irqsave+0x100/0x100 [ 950.662434][T12474] ? wq_worker_running+0x97/0x170 [ 950.667495][T12474] worker_thread+0xad7/0x12a0 [ 950.672229][T12474] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 950.678174][T12474] kthread+0x42e/0x520 [ 950.682274][T12474] ? rcu_lock_release+0x20/0x20 [ 950.687155][T12474] ? kthread_blkcg+0xd0/0xd0 [ 950.691782][T12474] ret_from_fork+0x1f/0x30 [ 950.696243][T12474] [ 950.711867][T12474] kobject_add_internal failed for hci5:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 950.725567][T12474] Bluetooth: hci5: failed to register connection device [ 950.819259][T12518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1509'. [ 950.948650][T12512] XFS (loop0): Mounting V5 Filesystem [ 951.385513][T12536] overlayfs: conflicting lowerdir path [ 951.552364][T12512] XFS (loop0): Ending clean mount [ 952.888745][ T7625] Bluetooth: hci5: command 0x2016 tx timeout [ 952.922354][ T4193] XFS (loop0): Unmounting Filesystem [ 953.726702][T12556] device dummy0 entered promiscuous mode [ 954.289520][T12568] loop2: detected capacity change from 0 to 1024 [ 954.346665][T12568] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 954.357793][T12568] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 954.385340][T12568] JBD2: no valid journal superblock found [ 954.391355][T12568] EXT4-fs (loop2): error loading journal [ 956.149976][T12574] tipc: Trying to set illegal importance in message [ 956.349651][T12580] overlayfs: conflicting lowerdir path [ 956.727516][ T7341] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:8393' [ 956.738866][ T7341] CPU: 1 PID: 7341 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 956.746481][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 956.756685][ T7341] Workqueue: hci5 hci_rx_work [ 956.761407][ T7341] Call Trace: [ 956.764739][ T7341] [ 956.767722][ T7341] dump_stack_lvl+0x188/0x250 [ 956.772442][ T7341] ? show_regs_print_info+0x20/0x20 [ 956.777697][ T7341] ? load_image+0x410/0x410 [ 956.782263][ T7341] sysfs_create_dir_ns+0x26a/0x290 [ 956.787413][ T7341] ? sysfs_warn_dup+0xa0/0xa0 [ 956.792128][ T7341] ? kthread+0x42e/0x520 [ 956.796416][ T7341] ? do_raw_spin_unlock+0x11d/0x230 [ 956.801654][ T7341] kobject_add_internal+0x5ba/0xcd0 [ 956.807013][ T7341] kobject_add+0x160/0x230 [ 956.811506][ T7341] ? kobject_init+0x1c0/0x1c0 [ 956.816262][ T7341] ? __raw_spin_lock_init+0x41/0x100 [ 956.821582][ T7341] ? klist_children_get+0x50/0x50 [ 956.826666][ T7341] ? get_device_parent+0x121/0x3e0 [ 956.831816][ T7341] device_add+0x470/0x1050 [ 956.836266][ T7341] ? device_initialize+0x2a5/0x4d0 [ 956.841419][ T7341] hci_conn_add_sysfs+0xd1/0x1e0 [ 956.846407][ T7341] le_conn_complete_evt+0xc2e/0x14d0 [ 956.851749][ T7341] ? cs_le_create_conn+0x5e0/0x5e0 [ 956.856901][ T7341] ? __mutex_trylock_common+0x15c/0x260 [ 956.862506][ T7341] hci_le_meta_evt+0x285/0x3ca0 [ 956.867397][ T7341] ? hci_event_packet+0x363/0x1310 [ 956.872554][ T7341] ? __lock_acquire+0x7b50/0x7b50 [ 956.877666][ T7341] ? hci_remote_host_features_evt+0x240/0x240 [ 956.883774][ T7341] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 956.889451][ T7341] ? mark_lock+0x94/0x320 [ 956.893825][ T7341] ? mutex_unlock+0x10/0x10 [ 956.898365][ T7341] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 956.904421][ T7341] ? lock_chain_count+0x20/0x20 [ 956.909345][ T7341] ? __rwlock_init+0x140/0x140 [ 956.914152][ T7341] hci_event_packet+0xe0b/0x1310 [ 956.919167][ T7341] ? _raw_spin_unlock+0x40/0x40 [ 956.924060][ T7341] ? rcu_lock_release+0x20/0x20 [ 956.928972][ T7341] ? hci_send_to_monitor+0x9c/0x4a0 [ 956.934241][ T7341] hci_rx_work+0x255/0xa10 [ 956.938724][ T7341] process_one_work+0x867/0xff0 [ 956.943636][ T7341] ? worker_detach_from_pool+0x240/0x240 [ 956.949352][ T7341] ? lockdep_hardirqs_off+0x70/0x100 [ 956.954690][ T7341] ? _raw_spin_lock_irq+0xb7/0xf0 [ 956.959759][ T7341] ? _raw_spin_lock_irqsave+0x100/0x100 [ 956.965346][ T7341] ? wq_worker_running+0x97/0x170 [ 956.970410][ T7341] worker_thread+0xad7/0x12a0 [ 956.975157][ T7341] kthread+0x42e/0x520 [ 956.979345][ T7341] ? rcu_lock_release+0x20/0x20 [ 956.984314][ T7341] ? kthread_blkcg+0xd0/0xd0 [ 956.988940][ T7341] ret_from_fork+0x1f/0x30 [ 956.993411][ T7341] [ 957.142651][ T7341] kobject_add_internal failed for hci5:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 957.156246][ T7341] Bluetooth: hci5: failed to register connection device [ 957.461183][T12586] loop5: detected capacity change from 0 to 32768 [ 958.027634][T12586] XFS (loop5): Mounting V5 Filesystem [ 958.647115][T12586] XFS (loop5): Ending clean mount [ 958.890720][T12577] usb usb8: usbfs: process 12577 (syz.0.1514) did not claim interface 0 before use [ 959.796541][ T6154] Bluetooth: hci5: command 0x2016 tx timeout [ 960.077974][T12618] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 960.855066][ T8874] XFS (loop5): Unmounting Filesystem [ 961.814377][T12474] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:8393' [ 961.824139][T12474] CPU: 1 PID: 12474 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 961.831828][T12474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 961.841925][T12474] Workqueue: hci4 hci_rx_work [ 961.846645][T12474] Call Trace: [ 961.849949][T12474] [ 961.852912][T12474] dump_stack_lvl+0x188/0x250 [ 961.857644][T12474] ? show_regs_print_info+0x20/0x20 [ 961.863002][T12474] ? load_image+0x410/0x410 [ 961.867570][T12474] sysfs_create_dir_ns+0x26a/0x290 [ 961.872772][T12474] ? sysfs_warn_dup+0xa0/0xa0 [ 961.877492][T12474] ? kthread+0x42e/0x520 [ 961.881775][T12474] ? do_raw_spin_unlock+0x11d/0x230 [ 961.887024][T12474] kobject_add_internal+0x5ba/0xcd0 [ 961.892396][T12474] kobject_add+0x160/0x230 [ 961.896873][T12474] ? kobject_init+0x1c0/0x1c0 [ 961.901595][T12474] ? __raw_spin_lock_init+0x41/0x100 [ 961.906949][T12474] ? klist_children_get+0x50/0x50 [ 961.912015][T12474] ? get_device_parent+0x121/0x3e0 [ 961.917169][T12474] device_add+0x470/0x1050 [ 961.921703][T12474] ? device_initialize+0x2a5/0x4d0 [ 961.926840][T12474] hci_conn_add_sysfs+0xd1/0x1e0 [ 961.931836][T12474] le_conn_complete_evt+0xc2e/0x14d0 [ 961.937159][T12474] ? cs_le_create_conn+0x5e0/0x5e0 [ 961.942303][T12474] ? __mutex_trylock_common+0x15c/0x260 [ 961.947972][T12474] hci_le_meta_evt+0x285/0x3ca0 [ 961.952894][T12474] ? hci_event_packet+0x363/0x1310 [ 961.958042][T12474] ? __lock_acquire+0x7b50/0x7b50 [ 961.963193][T12474] ? hci_remote_host_features_evt+0x240/0x240 [ 961.969288][T12474] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 961.974944][T12474] ? mark_lock+0x94/0x320 [ 961.979296][T12474] ? mutex_unlock+0x10/0x10 [ 961.983823][T12474] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 961.989833][T12474] ? lock_chain_count+0x20/0x20 [ 961.994705][T12474] ? __rwlock_init+0x140/0x140 [ 961.999582][T12474] hci_event_packet+0xe0b/0x1310 [ 962.004572][T12474] ? _raw_spin_unlock+0x40/0x40 [ 962.009443][T12474] ? rcu_lock_release+0x20/0x20 [ 962.014321][T12474] ? hci_send_to_monitor+0x9c/0x4a0 [ 962.019543][T12474] hci_rx_work+0x255/0xa10 [ 962.024024][T12474] process_one_work+0x867/0xff0 [ 962.028909][T12474] ? worker_detach_from_pool+0x240/0x240 [ 962.034564][T12474] ? lockdep_hardirqs_off+0x70/0x100 [ 962.039871][T12474] ? _raw_spin_lock_irq+0xb7/0xf0 [ 962.044912][T12474] ? _raw_spin_lock_irqsave+0x100/0x100 [ 962.050481][T12474] ? wq_worker_running+0x97/0x170 [ 962.055531][T12474] worker_thread+0xad7/0x12a0 [ 962.060239][T12474] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 962.066186][T12474] kthread+0x42e/0x520 [ 962.070277][T12474] ? rcu_lock_release+0x20/0x20 [ 962.075142][T12474] ? kthread_blkcg+0xd0/0xd0 [ 962.079751][T12474] ret_from_fork+0x1f/0x30 [ 962.084208][T12474] [ 962.095955][T12474] kobject_add_internal failed for hci4:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 962.109577][T12474] Bluetooth: hci4: failed to register connection device [ 962.122521][T12628] loop2: detected capacity change from 0 to 1024 [ 962.181491][T12628] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 962.192755][T12628] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 962.309026][T12628] JBD2: no valid journal superblock found [ 962.314985][T12628] EXT4-fs (loop2): error loading journal [ 962.667832][T12474] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:8393' [ 962.678643][T12474] CPU: 1 PID: 12474 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 962.686354][T12474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 962.696530][T12474] Workqueue: hci3 hci_rx_work [ 962.701258][T12474] Call Trace: [ 962.704569][T12474] [ 962.707541][T12474] dump_stack_lvl+0x188/0x250 [ 962.712281][T12474] ? show_regs_print_info+0x20/0x20 [ 962.717519][T12474] ? load_image+0x410/0x410 [ 962.722068][T12474] sysfs_create_dir_ns+0x26a/0x290 [ 962.727217][T12474] ? sysfs_warn_dup+0xa0/0xa0 [ 962.731920][T12474] ? kthread+0x42e/0x520 [ 962.736201][T12474] ? do_raw_spin_unlock+0x11d/0x230 [ 962.741439][T12474] kobject_add_internal+0x5ba/0xcd0 [ 962.746687][T12474] kobject_add+0x160/0x230 [ 962.751269][T12474] ? kobject_init+0x1c0/0x1c0 [ 962.756010][T12474] ? __raw_spin_lock_init+0x41/0x100 [ 962.761445][T12474] ? klist_children_get+0x50/0x50 [ 962.766531][T12474] ? get_device_parent+0x121/0x3e0 [ 962.771689][T12474] device_add+0x470/0x1050 [ 962.776141][T12474] ? device_initialize+0x2a5/0x4d0 [ 962.781307][T12474] hci_conn_add_sysfs+0xd1/0x1e0 [ 962.786295][T12474] le_conn_complete_evt+0xc2e/0x14d0 [ 962.791643][T12474] ? cs_le_create_conn+0x5e0/0x5e0 [ 962.796820][T12474] ? __mutex_trylock_common+0x15c/0x260 [ 962.802424][T12474] hci_le_meta_evt+0x285/0x3ca0 [ 962.807319][T12474] ? hci_event_packet+0x363/0x1310 [ 962.812483][T12474] ? __lock_acquire+0x7b50/0x7b50 [ 962.817659][T12474] ? hci_remote_host_features_evt+0x240/0x240 [ 962.823774][T12474] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 962.829493][T12474] ? mark_lock+0x94/0x320 [ 962.834068][T12474] ? mutex_unlock+0x10/0x10 [ 962.838637][T12474] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 962.844677][T12474] ? lock_chain_count+0x20/0x20 [ 962.849546][T12474] ? __rwlock_init+0x140/0x140 [ 962.854328][T12474] hci_event_packet+0xe0b/0x1310 [ 962.859285][T12474] ? _raw_spin_unlock+0x40/0x40 [ 962.864180][T12474] ? rcu_lock_release+0x20/0x20 [ 962.869064][T12474] ? hci_send_to_monitor+0x9c/0x4a0 [ 962.874316][T12474] hci_rx_work+0x255/0xa10 [ 962.878760][T12474] process_one_work+0x867/0xff0 [ 962.883647][T12474] ? worker_detach_from_pool+0x240/0x240 [ 962.889294][T12474] ? lockdep_hardirqs_off+0x70/0x100 [ 962.894617][T12474] ? _raw_spin_lock_irq+0xb7/0xf0 [ 962.899659][T12474] ? _raw_spin_lock_irqsave+0x100/0x100 [ 962.905322][T12474] ? wq_worker_running+0x97/0x170 [ 962.910363][T12474] worker_thread+0xad7/0x12a0 [ 962.915068][T12474] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 962.921020][T12474] kthread+0x42e/0x520 [ 962.925110][T12474] ? rcu_lock_release+0x20/0x20 [ 962.930006][T12474] ? kthread_blkcg+0xd0/0xd0 [ 962.934612][T12474] ret_from_fork+0x1f/0x30 [ 962.939055][T12474] [ 963.383007][T12474] kobject_add_internal failed for hci3:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 963.397215][T12474] Bluetooth: hci3: failed to register connection device [ 964.199378][ T23] Bluetooth: hci4: command 0x2016 tx timeout [ 964.784768][T12635] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 965.717903][ T6674] Bluetooth: hci3: command 0x2016 tx timeout [ 967.205532][T12651] overlayfs: conflicting lowerdir path [ 968.008782][ T6674] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 968.625236][T12665] loop3: detected capacity change from 0 to 512 [ 968.689127][ T6674] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 968.697930][ T6674] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 968.789572][T12665] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 968.910209][ T6674] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 968.976158][T12665] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.1544: bad orphan inode 131083 [ 968.988909][T12665] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 969.403281][ T6674] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 969.608907][ T6674] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 969.618246][ T6674] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 969.634345][ T6674] usb 3-1: Product: syz [ 969.638716][ T6674] usb 3-1: Manufacturer: syz [ 969.763851][T12674] usb usb8: usbfs: process 12674 (syz.0.1543) did not claim interface 0 before use [ 969.870225][T12658] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 970.280743][T12658] netlink: 'syz.2.1542': attribute type 1 has an invalid length. [ 970.280814][T12658] netlink: 'syz.2.1542': attribute type 2 has an invalid length. [ 970.501356][ T6674] cdc_wdm 3-1:1.0: skipping garbage [ 970.501422][ T6674] cdc_wdm 3-1:1.0: skipping garbage [ 970.501448][ T6674] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 970.605623][T12474] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:8393' [ 970.605708][T12474] CPU: 0 PID: 12474 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 970.605731][T12474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 970.605745][T12474] Workqueue: hci0 hci_rx_work [ 970.605777][T12474] Call Trace: [ 970.605785][T12474] [ 970.605794][T12474] dump_stack_lvl+0x188/0x250 [ 970.605828][T12474] ? show_regs_print_info+0x20/0x20 [ 970.605854][T12474] ? load_image+0x410/0x410 [ 970.605894][T12474] sysfs_create_dir_ns+0x26a/0x290 [ 970.605920][T12474] ? sysfs_warn_dup+0xa0/0xa0 [ 970.605939][T12474] ? kthread+0x42e/0x520 [ 970.605964][T12474] ? do_raw_spin_unlock+0x11d/0x230 [ 970.605993][T12474] kobject_add_internal+0x5ba/0xcd0 [ 970.606029][T12474] kobject_add+0x160/0x230 [ 970.606059][T12474] ? kobject_init+0x1c0/0x1c0 [ 970.606088][T12474] ? __raw_spin_lock_init+0x41/0x100 [ 970.606109][T12474] ? klist_children_get+0x50/0x50 [ 970.606133][T12474] ? get_device_parent+0x121/0x3e0 [ 970.606158][T12474] device_add+0x470/0x1050 [ 970.606177][T12474] ? device_initialize+0x2a5/0x4d0 [ 970.606202][T12474] hci_conn_add_sysfs+0xd1/0x1e0 [ 970.606229][T12474] le_conn_complete_evt+0xc2e/0x14d0 [ 970.606262][T12474] ? cs_le_create_conn+0x5e0/0x5e0 [ 970.606292][T12474] ? __mutex_trylock_common+0x15c/0x260 [ 970.606324][T12474] hci_le_meta_evt+0x285/0x3ca0 [ 970.606349][T12474] ? hci_event_packet+0x363/0x1310 [ 970.606377][T12474] ? __lock_acquire+0x7b50/0x7b50 [ 970.606404][T12474] ? mark_lock+0x94/0x320 [ 970.606424][T12474] ? release_firmware_map_entry+0x190/0x190 [ 970.606463][T12474] ? hci_remote_host_features_evt+0x240/0x240 [ 970.606488][T12474] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 970.606517][T12474] ? mutex_unlock+0x10/0x10 [ 970.606542][T12474] ? preempt_schedule+0xbc/0xd0 [ 970.606565][T12474] ? schedule_preempt_disabled+0x20/0x20 [ 970.606591][T12474] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 970.606623][T12474] hci_event_packet+0xe0b/0x1310 [ 970.606655][T12474] ? _raw_spin_unlock+0x40/0x40 [ 970.606677][T12474] ? rcu_lock_release+0x20/0x20 [ 970.606709][T12474] ? hci_send_to_monitor+0x9c/0x4a0 [ 970.606735][T12474] hci_rx_work+0x255/0xa10 [ 970.606773][T12474] process_one_work+0x867/0xff0 [ 970.606812][T12474] ? worker_detach_from_pool+0x240/0x240 [ 970.606835][T12474] ? lockdep_hardirqs_off+0x70/0x100 [ 970.606864][T12474] ? _raw_spin_lock_irq+0xb7/0xf0 [ 970.606885][T12474] ? _raw_spin_lock_irqsave+0x100/0x100 [ 970.606912][T12474] ? wq_worker_running+0x97/0x170 [ 970.606937][T12474] worker_thread+0xad7/0x12a0 [ 970.606976][T12474] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 970.607011][T12474] kthread+0x42e/0x520 [ 970.607030][T12474] ? rcu_lock_release+0x20/0x20 [ 970.607051][T12474] ? kthread_blkcg+0xd0/0xd0 [ 970.607074][T12474] ret_from_fork+0x1f/0x30 [ 970.607114][T12474] [ 970.607133][T12474] kobject_add_internal failed for hci0:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 970.607158][T12474] Bluetooth: hci0: failed to register connection device [ 970.674729][ T7625] usb 3-1: USB disconnect, device number 4 [ 971.123862][T12692] loop0: detected capacity change from 0 to 512 [ 972.009568][T12686] loop1: detected capacity change from 0 to 1024 [ 972.245073][T12692] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 973.381261][ T6674] Bluetooth: hci0: command 0x2016 tx timeout [ 973.603515][T12686] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 973.603543][T12686] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 973.703637][T12692] EXT4-fs: failed to create workqueue [ 973.703650][T12692] EXT4-fs (loop0): mount failed [ 973.905543][T12686] JBD2: no valid journal superblock found [ 973.905579][T12686] EXT4-fs (loop1): error loading journal [ 975.333244][T12702] loop2: detected capacity change from 0 to 1024 [ 976.792056][T12702] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 976.792114][T12702] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 976.827241][T12702] JBD2: no valid journal superblock found [ 976.827294][T12702] EXT4-fs (loop2): error loading journal [ 977.217025][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 977.297387][T12702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 977.490817][T12709] loop5: detected capacity change from 0 to 32768 [ 977.602764][T12709] XFS (loop5): Mounting V5 Filesystem [ 977.666795][T12720] overlayfs: conflicting lowerdir path [ 977.839937][T12709] XFS (loop5): Ending clean mount [ 978.196593][T12723] autofs4:pid:12723:autofs_fill_super: called with bogus options [ 978.824705][ T8874] XFS (loop5): Unmounting Filesystem [ 979.979032][T12746] device-mapper: ioctl: Invalid target message parameters. [ 980.030892][T12744] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 980.059080][T12748] loop1: detected capacity change from 0 to 128 [ 980.188334][T12748] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 980.214908][T12748] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 981.606743][T12766] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 985.702684][T12823] overlayfs: conflicting lowerdir path [ 985.760721][T12820] usb usb8: usbfs: process 12820 (syz.0.1580) did not claim interface 0 before use [ 985.993564][T12825] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 986.361871][T12836] loop2: detected capacity change from 0 to 1024 [ 986.419782][T12836] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 986.431614][T12836] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 986.459529][T12836] JBD2: no valid journal superblock found [ 986.465430][T12836] EXT4-fs (loop2): error loading journal [ 986.745520][T12836] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 986.760495][T12836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 987.089865][ T7341] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:8393' [ 987.128581][ T7341] CPU: 1 PID: 7341 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 987.136240][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 987.146337][ T7341] Workqueue: hci3 hci_rx_work [ 987.151075][ T7341] Call Trace: [ 987.154385][ T7341] [ 987.157369][ T7341] dump_stack_lvl+0x188/0x250 [ 987.162109][ T7341] ? show_regs_print_info+0x20/0x20 [ 987.167368][ T7341] ? load_image+0x410/0x410 [ 987.171945][ T7341] sysfs_create_dir_ns+0x26a/0x290 [ 987.177240][ T7341] ? sysfs_warn_dup+0xa0/0xa0 [ 987.181961][ T7341] ? kthread+0x42e/0x520 [ 987.186254][ T7341] ? do_raw_spin_unlock+0x11d/0x230 [ 987.191504][ T7341] kobject_add_internal+0x5ba/0xcd0 [ 987.196770][ T7341] kobject_add+0x160/0x230 [ 987.201247][ T7341] ? kobject_init+0x1c0/0x1c0 [ 987.205972][ T7341] ? __raw_spin_lock_init+0x41/0x100 [ 987.211558][ T7341] ? klist_children_get+0x50/0x50 [ 987.216726][ T7341] ? get_device_parent+0x121/0x3e0 [ 987.221883][ T7341] device_add+0x470/0x1050 [ 987.226350][ T7341] ? device_initialize+0x2a5/0x4d0 [ 987.231518][ T7341] hci_conn_add_sysfs+0xd1/0x1e0 [ 987.236514][ T7341] le_conn_complete_evt+0xc2e/0x14d0 [ 987.241854][ T7341] ? cs_le_create_conn+0x5e0/0x5e0 [ 987.247016][ T7341] ? __mutex_trylock_common+0x15c/0x260 [ 987.252629][ T7341] hci_le_meta_evt+0x285/0x3ca0 [ 987.257530][ T7341] ? hci_event_packet+0x363/0x1310 [ 987.262705][ T7341] ? __lock_acquire+0x7b50/0x7b50 [ 987.267834][ T7341] ? hci_remote_host_features_evt+0x240/0x240 [ 987.273942][ T7341] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 987.279634][ T7341] ? mark_lock+0x94/0x320 [ 987.284007][ T7341] ? mutex_unlock+0x10/0x10 [ 987.288559][ T7341] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 987.294606][ T7341] ? lock_chain_count+0x20/0x20 [ 987.299505][ T7341] ? __rwlock_init+0x140/0x140 [ 987.304320][ T7341] hci_event_packet+0xe0b/0x1310 [ 987.309346][ T7341] ? _raw_spin_unlock+0x40/0x40 [ 987.314246][ T7341] ? rcu_lock_release+0x20/0x20 [ 987.319150][ T7341] ? hci_send_to_monitor+0x9c/0x4a0 [ 987.324403][ T7341] hci_rx_work+0x255/0xa10 [ 987.328875][ T7341] process_one_work+0x867/0xff0 [ 987.333797][ T7341] ? worker_detach_from_pool+0x240/0x240 [ 987.339468][ T7341] ? lockdep_hardirqs_off+0x70/0x100 [ 987.344940][ T7341] ? _raw_spin_lock_irq+0xb7/0xf0 [ 987.350017][ T7341] ? _raw_spin_lock_irqsave+0x100/0x100 [ 987.355648][ T7341] ? wq_worker_running+0x97/0x170 [ 987.360726][ T7341] worker_thread+0xad7/0x12a0 [ 987.365492][ T7341] kthread+0x42e/0x520 [ 987.369616][ T7341] ? rcu_lock_release+0x20/0x20 [ 987.374517][ T7341] ? kthread_blkcg+0xd0/0xd0 [ 987.379157][ T7341] ret_from_fork+0x1f/0x30 [ 987.383635][ T7341] [ 987.406243][ T7341] kobject_add_internal failed for hci3:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 987.420302][ T7341] Bluetooth: hci3: failed to register connection device [ 988.372810][T12850] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 989.377906][T12862] loop2: detected capacity change from 0 to 1024 [ 992.615373][T12861] loop5: detected capacity change from 0 to 1024 [ 993.120907][T12861] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 993.132128][T12861] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 993.176091][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.182460][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.536473][T12861] JBD2: no valid journal superblock found [ 993.542493][T12861] EXT4-fs (loop5): error loading journal [ 994.096424][ T4264] Bluetooth: hci3: command 0x2016 tx timeout [ 994.833798][T12862] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 994.908726][T12862] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 994.972623][T12862] JBD2: no valid journal superblock found [ 995.029791][T12862] EXT4-fs (loop2): error loading journal [ 997.440512][T12899] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 998.498912][T12912] device-mapper: ioctl: Invalid target message parameters. [ 998.620923][T12915] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 999.032405][T12912] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 999.719794][T12922] loop2: detected capacity change from 0 to 1024 [ 999.770134][T12922] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 999.781241][T12922] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 999.800194][T12922] JBD2: no valid journal superblock found [ 999.806055][T12922] EXT4-fs (loop2): error loading journal [ 1001.001499][T12932] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1002.397110][T12949] loop1: detected capacity change from 0 to 128 [ 1002.419677][T12952] device dummy0 entered promiscuous mode [ 1002.616256][T12953] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1002.743483][T12958] usbip-vudc usbip-vudc.0: gadget not bound [ 1003.463658][T12949] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1003.977963][T12965] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1004.905792][T12949] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.649978][T10337] FS-Cache: Duplicate cookie detected [ 1005.655928][T10337] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 1005.663569][T10337] FS-Cache: O-cookie d=ffffffff8c747d00{AFS.cell} n=ffff88807e962000 [ 1005.671803][T10337] FS-Cache: O-key=[4] '73797a30' [ 1005.676923][T10337] FS-Cache: N-cookie c=00000008 [p=00000006 fl=2 nc=0 na=1] [ 1005.684374][T10337] FS-Cache: N-cookie d=ffffffff8c747d00{AFS.cell} n=ffff888079749800 [ 1005.692636][T10337] FS-Cache: N-key=[4] '73797a30' [ 1006.230044][T12977] loop5: detected capacity change from 0 to 1024 [ 1006.670208][T12977] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1006.681366][T12977] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1006.712236][T12977] JBD2: no valid journal superblock found [ 1006.718038][T12977] EXT4-fs (loop5): error loading journal [ 1006.890153][T12977] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1007.205095][T12977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1007.299633][T12984] device-mapper: ioctl: Invalid target message parameters. [ 1007.367537][T12982] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1007.893141][T12992] loop5: detected capacity change from 0 to 128 [ 1007.994084][T12992] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1008.014146][T12992] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1010.350097][T13020] loop0: detected capacity change from 0 to 128 [ 1010.634269][T13030] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1628'. [ 1010.895525][T13020] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1010.974663][T13020] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.102040][T13035] zero sized request [ 1012.822766][T13041] loop2: detected capacity change from 0 to 131072 [ 1013.108207][T13041] F2FS-fs (loop2): invalid crc value [ 1013.481877][T13041] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1013.509684][T13041] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 1013.533816][T13041] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1015.510758][ T4186] FS-Cache: Duplicate cookie detected [ 1015.516236][ T4186] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 1015.523874][ T4186] FS-Cache: O-cookie d=ffffffff8c747d00{AFS.cell} n=ffff88807e962000 [ 1015.532079][ T4186] FS-Cache: O-key=[4] '73797a30' [ 1015.537286][ T4186] FS-Cache: N-cookie c=00000009 [p=00000006 fl=2 nc=0 na=1] [ 1015.544692][ T4186] FS-Cache: N-cookie d=ffffffff8c747d00{AFS.cell} n=ffff888021698800 [ 1015.552856][ T4186] FS-Cache: N-key=[4] '73797a30' [ 1017.689334][T13078] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1642'. [ 1017.703851][T13081] loop5: detected capacity change from 0 to 512 [ 1017.939109][T13081] EXT4-fs (loop5): inline encryption not supported [ 1018.658664][T13081] EXT4-fs (loop5): 1 orphan inode deleted [ 1018.670767][T13081] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,journal_dev=0x0000000000000008,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 1018.970260][T13098] device-mapper: ioctl: Invalid target message parameters. [ 1019.115320][T13104] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.1643: Directory hole found for htree leaf block 0 [ 1021.674481][T13111] loop0: detected capacity change from 0 to 1024 [ 1021.911106][T13128] loop3: detected capacity change from 0 to 32768 [ 1022.096152][T13111] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1022.868867][T13111] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1022.900270][T13111] JBD2: no valid journal superblock found [ 1022.906200][T13111] EXT4-fs (loop0): error loading journal [ 1022.946187][T13142] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1656'. [ 1022.956915][T13128] XFS (loop3): Mounting V5 Filesystem [ 1023.244422][T13128] XFS (loop3): Ending clean mount [ 1023.509717][T13154] autofs4:pid:13154:autofs_fill_super: called with bogus options [ 1024.059040][T13155] kAFS: No cell specified [ 1024.401497][ T4195] XFS (loop3): Unmounting Filesystem [ 1026.127768][T13177] loop1: detected capacity change from 0 to 512 [ 1027.504707][T13174] loop2: detected capacity change from 0 to 131072 [ 1027.639417][T13177] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1027.672147][T13174] F2FS-fs (loop2): invalid crc value [ 1027.882195][T13177] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.1662: bad orphan inode 131083 [ 1027.893372][T13177] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 1027.956646][T13174] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1027.997772][T13174] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 1028.029813][T13174] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1028.351660][T13194] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1667'. [ 1028.375631][T13197] loop1: detected capacity change from 0 to 512 [ 1029.262405][T13197] EXT4-fs (loop1): inline encryption not supported [ 1029.596786][T13197] EXT4-fs (loop1): 1 orphan inode deleted [ 1029.613757][T13197] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,journal_dev=0x0000000000000008,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 1029.904744][T13209] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1030.373408][T13212] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1030.662458][T13218] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.1666: Directory hole found for htree leaf block 0 [ 1034.745305][T13232] loop5: detected capacity change from 0 to 1024 [ 1034.817084][T13232] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1034.828187][T13232] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1034.846620][T13232] JBD2: no valid journal superblock found [ 1034.854844][T13232] EXT4-fs (loop5): error loading journal [ 1035.418500][ T7794] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1038.179444][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1038.216311][T13232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1038.704679][T13247] usbip-vudc usbip-vudc.0: gadget not bound [ 1040.053701][ T4386] FS-Cache: Duplicate cookie detected [ 1040.059266][ T4386] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 1040.066924][ T4386] FS-Cache: O-cookie d=ffffffff8c747d00{AFS.cell} n=ffff88807e962000 [ 1040.075104][ T4386] FS-Cache: O-key=[4] '73797a30' [ 1040.080208][ T4386] FS-Cache: N-cookie c=0000000a [p=00000006 fl=2 nc=0 na=1] [ 1040.088327][ T4386] FS-Cache: N-cookie d=ffffffff8c747d00{AFS.cell} n=ffff8881445cd000 [ 1040.096620][ T4386] FS-Cache: N-key=[4] '73797a30' [ 1041.017459][T13264] loop1: detected capacity change from 0 to 1024 [ 1041.093020][T13264] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1041.104185][T13264] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1041.140546][T13264] JBD2: no valid journal superblock found [ 1041.146428][T13264] EXT4-fs (loop1): error loading journal [ 1042.712852][T13264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1042.936092][T13264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1046.285590][T13283] kAFS: No cell specified [ 1046.679369][ T7341] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:8393' [ 1046.689263][ T7341] CPU: 1 PID: 7341 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1046.696853][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1046.707037][ T7341] Workqueue: hci4 hci_rx_work [ 1046.711760][ T7341] Call Trace: [ 1046.715066][ T7341] [ 1046.718021][ T7341] dump_stack_lvl+0x188/0x250 [ 1046.722746][ T7341] ? show_regs_print_info+0x20/0x20 [ 1046.727984][ T7341] ? load_image+0x410/0x410 [ 1046.732539][ T7341] sysfs_create_dir_ns+0x26a/0x290 [ 1046.737691][ T7341] ? sysfs_warn_dup+0xa0/0xa0 [ 1046.742443][ T7341] ? kthread+0x42e/0x520 [ 1046.746734][ T7341] ? do_raw_spin_unlock+0x11d/0x230 [ 1046.751973][ T7341] kobject_add_internal+0x5ba/0xcd0 [ 1046.757221][ T7341] kobject_add+0x160/0x230 [ 1046.761677][ T7341] ? kobject_init+0x1c0/0x1c0 [ 1046.766401][ T7341] ? __raw_spin_lock_init+0x41/0x100 [ 1046.771773][ T7341] ? klist_children_get+0x50/0x50 [ 1046.776862][ T7341] ? get_device_parent+0x121/0x3e0 [ 1046.782006][ T7341] device_add+0x470/0x1050 [ 1046.786436][ T7341] ? device_initialize+0x2a5/0x4d0 [ 1046.791555][ T7341] hci_conn_add_sysfs+0xd1/0x1e0 [ 1046.796521][ T7341] le_conn_complete_evt+0xc2e/0x14d0 [ 1046.801824][ T7341] ? cs_le_create_conn+0x5e0/0x5e0 [ 1046.806949][ T7341] ? __mutex_trylock_common+0x15c/0x260 [ 1046.812504][ T7341] hci_le_meta_evt+0x285/0x3ca0 [ 1046.817539][ T7341] ? hci_event_packet+0x363/0x1310 [ 1046.822660][ T7341] ? __lock_acquire+0x7b50/0x7b50 [ 1046.827717][ T7341] ? hci_remote_host_features_evt+0x240/0x240 [ 1046.833804][ T7341] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1046.839447][ T7341] ? mark_lock+0x94/0x320 [ 1046.843792][ T7341] ? mutex_unlock+0x10/0x10 [ 1046.848337][ T7341] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1046.854392][ T7341] ? lock_chain_count+0x20/0x20 [ 1046.859649][ T7341] ? __rwlock_init+0x140/0x140 [ 1046.864616][ T7341] hci_event_packet+0xe0b/0x1310 [ 1046.869598][ T7341] ? _raw_spin_unlock+0x40/0x40 [ 1046.874484][ T7341] ? rcu_lock_release+0x20/0x20 [ 1046.879355][ T7341] ? hci_send_to_monitor+0x9c/0x4a0 [ 1046.884578][ T7341] hci_rx_work+0x255/0xa10 [ 1046.889039][ T7341] process_one_work+0x867/0xff0 [ 1046.893929][ T7341] ? worker_detach_from_pool+0x240/0x240 [ 1046.899572][ T7341] ? lockdep_hardirqs_off+0x70/0x100 [ 1046.904889][ T7341] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1046.909931][ T7341] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1046.915505][ T7341] ? wq_worker_running+0x97/0x170 [ 1046.920548][ T7341] worker_thread+0xad7/0x12a0 [ 1046.925274][ T7341] kthread+0x42e/0x520 [ 1046.929347][ T7341] ? rcu_lock_release+0x20/0x20 [ 1046.934227][ T7341] ? kthread_blkcg+0xd0/0xd0 [ 1046.938822][ T7341] ret_from_fork+0x1f/0x30 [ 1046.943257][ T7341] [ 1046.954172][ T7341] kobject_add_internal failed for hci4:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 1046.967607][ T7341] Bluetooth: hci4: failed to register connection device [ 1048.598475][T13325] loop5: detected capacity change from 0 to 512 [ 1049.382892][T13326] loop2: detected capacity change from 0 to 1024 [ 1049.794546][T13325] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1049.808041][T13326] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1049.819092][T13326] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1049.835744][T13326] JBD2: no valid journal superblock found [ 1049.841602][T13326] EXT4-fs (loop2): error loading journal [ 1050.027235][ T6154] Bluetooth: hci4: command 0x2016 tx timeout [ 1051.437983][T13326] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1051.746785][T13326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1051.766102][T13325] EXT4-fs: error -4 creating inode table initialization thread [ 1051.774854][T13325] EXT4-fs (loop5): mount failed [ 1053.731582][T13349] usb usb8: usbfs: process 13349 (syz.5.1707) did not claim interface 0 before use [ 1053.763360][T13350] loop3: detected capacity change from 0 to 2048 [ 1053.996926][ T4379] GPT:first_usable_lbas don't match. [ 1054.021182][ T4379] GPT:34 != 290 [ 1054.024723][ T4379] GPT: Use GNU Parted to correct GPT errors. [ 1054.094099][T13360] usb usb8: usbfs: process 13360 (syz.1.1710) did not claim interface 0 before use [ 1054.156798][ T4379] loop3: p1 p2 p3 [ 1054.208770][ T6674] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1054.658682][ T6674] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.697580][ T6674] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1054.801918][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.808274][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.890245][T13350] GPT:first_usable_lbas don't match. [ 1054.895610][T13350] GPT:34 != 290 [ 1054.909002][ T6674] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 1054.928418][ T6674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.937600][T13350] GPT: Use GNU Parted to correct GPT errors. [ 1054.964205][ T6674] usb 4-1: Product: syz [ 1054.974369][ T6674] usb 4-1: Manufacturer: syz [ 1054.979513][T13350] loop3: p1 p2 p3 [ 1054.983864][ T6674] usb 4-1: SerialNumber: syz [ 1055.416642][T13370] loop2: detected capacity change from 0 to 1024 [ 1055.475602][T13370] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1055.486801][T13370] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1055.512521][T13370] JBD2: no valid journal superblock found [ 1055.518453][T13370] EXT4-fs (loop2): error loading journal [ 1057.740895][T13370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1057.756732][T13370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1058.033230][T13376] device-mapper: ioctl: Invalid target message parameters. [ 1058.142908][T13376] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1058.542879][ T6674] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1058.725814][T13387] loop1: detected capacity change from 0 to 512 [ 1059.835899][T13387] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1059.901261][ T6674] usb 4-1: USB disconnect, device number 7 [ 1060.521944][T13387] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.1715: bad orphan inode 131083 [ 1060.533368][T13387] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 1061.412681][T13409] usb usb8: usbfs: process 13409 (syz.2.1721) did not claim interface 0 before use [ 1063.260253][ T6674] general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] PREEMPT SMP KASAN [ 1063.272181][ T6674] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 1063.280626][ T6674] CPU: 0 PID: 6674 Comm: kworker/0:9 Not tainted syzkaller #0 [ 1063.288123][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1063.298234][ T6674] Workqueue: kafsd afs_process_async_call [ 1063.304101][ T6674] RIP: 0010:__mutex_lock_common+0x10c/0x2400 [ 1063.310115][ T6674] Code: 03 42 0f b6 04 28 84 c0 0f 85 50 1c 00 00 4c 8d b4 24 e0 00 00 00 83 3d 71 93 66 0c 00 75 29 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 98 6b f5 f7 48 39 5b 60 4c 8d b4 24 e0 00 [ 1063.329814][ T6674] RSP: 0018:ffffc90003437940 EFLAGS: 00010202 [ 1063.335984][ T6674] RAX: 0000000000000013 RBX: 0000000000000038 RCX: ffffffff962f5f03 [ 1063.343984][ T6674] RDX: ffff8880183c1dc0 RSI: ffffffff8a2b3e80 RDI: 0000000000000098 [ 1063.351988][ T6674] RBP: ffffc90003437ad0 R08: ffffffff890751f6 R09: 0000000000000000 [ 1063.360075][ T6674] R10: 00000000fffffffb R11: 0000000000000000 R12: 0000000000000000 [ 1063.368166][ T6674] R13: dffffc0000000000 R14: ffffc90003437a20 R15: 0000000000000000 [ 1063.376164][ T6674] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1063.385133][ T6674] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1063.391780][ T6674] CR2: 0000200000000058 CR3: 0000000063dba000 CR4: 00000000003506f0 [ 1063.399782][ T6674] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1063.407774][ T6674] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1063.415782][ T6674] Call Trace: [ 1063.419087][ T6674] [ 1063.422053][ T6674] ? rcu_is_watching+0x11/0xa0 [ 1063.426928][ T6674] ? rxrpc_kernel_abort_call+0x26/0x70 [ 1063.432474][ T6674] ? afs_put_call+0x33b/0x400 [ 1063.437215][ T6674] ? afs_extract_data+0x33e/0x650 [ 1063.442295][ T6674] ? mutex_lock_io_nested+0x60/0x60 [ 1063.447545][ T6674] ? afs_extract_data+0x33e/0x650 [ 1063.452614][ T6674] ? afs_send_simple_reply+0x300/0x300 [ 1063.458122][ T6674] ? iov_iter_kvec+0xb4/0x170 [ 1063.462887][ T6674] mutex_lock_nested+0x17/0x20 [ 1063.467698][ T6674] rxrpc_kernel_abort_call+0x26/0x70 [ 1063.473031][ T6674] afs_deliver_to_call+0x55e/0x1100 [ 1063.478268][ T6674] ? afs_wait_for_call_to_complete+0xc10/0xc10 [ 1063.484897][ T6674] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1063.490923][ T6674] ? __lock_acquire+0x7b50/0x7b50 [ 1063.495996][ T6674] ? read_lock_is_recursive+0x10/0x10 [ 1063.501407][ T6674] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1063.507334][ T6674] ? _raw_spin_unlock+0x40/0x40 [ 1063.512219][ T6674] afs_process_async_call+0x7e/0xe0 [ 1063.517470][ T6674] process_one_work+0x867/0xff0 [ 1063.522371][ T6674] ? worker_detach_from_pool+0x240/0x240 [ 1063.528138][ T6674] ? lockdep_hardirqs_off+0x70/0x100 [ 1063.533470][ T6674] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1063.538547][ T6674] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1063.544138][ T6674] ? wq_worker_running+0x97/0x170 [ 1063.549202][ T6674] worker_thread+0xad7/0x12a0 [ 1063.553921][ T6674] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1063.559859][ T6674] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1063.565799][ T6674] kthread+0x42e/0x520 [ 1063.569913][ T6674] ? rcu_lock_release+0x20/0x20 [ 1063.574837][ T6674] ? kthread_blkcg+0xd0/0xd0 [ 1063.579482][ T6674] ret_from_fork+0x1f/0x30 [ 1063.583958][ T6674] [ 1063.587037][ T6674] Modules linked in: [ 1064.049710][ T6674] ---[ end trace 146b2ba86859fb2c ]--- [ 1064.055245][ T6674] RIP: 0010:__mutex_lock_common+0x10c/0x2400 [ 1064.063012][ T6674] Code: 03 42 0f b6 04 28 84 c0 0f 85 50 1c 00 00 4c 8d b4 24 e0 00 00 00 83 3d 71 93 66 0c 00 75 29 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 98 6b f5 f7 48 39 5b 60 4c 8d b4 24 e0 00 [ 1064.083774][ T6674] RSP: 0018:ffffc90003437940 EFLAGS: 00010202 [ 1064.091955][ T6674] RAX: 0000000000000013 RBX: 0000000000000038 RCX: ffffffff962f5f03 [ 1064.106887][ T6674] RDX: ffff8880183c1dc0 RSI: ffffffff8a2b3e80 RDI: 0000000000000098 [ 1064.131555][ T6674] RBP: ffffc90003437ad0 R08: ffffffff890751f6 R09: 0000000000000000 [ 1064.150330][ T6674] R10: 00000000fffffffb R11: 0000000000000000 R12: 0000000000000000 [ 1064.709718][ T6674] R13: dffffc0000000000 R14: ffffc90003437a20 R15: 0000000000000000 [ 1064.779891][ T6674] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1064.801695][ T6674] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1064.808402][ T6674] CR2: 000000110c43660b CR3: 000000000c08e000 CR4: 00000000003526f0 [ 1064.816425][ T6674] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1064.825252][ T6674] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1064.834104][ T6674] Kernel panic - not syncing: Fatal exception [ 1064.840547][ T6674] Kernel Offset: disabled [ 1064.844898][ T6674] Rebooting in 86400 seconds..